JP2004015220A - Image processor, its control method, and image processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image processor for encrypting an ICC profile appropriately, its controlling method, and an image processing system. <P>SOLUTION: When a decision is made that a profile can be encrypted (S12), the profile is encrypted in units of blocks by a specified algorithm (S13, S14, S15). Consequently, an encrypted profile can be prevented from being encrypted again. The file size can be reduced furthermore by performing compression, as required. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an image processing apparatus that encrypts a profile for color matching, a control method thereof, and an image processing system.
[0002]
[Prior art]
2. Description of the Related Art In recent years, color printers that can perform color matching processing using a profile (ICC profile) proposed by an ICC (International Color Consortium) have become widespread. In such a printer, by performing a color matching process in accordance with the object to be drawn, optimal color reproduction is always possible.
[0003]
Here, the color matching technology means that image data is converted into a device-independent color space (device-independent color space) and a device-specific color space by using a profile in which color conversion characteristics according to devices constituting a printing system are filed. (Device-dependent color space) to realize optimal color reproduction in the device.
[0004]
[Problems to be solved by the invention]
The ICC profile required to realize the above-described color matching may be transferred to a remote place via a network such as the Internet. However, since the data structure of the ICC profile is open to the public, when it is used via a network or the like, there is a possibility that internal data or the like may be falsified, and there is anxiety about safe use. At the present time, there has been no optimal means to make the data itself non-readable.
[0005]
SUMMARY An advantage of some aspects of the invention is to provide an image processing apparatus that appropriately encrypts an ICC profile, a control method thereof, and an image processing system.
[0006]
[Means for Solving the Problems]
As one means for achieving the above object, the image processing apparatus of the present invention has the following configuration.
[0007]
That is, an image processing apparatus that encrypts a profile for color matching, a determination unit that determines whether the profile is encryptable, and a case where the profile is determined to be encryptable by the determination unit. And encryption means for encrypting the profile by a predetermined algorithm.
[0008]
Further, it is characterized by having a decrypting means for decrypting the profile encrypted by the encrypting means.
[0009]
Further, when the determination unit determines that encryption is possible, the compression unit performs a compression process on the profile. The encryption unit converts the profile compressed by the compression unit into a predetermined profile. It is characterized in that it is encrypted by an algorithm.
[0010]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.
[0011]
<First embodiment>
[System Configuration] FIG. 1 is a block diagram showing a schematic configuration of a printing system according to the present embodiment. As shown in FIG. 1, the system includes an image input unit 10, an image processing unit 20, and an image output unit 30, and a color conversion unit 21 in the image processing unit 20 refers to an ICC profile in a profile storage memory 22. Thus, color matching between the image input unit 10 and the image output unit 30 is performed.
[0012]
The image processing unit 20 includes a profile encryption processing unit 23 and a profile decryption processing unit 24, and performs encryption and decryption of a profile, which is a feature of the present embodiment. The ICC profile encrypted by the profile encryption unit 23 can be transmitted to a network via the communication unit 25. If the ICC profile received from the network 40 via the communication unit 25 is encrypted, the ICC profile is decrypted by the profile decryption unit 24 and then referred to by the color conversion unit 21.
[0013]
The above components in the image processing unit 20 are totally controlled by a control unit 26 including a CPU, a ROM, a RAM, and the like. Reference numeral 27 denotes a GUI unit, which performs settings related to data security (encryption and the like) in the present embodiment, which will be described later, under the control of the control unit 26.
[0014]
GUI screen FIG. 2 is a view showing an example of a display screen of the GUI 27 for setting color matching in the present system. The GUI controls ON / OFF of the color matching process. As shown in the figure, there are two setting items of the processing system in the input color space: an RGB input system and a CMYK input system. In each color space, a profile is specified, and an intent (intent) indicating a matching method is provided. ) Can be set. Further, since the profile of the output printer is related to the connected printer, it can be set appropriately in cooperation with the print mode and the like.
[0015]
In the GUI shown in the figure, when the cursor is over the “profile management” button 107, a pull-down menu is displayed, and any one of “RGB input”, “CMYK input”, and “printer setting” can be selected. When one of these items is selected, a "Profile Management" sheet shown in FIG. 3 is displayed.
[0016]
The ICC profile in the present embodiment is configured to be appropriately selected and registered from the profile storage memory 22. Available ICC profiles are displayed as a list 201 on a “profile management” sheet shown in FIG. ing. When a new profile is to be added, the “registration” button 202 on the “profile management” sheet is pressed after saving the ICC profile in the profile storage memory 22. Then, when the new ICC profile becomes available, the information is displayed in the list 201. To delete a registered profile, the user may select an ICC profile displayed in the list 201 and then press a “delete” button 203.
[0017]
In this embodiment, when setting the security of the ICC profile, the user selects the target ICC profile from the list 201 on the “profile management” sheet shown in FIG. 3 and then presses the “security setting” button 204. I do. As a result, a “security setting” sheet shown in the lower part of FIG. 3 is displayed, and it is possible to operate encryption and decryption of the file itself.
[0018]
[Encryption Processing] The encryption processing of the ICC profile in the present embodiment will be described below with reference to the flowchart shown in FIG.
[0019]
First, in step S11, a profile to be encrypted is read. Subsequently, in a step S12, it is determined whether or not the profile can be encrypted. By this determination processing, it is possible to avoid re-encrypting the already encrypted profile. As a specific determination method, data is sequentially read from the first byte of the portion to be inspected, and if the data has regularity, it is determined that the data is not encrypted. Otherwise, it is determined that the data is encrypted. I do.
[0020]
If encryption is possible, the process proceeds to step S13, where a general initialization process necessary for encryption is performed, and then, in step S14, a portion corresponding to encryption is cut out in block units. Then, in step S15, encryption is performed on a block-by-block basis to generate an encrypted block group. Here, the encryption method is not particularly limited, and any known encryption method can be applied. Then, in step S16, the profile is reconstructed using the encrypted block group generated in step S15.
[0021]
In order to save the encrypted ICC profile reconstructed in this way, in step S17, it is checked whether or not the read ICC profile itself can be overwritten, and the file itself can be overwritten. Only when this occurs, the profile is updated in step S18.
[0022]
As described above, in the present embodiment, the profile encryption processing is performed in block units according to the flowchart shown in FIG.
[0023]
In this embodiment, if it is determined at the start of printing that the set ICC profile has been encrypted, the decryption process is performed inside the system. Hereinafter, the decoding process in the present embodiment will be described with reference to the flowchart in FIG.
[0024]
First, in step S21, an ICC profile set for printing is read, and in step S22, it is determined whether the profile needs to be subjected to a decoding process. Specifically, the data is read sequentially from the first byte of the relevant portion of the inspection of the profile, and if the data has regularity, it is determined that it is not necessary to decrypt the data because the data is not encrypted. Is determined to be decrypted because it has been encrypted.
[0025]
If it is determined that decoding is necessary, a general initialization process necessary for decoding is performed in step S23, then the corresponding block is cut out in step S24, and the decoding process of each block is performed in step S25. I do.
[0026]
Then, in step S26, after reconstructing the profile using the decoded block, the ICC profile decoded in step S27 is set in the present system.
[0027]
Note that the ICC profile decrypted in the present embodiment is expanded only in the internal resources (work memory or the like) where the present system operates so as not to be referred to from the outside.
[0028]
As described above, according to the present embodiment, the ICC profile can be encrypted in block units. The ICC profile that has already been encrypted is controlled so as not to be encrypted again.
[0029]
<Second embodiment>
Hereinafter, a second embodiment according to the present invention will be described.
[0030]
The configuration of the printing system according to the second embodiment is the same as that of the above-described first embodiment, and a description thereof will not be repeated.
[0031]
GUI screen The GUI screen for setting the color matching in the second embodiment is the same as that in FIG. 2 of the first embodiment, and the processing items in the input color space include the RGB input system and the CMYK input system. Yes, it is possible to specify a profile in each color space and set an intent indicating a matching method. Further, since the profile of the output printer is related to the connected printer, it can be set appropriately in cooperation with the print mode and the like.
[0032]
In the GUI shown in the figure, when the cursor is over the “profile management” button 107, a pull-down menu is displayed, and any one of “RGB input”, “CMYK input”, and “printer setting” can be selected. When any one of these items is selected, a “profile management” sheet shown in FIG. 6 is displayed in the second embodiment.
[0033]
The ICC profile in the second embodiment is also configured to be appropriately selected and registered from the profile storage memory 22, and available ICC profiles are displayed as a list 501 on a “profile management” sheet shown in FIG. Is done. On the list 501, for the registered ICC profile, a "flag" item indicating a security setting state is further displayed in addition to the profile information and the update date. The second embodiment is characterized in that, for a profile that has already been encrypted, a mark indicating that encryption has been completed is displayed in this “flag” item.
[0034]
To add a new profile also in the second embodiment, after saving the ICC profile in the ICC profile storage directory, press the “register” button 502 on the “profile management” sheet. Then, when the new ICC profile becomes available, the information is displayed on the list 501. To delete a registered profile, the user may select an ICC profile displayed in the list 501 and then press a “delete” button 503.
[0035]
To set the security of the ICC profile, the user selects the target ICC profile from the list 501 on the “profile management” sheet shown in FIG. 6, and then presses the “security setting” button 504. Thereby, a “security setting” sheet shown in the lower part of FIG. 6 is displayed.
[0036]
The profile information 506 displayed on the “security setting” sheet has a “flag” item similar to the list 501 described above, and this item allows the user to easily determine whether or not the profile is already encrypted. Can be determined. Therefore, it is possible to reliably issue an instruction to encrypt or decrypt the profile.
[0037]
Note that an “edit profile information” button 507 is a button for instructing editing of an information portion or the like of a profile, and is used when performing a task such as adding a comment sentence along with a task such as encryption. Is done.
[0038]
[Encryption Processing] The encryption processing of the ICC profile in the second embodiment will be described below with reference to the flowchart shown in FIG.
[0039]
First, in step S31, a profile to be encrypted is read. Then, in step S32, the profile is searched for an encryption flag indicating whether encryption has been performed. Note that the flag information in the profile is used as the encryption flag.
[0040]
Then, the result of the determination is received in step S33, and it is determined whether encryption processing for the read profile is possible. In the present embodiment, that is, if the flag information indicates that encryption has been completed, it is determined that encryption is impossible. Thus, it is possible to avoid re-encrypting a profile that has already been encrypted.
[0041]
If the encryption is possible, the process proceeds to step S34, where a general initialization process necessary for the encryption is performed, and then, in step S35, the block of the portion corresponding to the encryption is cut out. Then, in step S36, encryption is performed in units of the blocks as appropriate to generate an encrypted block group. Here, the encryption method is not particularly limited, and any known encryption method can be applied.
[0042]
Then, in step S37, flag data indicating that encryption has been performed is embedded in the header information section of the profile, and in step S38, the profile is reconstructed using the group of encrypted blocks generated in step S15.
[0043]
In order to save the reconstructed encrypted ICC profile in this way, in step S39, it is checked whether the read ICC profile itself can be overwritten, and the file itself can be overwritten. Only when this occurs, the profile is updated in step S40.
[0044]
As described above, according to the second embodiment, by setting the encryption flag in the header of the ICC profile, it is possible to easily confirm whether or not the profile has been encrypted. Thus, more efficient encryption becomes possible.
[0045]
When an encrypted ICC profile is used for color matching in the second embodiment, it is easily determined whether or not the profile is a decryption target by checking an encryption flag in a header portion. Can be decoded as needed.
[0046]
<Third embodiment>
Hereinafter, a third embodiment according to the present invention will be described.
[0047]
The configuration of the printing system and the GUI in the third embodiment are the same as those in the above-described first embodiment, and a description thereof will not be repeated.
[0048]
The third embodiment is characterized in that a compression process is performed prior to encrypting an ICC profile in block units as in the first embodiment.
[0049]
[Encryption Processing] The encryption processing of the ICC profile in the third embodiment will be described below with reference to the flowchart shown in FIG.
[0050]
First, in step S111, a profile to be encrypted is read. Subsequently, in step S112, tag data to be encrypted is cut out, and in step S113, it is determined whether the corresponding data portion can be encrypted. As a specific determination method, data is sequentially read from the first byte of the portion to be inspected, and if the data has regularity, it is determined that the data is not encrypted. Otherwise, it is determined that the data is encrypted. I do.
[0051]
If the encryption is not possible, the process is immediately terminated. If the encryption is possible, the process proceeds to step S114 to determine whether or not the data portion is compressible. Here, the case where compression is possible is a case where target data has redundancy and compression efficiency can be expected. Therefore, if it is expected that the compression efficiency is low, it is determined that compression is impossible. If compression is impossible, the process proceeds to step S117. If compression is possible, the process proceeds to step S115 to perform compression processing. After performing file size adjustment processing in step S116 according to a change in data size due to compression, step S117 is performed. Proceed to.
[0052]
In step S117, general initialization processing required for encryption is performed, and then, in step S118, a portion corresponding to encryption is cut out in block units. Then, in step S119, encryption is performed on a block-by-block basis to generate an encrypted block group. Here, the encryption method is not particularly limited, and any known encryption method can be applied. Then, in step S120, the profile is reconstructed using the encrypted block group generated in step S119.
[0053]
In order to save the encrypted ICC profile reconstructed in this way, in step S121, it is checked whether or not the read ICC profile itself can be overwritten, and the file itself can be overwritten. Only when this occurs, the profile is updated in step S122.
[0054]
As described above, in the third embodiment, profile compression processing and encryption processing in block units are performed according to the flowchart shown in FIG.
[0055]
[Decoding Process] The decoding process in the third embodiment will be described below with reference to the flowchart in FIG.
[0056]
First, in step S211, an ICC profile set for printing is read, and in step S212, it is determined whether the profile needs to be subjected to a decoding process. Specifically, the data is read sequentially from the first byte of the relevant portion of the inspection of the profile, and if the data has regularity, it is determined that it is not necessary to decrypt the data because the data is not encrypted. Is determined to be decrypted because it has been encrypted.
[0057]
If it is determined that decoding is necessary, a general initialization process required for decoding is performed in step S213, then the corresponding block is cut out in step S214, and the decoding process of each block is performed in step S215. I do.
[0058]
Then, in step S216, it is determined whether or not the decoded profile is compressed data, that is, whether or not it is necessary to perform a decompression process. If the result of the determination is that there is no need for decompression processing, the flow proceeds to step S219. If it is necessary, the flow proceeds to step S217 to execute the decompression processing, and then the file size is adjusted in step S218.
[0059]
Then, in step S219, the profile is reconstructed using the uncompressed (decompressed) blocks, and the ICC profile decoded in step S220 is set in the present system.
[0060]
Note that the ICC profile decrypted in the third embodiment is expanded only in the internal resources (work memory or the like) where the present system operates so as not to be referred to from the outside.
[0061]
As described above, according to the third embodiment, since the ICC profile can be compressed and then encrypted in units of blocks, the final file size can be reduced, which is more suitable for transmission to a network. Encryption is possible.
[0062]
<Fourth embodiment>
Hereinafter, a fourth embodiment according to the present invention will be described.
[0063]
The configuration of the printing system and the GUI in the fourth embodiment are the same as those in the above-described second embodiment, and a description thereof will not be repeated.
[0064]
The fourth embodiment is characterized in that a compression process is performed prior to encrypting an ICC profile with reference to an encryption flag as in the second embodiment. That is, as shown in FIG. 6, for a profile that has already been encrypted, a mark indicating that encryption has been completed is displayed in the “flag” item. With the "flag" item, the user can easily determine whether or not the profile has been encrypted, and can surely give an instruction to encrypt or decrypt the profile.
[0065]
Encrypting Process Hereinafter, an ICC profile encrypting process according to the fourth embodiment will be described with reference to a flowchart shown in FIG.
[0066]
First, in step S311, a profile to be encrypted is read. Subsequently, in step S312, the profile is searched for an encryption flag indicating whether encryption has been performed. Note that the flag information in the profile is used as the encryption flag.
[0067]
Then, the result of the determination is received in step S313, and it is determined whether encryption processing for the read profile is possible. In the present embodiment, that is, if the flag information indicates that encryption has been completed, it is determined that encryption is impossible. Thus, it is possible to avoid re-encrypting a profile that has already been encrypted.
[0068]
If the encryption is possible, the process proceeds to step S314, where a general initialization process necessary for the encryption is performed, and then, in step S315, a block extraction process of a portion corresponding to the encryption is performed. Then, in step S316, encryption is performed on a per-block basis to generate an encrypted block group. Here, the encryption method is not particularly limited, and any known encryption method can be applied.
[0069]
Then, in step S317, compression processing is performed on the encrypted block group, and in step S318, the file size associated with the compression processing is adjusted.
[0070]
Then, in step S319, flag data indicating that encryption and compression have been performed is embedded in the header information section of the profile, and in step S320, the profile is reconstructed using the encrypted block group compressed in step S317.
[0071]
In order to save the encrypted ICC profile reconstructed in this way, in step S321, it is checked whether the read ICC profile itself can be overwritten, and the file itself can be overwritten. Only when this occurs, the profile is updated in step S322.
[0072]
As described above, according to the fourth embodiment, when an ICC profile is compressed and encrypted, by setting an encryption flag in the header portion, whether or not the profile is already encrypted is determined. Can be easily confirmed, so that more efficient encryption can be performed.
[0073]
When the encrypted ICC profile is used for color matching in the fourth embodiment, it is easily determined whether or not the profile is to be decrypted by checking the encryption flag in the header portion. Can be decoded as needed.
[0074]
<Other embodiments>
The present invention can be applied to a system including a plurality of devices (for example, a host computer, an interface device, a reader, a printer, etc.), but may be a device including one device (for example, a copying machine, a facsimile machine, etc.). May be applied.
Further, an object of the present invention is to provide a storage medium storing a program code of software for realizing the functions of the above-described embodiments to a system or an apparatus, and a computer (or CPU or MPU) of the system or apparatus to store the storage medium. Needless to say, this can also be achieved by reading out and executing the program code stored in the.
[0075]
In this case, the program code itself read from the storage medium realizes the function of the above-described embodiment, and the storage medium storing the program code constitutes the present invention.
[0076]
As a storage medium for supplying the program code, for example, a floppy (registered trademark) disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, magnetic tape, nonvolatile memory card, ROM, or the like is used. I can do it.
[0077]
When the computer executes the readout program code, not only the functions of the above-described embodiments are realized, but also an OS (Operating System) running on the computer based on the instruction of the program code. It goes without saying that a case where a part of the actual processing is performed and the function of the above-described embodiment is realized by the processing is also included.
[0078]
Further, after the program code read from the storage medium is written into a memory provided on a function expansion board inserted into the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that a CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing, and the processing realizes the functions of the above-described embodiments.
[0079]
【The invention's effect】
As described above, according to the present invention, it is possible to appropriately encrypt an ICC profile.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a schematic configuration of a printing system according to an embodiment.
FIG. 2 is a diagram illustrating an example of a GUI screen for performing color matching setting in the embodiment.
FIG. 3 is a diagram illustrating an example of a GUI screen for performing security setting of a profile according to the embodiment.
FIG. 4 is a flowchart illustrating an encryption process according to the embodiment.
FIG. 5 is a flowchart illustrating a decoding process according to the embodiment.
FIG. 6 is a diagram illustrating an example of a GUI screen for performing security setting of a profile according to the second embodiment.
FIG. 7 is a flowchart illustrating an encryption process according to the second embodiment.
FIG. 8 is a flowchart illustrating an encryption process according to the third embodiment.
FIG. 9 is a flowchart illustrating a decoding process according to the third embodiment.
FIG. 10 is a flowchart illustrating an encryption process according to a fourth embodiment.
[Explanation of symbols]
Reference Signs List 10 Image input unit 20 Image processing unit 21 Color conversion unit 22 Profile storage memory 23 Profile encryption unit 24 Profile decryption unit 25 Communication unit 26 Control unit 27 GUI unit 30 Image output unit 40 Network

Claims (17)

An image processing apparatus for encrypting a profile for color matching,
Determining means for determining whether or not the profile can be encrypted;
Encryption means for encrypting the profile by a predetermined algorithm when it is determined that the encryption is possible by the determination means;
An image processing apparatus comprising: 2. The image processing apparatus according to claim 1, wherein the determination unit determines that the data can be encrypted if the data to be encrypted has a regularity. The encryption unit sets an encryption flag indicating that encryption has been completed in the profile,
The image processing apparatus according to claim 1, wherein the determination unit determines that the profile cannot be encrypted if the encryption flag indicates that the profile has been encrypted. 2. The image processing apparatus according to claim 1, wherein the encrypting unit encrypts the profile in block units. Further, storage means for storing a plurality of profiles,
Selecting means for selecting a profile to be encrypted from the storage means;
The image processing apparatus according to claim 1, further comprising: 2. The image processing apparatus according to claim 1, further comprising a profile update unit that updates the profile stored in the storage unit by replacing the profile with the profile encrypted by the encryption unit. 2. The image processing apparatus according to claim 1, further comprising a transmission unit that transmits the profile encrypted by the encryption unit to an external device. 2. The image processing apparatus according to claim 1, further comprising a decryption unit that decrypts the profile encrypted by the encryption unit. Furthermore, it has decoding determination means for determining whether or not the profile should be decoded,
9. The image processing apparatus according to claim 8, wherein the decoding unit decodes the profile when the decoding determination unit determines that the profile should be decoded. Further, color matching means for performing color matching using the profile decoded by the decoding means,
Image output means for outputting image data after color matching by the color matching means,
9. The image processing apparatus according to claim 8, comprising: Further, when the determination unit determines that encryption is possible, a compression unit that performs a compression process on the profile,
8. The image processing apparatus according to claim 1, wherein the encrypting unit encrypts the profile compressed by the compressing unit using a predetermined algorithm. Further, decryption means for decrypting the profile encrypted in the encryption means,
Decompression means for decompressing the profile decrypted by the decryption means;
The image processing apparatus according to claim 11, comprising: An image processing apparatus comprising: an encryption unit that encrypts a profile for color matching using a predetermined algorithm. An image processing system in which a plurality of image processing apparatuses are connected via a network,
The first image processing device includes:
Determining means for determining whether or not the profile can be encrypted;
Encryption means for encrypting the profile by a predetermined algorithm when it is determined that the encryption is possible by the determination means;
Transmitting means for transmitting the profile encrypted by the encrypting means to the second image processing apparatus via the network,
The second image processing device includes:
Receiving means for receiving the encrypted profile transmitted from the transmitting means,
Decryption means for decrypting the encrypted profile;
An image processing system comprising: A method for controlling an image processing device that encrypts a profile for color matching,
A determining step of determining whether the profile is encryptable;
When it is determined that encryption is possible in the determination step, an encryption step of encrypting the profile by a predetermined algorithm,
A method for controlling an image processing apparatus, comprising: A non-transitory computer-readable storage medium storing a program that, when executed on a computer, causes the computer to operate as the image processing apparatus according to claim 1. A recording medium on which the program according to claim 16 is recorded.

Images