JP2004151897A - Job process control device and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system for executing processes on a document while transferring the document between a plurality of servers scattered over a network and to put a user's digital signature on the document output via the processes. <P>SOLUTION: A user inputs from a composite machine 10 the coordinated jobs of taking only the data of the head page at a server A22 from a scanned document, writing his/her signature on the resulting file of the head page, and sending the file from a server C26 to a predetermined destination. A coordinate process server 20 then sends to the composite machine 10 the file of the head page received from the server A22, before sending it to the server C26, and requests the user to write his/her digital signature. The composite machine 10 uses an IC card or the like inserted by the user to attach the digital signature to the file by use of the user's secret key and then sends the file to the coordinated process server 20. The coordinated process server 20 sends the file with the signature on it to the server C26 to send it to the predetermined destination. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a technology for cooperative service processing that realizes various cooperative processes by cooperating various services existing on a network, and particularly to a security technology in the cooperative service process.
[0002]
[Prior art]
Various services for office work by connecting a scanner, facsimile machine, printer, copier, and multifunction machine integrating those functions to a LAN (local area network) and linking it with an information processing device such as a personal computer or mail server. Has been proposed.
[0003]
In recent years, a technique for linking various web applications scattered on the Internet has been proposed. If one system can be configured by connecting application services provided by various providers on the Internet, various existing services can be used, and it is expected that system development costs can be significantly reduced. In addition, languages such as XML (extensible Markup Language) have attracted attention as a common base for realizing such cooperative services.
[0004]
Further, as a conventional workflow system, those shown in Patent Literature 1, Patent Literature 2, and Patent Literature 3 are known.
[0005]
[Patent Document 1]
JP 08-123744 A
[Patent Document 2]
JP 2002-096686 A
[Patent Document 3]
JP 2001-282970 A
[0006]
[Problems to be solved by the invention]
When a workflow is configured using a service on the Internet, a document to be processed or a processing result flows on the Internet. However, conventional workflow systems do not pay attention to the security of documents flowing through such networks.
[0007]
Further, in the case of such a system that realizes one process by linking various services, how to handle a user's electronic signature becomes a problem.
[0008]
For example, even if a user inputs a digital signature on a document input, if the digital signature is sent to a service on a network and processed, the document is decrypted for processing in an intermediate service. There is a problem that the electronic signature is lost, or the content of the document to be subjected to the electronic signature changes as a result of the processing, and the electronic signature attached first by the user becomes meaningless.
[0009]
In such a system, a document obtained by a service on a network during a series of services may be included in a final processing result document. However, a conventional system cannot apply a digital signature to a document that is not in the device operated by the user.
[0010]
The present invention has been made in view of such a problem, and in a system in which a plurality of devices cooperate to realize a series of processes, such as a workflow, a user wants to apply a digital signature to a document or a user as a service. An object of the present invention is to provide a mechanism for appropriately applying an electronic signature to data that requires a signature or a signature of a service issuing device.
[0011]
[Means for Solving the Problems]
In order to achieve the above object, the present invention provides a job processing control device that executes a service realized by coordinating job processing using a job processing device on a network. Deciding means for deciding whether or not to issue the electronic signature of the issuer; and, if the deciding means decides to perform the electronic signature, the processing target data to be subjected to the job processing for outputting the processing result of the service, A job processing control apparatus comprising: a signature unit that executes a process for applying a digital signature of a service issuer.
[0012]
In a preferred aspect of the present invention, the deciding unit decides according to an instruction of a user who instructs execution of the service.
[0013]
In another preferred aspect, the job processing control device includes instruction data input means for inputting instruction data describing service processing content from a service issuing device instructed to execute the service, and The means determines that an electronic signature is to be applied to the output result of the service when the instruction data input by the instruction data input means is digitally signed by the service issuer.
[0014]
In another preferred aspect, the job processing control device includes a processing target data input unit configured to input processing target data to be subjected to job processing for realizing the service from the service issuing device instructed to execute the service, The deciding means decides that an electronic signature is to be applied to an output result of the service when the processing target data input by the processing target data input means is provided with an electronic signature of a service issuer.
[0015]
In a preferred aspect of the present invention, the signature unit transmits the processing target data to a service issuing device to which a service has been issued, and receives a result of applying a digital signature of a service issuer to the processing target data. .
[0016]
In another preferred aspect, the signature unit transfers the data to be processed to a signature server on a network, and receives a result of applying a digital signature of a service issuer to the data to be processed.
[0017]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention (hereinafter, referred to as embodiments) will be described with reference to the drawings.
[0018]
FIG. 1 is a diagram showing a schematic configuration of a document processing system according to the present invention. In this example, the document processing system includes a multifunction peripheral A10, a multifunction peripheral B12, a cooperative processing server 20, a server A22, a server B24, and a server C26. Among these, the multifunction peripheral A10, the cooperative processing server 20, the server A22, the server B24, and the server C26 are connected to the same LAN (local area network), and the remaining multifunction peripheral B12 is connected to this LAN via the Internet 30. Have been.
[0019]
Among them, the multifunction peripheral A10 and the multifunction peripheral B12 are devices having functions such as a scanner, a printer, a copier, and a facsimile.
[0020]
The servers A22, B24, and C26 are servers that provide processing services for document data in the form of, for example, web application services. Each of these servers can execute one or more types of jobs (services). Note that the multifunction peripherals A10 and B12 can also be regarded as a type of server that provides a scan service, a print service, and the like.
[0021]
The cooperative processing server 20 realizes a cooperative service in which services provided by the respective multifunction devices and servers are cooperated by requesting the multifunction devices and servers to perform processing according to an appropriate processing flow.
[0022]
Each of these MFPs and each server has its own private key and public key in the public key cryptosystem. Each of the multifunction peripherals and each server holds a public key of another multifunction peripheral or a server, or a public key of another multifunction peripheral or a server on a network as required. (Omitted). When transmitting the document data to the other party, the document data is encrypted using the public key of the other party to protect the secret of the document data.
[0023]
Next, a detailed configuration of the MFP 10, the cooperative processing server 20, and the various servers 25 will be described with reference to FIG. Note that the MFP 10 corresponds to the MFPs A10 and B12 in FIG. 1, and the server 25 corresponds to the servers A22, B24, and C26 that provide various services illustrated in FIG.
[0024]
First, in the multifunction peripheral 10, a UI (user interface) 102 is a user interface mechanism that displays a state of the multifunction peripheral 10, an operation menu, and the like, and receives a user's selection and parameter input thereto. It has numeric key buttons and various control buttons (copy start button, etc.). The various processing modules 104 are function modules that realize a scan function, a print function, a copy function, a facsimile transmission / reception function, and the like. These processing modules 104 include hardware such as a scan engine, a print engine, and a facsimile machine, It is composed of a combination of software that controls the software. The communication control unit 106 is a functional module that performs various control processes for communication between the MFP 10 and other devices on the network 35 such as a LAN.
[0025]
The encryption / decryption processing unit 108 is a functional module that encrypts document data transmitted from the multifunction peripheral 10 to the network 35, and decrypts transmitted encrypted data. Here, the encryption / decryption processing unit 108 supports a public key encryption method. As an example of the encryption processing used by the encryption / decryption processing unit 108, target document data is encrypted using a session key (common key) generated by a random number or the like, and this session key is used as a public key of the transmission destination. A process of encrypting and transmitting both encrypted data to a destination can be cited. The receiving side obtains a session key by decrypting the received data with its own private key, and decrypts the encrypted document data with the session key. In the following description, the phrase "encrypt with a public key" means not only the case where the target data is literally encrypted with the public key but also the case where such a session key is used for the encryption processing. And
[0026]
Further, the encryption / decryption processing unit 108 has a function of applying an electronic signature to the document data to be transmitted and verifying the electronic signature attached to the received data. The electronic signature is obtained by encrypting a message digest obtained from document data to be signed according to a predetermined digest method such as MD5 (RFC1321) using a signer's private key. The verification of the electronic signature is performed by decrypting the signature data with the public key of the signer and determining whether or not the decryption result matches a message digest obtained from the document data to be signed according to a predetermined digest method. Is performed by If they match, it is proved that the document data is genuine data from the signer, and that the document data has not been tampered with.
[0027]
Here, the encryption / decryption processing unit 108 has a secret key of the multifunction peripheral 10 itself, and can perform an electronic signature of the multifunction peripheral 10.
[0028]
The token I / F (interface) 110 is a mechanism that accepts a hardware token held by a user and obtains an electronic signature using the private key of the user by communicating with the token. Here, the hardware token is a small authentication device carried by the user, and is obtained by encrypting the data to be signed with the storage chip for storing the user's private key data using the user's private key. An arithmetic circuit for generating signature data and an interface mechanism for inputting data to be signed and outputting signature data are provided. The hardware token is configured as, for example, an IC card, a device compatible with various wired interface standards such as USB (Universal Serial Bus), or a device compatible with various wireless interface standards such as Bluetooth.
[0029]
In this configuration, when it is necessary to perform a user's electronic signature on the document data, the communication control unit 106 creates a message digest of the document data according to a method such as MD5 and attaches the message digest to the token I / F 110. Enter the entered hardware token. The hardware token encrypts the input message digest with the user's private key, and returns the result of the encryption process (ie, the user's signature) to the communication control unit 106. When the communication control unit 106 adds the user signature to the document data, a digital signature of the user for the document data is obtained.
[0030]
In the above, the method of performing the user's electronic signature using the user's hardware token has been described. However, as another method, the user's secret key is stored in the multifunction peripheral 10 in advance, and the secret key is used. A method of performing a digital signature of the user by the same processing as described above is also possible. In this method, in order to protect the secret key of the user, it is necessary to control the user to input authentication information such as a password and biometrics, and to permit the electronic signature of the user only when the user authentication is successful. I do. In the case of a configuration using a hardware token, if a cooperative job requiring a user signature is performed, in the worst case, it is necessary to wait with the token set in the multifunction device 10 until the cooperative job is completed. Such a wait is not necessary in a configuration in which the secret key is stored in the private key. Conversely, the configuration using a hardware token has the advantage that the user can execute a cooperative job requiring a user signature from any multifunction peripheral or other device.
[0031]
Next, the configuration of the cooperation processing server 20 will be described.
[0032]
In the cooperative processing server 20, the user management unit 202 manages various types of information on the users to be serviced by the server 20. The information managed by the user management unit 202 includes, for example, authentication information (such as passwords and biometrics information) used for user authentication, and UI screen information registered by the user. That is, in the system according to the present embodiment, a user can define a cooperative job unique to a user by combining services provided by various server devices on the network 35, and can specify a cooperative job unique to the user. Is provided from the cooperative processing server 20. Note that the process of registering a cooperative job with the cooperative processing server 20 by the user and the information of each user-specific UI screen provided from the cooperative processing server 20 to the MFP 10 are not directly related to the gist of the present embodiment. Although the description is omitted, they are disclosed in Japanese Patent Application No. 2002-275229, Japanese Patent Application No. 2002-275230, and Japanese Patent Application No. 2002-275231 by the present applicant.
[0033]
The flow control unit 204 is a functional module that requests each server 25 or the MFP 10 to execute necessary processing in accordance with the flow specified in the cooperative job in order to realize the cooperative job requested by the user. In other words, a cooperative job is defined as a flow including one or more services (unit jobs) provided by each server 25 and each multifunction peripheral 10 (which can also be regarded as a type of server). The unit job indicated in the flow definition is sequentially requested to the corresponding server. Here, the processing result of each server is returned to the cooperative processing server 20 as necessary, and is transmitted from the cooperative processing server 20 to the corresponding server as processing target data of the next unit job. The flow control unit 204 executes processing such as processing requests to the respective servers and multifunction peripherals and obtaining processing results for the processing requests.
[0034]
The encryption / decryption processing unit 206 is a functional module that encrypts document data transmitted from the cooperative processing server 20 to the network 35 and decrypts transmitted encrypted data. It has the same encryption, decryption, digital signature, and verification functions as those of the decryption processing unit 108. In particular, with regard to the electronic signature function, the encryption / decryption processing unit 206 includes the secret key of the cooperative processing server 20 and can attach an electronic signature of the cooperative processing server 20 to data to be transmitted.
[0035]
The signature control unit 208 performs a control process for applying a digital signature of the user who issued the job to document data sent to each processing server 25 or the MFP 10 when the flow control unit 204 executes the cooperative job. Module. The signature control unit 208 determines whether or not the user has a will to perform a digital signature of the document output as a result of the cooperative job. Is controlled so that the user's signature is signed. The determination of the user's intention to sign is made based on the user's instruction content for the cooperative job. For example, when inputting a cooperative job execution instruction, the user gives an explicit instruction to perform his / her own electronic signature, or performs his / her own electronic signature on the document specified as the target of the cooperative job by the user. If there is such a case, or if the processing result includes a unit job that requires the user's electronic signature to be included in the cooperative job selected as the execution target, it is determined that the user's electronic signature is necessary. If it is determined that a user signature is necessary, the data is sent to the MFP 10 that issued the cooperative job before sending the data to be processed to the processing server 25 that outputs the document in the cooperative job. The multifunction peripheral 10 requests the digital signature of the user, and transmits the data with the user signature returned from the MFP 10 to the processing server 25.
[0036]
The output document of the cooperative job is not an interim result document used only during the execution process of the cooperative job, but a document used outside the cooperative job. Output documents in the cooperative job include, for example, a document transmitted by e-mail, a document registered in a document database, a document stored in a file system, a document uploaded to a storage location on a network, and the like.
[0037]
The communication control unit 212 is a functional module that performs various control processes for communication between the cooperative processing server 20 and another device on the network 35.
[0038]
The processing server 25 includes an application program 252 for executing a service provided by the server, a communication control unit for executing a control process for communication with another device on the network 35, and an encryption and communication unit for performing the communication. And an encryption / decryption processing unit 256 that executes a decryption process. The encryption / decryption processing unit 256 has the same function as the encryption / decryption processing unit 206 of the cooperation processing server 20.
[0039]
FIG. 3 shows a procedure of a process performed when a user inputs a cooperative job execution instruction in the document processing system.
[0040]
In this process, first, the user connects his / her hardware token to the multifunction peripheral 10 and inputs his / her user ID and password (S10). In response to this input operation, the communication control unit 106 of the MFP 10 creates authentication information obtained from the hardware token or authentication request data including the user ID and password, and cooperates with the encryption / decryption processing unit 108. The data is encrypted with the public key of the processing server 20 and transmitted to the cooperation processing server 20 (S12). In order to realize this transmission, address information of the cooperative processing server 20 that provides the cooperative job control service to the multifunction device 10 is registered in the multifunction device 10 in advance.
[0041]
Upon receiving the authentication request, the cooperative processing server 20 decrypts the request data and performs a known user authentication process using the authentication information included in the request. If the user authentication is successful, the UI screen information of the user is extracted from the user management unit 202, and is encrypted by the encryption / decryption processing unit 206 with the public key of the MFP 10 that issued the authentication request. The transmission data including the converted UI screen information is transmitted to the MFP 10 (S20).
[0042]
The MFP 10 that has received the encrypted UI screen information forms a UI screen for the user according to the information and displays the UI screen on the screen of the UI 102 (S14). Here, the UI screen information provided from the cooperative processing server 20 to the multifunction peripheral 10 can be described in, for example, XML, and the UI 102 of the multifunction peripheral 10 interprets the XML description to configure the UI screen. This UI screen can be configured using GUI (graphical user interface) components. In this case, the UI screen includes, for example, an icon for selecting a cooperative job registered by the user in advance, an input field for inputting a processing parameter of the selected cooperative job, and the like.
[0043]
It is preferable that the UI screen for selecting a cooperative job registered by the user in advance displays information indicating whether each cooperative job requires the user's electronic signature. Since the definition information indicating what unit job each registration cooperation job is composed of is registered in the user management unit 202, the user management unit 202 checks the user signature of each unit job included in the definition information. By examining the necessity in the signature necessity table 210, it can be determined whether or not a user signature is necessary for the cooperative job. If at least one of the unit jobs constituting the cooperative job requires a user signature, it may be determined that the cooperative job requires a user signature. By incorporating the result of such determination into the UI screen and displaying it, it is possible to inform the user whether or not each cooperative job requires a user signature. This display allows the user to know whether or not each cooperative job requires a user signature. If the user wants to execute a cooperative job that requires a user signature, the user can connect a hardware token to the multifunction peripheral 10 or the like. Ready.
[0044]
The UI 102 receives a user's selection instruction or input of a value on the displayed UI screen (S16). The content of the cooperative job that the user wants to execute is specified by the selection instruction and the input of the value. The multifunction peripheral 10 creates instruction data reflecting the contents of the input from the UI 102, encrypts the instruction data with the public key of the cooperation processing server 20 by the encryption / decryption processing unit 108, and executes the encrypted instruction. The transmission data including the data is transmitted to the cooperation processing server 20 (S18). This instruction data defines the contents of the cooperative job. In the instruction sheet, processing contents of a service realized by linking jobs are described. The instruction book may be stored in the instruction server in advance, and may be downloaded as needed.
[0045]
In the present embodiment, when a user inputs a cooperative job instruction from the UI 102, it is possible to instruct whether or not to perform an electronic signature of the user on an output document of the cooperative job.
[0046]
In the present embodiment, a document to be processed by a cooperative job can be read from the scanner of the MFP 10. In this case, in step S18, the data of the document read as a processing target is added to the instruction data, and both of them are encrypted with the public key of the cooperative processing server 20, and then transmitted to the cooperative processing server 20. I do.
[0047]
Here, in the present embodiment, a user's digital signature can be attached to a document read from the scanner of the MFP 10 by inputting an instruction from the UI 102. When the instruction is input, the document read from the scanner is digitally signed by the user using the hardware token connected to the token I / F 110, and the document with the digital signature is subjected to the cooperative processing. It will be sent to the server 20.
[0048]
The cooperative processing server 20 that has received the encrypted instruction data (which may include a document to be processed) transmitted from the multifunction machine 10 decrypts the data, and transfers the obtained instruction data to flow control. The execution is passed to the module 204 and the execution of the cooperative job is started (S22).
[0049]
In the example of FIG. 3, the information on the UI screen for the user is provided to the multifunction device 10 from the cooperative processing server 20 at one time, but instead, in response to the input from the multifunction device 10, Of course, a configuration in which each UI screen for the user is provided in stages from the cooperative processing server 20 may be used.
[0050]
If the user authentication in the cooperative processing server 20 has failed, notification data indicating that the authentication has failed is returned from the cooperative processing server 20 to the requesting multifunction peripheral 10, and the multifunction peripheral 10 displays an error notification according to the notification data. Is performed.
[0051]
FIG. 4 is a diagram illustrating an example of the data structure of the instruction data 300 for the cooperative job execution instruction created by the multifunction peripheral 10 in response to the user's instruction.
[0052]
In this example, the instruction data 300 includes a service providing server definition 302, a user signature designation 303, and definitions 304 and 306 of unit jobs executed by each server. The unit job definitions 304 and 306 are arranged in an order according to the execution order of each unit job.
[0053]
The service providing server definition 302 is information indicating the correspondence between the server name of each server 25 that provides the service of each unit job constituting the cooperative job and its URL.
[0054]
The user signature designation 303 is information indicating whether or not the user who has instructed the cooperative job has issued an instruction to perform an electronic signature of the user on an output document. The value of the designation 303 is set based on whether or not an instruction to perform a digital signature of the user on the output document from the UI 102 is issued.
[0055]
In a single cooperative job, a plurality of documents may be output, for example, when the same document is transmitted by e-mail and stored in a file system. In such a case, it is preferable that whether or not a user signature is to be performed on an output document can be specified for each individual output. In this case, the designation 303 of the user signature records whether or not the user has designated the electronic signature for each output.
[0056]
When individually setting the presence / absence of a user's digital signature for each document output in one cooperative job, instead of collectively describing the setting information as a user signature designation 303, the following method is also possible. It is. That is, before describing a unit job (e-mail transmission, file storage, etc.) for outputting a document with a user's digital signature, a job for performing a user's digital signature on the document is described in the instruction sheet. It is a method of doing. The job for applying the user's digital signature is executed by the cooperation processing server 20.
[0057]
The unit job definitions 304 and 306 are definition data indicating the contents of each unit job. For example, a server name of a server that executes the unit job and a method name for designating the unit job for the server (That is, a unit job is specified by designating a server and a method), and a processing parameter given to the method. The processing parameters include, for example, the name of the file to be processed by the method, the file name to be assigned to the processing result of the method, the transmission destination (in the case of an e-mail transmission job) of the processing result, and the storage destination (file storage). Job).
[0058]
Among these parameters, the file name of the processing target document and the file name of the processing result document can be used to define the flow when the processing target is transferred between the unit jobs constituting the cooperative job. . That is, if the same file name as the file name of the processing result document of a certain unit job A is set as the file name of the processing target document of the unit job B to be executed thereafter, the unit job B becomes the processing result of the unit job A. The processing flow can be defined so that the processing is performed on the.
[0059]
In addition, the processing parameters include, for example, an enlargement / reduction ratio when an image is enlarged / reduced, and a target resolution when resolution conversion is performed.
[0060]
The instruction data 300 can be described in, for example, XML. If each device such as a server and a multifunction device constituting the document processing system is compatible with XML, it is possible to request each device to perform processing by using an instruction written in XML.
[0061]
In addition, if the data of the UI screen provided from the cooperative processing server 20 to the multifunction device 10 includes a template of the definition data of the cooperative job that can be selected by the user, the multifunction device 10 By setting various input processing parameters, the instruction data 300 can be created.
[0062]
FIG. 5 is a flowchart showing a procedure of a cooperative job control process performed by the cooperative processing server 20 that has received such instruction data (and accompanying document data to be processed (if any)).
[0063]
In this process, when the cooperative job starts, the flow control unit 204 first extracts the definition of the unit job at the head of the instruction (S30), and determines whether the unit job is a job for outputting a document with a user signature. Is determined (S32). In this determination, for example, it is determined from the definition of the unit job whether or not the job is a job for outputting a document. Further, the user signature designation 303 in the instruction data 300 and the processing target document received together with the instruction are Based on whether or not the user's digital signature has been given, it is determined whether or not the output target document to be passed to the job needs the user's digital signature. For this determination, the cooperative processing server 20 holds information on the criteria for determining whether each unit job is a job for outputting a document.
[0064]
If it is determined in this determination that the user signature is not required to execute the unit job, the flow control unit 204 creates an instruction to instruct the execution of the unit job, and adds the instruction to the instruction of the unit job. The document to be processed is transmitted to the request destination server (S50). At this time, the instruction to be transmitted and the document to be processed are encrypted with the public key of the request destination server. If the content of the requested unit job is, for example, the retrieval of a document from the database or the like, there is no document to be transmitted from the cooperative processing server 20, and in this case, only the instruction is transmitted.
[0065]
FIG. 6 shows an example of the data structure of an instruction for transmitting a unit job execution request transmitted from the cooperative processing server 20 to each server 25. The instruction 400 of the unit job request is created based on the definition of the unit job in the instruction 300 of the entire cooperative job, and includes a processing method name 402 indicated in the definition and a processing parameter 404 of the method. Further, address information of the cooperative processing server 20 (and identification information indicating the cooperative job, if necessary) is added to the instruction form 400 as return destination information 406 for returning a processing result of the unit job. As the request destination information, the processing result data is returned to the destination indicated in the return destination information 406. The processing result returned from the request destination server to the cooperative processing server 20 may be merely status information such as success or failure of the unit job, or a result obtained by performing the unit job processing on a document given as a processing target. It may include data of the generated processing result document. The former corresponds to a processing result for a unit job such as e-mail transmission and document storage, and the latter corresponds to a processing result for a unit job such as OCR and image rotation.
[0066]
Here, for example, in the example of FIG. 1 and FIG. 3, the server B is "page-separated", the first page is taken out, and the image of the first page is "rotated" by 90 degrees. There may be a case where a plurality of unit jobs are continuously performed by the server. As one method of realizing this, the cooperative processing server 20 first sends a request for “page release” to the server B, receives the data of the first page from the server B, and processes the data of the first page. A method of requesting “rotation” to the server B as an object is possible. In this case, the instruction sent to the server B may have the data configuration of FIG. However, this method has a problem that the amount of data communication between the cooperative processing server 20 and the server B increases.
[0067]
Therefore, in such a case, there is the following method as a method for reducing the amount of data communication between the cooperation processing server 20 and the request destination server. In other words, when a plurality of unit jobs are to be continuously executed on the same server, a method is specified in which the plurality of unit jobs and their flows are defined and sent to the request destination server. In this case, the instruction form arranges a set of the processing method 402 indicating the unit job to be executed by the request destination and the processing parameter 404 according to the execution order of each unit job in order, and adds the reply destination information 408 to this. It becomes.
[0068]
When the execution of a series of unit jobs is collectively instructed by one instruction as described above, in the determination of the necessity of the user signature in step S32, at least one of the series of unit jobs requiring a user signature is required. If there is, it is only necessary to determine that the request destination requires a user signature for processing.
[0069]
When the instruction written in this way (and the document to be processed, if any) is transmitted to the request destination server, the flow control unit 204 waits for the processing result of the request based on the instruction. When the processing result is received from the request destination server (S52), the processing result is recognized. If the processing result includes a processing result document that is a result of processing the processing target document, the processing result document is later processed. Is stored for use as a processing target of the unit job. Then, the flow control unit 204 checks whether or not the processing has been completed up to the last unit job indicated in the coordination job instruction 300 (S54). If the processing has not been completed, the flow returns to step S30, and the flow returns to step S30. Process the first unit job.
[0070]
In step S32, the digital signature of the user who issued the cooperative job is required for the output target document to be transmitted to the request destination server for the unit job to be executed next (or at least one of a series of unit jobs). When the signature control unit 208 determines that the document is to be transmitted, the signature control unit 208 causes the encryption / decryption processing unit 206 to encrypt the output target document to be transmitted to the request destination server using the public key of the MFP 10 (S34). A request is made to the user for an electronic signature for the transmission data (S36). This request includes an instruction for instructing the user's electronic signature and document data to be signed.
[0071]
The MFP 10 that has received the signature request decrypts the encrypted document data contained therein with its own private key. Then, it is determined whether or not the user's hardware token is set in the token I / F 110 (S40). If the hardware token is set, a message digest of the plaintext transmission data obtained by decryption is created, and Enter the hardware token to create the user's digital signature. Then, by adding the digital signature obtained as a result to the plain text transmission data, the transmission data with the user signature is created, encrypted with the public key of the cooperation processing server 20, and transmitted to the cooperation processing server 20. (S44).
[0072]
If it is determined in step S40 that a hardware token is not connected to the token I / F 110, the multifunction peripheral 10 displays a message indicating that a hardware token needs to be connected on the screen of the UI 102 (S42). Prompts the user for a token connection. In the case where the user's secret key is stored in the multifunction peripheral 10, the processes in steps S40 and S42 are unnecessary.
[0073]
When the transmission data with the user's digital signature is received from the multifunction peripheral 10 in this way, the cooperative processing server 20 transmits the data to the request destination server, requests the processing (S50), and waits for the processing result (S52). ).
[0074]
The cooperative processing server 20 repeats the above processing until the processing of the last unit job indicated in the entire cooperative job instruction received from the multifunction peripheral 10 is completed (S54).
[0075]
According to the above processing, when the request destination server executes a unit job for outputting a document determined to be subjected to a user signature, the user's electronic signature can be attached to the document. An electronic signature can be applied to the output document in response to the instruction of the electronic signature.
[0076]
Next, a specific example of the flow of document processing in the above-described document processing system will be described with reference to FIG. In this figure, it is assumed that the server 22 can execute a unit job of extracting a page or a page group specified by an instruction from a document including a plurality of pages. The server 26 can execute a unit job for transmitting a received document by e-mail to a destination specified by the instruction, and a unit job for storing the received document in a directory specified by the instruction. I do.
[0077]
In response to such a system, a user reads a multi-page paper report from the multi-function peripheral 10 using the multi-function peripheral 10, extracts only the first page from the multi-page document data obtained as a result of the reading by the server 22, Send only the first page of the report to the boss by e-mail, send the data of the entire report to a colleague by e-mail, and store the data of the entire report in a predetermined directory in the file system. " It is assumed that an instruction has been given. Then, at the time of this execution instruction, it is assumed that the user gives an instruction to apply a digital signature of the user to a document to be transmitted by e-mail to the boss and the colleague. In this case, the following processing is performed in the system of FIG. In this system, as described above, data transmitted between the multifunction peripheral and each server is assumed to be encrypted by the public key of the transmission destination, and in the following description, to avoid complexity, A description of such encryption and the corresponding decryption processing will be omitted.
[0078]
(1) The multifunction peripheral 10 transmits an instruction indicating the contents of the instruction to the cooperative processing server 20, and further reads a report read by the scanner of the multifunction peripheral 10 as a document to be processed by the instruction. The resulting file is sent.
[0079]
(2) The cooperative processing server 20 detects the unit job of extracting the first page from the cooperative job instruction, creates an instruction indicating the job in response to the unit job, and, together with the report reading result file, generates the instruction. Send to
[0080]
(3) The server 22 extracts the data of the first page from the file according to the received instruction, and returns it to the cooperative processing server 20 as one file.
[0081]
(4) The cooperative processing server 20 transmits an e-mail including the file of the first page to the supervisor (the instruction describes the e-mail address of the supervisor) from the cooperative job instruction. Is detected. Here, the cooperative processing server 20 can determine from the information such as the designation 303 of the user signature that the unit job is a job instructed to perform its own digital signature on the document. Therefore, the cooperative processing server 20 transmits to the multifunction peripheral 10 the file of the first page and an instruction describing an instruction to perform a user's electronic signature on this file.
[0082]
(5) The multifunction peripheral 10 applies the user's digital signature to the transmitted first page file according to the instruction, and returns the digitally signed first page file to the cooperation processing server 20.
[0083]
(6) Upon receiving the digitally signed first page file from the multifunction peripheral 10, the cooperative processing server 20 creates an instruction to transmit the file to the address of the user's boss, and sends the instruction to the server together with the signed file. 26.
[0084]
In accordance with the instruction, the server 26 creates an e-mail attached with the signed file, and transmits the e-mail to the designated supervisor's address.
[0085]
(7) The cooperative processing server 20 transmits an e-mail including a report reading result file to a colleague (the colleague's e-mail address is described in the instruction) from the cooperative job instruction. Is detected. Here, since the cooperative processing server 20 can determine that it is necessary to apply the user's electronic signature to the document output by this unit job, the report reading result file and the user's electronic signature Is transmitted to the multi-function device 10.
[0086]
(8) The multifunction peripheral 10 applies the user's digital signature to the transmitted file in accordance with the instruction, and returns the file with the digital signature to the cooperative processing server 20.
[0087]
(9) Upon receiving the digitally signed file from the MFP 10, the coordination processing server 20 creates an instruction to transmit the file to the address of the user's colleague, and transmits this to the server 26 together with the signed file. .
[0088]
In accordance with the instruction, the server 26 creates an e-mail attached with the signed file and sends it to the designated colleague's address.
[0089]
(10) The cooperative processing server 20 detects a unit job indicating that the file of the report reading result is stored in a predetermined directory from the cooperative job instruction sheet. Although this unit job is a job for outputting a document, it is not specified that a user signature is to be applied, so that processing for the user signature is not performed. The cooperative processing server 20 creates an instruction indicating the storage job, and transmits this to the server 26 together with the report reading result file. The server 26 receiving this stores the file of the report reading result in the designated directory according to the instruction. It is also possible to provide the job processing unit for performing the storage processing in the cooperative processing server 20, perform processing for storage in the cooperative processing server 20, and accumulate the data in the server 26.
[0090]
In the above description, the flow in the case where the user has specified that the user performs the digital signature on the output document when instructing the execution of the cooperative job has been described. On the other hand, a case is also conceivable in which the user applies the user's digital signature to the report reading result itself in the multifunction peripheral 10 and transmits the digital signature to the cooperation processing server 20 as a processing target of the cooperation job. In such a case, when the cooperative processing server 20 detects the user's own digital signature applied to the file to be processed, the cooperative processing server 20 determines that the user's electronic signature should be applied to the output document of the cooperative job, and An output document is sent to the multifunction peripheral 10 before a unit job to be output, and a user signature is performed.
[0091]
The preferred embodiment of the present invention has been described above. According to the present embodiment, in a document processing system in which a series of processing is executed via various servers, a user wants to output a document to which a personal signature is applied after appropriately applying the personal signature. can do.
In the above description, the document to be processed is read from the MFP 10 for inputting the cooperative job execution instruction. In addition, in the process of the cooperative job, the document held by any one of the servers is acquired, and this is processed. In some cases, the subsequent processing may proceed. In this embodiment, even in such a case, if the user gives an instruction to apply his / her own digital signature to the output document at the time of the execution of the cooperative job, the user performs the above-described procedure on the output document by the user. An electronic signature is given.
[0092]
In the above description, the configuration has been described in the case where the user wants to attach an electronic signature to an output document and output it, and instruct the user to do so. In addition to this, it is possible to assume a case where it is necessary to add a user's digital signature to an output document of the job as a property of the job itself. For example, it is assumed that a certain company has adopted a policy of attaching an electronic signature of the user who created the order form to order form data in order to prevent tampering and abuse. A modification of the document processing system that can cope with such a case will be described below.
[0093]
The outline of the system of this modified example may be the same as the configuration shown in FIG. However, in this modified example, a signature necessity table indicating whether or not each unit job requires the user's digital signature for the processing result as shown in FIG. In this example, the order form creation job by the server D is set to require a user signature for the processing result document (order form).
[0094]
FIG. 9 is a diagram showing the procedure of the coordination process in this system. The processing shown in FIG. 9 is inserted between steps S52 and S54 of the cooperation processing shown in FIG.
[0095]
In this procedure, upon receiving the processing result of the unit job from the processing request destination (step S52; see FIG. 5), the cooperative processing server 20 determines whether the unit job requires a user signature for the processing result document. The determination is made with reference to the rejection table 210 (S60). If it is determined that the processing result document requires a user signature, the cooperative processing server 20 encrypts the processing result document with the public key of the MFP 10 that issued the cooperative job (S62) and applies the user signature. Is transmitted to the multifunction peripheral 10 together with the instruction (S64).
[0096]
The MFP 10 that has received the signature request decrypts the encrypted processing result document included in the MFP 10 with its own private key. Then, it is determined whether or not the user's hardware token is set in the token I / F 110 (S70). If the hardware token is set, the user's electronic signature is created for this hardware token, and the result is obtained. The digital signature added to the processing result document is encrypted with the public key of the cooperation processing server 20, and transmitted to the cooperation processing server 20 (S74). If the hardware token is not connected to the token I / F 110 in step S70, the multifunction peripheral 10 prompts the user to connect the hardware token (S72).
[0097]
When the processing result document with the user signature is received from the MFP 10 in this way, the cooperative processing server 20 designates the processing result document as the processing result of the unit job (that is, the file name of the processing result file of the unit job). The file is saved (with a file name) (S66) and is used for a subsequent unit job.
[0098]
According to this processing, when it is necessary to apply a user signature to the processing result of the request destination, this can be realized. FIG. 10 is a diagram for explaining a specific example of this processing. The document processing system shown in FIG. 10 includes a multifunction peripheral 10, a cooperative processing server 20, an OCR server 41, an order form creation server 43, and a mail server 47. Among these, it is assumed that a user signature is required only for a document (order sheet) created by the order form creation process of the order form creation server 43, and that no other user signature is required in other situations.
[0099]
In such a configuration, the MFP 10 reads the quote printed on paper with the MFP 10, recognizes the read result with the OCR server 41, and obtains data such as the product and price obtained from the character recognition result. FIG. 10 shows a process performed when a coordinating job execution instruction of “create order data in the order form creation server 43 based on the order form, and transmit the order form data to the order destination by e-mail from the mail server 47” is issued. This will be described with reference to FIG.
[0100]
(1) The image data (document to be processed) of the estimate read by the MFP 10 and the instruction defining the above-described cooperation job are transmitted from the MFP 10 to the cooperation processing server 20.
[0101]
(2) The cooperative processing server 20 creates an instruction to instruct the OCR process, and sends the instruction and the image data of the estimate to the OCR server 41.
[0102]
(3) The OCR server 41 performs character recognition on the quote image in accordance with the instruction, and returns the resulting text file to the cooperation processing server 20.
[0103]
(4) The cooperative processing server 20 creates an instruction to instruct creation of the order, and sends the instruction and a text file of character information of the quote to the order creation server 43.
[0104]
(5) The order form creation server 43 creates an order form file from the information of the text file according to the instruction, and returns this to the cooperation processing server 20.
[0105]
(6) Since the cooperative processing server 20 knows that the user's electronic signature is necessary for the order form resulting from the order form creation processing, the coordination processing server 20 instructs the user to sign the order form. And sends the instruction to the multifunction device 10 together with the order.
[0106]
(7) The MFP 10 applies the user's digital signature to the order form, which is the document to be processed, according to the instruction, and returns the order form with the user signature to the cooperative processing server 20.
[0107]
(8) The coordination processing server 20 creates an instruction to send an order mail with the user-signed order as an attached document to a predetermined order destination e-mail address, and stores the instruction and the user-signed order. Send it to the mail server 47. The mail server 47 that has received the instruction forms an order mail in accordance with the instruction and transmits it to the specified destination. As a result, the order form data sent to the order destination is signed by the user who issued the order form, and the order destination can verify this.
[0108]
As described above, in the present embodiment, when a document of a processing result of a job forming a cooperative job requires a user signature, the cooperative processing server 20 sends the processing result document to the multifunction peripheral 10 that is the input source of the cooperative job. A user signature can be applied to the processing result document.
[0109]
Further, in the above embodiment, the digital signature of the user who issued the cooperative job was performed by the MFP 10 where the user instructed the execution of the cooperative job. This is a system assuming that a digital signature is performed using a hardware token of a user or a secret key built in the multifunction peripheral 10. However, as another system configuration, a configuration in which a signature server 50 is provided on a network as shown in FIG. 11 is also possible. The system configuration in FIG. 11 is the same as the configuration in FIG. 1 except for the signature server 50.
[0110]
In this configuration, the signature server 50 provides a signature service that stores a user's private key and performs an electronic signature using the user's private key in response to a signature request from outside. When a user signature is required for an output document, the cooperative processing server 20 sends data to be signed to the signature server 50 and requests a user signature instead of the MFP 10 in the above embodiment.
[0111]
In this case, there is a problem if an electronic signature of the user can be attached according to an instruction from a person other than the user. Therefore, the signature server 50 performs the user authentication and then performs the electronic signature of the user. . The user authentication is, for example, such that when requesting a user signature, the authentication information input by the user from the MFP 10 is encrypted by the cooperative processing server 20 using the public key of the signature server 50 and transmitted to the signature server 50. Can be done in the procedure.
[0112]
As another method, an instruction of a signature request to the signature server 50 and a document to be signed are once sent from the cooperative processing server 20 to the multifunction peripheral 10 to allow the user to perform a simple electronic signature. A method of sending an instruction and a document to be signed to which a typical electronic signature has been given to the signature server 50 is conceivable. In this case, the signature server 50 checks the legitimacy of the user and the non-falsification of the document with the simple digital signature, and then applies the formal digital signature of the user to the document. In this method, for example, the MFP 10 stores an in-house user secret key issued by an in-house certificate authority, and the signature server 50 stores an official user secret key issued by a more publicly-trusted certificate authority. When the key is stored and a public user signature is required, it is conceivable to use the signature server 50 to request a signature in the above procedure.
[0113]
In such a system configuration using the signature server 50, the user can execute a cooperative job requiring a user signature from any multifunction device on the system, and the user can use the multifunction device until the cooperative job is completed. By the way, both advantages of not having to wait can be obtained.
[0114]
In this case, in addition to the configuration in which the user's private key is permanently stored in the signature server 50, if necessary, the user sends the user to the signature server 50 via the network for a necessary period. A configuration is also possible in which storage of the private key and request for a user signature on behalf of the private key are performed. In this case, the secret key and the request data transmitted from the user to the signature server 50 are secured by encryption or the like. For example, when the user wants to use this system from a business trip destination, the user sends the secret key stored in the multifunction device 10 in his office to the signature server 50 and requests a signature service during the business trip period. Usage is conceivable. By limiting the period during which the signature server 50 substitutes for a user's signature, the possibility of signature abuse can be reduced.
[0115]
In the above embodiment, execution of a cooperative job is controlled by one cooperative processing server 20, but as shown in FIG. 12, a plurality of cooperative processing servers 20-1 and 20-2 cooperate to execute one cooperative job. It can also be achieved. In the example of FIG. 12, the cooperative processing server 20-1 controls the multifunction machine 10, the servers 22, 24 and 26, and the cooperative processing server 20-2 controls the multifunction machine 12, the servers 28 and 29. . When the user instructs the cooperative processing server 20-1 to execute a cooperative job from the multifunction peripheral 10, the cooperative processing server 20-1 copies the unit job of the coordination job instruction from the top as described in the above embodiment. Request the corresponding server in order. Then, in this flow, when a series of unit jobs executed by the MFP 12, the servers 28 and 29 controlled by the cooperation processing server 20-2 is found, the series of unit jobs is set as a partial cooperation job, and the execution is performed. An instruction to instruct is created, transmitted to the cooperative processing server 20-2, and the processing is requested. The instruction sent to the cooperative processing server 20-2 includes the information of the designation 303 of the user signature (or a part related to the cooperative processing server 20-2). In such a configuration, when the cooperative processing server 20-2 determines that the document output from the servers 28 and 29 and the multifunction peripheral 12 requires a user signature, the cooperative processing server 20-2 transmits the multifunction of the cooperative job issue source. Requests a digital signature of the user to the device 10. For this purpose, information indicating the multifunction peripheral 10 that issued the cooperative job may be incorporated into an instruction or the like of a partial cooperative job sent from the cooperative processing server 20-1 to the cooperative processing server 20-2. When a user signature is required, the cooperative processing server 20-2 issues a user signature acquisition request to the cooperative processing server 20-1, and in response to this request, the cooperative processing server 20-1 specifies the cooperative job issuer. A configuration for requesting the copying machine 10 to add a user signature is also possible.
[0116]
When the cooperation between such cooperation processing servers is extended, a system configuration as shown in FIG. 13 is also conceivable. This system configuration includes the multifunction peripheral 10 and a plurality of servers 62, 64, 66, and 68. Each of the servers 62 to 68 interprets an instruction input from another server or a multifunction peripheral, and sequentially starts from the unit job at the head of the instruction until the own device detects a unit job that is not designated to be in charge of processing. Are sequentially processed. Whether the own device is in charge of processing can be known from the description of the request destination server name indicated in the processing parameter of each unit job. Then, when the processing is completed, each of the servers 62 to 68 updates the instruction by deleting the description of the unit job processed this time from the instruction and updates the instruction of the unit job at the head of the updated instruction. The updated instructions and the document resulting from the processing are transmitted to the designated servers 62 to 68 to request processing. The processing result document transmitted here is a processing target in the next server 62 to 68. A series of cooperative jobs is realized by cooperating the processing requests based on the instruction form between the servers. Here, the server 62 is a server serving as a contact point of the cooperative job service for the multifunction peripheral 10, and provides the multifunction peripheral 10 with UI screen information for cooperative job instruction. FIG. 13 illustrates an example in which a processing request is issued from the multifunction peripheral 10 in the order of the servers 62, 64, 66, and 68, and a cooperative job is realized.
[0117]
In such a system, each of the servers 62 to 68 requests the next processing from the designation 303 of the user signature (or the description of the unit job indicating the same information) indicated in the instruction of the cooperative job. It is determined whether or not the user's electronic signature is required for the output target document to be sent to the MFP. If it is determined that the user's electronic signature is necessary, the output target document to be transmitted to the next server is transmitted to the multifunction peripheral 10 and the user signature is requested. Then, the user-signed document returned from the MFP 10 is transmitted to the next server.
[0118]
Further, instead of the server preceding the document output server performing the process for obtaining the user signature, the server performing the document output itself obtains the user signature for the document before the output. It can also be. That is, based on the user signature designation 303 (or the description of the unit job indicating the same information) in the cooperative job instruction, each of the servers 62 to 68 responds to the output target document data received together with the instruction. Then, it is determined whether or not the digital signature of the user who issued the cooperative job is necessary. If it is determined that the digital signature is necessary, the processing result document is sent to the MFP 10 to request the user signature. Performs a predetermined output process indicated in the instruction on the user-signed document returned from.
[0119]
Further, in the above embodiment, the execution instruction of the cooperative job is issued from the multifunction peripheral. However, the present invention is not limited to this. It is also possible to instruct the execution of the cooperative job from a personal computer or another device on the network.
[Brief description of the drawings]
FIG. 1 is a diagram showing a schematic configuration of a document processing system according to the present invention.
FIG. 2 is a diagram illustrating a detailed configuration of a multifunction peripheral, a cooperative processing server, and various servers.
FIG. 3 is a flowchart illustrating a procedure of processing performed when a user inputs a cooperative job execution instruction in the document processing system.
FIG. 4 is a diagram illustrating an example of a data structure of an instruction sheet for instructing a cooperative job.
FIG. 5 is a flowchart illustrating a procedure of a cooperative job control process performed by the cooperative processing server.
FIG. 6 is a diagram illustrating an example of a data structure of an instruction sent from a cooperative processing server to a server of a processing request destination.
FIG. 7 is a diagram illustrating a specific example of the flow of document processing in the document processing system according to the embodiment.
FIG. 8 is a diagram illustrating an example of a signature necessity table.
FIG. 9 is a flowchart illustrating a procedure of a cooperative control process of a cooperative processing server in a document processing system according to a modified example.
FIG. 10 is a diagram for describing a specific example of a flow of document processing in a modified example.
FIG. 11 is a diagram illustrating an example of a document processing system including a signature server that provides a user signature proxy service.
FIG. 12 is a diagram illustrating an example of a document processing system including a plurality of cooperative processing servers.
FIG. 13 is a diagram showing a document processing system of a system for realizing a cooperative job by sequentially passing instructions and processing targets from server to server.
[Explanation of symbols]
10 MFP A, 12 MFP B, 20 cooperation processing server, 22 server A, 24 server B, 26 server C, 30 Internet.

Claims (17)

A job processing control device that executes a service realized by coordinating job processing using a job processing device on a network,
Deciding means for deciding whether to apply a digital signature of the service issuer to the output result of the service,
A signature unit for executing a process for applying an electronic signature of the service issuer to processing target data to be subjected to job processing for outputting a service processing result when it is determined that the electronic signature is to be applied by the determination unit; ,
A job processing control device comprising: 2. The job processing control device according to claim 1, wherein the determining unit determines the job according to an instruction of a user who instructs execution of the service. An instruction data input means for inputting instruction data describing service processing content from a service issuer device instructed to execute the service,
The determining means determines that an electronic signature is to be applied to an output result of a service when the instruction data input by the instruction data input means is digitally signed by a service issuer. The job processing control device according to claim 1, wherein Processing target data input means for inputting processing target data to be subjected to job processing for realizing the service from the service issuing device instructed to execute the service,
The determining unit determines that, when the processing target data input by the processing target data input unit is provided with an electronic signature of a service issuer, an electronic signature is applied to a service output result. The job processing control device according to claim 1, wherein 2. The method according to claim 1, wherein the signature unit transmits the data to be processed to a service issuing device to which a service has been issued, and receives a result of applying a digital signature of a service issuer to the data to be processed. Job processing controller. 2. The job according to claim 1, wherein the signature unit transfers the processing target data to a signature server on a network, and receives a result of applying a digital signature of a service issuer to the processing target data. Processing control unit. 2. The job processing control apparatus according to claim 1, wherein the electronic signature of the service issuer is an electronic signature of a user who instructed execution of the service. 2. The job processing control device according to claim 1, wherein the electronic signature of the service issuer is an electronic signature of a service issuing device instructed to execute a service. A job processing control method for executing a service realized by linking job processing using a job processing device on a network,
A determining step of determining whether to apply a digital signature of a service issuer to an output result of the service,
A signature processing step of executing processing for applying an electronic signature of the service issuer to processing target data to be processed by a job for outputting a processing result of a service when it is determined in the determining step that an electronic signature is to be applied; When,
And a job processing control method. 10. The job processing control method according to claim 9, wherein in the determining step, the determination is made according to an instruction of a user who has instructed execution of the service. The method further includes an instruction data input step of inputting instruction data describing the processing content of the service from the service issuing device instructed to execute the service,
In the determining step, when the instruction data input in the instruction data input step has an electronic signature of a service issuer, it is determined that an electronic signature is to be applied to an output result of the service. 10. The job processing control method according to claim 9, wherein: Further including a processing target data input step of inputting processing target data to be subjected to job processing for realizing the service from the service issuing device instructed to execute the service,
In the determining step, when an electronic signature of a service issuer is given to the processing target data input in the processing target data input step, it is determined that an electronic signature is to be applied to an output result of the service. 10. The job processing control method according to claim 9, wherein: 10. The signature processing step, wherein processing target data is transmitted to a service issuing device to which a service has been issued, and a result of applying a digital signature of a service issuer to the processing target data is received. The described job processing control method. 10. The signature processing step according to claim 9, wherein the processing target data is transferred to a signature server on a network, and a result of applying a digital signature of a service issuer to the processing target data is received. Job processing control method. 10. The job processing control method according to claim 9, wherein the electronic signature of the service issuer is an electronic signature of a user who has instructed the execution of the service. 10. The job processing control method according to claim 9, wherein the electronic signature of the service issuer is an electronic signature of a service issuing device instructed to execute the service. A program for causing a computer system to function as a job processing control device that executes a service realized by linking job processing using a job processing device on a network, wherein the computer system includes:
A determining step of determining whether to apply a digital signature of a service issuer to an output result of the service,
A signature processing step of executing processing for applying an electronic signature of the service issuer to processing target data to be processed by a job for outputting a processing result of a service when it is determined in the determining step that an electronic signature is to be applied; When,
The program to execute.

Images