JP2003163655A - Image processor, arithmetic unit, image processing system and communication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image processor capable of performing communication in which secrecy of information is secured. <P>SOLUTION: In the case of transmitting charging information, an MFP 1 which is the image processor prepares a secret code key and encodes the charging information by using the prepared secret code key, and the prepared secret code key is stored in the prescribed area of the MFP 1. The encoded charging information is transmitted to a managing PC 2 through a route 1. The PC 2 receiving the information accesses the MFP 1 through a route 2 to obtain the secret code key stored in a prescribed area. Then, by using the obtained secret code key, the received charging information is decoded. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an image processing device, an arithmetic device, an image processing system and a communication method, and more particularly to an image processing device, an arithmetic device and an image processing system capable of communicating highly confidential information. , And a communication method.

[0002]

2. Description of the Related Art Conventionally, an MFP (Multi Function
on Peripherals) billing information is managed.
At that time, the MFP device generally encrypts and transmits accounting information that is a secret item. In this case, it is common practice to encrypt the billing information using a fixed encryption key.

[0003]

However, in order to maintain high encryption strength, it is desirable to use a different secret encryption key each time encryption processing is performed, and as described above, there is a certain fixed encryption key. If only one secret encryption key is used, it is difficult to maintain high encryption strength. In addition, if a different secret encryption key is used each time the encryption process is performed, there is a problem that the secret encryption key must be obtained each time the decryption is performed.

The present invention has been made in view of the above problems, and provides an image processing apparatus, an arithmetic unit, an image processing system, and a communication method capable of performing communication in which confidentiality of information is ensured. The purpose is to

[0005]

In order to achieve the above object, according to an aspect of the present invention, an image processing apparatus includes a creating means for creating a secret encryption key used for encryption processing, and a created secret encryption key. The encryption processing means for encrypting information using the key, the transmission means for transmitting the encrypted information to another device through the first communication path, and the created secret encryption key And a storage means for storing the created secret encryption key in order to send it to another device through a second communication path different from the communication path.

According to another aspect of the present invention, the arithmetic unit is an arithmetic unit connected to the above-described image processing apparatus, and receives encrypted information from the image processing apparatus via the first communication path. And a receiving unit for accessing the private encryption key storage unit of the image processing apparatus through the second communication path to acquire the private encryption key used for the encryption process, and the acquired private encryption key. , Decryption means for decrypting the encrypted information.

According to another aspect of the present invention, an image processing system is an image processing system including the above-mentioned image processing device and the above-mentioned arithmetic device, which are connected by an electric communication line. The encrypted information is transmitted to the device, and the information is decrypted in the arithmetic device.

According to another aspect of the present invention, a communication method comprises:
A communication method performed in an image processing system including an image processing device and an arithmetic device, which are connected by an electric communication line, the method comprising: creating a secret encryption key used for encryption processing in the image processing device; An encryption processing step of performing information encryption processing using the generated secret encryption key, a transmission step of transmitting the encrypted information to another device via the first communication path, and the created secret encryption key To
A storing step of storing the created secret encryption key in a storing means for sending to another device through a second communication path different from the first communication path, and an encryption process from the image processing apparatus in the arithmetic unit. A receiving step of receiving the generated information through the first communication path, and an acquisition of accessing the secret encryption key storage means of the image processing apparatus through the second communication path to obtain the secret encryption key used for the encryption processing. And a decryption step of decrypting the encrypted information using the obtained private encryption key.

[0009]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. In the following description, the same parts and components are designated by the same reference numerals.
Their names and functions are also the same. Therefore, detailed description thereof will not be repeated.

[First Embodiment] FIG. 1 is a diagram showing the configuration of an MFP system according to the first embodiment.

Referring to FIG. 1, the MFP system is an LA system.
An MFP 1 connected by N (Local Area Network) 5,
It is composed of a personal computer (hereinafter referred to as a PC) 2.

The MFP is a multi-functional peripheral device used in a network, and is a term indicating an image processing device such as a printing device, a copying machine, a scanner and the like having a communication function. Although MFP 1 is described as a copying machine in the present embodiment, it may be an image processing apparatus such as a scanner.

FIG. 2 is a block diagram showing the configuration of the MFP 1 shown in FIG. Referring to FIG. 2, the MFP 1
Control unit 101, image reading unit 102, and image processing unit 1
03, an image printing unit 104, a billing processing unit 105, a storage unit 106, an input unit 107, a communication unit 108, a communication processing unit 109, and a calendar unit 110.

The control unit 101 includes a CPU (Central Process).
sing unit) and the like, and controls the entire MFP 1.

The input unit 107 is composed of buttons, a touch panel, etc., and the user inputs a copy instruction or the like from the input unit 107.

The image reading unit 102 reads the document set by the user, and the image processing unit 103 reads it.
Image data for copying is generated.

The image data generated by the image processing unit 103 is printed by the image printing unit 104.

In addition, charge processing unit 105 processes the expense incurred when the user performs the above-mentioned operation using MFP 1.

The storage unit 106 stores a program executed by the control unit 101, and also serves as a temporary storage area for executing the program. The storage unit 106 also stores the billing information 1061 created by the billing processing unit 105 and the encryption key table 1062. The encryption key table 1062 will be described later with a specific example.

The communication unit 108 is composed of a communication interface and the like, and communicates with the PC 2 via the LAN 5. The communication processing unit 109 performs processing such as mail creation for communicating with the communication unit 108.

The calendar unit 110 holds date and time information and the like. The MFP 1 shown in FIG. 2 is a general copying machine having a communication function, and its configuration is not limited to the configuration shown in FIG.

Next, FIG. 3 is a block diagram showing the configuration of the PC 2 shown in FIG. Referring to FIG. 3, PC2
Includes a control unit 201, a charge management unit 202, and an input unit 20.
3, a display unit 204, a communication unit 205, and a calendar unit 2
06 and a storage unit 207.

The control unit 201 is composed of a CPU and the like,
Controls the entire PC2. The input unit 203 is composed of a keyboard, a mouse, and the like.
Input various information and instructions to C2.

The display unit 204 is composed of a display or the like and displays various information. Communication unit 205 includes an interface for communication and the like, and communicates with MFP 1 via LAN 5.

The calendar unit 206 holds date and time information and the like. Billing management unit 202 constitutes a management utility for performing billing management of MFP 1. Charge management unit 20
In 2, the charge management for the copying process performed by the MFP 1 is performed.

The storage unit 207 stores a program executed by the control unit 201, and also serves as a temporary storage area for executing the program. The storage unit 207 also stores the billing information 2071 created by the billing management unit 202 and the encryption key table 2072 used by the billing management unit 202.

The PC 2 shown in FIG. 3 is a diagram showing the structure of a general personal computer as an arithmetic unit, and the structure is not limited to the structure shown in FIG.

In such an MFP system including the MFP 1 and the PC 2, the management utility of the PC 2 is used to collect and manage the accounting information of the MFP 1. Since such billing information is generally confidential, M
The encrypted information is transmitted from FP1 to PC2.

FIG. 4 is a flowchart showing the processing in the MFP 1. The process shown in the flowchart of FIG. 4 is realized by the control unit 101 of the MFP 1 executing a program stored in the storage unit 106.

Referring to FIG. 4, when it is time to transmit the billing information to PC 2 (Yes in S101), the billing information to be transmitted is read from billing information 1061 stored in storage unit 106 (S103). The transmission timing in step S101 may be each time a predetermined time elapses, each predetermined amount of billing information, or a specific date and time.

Further, the current date information D is read as an index from the calendar unit 110 (S105).

Then, the secret encryption key K corresponding to the date information D which is the index read in step S105 is read from the encryption key table 1062 stored in the storage unit 106 (S107).

The secret encryption key K read in step S107
Is used to encrypt the billing information read in step S103 (S109). The method of encryption processing performed in step S109 is not limited here.

The communication processing unit 109 then proceeds to step S
Transmission data is created from the billing information encrypted in 109 and transmitted from the communication unit 108 to the PC 2 via the LAN 5 (S110).

Through the above processing, the MFP 1 to the PC 2
The encrypted billing information is transmitted to.

Next, FIG. 5 is a flow chart showing the processing in the PC 2. The process shown in the flowchart of FIG. 5 is realized by the control unit 201 of the PC 2 executing a program stored in the storage unit 207.

Referring to FIG. 5, first, the PC 2 is a LAN
When the billing information transmitted from the MFP 1 is received by the communication unit 205 via S5 (S201), the calendar unit 206
Then, the current date information D is read as an index (S203).

Then, the secret encryption key K corresponding to the date information D which is the index read in step S203 is read from the encryption key table 2072 stored in the storage unit 207 (S205).

The secret encryption key K read in step S205
Using, the encrypted billing information received from the MFP 1 in step S201 is decrypted (S207).

Through the above processing, the PC 2 can obtain the billing information from the MFP 1. In this way, by transmitting and receiving the encrypted information, it is possible to prevent the information from leaking and to perform management with higher security. Further, since a predetermined encryption key table is provided together and one encryption key is selected from the encryption key table according to a predetermined rule, high encryption strength can be maintained.

The billing information of the MFP 1 thus obtained is stored in the storage unit 207 of the PC 2 so that various management can be performed.

Incidentally, FIG. 6 shows the encryption key table 1 stored in the storage units 106 and 207 of the MFP 1 and the PC 2.
It is a figure which shows the specific example of 062 and 2072.

Referring to FIG. 6, encryption key table 1062
Reference numerals 2072 and 2072 are tables composed of an index and a secret encryption key corresponding to the index. In the specific example shown in FIG. 6, the index is the date information D and the secret encryption key is a four-digit number represented by a hexadecimal number.

For example, in the MFP 1, step S in FIG.
In step 105, when “16th” is read from the calendar unit 110 as the current date information D, step S10.
7, "0A3E" as the corresponding secret encryption key K
Is read. Therefore, in step S109,
The charge information is encrypted using "0A3E".

In addition, P which has received the encrypted billing information
In C2, similarly, in step S203 of FIG. 5, "16 days" is read from the calendar unit 206 as the current date information D, and the corresponding secret encryption key K is read in step S205.
“0A3E” is read as. Therefore, step S
At 207, the billing information encrypted using "0A3E" is decrypted.

In FIG. 6, the encryption key table 1
Although a specific example in which the indexes of 062 and 2072 are the date information D is shown, the indexes may be days of the week or other indexes. In that case, if the index is a day of the week, seven secret encryption keys are required, and if the index is any other index, the number of secret encryption keys corresponding to the index is required.

[Modification] In the above-described first embodiment, the secret encryption key K has been described as fixed information, but the encryption key tables 1062 and 20 are provided.
Each time you access 72, perform a predetermined arithmetic operation,
The encryption key tables 1062 and 2072 can be updated with the result of the calculation as the secret encryption key K used next time.

For example, it is considered that the arithmetic operation is defined as "+1" and the above-mentioned arithmetic operation is performed each time the secret encryption key K is read from the encryption key tables 1062 and 2072.

Explaining with a specific example, the date information D, which is an index, is 16 days, and the secret encryption key K
Is read as “0A3E”, 0A3E + 1 = 0A3F is executed, and “0A3F” is replaced with “0A3F” as the secret encryption key K, and the encryption key tables 1062 and 2
Updated to 072. Therefore, when the 16th day is read as the index date information D, such as the 16th day of the next month, "0A3F" is read as the corresponding secret encryption key K from the encryption key tables 1062 and 2072.

As a result, since the contents of the secret encryption key K are completely different each time, the encryption strength can be further increased.

[Second Embodiment] In order to further increase the encryption strength, in the second embodiment, an encryption process and a decryption process are performed using a secret encryption key K newly created every time. .

FIG. 7 shows an MFP according to the second embodiment.
It is a figure which shows the structure of a system. Referring to FIG. 7, MF
The P system is the MFP 1 and the P connected to the LAN 5.
C2, and a mail server 3 connected to the MFP 1 and the PC 2 via a communication line 6.

The communication line 6 is a communication line, and is a telephone line, a dedicated line, or the like. FIG. 8 shows the MF shown in FIG.
It is a block diagram which shows the structure of P1. M shown in FIG.
The configuration of the FP1 has a MIB (Management Information Base) 1603 instead of the encryption key table 1062 included in the MFP 1 shown in FIG. 2 in the first embodiment.
Are included in the storage unit 106.

The MIB 1603 stores the management information of the MFP 1. Although the MIB 1063 is not shown in FIG. 2, the MFP in the first embodiment is not shown.
1 also is included as a component and stores management information of various MFPs 1.

Since the structure of PC 2 is similar to that shown in FIG. 3 in the first embodiment, description thereof will not be repeated here. In this embodiment, the PC 2 is
The encryption key table 20 shown in FIG. 3 of the first embodiment.
72 may not be included.

Further, since the mail server 3 is composed of a server such as a general personal computer and has the structure of a general mail server, detailed description will not be given here.

In the MFP system composed of the MFP 1, the PC 2 and the mail server 3 as described above, the management utility of the PC 2 is used as in the first embodiment.
The billing information in the MFP 1 is collected and managed.

FIG. 9 is a flowchart showing the processing in the MFP 1. The process shown in the flowchart of FIG. 9 is realized by the control unit 101 of the MFP 1 executing a program stored in the storage unit 106.

Referring to FIG. 9, when it is time to transmit the billing information to PC 2 (Yes in S301), the billing information to be transmitted is read from billing information 1061 stored in storage unit 106 (S303). Step S301-
The processing in S303 is the same as the processing in steps S101 to S103 of FIG. 4 in the first embodiment.

Next, a secret encryption key K used for encrypting the billing information is created (S305). Here, the creation method is not limited.

Using the secret encryption key K created in step S305, the billing information read in step S303 is encrypted (S307).

The communication processing unit 109 then proceeds to step S
Transmission data is created from the billing information encrypted in 307, and is transmitted from the communication unit 108 to the PC 2 via the communication line 6 and the mail server 3 (S309). In FIG. 7, this transmission path is shown as path 1.

Further, the secret encryption key K created in step S305 is stored in a specific area of the MIB 1063 of the storage unit 106 (S311).

By the above processing, the MFP 1 to the PC 2
The billing information is transmitted via the route 1. The secret encryption key K used for encryption is stored in a predetermined area of the MIB 1063 of the MFP 1 without being transmitted together with the billing information.

Next, FIG. 10 is a flowchart showing the processing in the PC 2. The processing shown in the flowchart of FIG. 10 is performed by the control unit 201 of the PC 2 in the storage unit 20.
It is realized by executing the program stored in 7.

Referring to FIG. 10, first, PC 2 is an MFP
When the billing information transmitted from the route 1 through the route 1 is received (S401), the MIB 10 of the MFP 1 is transmitted via the LAN 5.
63 to access the secret encryption key K (S40
3). In FIG. 7, this access route is shown as route 2.

Then, using the secret encryption key K obtained in step S403, the encrypted billing information received from the MFP 1 in step S401 is decrypted (S405).

Through the above processing, the PC 2 can obtain the billing information from the MFP 1. As described above, in the MFP system according to the present embodiment, the transmission path of the billing information and the acquisition path of the secret encryption key K are the path 1 and the path 2.
And different routes. For this reason,
Unlike the conventional method, the secret encryption key used for each transmission can be changed instead of the secret encryption key fixed to the model, and the encryption strength can be further increased.

In the present embodiment, the secret encryption key K created is explained as stored in the MIB 1063 of the MFP 1. However, it is created by the MFP 1.
It may be transmitted to and stored in another device such as the PC 2 and the mail server 3 separately from the charging information. The secret encryption key K may be created by a device other than the MFP 1. In that case, M
The FP1 may instruct another device to create the secret encryption key K every time the charging information is transmitted.

In the present embodiment, the case has been described in which the MFP transmits billing information for secret management, but the information to be transmitted is not limited to billing information, and is all information that should be secret managed. You can Further, the transmitting device is not limited to the MFP, and may be any network device.

Furthermore, the method of transmitting confidential information performed by the above-described MFP system can be provided as a program. Such a program is a computer-readable program.

The program may be recorded as a recording medium such as a flexible disk, a CD-ROM, a ROM, a RAM and a memory card attached to a computer and provided as a program product. Alternatively, the program may be provided by being recorded in a recording medium such as a hard disk built in the computer. Further, the program can be provided by downloading via the network.

The provided program product is installed and executed in a program storage unit such as a hard disk.

The program product includes the program itself and a recording medium on which the program is recorded.

The embodiments disclosed this time are to be considered as illustrative in all points and not restrictive. The scope of the present invention is shown not by the above description but by the claims, and is intended to include meanings equivalent to the claims and all modifications within the scope.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration of an MFP system according to a first embodiment.

FIG. 2 is a block diagram showing a configuration of MFP 1 shown in FIG.

3 is a block diagram showing a configuration of a PC 2 shown in FIG.

FIG. 4 is a flowchart showing processing in the MFP 1.

FIG. 5 is a flowchart showing processing in the PC 2.

6A and 6B are encryption key tables 1062 and 20 stored in storage units 106 and 207 of MFP 1 and PC 2, respectively.
It is a figure which shows the specific example of 72.

FIG. 7 is a diagram showing a configuration of an MFP system according to a second embodiment.

8 is a block diagram showing a configuration of MFP 1 shown in FIG. 7. FIG.

FIG. 9 is a flowchart showing processing in the MFP 1.

FIG. 10 is a flowchart showing processing in the PC 2.

[Explanation of symbols]

1 MFP, 2 PC, 3 mail server, 5 LA
N, 6 communication line, 101 MFP control unit, 102
Image reading unit, 103 image processing unit, 104 image printing unit, 105 billing processing unit, 106 MFP storage unit, 1
07 MFP input unit, 108 MFP communication unit, 10
9 MFP communication processing unit, 110 MFP calendar unit, 201 PC control unit, 202 Billing management unit, 20
3 PC input unit, 204 display unit, 205 PC communication unit, 206 PC calendar unit, 207 PC storage unit, 1061 MFP charging information, 1062 MFP encryption key table, 1063 MIB, 2071 PC charging information, 2072 PC encryption key table, D date information, K secret encryption key.

Claims (4)

[Claims] 1. A creating means for creating a secret encryption key used for encryption processing, an encryption processing means for encrypting information using the created secret encryption key, and the encrypted information. Transmitting means to another device via a first communication path, and the above-mentioned created secret encryption key for sending to the other device via a second communication path different from the first communication path. An image processing apparatus, comprising: a storage unit that stores the created secret encryption key. 2. An arithmetic unit connected to the image processing apparatus according to claim 1, wherein the encrypted information is transmitted from the image processing apparatus,
Receiving means for receiving through the first communication path, and access means for storing the secret encryption key of the image processing apparatus through the second communication path to obtain the secret encryption key used for the encryption processing. And a decryption unit that decrypts the encrypted information using the obtained private encryption key. 3. An image processing system comprising the image processing device according to claim 1 and the arithmetic device according to claim 2, which are connected by an electric communication line, and from the image processing device to the arithmetic device. An image processing system in which the encrypted information is transmitted and the information is decrypted in the arithmetic unit. 4. A communication method performed in an image processing system comprising an image processing device and an arithmetic device, which are connected by an electric communication line, wherein a secret encryption key used for encryption processing is created in the image processing device. Creating step, an encryption processing step for encrypting information using the created secret encryption key, and a transmitting step for transmitting the encrypted information to another device via a first communication path. And a storage step of storing the created secret encryption key in a storage means in order to send the created secret encryption key to another device via a second communication path different from the first communication path. In the arithmetic unit, a receiving step of receiving the encrypted information from the image processing apparatus via the first communication path, and a secret code of the image processing apparatus via a second communication path. An obtaining step of accessing a storage means of the number key to obtain the secret encryption key used for the encryption processing; and a decryption for decrypting the encrypted information using the obtained secret encryption key. And a communication method.