JP2002185444A - Network system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve security in network and certainty for request for processing. SOLUTION: In the case of user registration, a print server 12 forms a secret key KdS and a public key KeS, and delivers the public key KeS to a user terminal 14, who forms a user ID, a secret key KdU and a public key KeU, encrypts the user ID and the public key KeU by using the public key KeS, and delivers them to the print server. In the case of print request, the user ID and a document 50 are encrypted by using the public key KeS. When print processing is received, the print server 12 forms a pass-word, encrypts it by using the public key KeU, and delivers it to the user terminal 14. By inputting the pass- word in an input part 56, the user can receive printed results.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a network system for providing various services to user terminals connected via communication means or the like.

[0002]

2. Description of the Related Art Generally, anyone can receive a service using a network without specifying a user on the network. For example, in a print network, a plurality of clients connect to a print server via the network to receive a print service.

On such a network, not only can a third party easily see the data, but also a malicious network such as falsification of the data can be used. For example, in a printer network, a document for printing may be peeped out or falsified. For this reason, some networks are made available only to pre-registered users.

[0004] On the other hand, in print networks and the like, when a process is performed in response to a request from a user, a fee is charged according to a processing amount or the like. In such a case, in order to restrict the use of an unspecified large number of networks, the user registers in advance the use of the print server, and uses the print network using the ID and the dark place number set at the time of the registration. It has become. Further, data transmitted and received on the network is encrypted.

[0005] By the way, even if data is transmitted and received using an ID or the like set at the time of registration or encrypted, it is possible to decrypt the encrypted data if it is used for a long time. Sometimes, this causes others to
D or the like may be used. In such a case,
Even though the user has not requested processing, there is a possibility that a problem such as being charged may occur.

[0006] On the other hand, as one method of preventing a problem such as being charged even though the processing is not requested, user registration is required when a user uses a print network. There is a way to do it.

[0007] However, if the user performs registration when using the network, it takes time to register on the network, which causes problems such as the inability to use the network smoothly. For this reason, without impairing the convenience of the network system,
There is a need for improved security on network systems.

[0008]

SUMMARY OF THE INVENTION The present invention has been made in view of the above-mentioned circumstances, and has as its object to provide a network system for improving security without impairing the convenience of the network.

[0009]

SUMMARY OF THE INVENTION In order to achieve the above object, the present invention provides a server public key and data encrypted with the server public key in response to a registration request from a user terminal connected by communication means. A server public key to be transferred to the user terminal, and the user terminal encrypts the user identifier encrypted by the server public key and the user public key created by the user terminal together with the user private key to the server private key. Decrypting with the key, storing the user identifier and the user public key together with the server private key, and decrypting with the server private key when the user terminal receives a processing request encrypted with the server public key. A user terminal that encrypts a password created in response to the processing request with the user public key, Delivery, the user is equal to or passing the user a processing result in response to the processing request by inputting the password in the input means.

[0010] According to the present invention having the above configuration, a user who uses a network registers in advance. When a user requests user registration, the server creates a public key for encrypting data and a secret key for decrypting data encrypted with the public key, and makes a registration request. Give the created public key to the user.

[0011] Upon receiving the public key, the user creates an identifier such as an ID for identifying the user, creates a public key and a secret key, and encrypts the identifier and the public key with the public key received from the server. Hand over to server. Also,
The user saves the public key received from the server together with the created identifier and the secret key.

The server decrypts the encrypted identifier and the public key using the secret key, and stores the identifier and the public key for each user together with the secret key created for each user.

[0013] By completing the registration of the user in this manner, the user can use the network.

On the other hand, when the registered user requests the server for processing using the network, the identifier and the processing contents are encrypted using the public key and transferred to the server. The server decrypts the password using the secret key, sets a password for the processing request, encrypts the set password using the user's public key,
Give it to the user. The user decrypts and saves the password using the secret key.

Thereafter, this password is used when requesting execution of the processing requested by the user or when receiving the processing result.

With this configuration, since the user has registered the user in advance, the operation for requesting a process can be simplified. In addition, since the processing result is received using the password set each time the server receives the processing request, it is possible to simplify the processing when requesting the job while improving security, and when the user requests the job. Since the execution result is received using the password set in the job, no charge or the like is made even though the job is not requested.

In the present invention, the input means is provided in the output means for executing the processing request and outputting the processing result, and receives the processing result in accordance with the processing request by inputting the password. It may be handed over to the user.

In the present invention, the server may be a print server that provides a print service, and may output a print result based on a print request. This allows
A print result using the print network can be reliably delivered to a registered user.

[0019]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 shows a schematic configuration of a print network 10 as an example of a network to which the present invention is applied. This print network 10
Has a general configuration in which a print server 12, a user terminal 14, and the like are connected via a communication line 16 and the like.

As shown in FIGS. 1 and 2, a printer 18 is connected to the print server 12 as an output device. When the print server 12 receives a print request of a document or the like from the user terminal 14, the printer 18 To perform print processing according to the request.

As shown in FIG. 2, the print server 12 is provided with a network I / F 20, a registration processing unit 22, and a job processing unit 24. The print server 12 includes a hard disk (HD3) as a storage unit for storing user information together with the encryption unit 26 and the decryption unit 28.
0) is provided.

A key generation unit 32 is connected to the registration processing unit 22. When a request for user registration is input from the user terminal 14 in the registration processing unit 22, the key generation unit 32
A public key Ke _S to encrypt data for each user, to create an encrypted code can only decrypt the secret key Kd _S with the public key Ke _S.

In the registration processing unit 22, the public key Ke_SAnd secret
Secret key Kd_SIs created, the public key Ke _STo the user terminal 14
Send to That is, the print server 12
The secret key Kd is provided to the user terminal 14 that has made the registration request._SBy
Public key Ke that can be decrypted only by_SWata
You.

On the other hand, the user terminal 14 has a network I / F 34, an encryption unit 36 and a decryption unit 38, a registration processing unit 40, and an HD 42 for storing the registered registration information.
Is provided. Further, a key generation unit 44 and a user ID generation unit 46 are connected to the registration processing unit 40.

When the registration processing unit 40 of the user terminal 14 receives the public key Ke _S generated by the print server 12 by requesting the user registration, the key generation unit 44 uses the private key Kd _U and the public key of the user side. Create Ke _U and create user I
The D creating unit 46 creates a user ID as an identifier for identifying a user on the print network 10.

When the registration processing unit 40 creates the public key Ke _U and the secret key Kd _U together with the user ID, the registration processing unit 40
D, secret key Kd _U and public key Ke _S as registration information in HD
42, and the encrypting unit 36 uses the public key K
The user ID and the public key Ke _U are encrypted using e _S and sent to the print server 12.

The print server 12 sends a message to the user terminal 14
Public key Ke sent_SUser ID encrypted by
And the public key Ke_UReceives the secret key Kd_SUsing
The decoding is performed by the encoding unit 28. The registration processing unit 22 decrypts
User ID and public key Ke _UWith the secret key Kd_S,
It is stored in the HD 30 as user information.

By storing the registration information in the print server 12 and the user terminal 14 in this manner, the user registration on the print network 10 is completed, and thus, a job request from the user terminal 14 can be accepted. Becomes

On the other hand, the user terminal 14 is provided with a job processing section 48. When a print request is made to the print server 12, a document or the like (hereinafter referred to as a "document 50") requesting a print together with the user ID is provided. the description is), the encryption unit 36 encrypts using a public key Ke _S, a job request by sending to the print server 12.

The job processing unit 24 of the print server 12
Receives the print request sent from the user terminal 14, the decryption unit 28 decrypts the print request using the secret key Kd _S set for each registered user, and stores the decryption in the processing waiting unit 52, for example. . When the job processing unit 24 receives the print request, the password creation unit 54
Set a password for each request. Set password, the encryption unit 26 encrypts using a public key Ke _U, and sends to the user terminal 14 performing the print request.

The user terminal 14 is provided with a password storage unit 62. When a password is sent from the print server 12 by making a print request, the password is decrypted by the decryption unit 38 using the secret key Kd _U. The password is decrypted and stored in the password storage unit 62.
As such a password storage unit 62, a hard disk or a semiconductor memory may be used, but it is more preferable to use a removable medium that can be carried while storing the password.

On the other hand, the print server 12 is provided with an input unit 56 for inputting a password and a comparing unit 58 for comparing the input password with the password created by the password creating unit 54.

Here, when the user who has made a print request from the user terminal 14 inputs a password into the input unit 56, the entered password is compared with the password created for each requested job, and the corresponding password is compared. Execute the job corresponding to. That is, the document 50 of the job corresponding to the input password is output from the processing waiting section 52 to the printer 18. The printer 18
When the document 50 is input, this document 5
The print processing based on 0 is executed and output.

As a result, the user can receive the print result of the job 50 for which the print was requested. Further, in the print server 12, when a password is input and print processing is performed, the charging unit 60 performs charging based on the processing amount, and stores the user information in the HD 30.

Hereinafter, a flow of user registration and a job request (print request) in the print network 10 will be described with reference to FIGS.

FIG. 3 shows the user terminal 14 at the time of user registration.
FIG. 4 shows the flow of processing on the print server 1 side.
2 shows the flow of processing on the two sides.

As shown in FIG. 3, when performing user registration, the user terminal 14 creates registration information of a predetermined form in step 100, and sends a user registration request to the print server 12 (step 102).

As shown in FIG. 4, in the print server 12, in the first step 120, it is confirmed whether or not there is a user registration request sent from the user terminal 14, and when there is a registration request (step 120). For affirmative determination), the process proceeds to step 122 to receive a registration request.

Upon receiving the registration request, in step 124, a secret key Kd _S and a public key Ke _S for each user are created.
Thereafter, in step 126, the created public key Ke
_A response is sent to the user terminal 14 by sending _S to the user terminal 14 that has performed user registration.

On the other hand, as shown in FIG.
In, when the registration request, checks whether there is a response from the print server 12 at step 104, in response by the print server 12 sends the public key Ke _S, if an affirmative decision is made at step 104, Step 10
6, the public key Ke _S sent from the print server 12 is sent.
Receive.

Thereafter, in step 108, a public key Ke _U and a secret key Kd _U on the user side are created, and in step 110, a user ID is created. Thereafter, in step 112, using the public key Ke _S sent from the print server 12, it encrypts the user ID and the public key Ke _U, and sends to the print server 12 (step 114). In step 116, the public key Ke _S sent from the print server 12 together with the created user ID and secret key Kd _U is
The user registration information is stored and stored in the HD 42, and the main processing of the user registration on the user terminal 14 side ends.

As shown in FIG. 4, when the print server 12 sends the public key Ke _S to the user terminal 14, the print server 12 waits for a response from the user terminal 14 (step 128). If an affirmative decision, receives the user ID and the public key Ke _U user terminal 14 is sent the process proceeds to step 130, in step 132, it decrypts the user ID and the public key Ke _U by using the secret key Kd _S.

Thereafter, at step 134, the secret key Kd
_The public key Ke _U and the user ID are stored together with _{S in the} HD 30 as user information, and the user registration is terminated.

In this way, it is possible to use the processing provided by the print server 12 for completing the user registration. Here, the flow of a print process using the print network 10 will be described with reference to FIGS. FIG. 5 schematically shows the flow of a print request on the user terminal 14 side, and FIGS. 6A and 6B show the flow of processing for a print request on the print server 12 side. .

As shown in FIG. 5, in the user terminal 14,
The print processing of the document 50 is performed by the print server 12.
, The first step 140 is to use user I
A document 50 for which a print process is requested with D,
The user I encrypted using the public key Ke _S and encrypted
D and the document 50 are sent to the print server 12 (step 142).

On the other hand, as shown in FIG. 6A, the print server 12 checks in step 160 whether or not there is a print request as a job request. Then, the determination at step 160 is affirmative, and the process proceeds to step 162 to receive a print request. Thereafter, in step 164, the print request is decrypted using the secret key Kd _S set for each user registered in advance, and the document 50 to be printed is read together with the user ID (step 166).

In the next step 168, the read document 46 is stored in the processing waiting section 52, and in step 170, a password is created. Created password, encrypts the public key Ke _U in step 172, and sent to the user terminal 14 performing the print request (step 174), completing the reception of the print request.

On the other hand, as shown in FIG.
Then, when the print request is sent, the print server 12
(Step 144), and there is a response from the print server 12 (Yes at step 144).
Then, the process proceeds to step 146 to receive the encrypted password. In the next step 148, the encrypted password is decrypted using the secret key Kd _U and stored in the password storage unit 62 (step 150).

The user completes the print processing request by receiving the password for the print request in this manner.

On the other hand, when receiving the requested print processing, for example, the user goes to the printer 18 and inputs the password received from the print server 12 into the input unit 54.
Enter In this case, the password may be input by a key operation, or the password may be stored in a removable medium, and the removable medium storing the password may be input to a drive provided in the input unit. It may be loaded into the camera.

As shown in FIG. 6B, the printer server 12 checks in step 180 whether a password has been input to the input section 56, and if the password is input and an affirmative determination is made in step 180, When the process proceeds to step 182 and reads the input password, the password is compared with the password created for each print request (step 184).

Thereafter, in step 186, the document 50 having the corresponding password is output from the processing waiting section 52 to the printer 18. Thus, the printer 18 executes and outputs a print process based on the document 50.

The user who has input the password can receive a print based on the document 50 for which the print request has been made by executing the print processing based on the password.

In the print server 12, in accordance with the execution of the requested print processing, in step 190, a charge is made according to the processing amount (print amount or the like), and is stored in the HD 30, for example, as user information. As a result, the print network 10 charges the registered user at a predetermined timing, such as a service providing fee.

As described above, in the print network 10 applied to the present embodiment, since the user registration is performed in advance, the process for receiving the provision of the print service or the like becomes complicated, and the print service is requested. It doesn't take much time to do it.

[0056] The user terminal 14, the print server 12 using the public key Ke _S generated by the secret key Kd _S paired encrypts the user ID and document 50 etc., the print server 12, secret user terminal 14 Since the password and the like are encrypted using the public key Ke _U generated in pairs with the key Kd _U , high security on the communication line 16 can be ensured.

On the other hand, when the print server 12 receives the print request, it passes the password created for each print request to the user terminal 14 and executes the print request by inputting the password. It is possible to reliably prevent a third party connected to the print network 10 from making a print request using another user's user ID.

That is, even if a third party can make a print request using the public key Ke _S passed from the print server 12 to the user terminal 14, it is necessary to input a password in order to execute the print request. There is. Since this password must be decrypted using the secret key Kd _U generated by the user terminal 14 when performing user registration, it is extremely difficult for a third party to obtain this password.

Therefore, it is possible to reliably prevent the registered user from being burdened with a network usage fee or the like for the print processing requested by a third party.

In the print network 10, a user who has made a print request inputs a password from an input unit 56 provided in the print server 12 or the printer 18 to execute the requested print processing. Therefore, it is possible to surely prevent another user from receiving the print result requested by the user, as well as erroneously giving the print result to another user.

The present embodiment shows one application example of the present invention, and does not limit the configuration of a network to which the present invention is applied.

For example, in the present embodiment, the printer 18 executes the requested print processing by inputting a password to the input unit 56 provided in the print server 12 or the printer 18. The printer 12 may create the password and execute the requested print processing, and the user may input the password on the input unit 56 so that the print result is passed.

The user terminal 14 is connected to the print server 1
The print process may be executed by encrypting the password or the like received from the server 2 using the public key Ke _S and returning the encrypted password to the print server 12.

Further, in the present embodiment described above,
Although the printer network 10 that provides a print service for printing the document 50 and the like has been described as an example, the present invention is not limited to the print service, but can be applied to a network that provides an arbitrary service.

Further, in the present embodiment, a network for performing a print service has been described as an example. However, the present invention is not limited to this, and can be applied to a shopping service and a ticket reservation service. In this case, for example, user registration is performed in advance, and the public key is held between the network server and the user terminal. When the user purchases an item or reserves a ticket from the user terminal, the network server creates a password, and the password is created. In this case, the data is encrypted by the public key created by the user terminal at the time of user registration and is passed.

Thereafter, when the user receives the purchased item or the reserved ticket, the user inputs a password. As a result, articles and tickets can be reliably delivered to a user using the network, and accurate billing can be performed.

[0067]

As described above, according to the present invention, the public key generated between the network server and the user terminal at the time of user registration is exchanged, and when the registered user requests a service, the public key created by the network server is transmitted. A key is used, and the password used when the service requested network server delivers the service result is passed using the public key created by the user terminal. An excellent effect that a reliable service can be provided to a user who has performed the above is obtained.

Further, according to the present invention, since the request result can be received by inputting the password, the request result can be reliably transferred to the user.

[Brief description of the drawings]

FIG. 1 is a schematic configuration diagram of a print network applied to the present embodiment.

FIG. 2 is a functional block diagram illustrating a schematic configuration of a print server and a user terminal applied to the embodiment.

FIG. 3 is a flowchart showing an outline of a user registration process in a user terminal.

FIG. 4 is a flowchart showing an outline of a user registration process in a print server.

FIG. 5 is a flowchart showing an outline of a print request in a user terminal.

FIG. 6A is a flowchart illustrating an outline of accepting a print request in a print server, and FIG. 6B is a flowchart illustrating an outline of processing of the accepted print request.

[Explanation of symbols]

 Reference Signs List 10 print network (network) 12 print server 14 user terminal 16 communication line (communication means) 18 printer (output device) 20, 34 network I / F (communication means) 22 registration processing unit 24 job processing unit 26, 36 encryption unit 28, 38 Decryption unit 32, 44 Key generation unit 46 User ID creation unit 50 Document 54 Password creation unit 56 Comparison unit

Claims (3)

[Claims] 1. A server public key and a server secret key for decrypting data encrypted by the server public key in response to a registration request from a user terminal connected by a communication means, and the server public key is stored in the user terminal. Hand over to the terminal,
The user terminal decrypts the user identifier encrypted by the server public key and the user public key created by the user terminal together with the user private key by the server private key, and stores the user identifier and the user public key together with the server private key. When the user terminal receives the processing request encrypted by the server public key, the user terminal decrypts the processing request by the server private key, and encrypts the password created in response to the processing request by the user public key. A network system for delivering a processing result in accordance with the processing request to a user terminal by passing the password to a user terminal and inputting the password to a predetermined input unit. 2. The input means is provided in an output means for executing the processing request and outputting a processing result, and receiving the processing result in response to the processing request to the user when the password is input. 2. The method according to claim 1, wherein
The network system according to 1. 3. The network system according to claim 1, wherein the server is a print server that performs a print service, and outputs a print result based on a print request.