JP2004229041A - Communication terminal and management server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent address list information from leaking through a device such as a multifunction machine. <P>SOLUTION: This management server 2 extracts the address access information from an address list information memory 21 (ST2) depending on label information when receiving transmitted data including the label information from the multifunction machine 1-A (ST1), and checks security adaptability by reading the security level (ST3) to find whether the transmitted data are subject to security or not (ST4). When they are not subject to the security, the management server transmits the data to extracted the address access information (ST6). When they are subject to the security on the other hand, the management server informs the data to the requesting party (ST5) and updates the transmission reject list (ST7). <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a communication terminal device and a management server of a communication system including a plurality of communication terminal devices as various input / output devices, and a management server that collectively manages these communication terminal devices.
[0002]
[Prior art]
Conventionally, identification information of multiple data sources that should receive data and their data formats are registered to comprehensively manage various data related to various input / output devices such as telephone, facsimile, e-mail, video information, printer, etc. Registration means, a conversion means for performing data conversion in accordance with the data format registered in the registration means, and a storage means for storing data converted by the conversion means, and to be transmitted. Storage means for storing data, registration means for registering identification information and data formats of a plurality of data transmission destinations to be transmitted, and data transmission destinations corresponding to the identification information registered in the registration means. There has been proposed a data server device having a conversion unit that converts data stored in the storage unit according to a data format. For example, see Patent Document 1).
[0003]
[Patent Document 1]
JP-A-7-288543
[Problems to be solved by the invention]
In the above-mentioned conventional technology, the data of the input / output device is comprehensively managed by the management server. However, in a facsimile or a multifunction device, the telephone number, e-mail address, There is a possibility that a person's name or the like may be illegally taken out by list printing or screen display. The technology for preventing this is not disclosed in Patent Document 1 described above.
[0005]
SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and has as its object to provide a communication terminal device and a management server that can prevent leakage of destination list information from a communication terminal device such as a multifunction peripheral.
[0006]
[Means for Solving the Problems]
A communication terminal device according to the present invention includes a unit for storing transmission data, a unit for storing identification information of a destination list, a unit for selecting predetermined identification information as a transmission destination, and a network for transmitting transmission data to the outside. Means for sending a transmission request including identification information and transmission data to the management server connected via the.
[0007]
In the present invention, the identification information (label information) does not make sense by itself, but is meaningful information only when it is associated with the information of the management server. That is, the identification information alone cannot be accessed for transmission to the external device, but the destination access information required for transmitting the transmission data to the external device is generated by using the destination list information of the management server. Is what you can do. For example, "database record number of destination list held in management server", "part of mail address / telephone number (first character)" and the like. As long as it can be interpreted by the management server, compressed data or encrypted data may be used.
[0008]
The management server of the present invention stores identification information and destination access information in association with each other as destination list information, and holds the identification information based on identification information included in a transmission request received via a network from a communication terminal device. Means for extracting destination access information with reference to the destination list information, and means for transmitting transmission data included in the received transmission request with respect to the extracted destination access information.
[0009]
In the present invention, destination access information is information that enables access for data transmission to a destination by itself. For example, a telephone number or a mail address.
[0010]
In the management server of the present invention, in the destination list information, a security level is set corresponding to the destination, and based on the content of the transmission data included in the received transmission request, the transmission data is stored in the security target document. Means for judging whether or not the document is a security target document.
[0011]
Further, the transmitting means of the management server of the present invention transmits transmission data to the extracted destination access information when it is determined that the document is not a security target document, and transmits a transmission request when it determines that the document is a security target document. This can be notified to the communication terminal device that is the transmission source.
[0012]
The transmitting means of the management server according to the present invention transmits transmission data to the extracted destination access information when it is determined that the document is not a security target document, and rejects transmission when it determines that the document is a security target document. You can add necessary information to the list.
[0013]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, the present invention will be described in more detail with reference to embodiments. FIG. 1 is a block diagram showing a device configuration of a communication system in which the present invention is implemented. In the communication system of this embodiment, the multifunction peripheral 1-A, the multifunction peripheral 1-B, and the management server 2 are connected by a network (LAN or the like) 3 and are connected to the Internet 5 via a router 4. The management server 2 is connected to a public telephone line 6.
[0014]
The multifunction peripheral 1-A has so-called multi-functions such as a facsimile function, a copy function, and a print function. The same applies to the multifunction peripheral 1-B. These MFPs generally include a CPU, an NCU, a MODEM, a RAM, a ROM, an image memory, a scanner, a display unit, an operation unit, a recording unit, a LAN I / F, and others. Function unit.
[0015]
In FIG. 1, the multifunction peripheral 1-A (1-B) is characterized by an operation unit 11, a transmission data storage unit 12, a label information storage unit 13 for storing label information of a destination list, and a transmission / reception unit 14. Is shown.
[0016]
The transmission data storage unit 12 stores a scanned image or a received image, or text data for mail. The label information storage unit 13 has no meaning when used alone, but as label information having meaning only after being associated with the information of the management server 2, for example, a database record No. of a destination list held by the management server 2, a mail address -A part of the telephone number (the first character) is stored. A key of the operation unit 11 for selecting one piece of identification information (label information) as a transmission destination is operated. When transmitting the transmission data to the external device, a transmission request including the identification information and the transmission data is output to the management server 2 connected via the network 3.
[0017]
The management server 2 includes a destination list information storage unit 21 that stores identification information and destination access information in association with each other as destination list information (see FIG. 3), and a transmission rejection list storage unit 22. The destination access information stored in the destination list information storage unit 21 is information enabling access for data transmission to the destination by itself, for example, a telephone number or a mail address. The transmission rejection list stored in the transmission list storage unit 22 includes the time when the transmission request was received, the identification information (label information) included in the received transmission request, a part or all of the transmission data included in the received transmission request. And the reason for refusal is stored.
[0018]
As shown in FIG. 3, the destination list information stored in the destination list information storage unit 21 of the management server 2 stores label information, destination access information and a destination name corresponding to each piece of label information, Further, the security level is described in correspondence with the destination.
[0019]
Next, a process in the case where there is a transmission request from the multifunction peripherals 1-A and 1-B in the management server 2 will be described with reference to a flowchart shown in FIG. First, in step ST1, it is determined whether a transmission request has been received from the multifunction peripherals 1-A, 1-B or the like. If a transmission request has been received, the process proceeds to step ST2.
[0020]
In step ST2, the destination list information is extracted from the destination list information stored in the destination list information storage unit 21 based on the label information included in the received transmission request. Subsequently, the process proceeds to step ST3. In step ST3, the security of the transmission data included in the transmission request is checked. Since the security level to be a security target document (transmission rejection document) for each destination is stored in the destination list information storage unit 21 in correspondence with the label information and the destination access information, the security level of the transmission data and the destination list are stored. Compare with security level.
[0021]
In step ST4, it is determined whether or not the transmission data is a security target document based on the comparison result. If the transmission data is not a security target document, the process proceeds to step ST6. On the other hand, if the document is a security target document, the process proceeds to step ST5. In step ST6, the transmission data is transmitted to the extracted destination address information. When the destination address information is, for example, a mail address, the transmission data is transmitted to the Internet 5 via the network 3 and the router 4. If the destination address information is a telephone number, the transmission data is transmitted to the other party via the public telephone line 6.
[0022]
In step ST5, the transmission data is not transmitted to the destination, and communication data indicating that transmission is rejected is transmitted to the multifunction device 1-A (1-B) that has issued the transmission request. Upon receiving this notification, the multifunction peripheral 1-A (1-B) of the transmission source displays on the display unit that the transmission is refused, and / or notifies the user by voice from the voice output unit. . Further, the management server 2 transmits a notification mail indicating that transmission is rejected to a destination other than the transmission source. Subsequently, the process proceeds to step ST7.
[0023]
In step ST7, necessary information is added to the transmission rejection list (see FIG. 4) in the transmission rejection list storage unit 22 and updated. The transmission refusal information to be added is the time when the transmission request was received, identification information (label information) included in the received transmission request, part or all of the transmission data included in the received transmission request, the reason for rejection, and the like. . As a specific example of the reason for the rejection, when the text data includes a specific character (“top secret”, “company secret”, “customer information”, etc.), the specific data recorded as a watermark in the image file ( (Data indicating that the document is a security target document).
[0024]
In the above case, in the case of the transmission refusal, in step ST5, the setting destination other than the transmission source is notified by e-mail to that effect, but this is done by e-mail based on the security level set in the destination list information. It may be determined whether or not to notify.
[0025]
Further, in the above embodiment, the multifunction peripheral stores the security level determination criteria, and when making a transmission request to the management server, the multifunction peripheral determines the security level and determines the diagnosis result (level ) May be transmitted in response to a transmission request. In that case, the management server can perform processing (transmission refusal, notification, history update) according to the security level received from the multifunction peripheral.
[0026]
【The invention's effect】
In the communication terminal according to the first aspect of the present invention, destination transmission information (telephone number and mail address) for transmitting transmission data to an external device is not stored internally, and the transmission data is transmitted to the external device. Transmits the identification information to the management server, generates the destination address information based on the identification information in the management server, and transmits the transmission data to the external device. Therefore, the communication terminal device only needs to hold the identification information necessary for generating the destination access information in the management server, and holds the destination address information enabling the transmission access to the external device by itself. Since there is no need to keep the information, it is possible to prevent leakage of information regarding the destination from the communication terminal device.
[0027]
The management server according to claim 2 generates destination access information based on the identification information received from the communication terminal device via the network, and transmits the transmission data received from the communication terminal device using the destination access information. Therefore, the communication terminal device only needs to hold only identification information that cannot understand information on the destination (destination address information) by itself, thereby preventing leakage of the information on the destination from the communication terminal device.
[0028]
In the management server according to the third aspect, if a judgment criterion for judging whether or not the document is a security target is set, when a transmission request is issued from the communication terminal device, the contents of the transmission data are analyzed and the security target is analyzed. Appropriate processing can be performed depending on whether the document is a document or not. Thus, the transmission of the security target document to the external device can be blocked by the management server. Therefore, even if an confidential document is transmitted from the communication terminal to an external device, the transmission can be refused by the management server, and the communication can be performed without adding a complicated security check function to the communication terminal. Leakage of confidential information from the terminal device to the external device can be prevented.
[0029]
In the management server according to claim 4, when it is determined that the document is a security target document when a transmission request is made from the communication terminal device, the communication terminal device is notified of the fact to that effect. Can know that the document to be transmitted (transmission data) has been rejected as a security target document.
[0030]
In the management server according to claim 5, when a transmission request is received from the communication terminal device, if it is determined that the document is a security target document, information necessary for the transmission rejection list (transmission request reception time, reason for rejection, etc.) Is added, a record of an attempt to transmit a security target document can be stored as a transmission rejection list. Thereby, the administrator of the management server can grasp the transmission attempt history of the security target document.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a device configuration of a communication system in which the present invention is implemented.
FIG. 2 is a flowchart illustrating a process when a transmission request of a management server of the communication system is received.
FIG. 3 is a diagram illustrating an example of a destination list of the management server.
FIG. 4 is a diagram showing an example of a transmission refusal list of the management server.
[Explanation of symbols]
1-A, 1-B MFP 2 Management server 3 Network 4 Router 5 Internet 6 Public telephone line 11 Operation unit 12 Transmission data storage unit 13 Label information storage unit 14 Transmission / reception unit 21 Destination list information storage unit 22 Transmission rejection list storage unit

Claims (5)

Means for storing transmission data, means for storing identification information of a destination list, means for selecting predetermined identification information as a transmission destination, and a management server connected via a network when transmitting transmission data to the outside Means for sending a transmission request including identification information and transmission data to the communication terminal. Means for storing the identification information and the destination access information in association with each other as destination list information, and referring to the held destination list information based on the identification information included in the transmission request received from the communication terminal device via the network. A management server comprising: means for extracting destination access information; and means for transmitting transmission data included in the received transmission request with respect to the extracted destination access information. In the destination list information, a security level is set corresponding to the destination, and based on the content of the transmission data included in the received transmission request, means for determining whether or not the transmission data is a security target document is provided. 3. The management server according to claim 2, wherein the transmission unit executes different processing for transmission of transmission data according to a determination as to whether the document is a security target document. The transmitting unit transmits transmission data to the extracted destination access information when determining that the document is not a security target document, and transmits the transmission data to a communication terminal device that is a transmission source of the transmission request when determining that the document is a security target document. 4. The management server according to claim 3, wherein a notification to that effect is sent. The transmitting means transmits transmission data to the extracted destination access information when it is determined that the document is not a security target document, and adds necessary information to a transmission rejection list when it determines that the document is a security target document. The management server according to claim 3, wherein:

Images