JP2002163099A - Forgery preventing system and forgery preventing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a forgery preventing system and a forgery preventing means preventing exchange of fraudulent data in a network, enhancing reliability of data sent and received by terminal devices and image processors connected to the network, and capable of protecting rightful users of the network. SOLUTION: For example, when a user sends image data read by a scanner 1 in the network by adding the image data with recognition information inherent to the user using the scanner 1 and recognition information inherent to the scanner 1, a recognition server 5 carries out recognition whether the image data added with respective recognition information is reliable data allowed to be sent to a printer 3 for printing or fraudulent data. By this, it is recognized and judged whether data sent and received in the network is fraudulent data or not.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention prevents illegal copying in an image processing apparatus such as a printer, a printing apparatus, and a facsimile apparatus, and prevents forgery which guarantees that received or printed image data is valid image data. The present invention relates to a system and a forgery prevention method.

[0002]

2. Description of the Related Art In recent years, color printing apparatuses, color copying machines,
2. Description of the Related Art With the spread of color image processing apparatuses such as color printers, there is an increasing demand for unauthorized copy prevention apparatuses that prevent copying of images for which copying of banknotes and securities is prohibited. As a device for preventing unauthorized copying, a method of monitoring RGB (red, green, blue) image data in a reading unit of a copying machine to detect input of a copy-inhibited image, and a method of CMYK (cyan, magenta, yellow, (Black) There is a method of observing image data and detecting a copy-inhibited image, and JP-A-11-26831 discloses techniques such as a printer forgery prevention system and a copy forgery prevention system.

[0003]

However, in a conventional copy protection apparatus, forgery is prevented by recognizing an image to be copied or printed. In particular, in the case of a copying machine, an image is read by a scanner unit. In some cases, erroneous recognition may occur. Further, in a printer device, the data format of image data received from a connected terminal device is diversified, and the printer device may not be able to support all data formats. In such a case, an erroneous determination may be made as to whether the image data is prohibited from copying or illegal image data, and the image data prohibited from copying or illegal image data may be printed. Sometimes it is done.

Further, in recent years, in which image data is generally transmitted and received via a network, a conventional technique for detecting a copy-inhibited image at the time of finally outputting captured image data is based on the conventional technique. In this case, there is a possibility that unauthorized image data may be transmitted / received, or the transmitted / received unauthorized image data may be image-formed by an image processing apparatus in the network. However, restricting the transmission and reception of image data in the network in order to prevent unauthorized image data from being copied prevents the transmission and reception of image data by legitimate users. Furthermore, when a user transmits and receives image data, in order to confirm from the image data itself that the original image data is not invalid, the image data is reproduced on a monitor by a conventional method, or an illegal image identification device is used. Since the determination is made by including the image data, the determination is inefficient and takes time.

Therefore, a first object of the present invention is to prevent the exchange of unauthorized data in a network by adding unique identification information to data in each terminal device and each image processing device in the network. Another object of the present invention is to provide a forgery prevention system and a forgery prevention method capable of improving the reliability of data transmitted and received in a terminal device or an image processing device connected to a network and protecting a legitimate user of the network. A second object of the present invention is to
By adding information proving that the data transmitted and received in the network is legitimate data or information indicating the source at each terminal device and each image processing device, the user or creator of the data is illegally involved It is an object of the present invention to provide a forgery prevention system and a forgery prevention method capable of clarifying that the communication is not performed, giving a sense of security to data communication, and promoting exchange of data and information.

[0006]

According to the present invention, one or more terminal devices and one or more image processing devices have identification information unique to each device, and the terminal device and the image processing device are provided. Forgery capable of transmitting and receiving data attached with user-specific identification information using the terminal device and the device-specific identification information by the terminal device and the image processing device to / from the terminal device or the image processing device via a network In the prevention system, storage means for acquiring and storing identification information unique to a user who uses the terminal device and the image processing device and identification information unique to the terminal device and the image processing device, and the terminal device and the image Identification information unique to a user who uses the processing device and identification information unique to the terminal device and the image processing device are attached. Data receiving means for receiving data, and a terminal device and an image processing apparatus connected via the network attached to the data received by the data receiving means, which are unique to the user who created and edited the data. History storage means for storing the history of the identification information of the terminal device and the image processing apparatus in which the creation and editing of the identification information and data have been performed; and identification information unique to each user of the history stored in the history storage means And determination means for determining whether or not the identification information unique to each device is data stored in the storage means, and from the terminal device or the image processing device connected via the network to the storage means. When an inquiry is made as to whether or not the data is stored, the judging means sends the judgment result to the terminal device or the image processing unit. By transmitting device, to achieve the first and second objects.

According to the second aspect of the present invention, one or more terminal devices and one or more image processing devices have identification information unique to each device, and are unique to a user who uses the terminal device and the image processing device. In the forgery prevention method capable of transmitting and receiving the identification information and the data to which the terminal device and the image processing device are attached with the identification information unique to each device via the network, the terminal device or the image processing device, A first procedure for acquiring and storing identification information unique to a user who uses the apparatus and the image processing apparatus, and identification information unique to the terminal apparatus and the image processing apparatus; and using the terminal apparatus and the image processing apparatus. Receiving data to which identification information unique to the user and the identification information unique to the terminal device and the image processing device are attached. And the identification information and data unique to the user who created and edited the data in the terminal device and the image processing device connected via the network attached to the data received in the second procedure. A third procedure for storing the history of the identification information of the terminal device and the image processing device that have been created and edited;
The identification information unique to each user and the identification information unique to each device of the history stored by the third procedure are stored in the first
And a fourth procedure for determining whether the data is stored in the first procedure from a terminal device or an image processing apparatus connected via the network.
When there is an inquiry as to whether or not the data is stored in the procedure of the above, by transmitting the determination result in the fourth procedure to the terminal device or the image processing device,
The first and second objects are achieved.

[0008]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to FIGS.
FIG. 1 is a diagram showing a configuration of a forgery prevention system according to the present embodiment. The forgery prevention system 100 includes a scanner device 1 for image acquisition, a workstation (hereinafter, referred to as WS) 2, a printer device 3, a terminal device 4, an identification server 5, and a database 6, which are interconnected via a network. ing. The forgery prevention system 100 shown in FIG. 1 is a system for transmitting / receiving and exchanging image data and other data via a network. The scanner device 1 is a device that reads an image to be printed by the printer device 3, an image to be edited by the WS 2 or the terminal device 4, and the like.

The WS 2 is provided by the user to the printer device 3.
It is possible to create images and texts to be printed by the user, edit data of images and texts already stored in the storage unit, and so on. The user can transfer the data of these images and texts to another terminal device or WS in the network. A workstation that can send and receive data. The printer device 3 is a device that prints out image data with identification information and document data transmitted from another device connected to the network, for example, the scanner device 1 or the terminal device 4 together with the identification information. Like the WS 2, the terminal device 4 allows a user to create an image or a text to be printed by the printer device 3 or to edit data of an image or a text already stored in the storage unit. Can transmit and receive data to and from another terminal device or WS in the network, for example, a PC (Personal Computer), a PDA (Personal Digital A).
It is assumed that the terminal device is a terminal device such as “sistants”.

The identification server 5 recognizes and determines whether data transmitted / received in the network is not unauthorized data, that is, data to which identification information that matches registered identification information is added. For example, when the user adds identification information unique to the user using the scanner device 1 and identification information unique to the scanned scanner device 1 to image data read by the scanner device 1 and transmits the image data to the network, the identification server 5 When an inquiry is made, it is recognized whether the image data to which the identification information is added is reliable data that can be transmitted to the printer device 3 for printing, or whether the data is not illegal data. It has become.

In FIG. 1, as an example, each of the scanner device 1, WS 2, printer device 3, and terminal device 4 is individually connected to the recognition server 5 via the network, but is not limited to this. Instead, a plurality of terminal devices such as WSs and PCs, and image processing devices such as a scanner device, a printer device, a copier, and a facsimile device may be connected to the recognition server 5 via a network. Further, in the description of the present embodiment, when an image is captured by the scanner device 1 or when image data is created by the WS 2 or the terminal device 4, a user (denoted as a user in each figure) is assigned to a user. In the case of editing and printing data already read by the scanner device 1 and stored in the WS 2 or the terminal device 4 as a creator, the user will be described as an editor. In the network of the forgery prevention system 100, in addition to the scanner device 1, WS2, terminal device 4, writing printer device 3, and recognition server 5 for image acquisition, a network server (not shown) can mutually transmit and receive data. Are connected as follows.

Next, authentication of image data with identification information in the forgery prevention device 5 will be described. FIG. 2 is a diagram showing the configuration of a database representing image data and user identification. The database 6 includes operation mode identification information such as “capture”, “transfer”, “edit”, and “print”, user identification information based on “user ID (user includes a creator and an editor)”, The time when each of the devices 1 to 4 was used, the site information of the identification server 5 and the network server, the machine identification information of each of the devices 1 to 4 such as “scanner ID”, “WSID”, and “printer ID”;
4 and the file additional information format of each identification information added by the user. The recognition server 5 is shown in FIG.
The user ID which is the user identification information in the database shown in FIG.
2, only a database relating to the ID of each device such as the terminal device 4 and the printer device 3 is provided. In the present embodiment, the database 6 in FIG. 1 will be described separately from the recognition server 5, but a configuration in which the database 6 is included in the recognition server 5 may be adopted.

For example, when the identification server 5 receives an inquiry about the source of a file in which the header is added with the user ID transmitted from the terminal device 4 and the scanner ID of the scanner device 1 used by the user, the identification server 5 is transmitted. It is possible to recognize whether or not the file has been created or edited by an authorized user (creator or editor), and from which scanner device the file is from the scanner ID. When another user wants to edit data stored in another terminal device 4 in the network, when the data to be edited is received via the network, the data to be edited in the recognition server 5 is valid data. You can also ask whether you want to use the data. in this way,
The recognition server 5 performs, based on the registered identification information,
It is possible to recognize and determine whether data transmitted and received in the network is data from a reliable device, who created and edited the data, and the like.

Although not shown in the database of FIG. 2, the identification server 5 may include a public key corresponding to the secret key of each device and user. In such a case, when the identification server 5 receives the data added with the signature encrypted by the user or each device using the secret key, the identification server 5 detects the public key corresponding to the secret key of the received data. By recognizing the data, it becomes possible to authenticate whether data can be transmitted and received between the devices.

FIG. 3 is a diagram showing a forgery prevention system according to the first embodiment. In the first embodiment, the creator is W
The image data created in S2 is transferred to another WS in the network.
An embodiment for transferring data to 2a will be described. The creator who created the original image in WS2 encrypts the creator ID and the ID unique to the device to be used with a secret key or identification information and attaches it to the header of the original file storing the original image. When the creator instructs the WS2 to transmit the original file to another WS2a in the network, the identification server 5 receiving the original file extracts the file information,
It detects whether the creator ID and the WS2-specific ID are registered in the database 6, and authenticates whether the creator and the device to be used are registered. If the creator ID attached to the original file received by the recognition server 5 or the WS2 unique ID is authenticated as being registered in the database 6, the original file is transmitted to another WS2a designated by the creator in WS2. Is done. in this way,
By authenticating the creator and the device to be used for the data and the file to be transferred by the recognition server 5, the user can copy the data and the file transmitted from the WS2 in the network to the source or the creator whose data is proved to be clear. Or as a file.

Thus, even if the content of the image data received from another device in the network is an unauthorized image, the user attaches the source information at the time of distribution because the image data is authenticated by the recognition server 5. By doing so, it can be proved that the user himself has not been involved in fraud, and since the creator of the image data is clarified by the identification server 5, it is possible to prevent the creation of fraudulent images. In the present embodiment, a case has been described in which image data created in WS2 is transferred to another WS2a in the network. However, the present invention is not limited to this, and data transfer from WS2 to terminal device 4, WS2 The data transfer between the devices connected to the network, such as the data transfer from the terminal device to the printer device 3 and the data transfer from the terminal device 4 to the printer device 3, are also performed by authenticating the data reliability by the recognition server 5. Can be.

FIG. 4 is a diagram showing a forgery prevention system according to a second embodiment. In the second embodiment, an embodiment will be described in which the creator transfers image data captured by the scanner device 1 to the WS 2 in the network. As shown in FIG. 4, when image data is captured by the scanner device 1,
The user writes the user ID and the I
D is encrypted and attached. The creator instructs the terminal device 4 to transmit this original file to another WS 2 in the network.
, The identification server 5 that has received the original file extracts the file information, and stores the creator ID and the ID unique to the scanner 1 in the database 6.
And authenticates whether the creator and the scanner device 1 are registered.

As in the first embodiment, the creator ID attached to the original file received by the recognition server 5 and the ID unique to the scanner 1 are stored in the database 6.
, The original file is transmitted to WS2 specified by the creator. As described above, by authenticating the data or file captured by the scanner device 1 with the recognition server 5, the user can clearly identify the source or creator of the data or file captured by the scanner device 1 in the network in WS2. It can be received as proven data or files. In the present embodiment, a case has been described in which image data captured by the scanner device 1 is transferred to another WS 2 in the network. However, the present invention is not limited to this. Similarly, when transferring data to another device connected to the network such as the device 3, the reliability of the data can be authenticated by the recognition server 5.

FIG. 5 is a diagram showing a forgery prevention system according to a third embodiment. In the third embodiment, the creator is W
An embodiment in which the image data edited in S2 is transferred to another WS 2a in the network will be described. FIG.
In the case of editing image data, as shown in FIG.
D and the unique ID of WS2, which is the device used, are encrypted and attached to the header of the edited file. At this time, a new editor ID and a WS2-specific ID used for editing are additionally attached without rewriting the user ID and the used device ID attached as the original file before editing. The creator sends the edited file including the edited data to another WS 2a in the network.
2, the identification server 5 that has received the edited file extracts the file information, detects whether the creator ID and the WS2-specific ID are registered in the database 6, and registers the creator and the device to be used. Authenticate whether it is

Then, similarly to the first embodiment, if it is authenticated that the editor ID attached to the editing file received by the recognition server 5 or the WS2 unique ID is registered in the database 6, the editing is performed. The edit file is transmitted to WS2a in the network specified by the user in WS2. As described above, by authenticating the edited data and file by the recognition server 5, the user can convert the data and file edited by the WS2 in the network as the data and file whose source and creator are proved to be clear. Can be received. In the present embodiment,
The case where the image data edited by the WS2 is transferred to another WS2a in the network has been described. However, the present invention is not limited to this. The data and the file edited by the terminal device 4 can be transferred to the scanner device 1, the WS2, and the printer device. In the case where data is transferred to another device connected to the network such as 3, the reliability of the data can be similarly authenticated by the recognition server 5.

FIG. 6 is a diagram showing a forgery prevention system according to a fourth embodiment. In the fourth embodiment, the creator uses W
An embodiment in which the image data created in S2 is transferred to the printer device 3 in the network and printed out will be described. As shown in FIG. 6, in the case of print output, only image data is output to the printer, so that the creator ID
The user ID and the ID unique to the device to be used are embedded in the image data as a tracking pattern such as an electronic watermark so that the image is not output at the time of print output. And
If an unauthorized image is found, the source of the unauthorized image data can be specified by analyzing the creator ID or user ID embedded in the image data as a tracking pattern and the ID unique to the device used. . The user is WS2
When the printer device 3 instructs the printer device 3 to print out the data created or edited by the identification server 5,
Extracts the file information and creates the creator ID and editor ID
It detects whether the ID unique to WS2 and WS2 are registered in the database 6, and authenticates whether the creator and the device to be used are registered.

Then, as in the first embodiment, it is verified that the creator ID, the editor ID, and the WS2-specific ID attached to the edited file received by the recognition server 5 are registered in the database 6. In this case, the data is transmitted to the printer 3 in the network designated by the user in the WS 2. As described above, by authenticating the edited data or file by the recognition server 5, the user can copy the data or file created or edited by the WS 2 in the network to the data or the data of which the origin or the creator is proved to be clear. Can be received as a file. In the present embodiment, a case has been described in which image data created or edited by the WS 2 is printed out by the printer device 3 in the network. However, the present invention is not limited to this, and the terminal device 4, the scanner device 1, etc. In the case where data created and edited by another device connected to the network is printed out, the recognition server 5 can similarly authenticate the reliability of the data.

In each embodiment, the recognition server 5
When the authentication is performed using the user ID or the device-specific ID attached to the received data, and the user ID or the device-specific ID is not registered in the database 6, the recognition server 5 transmits the user Alternatively, the fact that the device that created and edited the data has not been registered may be notified by a warning sound or display. Data not authenticated by the recognition server 5 is stored in the recognition server 5, and is stored in, for example, the printer device 3 or the terminal device 4.
May not be transmitted. In each embodiment, each device in the forgery prevention system 100 is connected via a network, but each device may be connected via the Internet. In this case, a network server for transmitting and receiving data from each device to the recognition server 5 may be provided separately from the recognition server 5. As described above, in the forgery prevention system of the present embodiment, when data is transmitted / received in the network, by recognizing the ID attached to the data, it is possible to increase the reliability of the data and prevent creation of unauthorized data. .

[0024]

According to the first aspect of the present invention, when there is an inquiry from a terminal device or an image processing device connected via a network as to whether or not the data is stored in the storage means, the determination means is provided. Since the judgment result is transmitted to the terminal device or the image processing device, the necessary portions can be used as encrypted identification information so that the data cannot be altered. To protect the user from fraudulent involvement and prove that he is not involved in fraud.

According to the second aspect of the present invention, when there is an inquiry from the terminal device or the image processing device connected via the network whether the data is stored in the first procedure, the fourth process is performed. Since the determination result by the procedure is transmitted to the terminal device or the image processing device, the reliability and security of data transmission / reception in the network can be improved, the use of the network can be promoted, and a sense of security can be given to the user.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a forgery prevention system according to the present embodiment.

FIG. 2 is a diagram showing the configuration of a database representing image data and user identification.

FIG. 3 is a diagram illustrating a forgery prevention system according to the first embodiment;

FIG. 4 is a diagram illustrating a forgery prevention system according to a second embodiment.

FIG. 5 is a diagram illustrating a forgery prevention system according to a third embodiment.

FIG. 6 is a diagram illustrating a forgery prevention system according to a fourth embodiment.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Scanner apparatus 2 and 2a Workstation (WS) 3 Printer apparatus 4 Terminal apparatus 5 Identification server 6 Database 100 Forgery prevention system

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04N 1/387 G03G 21/00 550 5C076 1/40 H04N 1/40 Z 5C077 F-term (Reference) 2C061 AP01 HH01 HH03 HJ06 HJ10 HK04 HK11 HN05 HN15 HQ17 2H134 NA12 NA18 NA22 NA23 NA35 5B021 AA01 AA05 BB02 LG07 NN18 NN19 5B057 AA11 CA12 CA16 CB12 CB16 CC01 CE08 5C062 AA05 AC04 AC03 AC56 BA12P07 A07BA12A07

Claims (2)

[Claims] 1. One or more terminal devices and one or more image processing devices have identification information unique to each device, and identification information unique to a user who uses the terminal device and the image processing device and the terminal. A forgery prevention system capable of transmitting and receiving data to which the identification information unique to each device is attached by a device and the image processing device to / from the terminal device or the image processing device via a network, wherein the terminal device and the image processing device Storage means for acquiring and storing identification information unique to the user using the terminal device and identification information unique to the image processing device; and identification information unique to the user using the terminal device and the image processing device. Data receiving means for receiving data to which the terminal device and the identification information unique to the image processing device are attached; In the terminal device and the image processing device connected via the network attached to the data received by the data receiving means, identification information unique to the user who created and edited the data and creation and editing of the data are performed. History storing means for storing the history of the identification information of the terminal device and the image processing apparatus; and storing the identification information unique to each user and the identification information unique to each device of the history stored in the history storing means. Determining means for determining whether the data is stored in the storage means, and inquiring whether the data is stored in the storage means from a terminal device or an image processing apparatus connected via the network. Wherein the forgery is transmitted to the terminal device or the image processing device by the determining means. Stop system. 2. One or more terminal devices and one or more image processing devices have identification information unique to each device, and identification information unique to a user who uses the terminal device and the image processing device and the terminal. A forgery prevention method capable of transmitting and receiving data to which the device and the identification information unique to each device by the image processing device to and from the terminal device or the image processing device via a network, wherein the terminal device and the image processing device A first procedure for acquiring and storing identification information unique to a user who uses the terminal device and identification information unique to the terminal device and the image processing device; and identification unique to a user using the terminal device and the image processing device. Second receiving the information and the data to which the terminal device and the identification information unique to the image processing device are attached.
And the identification information and data unique to the user who created and edited the data in the terminal device and the image processing device connected via the network attached to the data received in the second procedure. A third procedure for storing the history of the identification information of the terminal device and the image processing apparatus that have been created and edited, and identification information unique to each user and each apparatus of the history stored by the third procedure The unique identification information is the first
And a fourth procedure of determining whether the data is stored in the first procedure. The data stored in the first procedure from the terminal device or the image processing apparatus connected via the network And transmitting a result of the determination according to the fourth procedure to the terminal device or the image processing device when an inquiry is made as to whether or not the forgery is detected.