JP2003337687A - Image forming apparatus with security function and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent unauthorized coping and leakage of data by prohibiting the transfer of the data and adding security information when the data are generated for an image forming apparatus having no security function (for example, MFP, LBP and so on). <P>SOLUTION: A means which determines whether the image forming apparatus has the security function, and a means which prohibits the transfer of the data to the image forming apparatus having no security function or a means which has the security information and adds the security information to the data to be transferred are provided. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to security management in an image forming system including an image reading apparatus connected to a computer or a network and an image forming apparatus.

[0002]

2. Description of the Related Art Conventionally, with respect to various data including image data transferred to an image forming apparatus, a technique for preventing crime by embedding image security information when printing the data has been proposed. Widely used.

[0003]

However, the security management is a function of the image forming apparatus itself.
There is no security management for the image forming apparatus that does not have the security management.

[0004]

Therefore, as a first method of the present invention, in a computer and an image forming apparatus, the image forming apparatus is equipped with a security function for crime prevention, and has the security function. Means of indicating,
Further, the image forming apparatus is provided with a means for confirming whether or not the image forming apparatus can form the formed image in the computer, and a means for stopping the transfer of information when the image forming apparatus cannot form the formed image. Transfer information only when it has a security function.

As a second method of the present invention, in a computer and an image forming apparatus, means for confirming whether or not the image forming apparatus has a security function for the purpose of crime prevention at the time of image formation, and crime prevention for transfer data. By providing the means for adding the desired security information, the security information is attached to the transfer data and the information is transferred only when the image forming apparatus does not have the security function.

By using this information transfer method, the image output from the image forming apparatus has security information, which is intended to prevent illegal copying and leakage of illegal data.

[0007]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS (First Embodiment) FIG. 2 is an external view of the entire apparatus according to an embodiment of the present invention.

A computer 202 and an MFP (MultiFunction P) connected to a network 201
It is composed of multi-purpose network functions 203 and 204 called an "eripheral" and a printer 205. Further, although not shown on this network 201,
Clients, various servers, and MFPs other than the above, as well as other devices such as a scanner, a printer, and a FAX are also connected.

The computer 202 operates application software to create, edit, and display various documents / graphics. In addition, these documents / graphics can be converted into PDL language (P
It is converted into the image description language (page description language) and is instructed by the start software called a printer driver from the computer 202 to be sent to 203, 204 or 205 via 201 and output.

Each of the MFPs 203 and 204 has a communication means capable of exchanging information with the computer 202 via the network 201, and has a mechanism for notifying the computer 202 of setting information and device status of the MFPs 203 and 204. The computer 202 has means for receiving the information and receiving the operation.

(Arrangement of MFPs 203 and 204) FIG.
The structure of FP203,204 is shown. MFP 203 and MF
The difference in P204 is the difference between full-color and monochrome, and the full-color device often includes the configuration of the monochrome device except for the color processing. Therefore, the full-color device will be mainly described here.

In the MFPs 203 and 204, 301 is a scanner unit for reading an image, 302 is an RGB-IP unit for image processing the image data, and 303 is an image transmission / reception using a telephone line typified by a facsimile machine. A FAX unit and a NIC (Network) 304 for exchanging image data and device information using a network.
k Interface Card portion, 305 is a page description language (PD) sent from the computer side.
The PDL unit 312 that develops L) into an image signal is normally through, but is effective when adding and releasing add-on information. Then, the core unit 306 temporarily stores the image signal or determines the route according to the usage of the MFPs 203 and 204.

Next, the image data output from the core unit 306 is sent to the PWM unit 308 via the CMYK-IP unit 307, and then the printer unit 309 for forming an image.
And is printed out by the finisher unit 310 that performs output finishing processing of the paper.

Further, the display unit 311 operates as a preview function for avoiding printing an image or determining whether the printing state is right or wrong.

(Structures of NIC 304 and PDL 305) The NIC 304 and PDL 305 will be described with reference to FIG. The NIC unit 304 controls the interface to the network 201. For example, Eth such as 10Base-T / 100Base-TX.
It plays a role of obtaining information from the outside using an emet cable or the like and flowing information to the section.

When information is obtained from the outside, the voltage is first converted by the transformer unit 401 and sent to the LAN controller unit 402. The LAN controller unit 402 is
It has a buffer memory 1 (not shown) inside,
After determining whether the information is necessary information, the information is sent to the buffer memory 2 (not shown), and then a signal is sent to the PDL unit 305.

Next, when providing information to the outside, P
The data sent from the DL unit 305 is added with necessary information in the LAN controller unit 402, and the transformer unit 4
Connected to the network via 01.

Image data created by application software operating on a computer is composed of documents, figures, photographs, etc.
It consists of a combination of character code, graphic code, and image description elements such as raster image data. This is the so-called PDL (Page Description)
n Language = page description language), and Ad
This is represented by PostScript (registered trademark) language of obe.

The PDL portion in FIG. 4 is a portion that represents the conversion processing from the above PDL data to raster image data.
The PDL data sent from the C unit 304 is once stored in a large-capacity memory 404 such as a hard disk (HDD) via the CPU unit 403, where it is managed and stored for each job. If necessary, the CPU unit 403
RIP (Raster Image Process)
ng) to perform raster or image processing to develop PDL data into a raster image. The raster image data thus developed is stored page by page for each job in a high-speed accessible memory 405 such as a DRAM for each CMYK color component, and again via the CPU section 403 according to the status of the printer section 309. It is sent to the core unit 306.

(Structure of Core 306) The core 306 will be described with reference to FIG. The bus selector unit 701 of the core unit 306 is used when the MFPs 203 and 204 are used.
It plays a role of traffic control, so to speak. That is, copy function as stand-alone, network scan,
The bus is switched according to various functions of the MFPs 203 and 204 such as network printing, facsimile transmission / reception, and display. The following functions can be considered as an example of the flow.

Standalone copier: Scanner 301
→ Core 306 → Printer 309 ・ Network scan: Scanner 301 → Core 306
→ NIC unit 304 ・ Network print: NIC unit 304 → Core 306
→ printer 309 ・ facsimile transmission function: scanner 301 → core 306
-> FAX unit 303-Facsimile receiving function: FAX unit 303-> Core 306
→ printer 309 ・ display function: scanner 301 → core 306
→ Display 311 However, the input source of the display function is the FAX unit 303
Alternatively, the NIC unit 304 may be used.

Next, the image data output from the bus selector unit 501 is compressed by a compression unit 502, a memory unit 503 composed of a large-capacity memory such as a hard disk (HDD), and an expansion unit 5.
It is sent to the printer unit 309 or the display unit 311 via 04. The compression / expansion method used here is
A general one such as JPEG, JBIG or ZIP may be used. The compressed image data is managed for each job and stored together with additional data such as a file name, creator, creation date and time, and file size.

Further, by providing a job number and password and storing them together, the personal box function can be supported. This is a confidential function in which data can be temporarily stored and can be printed out (read out from the HDD) only by a specific person.

For each stored job, when the job is designated and called, the password is authenticated, and then the HDD is called to decompress and restore the raster image. Printer unit 30
Sent to 9.

(Structure of CMYK-IP Unit 307) The CMYK-IP unit 307 will be described with reference to FIG. Core part 306
The data passed from it enters the output masking / UCR circuit unit 506, and the C1, M1, Y1 signals after LDG conversion in the RGB-IP unit 302 are converted into Y, M, C, K which are toner colors of the image forming apparatus. This is a portion for converting a signal using matrix calculation, and C1, M1, Y1, K based on the RGB signal read by the CCD sensor in the scanner unit 301.
One signal is C, M, Y, based on the spectral distribution characteristics of the toner.
Corrected to K signal and output. Next, the gamma correction unit 507
After being converted into C, M, Y, and K data for image output using a look-up table in consideration of various color characteristics of the toner, the spatial filter 508 performs sharpness or smoothing. The image signal is sent to the PWM unit 308.

(Printer Driver) A process of transmitting image data from the computer 202 to the printer by the printer driver will be described with reference to FIG. The printer driver is a GUI for instructing a print operation, and by instructing with this, the user can instruct desired setting parameters and send a desired image to a destination such as a printer.

Here, reference numeral 601 denotes a printer driver window, and as a setting item therein, 602 is a transmission destination selection column for selecting a target output destination.
Generally, it is similar to the above-mentioned MFP 203, 204 or printer 205, but 603 is a page setting column for selecting an output page from a job, which is created by application software running on the computer 202. Determines which page of the image is output. Reference numeral 604 is a copy number setting column for specifying the number of copies. A property key 607 is used to make detailed settings for the destination device selected in the destination selection column 602. Click here to enter device-specific setting information in a separate window, By changing the processing, for example, the parameters of the gamma conversion unit 507 and the spatial filter unit 508 in the CMYK-IP unit 307, it is possible to perform finer color reproduction and sharpness adjustment.

When the desired setting is completed, printing is started by the OK key 605. When canceling, printing is canceled by the cancel key 606.

(Explanation of Network Utility Software) Returning to FIG. 2 again, consider utility software operating on the computer 202. There is M in the network interface part (NIC part 304 + PDL part 305) in the MFPs 203 and 204.
IB (Management Information)
A standardized database called Base) has been constructed, and SNMP (Simple Network)
It is possible to communicate with a computer on a network through a network management protocol called k Management Protocol), and manage the MFO 203, 204 and other scanners, printers, or faxes connected to the network.

On the other hand, a software program called a utility operates on the computer 202, and necessary information can be exchanged by using the MIB by using the SNMP via the network. For example,
It is possible to detect whether or not the finisher unit 310 is connected as the equipment information of the MFPs 203 and 204 and to detect whether or not the current printing is possible as the status information.

(About Security Function) Now, the addition of security information will be described with reference to FIG.

The original image 701 is image data created by application software on the computer 202, and consideration will be given to giving copyright to it. The copyright information is, for example, a certain image pattern such as 702, which is pattern information peculiar to an individual author, a group having the same, a corporation, etc., and the information is registered and managed. However, the range of registration and management may be the global scale, or may be a limited range or group.

Here, the add-on image 703 is the original image 70.
12 is an image to which copyright information 702 is added. If the add-on image 703 is illegally printed or copied,
Even if it is leaked illegally, it can be traced later if the copyright information added is included, and it is determined that the copyright information of yourself (or group, corporation, etc.) is added. If so, it becomes possible to make a claim.

FIG. 1 is a block diagram showing the features of claim 1 of the present invention.

Reference numeral 101 is an application operating on 202, and 102 is the printer driver for printing described above. When printing from 101, 101
Sends data to 102, and at 102, prints attribute settings and print data associated with printing by the printing devices 203, 204, 205.
It is converted into the PDL language according to. 103 is a printing device 20.
A security checker 3, 204, 205 evaluates whether the security function is held or not and responds to 102. Reference numeral 104 denotes an SNMP Client that communicates with an SNMP Agent existing on the printing devices 203, 204, 205 to acquire device information. Reference numeral 105 denotes an SNMP Age existing on the printing devices 203, 204, 205.
nt. Reference numeral 106 is an MIB that holds data and a data structure required by the SNMP Agent. The SNMP communication protocol, the structure of the MIB and the protocol are known techniques, and the details are described in RFC1155.
See RFC1157, RFC1213, RFC1215. 107 is actual security information accessed from 106. 108 and 109 are 202 and 2
Reference numerals 03, 204 and 205 are network interface units that serve as interfaces for communication.

In this embodiment, the security information is confirmed in 102. FIG. 8 shows an operation flowchart of this embodiment. Use this flow chart
The operation of this embodiment will be described. When printing from 101, 1
Call 02. 102 is called out (801) and 2
A printer that can send data is searched from 02 (80
2). This search method is a method used in a commonly used operating system. After searching for printers, a list of printers found by the search is created (803). Next, an SNMP packet for checking whether or not the printer has a security function is created (804). Next, the first printer is taken out from the list (805), and the packet is sent to the printing device (806). When the target printing device obtains the packet, it creates a response packet and responds to 202 (808). The transmission packet is created at 104, and the transmission is performed from 104 through 109 and 108 to 105.
Sent to. Upon receiving the transmission packet, 105 analyzes the packet, refers to 106 and 107, creates a response packet, and transmits the response packet. The response packet is returned to 104 via 108 and 109. When the printing device does not have the security information 107, the response packet includes information indicating that the information does not exist and responds. If the printing device does not have the SNMP Agent, the response packet is not returned. In 202, when the response packet is received (808), the packet is returned to the
In step 4, the data is received (809) and analyzed (810). If the analysis result (811) has a security function, the process moves to the next check (813). If the printing device does not have the security function, the printing device is excluded from the list (81
2). If there is no response packet from the printing device, 202 times out (807) and excludes the printing device (812). After the processing for the printing device is completed, if the printer is next in the list (813), the printing device is taken out (814) and the process is repeated from 806. After checking all printers in the list, display the printer driver (81
5) and move to the UI operation of the driver (816). When printing is executed by the UI operation (817), printer data is created (818) and the data is sent. When the printing device receives the data, it prints by the method described above.

In this way, by checking the presence or absence of the security function of the printing device and making it impossible to select the device that does not have the function, it becomes possible to prohibit the data transfer to the device that does not have the security function. . In the system of the present embodiment, the presence or absence of the security function of the printing device is checked in cooperation with the printer driver, but as another method,
A section for checking the security function is provided while the printer driver transfers data to the virtual printer, and if there is a data spool for the printing device on the PC, the data is stored in the spool or from the spool to the printing device. There is also a method of providing a section for checking the security function when data is transferred to, and these functions are the same as those in this embodiment.

(Second Embodiment) FIG. 9 is a diagram showing a feature of claim 2 of the present invention.

Reference numerals 101 to 109 have the same structure as that of the first embodiment. In this embodiment, a module 901 for combining security information is provided in 102, and security information 902 attached to print data is provided in 202.

FIG. 10 is an operation flowchart of this embodiment. The operation of this embodiment will be described in detail according to this flowchart. When printing from 101, 102
Call. When 102 is called (1001), the printer driver screen is displayed, and the UI operation of the driver is started (1002). When printing is executed by the UI operation (1003), the target printer is searched (100
4) Do. Next, create an SNMP packet that checks whether the printer has a security function (1
005), and sends the packet to the printing device (100
8). The transmission packet is created at 104, and the transmission is sent from 104 to 105 via 109 and 108. Upon receiving the transmission packet, 105 analyzes the packet, refers to 106 and 107, creates a response packet, and transmits the response packet. The response packet is 10
It is returned to 104 via 8,109. When the printing device does not have the security information 107, the response packet includes information indicating that the information does not exist and responds. If the printing device does not have the SNMP Agent, the response packet is not returned. At 202, when a response packet is received (1008), the packet is received at 104 (1009) and analyzed (1010). Analysis result (1
011), if there is a security function, move to creation of print data (1013). If there is no security function from the printing device, security information is added (101
2).

As an example of adding security information, a general technique called form overlay is used here. This is a function called a watermark or stamp mark that can be operated even on the printer driver currently in use. This is used as a method for adding security information.

If there is no response packet from the printing device, 2
02 times out (1007) and adds security information (1012). After the processing for the printing device is completed, printer data is created (1013) and the data is transmitted. When the printing device receives the data, it prints by the method described above.

In the present embodiment, the form overlay technology is used as it is as the security information addition. However, when the user wants to attach an image to the print data by using the form overlay, the image of the form overlay is displayed in FIG. As shown, the form overlay can be performed after the security information is added, and the effect of the present invention is exerted.

Further, in the present embodiment, the form overlay is used as the security information adding means, but as another example, when the data is an image, a method of embedding the security information in the image or attribute information in the data is used. If so, there is also a method of writing security information in the attribute information. In the present invention, the effect of the present invention is exhibited if there is a means for adding security information to data as shown in these methods.

[0045]

As described above, according to the first aspect of the present invention, in a computer and an image forming apparatus, the image forming apparatus is provided with a security function for crime prevention, and the security function is provided. Means for indicating that the image forming apparatus can create the formed image, and means for canceling the transfer of information when the formed image cannot be created. Thus, only when the image forming apparatus has the security function, it is possible to perform the information transfer only to the image forming apparatus, and it is possible to prevent the leakage of information to the image forming apparatus which does not have the security function. Becomes

According to the second aspect of the present invention,
In a computer and an image forming apparatus, a means for confirming whether the image forming apparatus has a security function for the purpose of crime prevention at the time of image formation, a means for specifying the type of information to be transferred, and a case where the information to be transferred is an image. By providing a means for attaching security information for the purpose of crime prevention to the image, it becomes possible to add the security information to the information and transfer the information when the image forming apparatus does not have the security function. Even with an image forming apparatus having no function, the information to which the security information is added can be transferred and the information can be provided.

[Brief description of drawings]

FIG. 1 is a configuration diagram showing characteristics of a first embodiment.

FIG. 2 is a network environment used in this embodiment.

FIG. 3 is a schematic diagram of an overall configuration of an image forming apparatus.

FIG. 4 is a schematic configuration diagram of NIC and PDL units of the image forming apparatus.

FIG. 5 is a schematic configuration diagram of a core and a CMYK-IP unit of the image forming apparatus.

FIG. 6 is a UI diagram of a driver that operates the image forming apparatus and creates data.

FIG. 7 is an example of adding security information.

FIG. 8 is a flowchart showing the operation of the first embodiment.

FIG. 9 is a configuration diagram showing features of the second embodiment.

FIG. 10 is a flowchart showing the operation of the second embodiment.

   ─────────────────────────────────────────────────── ─── Continued front page    F term (reference) 5B021 AA01 BB01 BB04 BB09 CC05                       EE04                 5B057 CB19 CE08 CG07 CH14 CH18                 5C076 AA14 BA06                 5C077 LL14 PP23 PP66 PQ08                 5J104 AA12 AA13 AA14 PA07

Claims (2)

[Claims] 1. In an image forming apparatus connected to a computer or a plurality of computers and image forming apparatuses connected to a network, a means having a security function for crime prevention (a unique means for identifying the image forming apparatus) is provided. Means for providing information, means for embedding the unique information in a formed image during image formation, or, as another method, means for setting unique information of an administrator or a user in the image forming apparatus, and the unique information Means for holding, means for embedding the unique information in the formed image during image formation), means for notifying that the security function is provided (means for forming the formed image), and the image in the computer A means for confirming whether or not the forming apparatus can form the formed image, and a means for stopping transfer of information when the formed image cannot be formed As a result, the image forming apparatus and method having a security function is characterized in that information is transferred only when the image forming apparatus has the security function. 2. An image forming apparatus connected to a computer, or a plurality of computers and image forming apparatuses connected to a network, wherein the image forming apparatus has a security function for the purpose of crime prevention during image formation. By adding a means for confirming whether the image forming apparatus does not have a security function by adding security information for the purpose of crime prevention to the transfer data, the security information is added to the transfer data during data transfer. An image forming apparatus and method having a security function, which is characterized in that the data is transferred after being transferred.