JP2004287727A - Printer system, authentication device, printer, and printer driver program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve security even when document data encrypted by an application are printed. <P>SOLUTION: In this printer system for printing encrypted data, an authenticating device 160 is provided with a private key generating part 161 for, when receiving a public key request from the PC 100, generating private key information for an IP address specific to a PC 100, and for transmitting the identification information of the PC 100 and the generated private key information to the printer, and a public key processing part 162 for generating public key information from the private key information generated in the part 161, and for transmitting it to the PC 100. A printer device 130 in this printer system is provided with a decoding part 151 for, when receiving print data received form the PC 100, decoding the print data according to the private key information, a PDL processing part 142 for decoding PDF document data encrypted by a document password included in the print data, and a print control part 150 for printing the decoded PDF document data. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention provides a printer system for printing an encrypted application document, a printer device, an authentication device for managing and authenticating an encryption key at the time of printing, and a print request for an encrypted application document to the printer device. The present invention relates to a printer driver program, and more particularly to a printer system, an authentication device, a printer device, and a printer driver program that can print an encrypted document with improved security.
[0002]
[Prior art]
For example, in an application such as Adobe (R) Acrobat Reader (R), document authentication information such as a document password is input to encrypt document data in order to prevent others from viewing the contents of the document. It has a function of saving (see Non-Patent Document 1).
[0003]
When such encrypted document data is created by a PC (Personal Computer) which is a client device and is printed by a printer device connected to a network such as a LAN (Local Area Network), the document is printed on an application. Enter the password to decrypt the encrypted document, pass the decrypted document to the printer driver, send the decrypted document file from the printer driver to a printer device on the network, and use the printer device as it is Printing.
[0004]
Further, in order to avoid printing of such an encrypted document by others without permission, when the application decrypts the document and makes a print request, the printer driver sets a job password for each print job by the user. Input. Then, the document data is transmitted to the printer together with the input job password. FIG. 11 is a data structure diagram showing a structure of print data flowing between such a conventional printer driver and a printer device. As shown in FIG. 11, the PJL job password specification has a data structure in which PDF document data (plain text) which is print data is added to the head.
[0005]
Then, the printer device allows the user to input an authentication password, starts a print job only when the authentication password is valid, and prints a document.
[0006]
[Non-patent document 1]
Adobe (R) Company's home page "PDF can be used more with Adobe Acrobat" (http://www.adobe.co.jp/acrofamily/features/acro_nikkei/page4.html)
[0007]
[Problems to be solved by the invention]
However, in such a conventional printer driver or printer device, even if a document is encrypted on an application, it must be decrypted at the printing stage. There is a risk that the data will flow and the plaintext document data will be intercepted by a malicious third party.
[0008]
Further, even if a malicious third party prevents the printing of an encrypted document by a job password for each print job, the job password is intercepted on the network because of plaintext. there is a possibility. Further, since the decrypted document data is temporarily stored in a storage medium such as a hard disk device (HDD) or a memory of the printer device, a system administrator of the printer device refers to the stored plain text document data. I can do it.
[0009]
As described above, the conventional printer driver and printer apparatus have a problem that security is reduced when document data encrypted by an application is printed.
[0010]
The present invention has been made in view of the above, and an object of the present invention is to provide a printer driver program and a printer device capable of improving security even when printing encrypted document data with an application.
[0011]
[Means for Solving the Problems]
In order to achieve the above object, an invention according to claim 1 is an authentication device connected to a client device that issues a print request for encrypted data via a network and manages key information related to the encrypted data, the client device and the authentication device. A printer system that is connected to the device via a network and performs a print process by receiving a print request from the client device, wherein the authentication device receives a public key request from the client device; Secret key generation means for generating secret key information for the identification information unique to the client device and transmitting the secret key information generated together with the identification information of the client device to the printer device; Public key information is generated from the secret key information and transmitted to the client device. Public key processing means, wherein the printer device, when receiving the print data received from the client device, decrypts the print data with the secret key information; and Document decrypting means for decrypting the encrypted application document data using the document authentication information, and printing means for printing the application document data decrypted by the document decrypting means. And
[0012]
According to the first aspect of the present invention, when the authentication device receives a public key request from the client device, the authentication device generates secret key information for the identification information unique to the client device, and generates the secret key information together with the identification information of the client device. The key information is transmitted to the printer device, the public key information is generated from the generated secret key information, transmitted to the client device, and when the printer device receives the print data received from the client device, the print data is transmitted to the private key. The application document data is decrypted with the information, and the application document data encrypted by the document authentication information included in the print data is decrypted, and the decrypted pre-document data is printed, so that the application document data remains encrypted. In addition, the document authentication information for decryption is received from the client device in a state of being encrypted with the public key information. In, it is possible to reliably prevent malicious the contents of the application document data on the network a third party to intercept. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. Can be prevented from being browsed or tampered with, and security in printing the encrypted document can be improved.
[0013]
According to a second aspect of the present invention, there is provided an authentication device connected to a client device that issues a print request for encrypted data via a network and managing key information relating to the encrypted data, and connected to the client device and the authentication device via a network. A printer device that receives a print request from the client device and performs a print process, wherein the authentication device receives a public key request from the client device, and receives a public key request from the client device. Secret key generating means for generating secret key information for the identification information, public key processing means for generating public key information from the secret key information generated by the secret key generating means, and transmitting the generated public key information to the printer device, The printer device, when receiving the public key information from the authentication device, the received public key information Transmitting to the client device, when receiving the print data from the client device, transmitting a request for a key validity determination to the authentication device, and when the received determination result is valid, the print data Using the secret key information, a document decrypting unit that decrypts the encrypted application document data using the document authentication information included in the print data, and a decryption unit that decrypts the application document data using the document authentication information. And printing means for printing the converted application document data.
[0014]
According to the invention of claim 2, when the authentication device receives the public key request from the client device, the authentication device generates secret key information for the identification information unique to the client device, and generates the public key information from the generated secret key information. And transmits the generated public key information to the printer device.If the printer device receives the public key information from the authentication device, the received public key information is transmitted to the client device. A request for determining the validity of the key is transmitted to the application document, and when the received determination result is valid, the print data is decrypted by the secret key information, and the application document is encrypted by the document authentication information included in the print data. By decrypting the data and printing the decrypted application document data, the application document data is decrypted while being encrypted. Receiving the document authentication information from the client device in a state where the document authentication information is encrypted with the public key information, it is possible to reliably prevent a malicious third party from intercepting the contents of the application document data on the network. . In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. Can be prevented from being browsed or tampered with, and security in printing the encrypted document can be improved. Further, by transmitting the public key from the printer device to the client device instead of the authentication device, the printer device can manage the public key of the client device.
[0015]
According to a third aspect of the present invention, in the printer system according to the second aspect, the decryption unit of the printer device immediately transmits the public key information to the client device.
[0016]
According to the third aspect of the present invention, the printer device immediately transmits the public key information to the client device, so that different public key information can be immediately transmitted for each print job when requested, and the encrypted document can be transmitted. Security in printing can be further improved.
[0017]
According to a fourth aspect of the present invention, in the printer system according to the second aspect, the decryption unit of the printer device transmits the public key information to the client device when the printer becomes printable. It is characterized by doing.
[0018]
According to the fourth aspect of the present invention, when the printer device transmits the public key information to the client device at a time when the printer device is ready for printing, the printer device transmits the public key information to the client device when there is a time difference from the time of the request to the time of the start of printing. Since the public key information can be actually transmitted at the start of printing, it is possible to prevent a third party from intercepting the request from the time of request to the time of starting printing, thereby improving security in printing the encrypted document. Can be improved.
[0019]
According to a fifth aspect of the present invention, there is provided an authentication apparatus which is connected to a client apparatus for making a print request of encrypted data via a network and manages key information relating to the encrypted data, and which is connected to the client apparatus and the authentication apparatus via a network. A printer device that receives a print request from the client device and performs a printing process, wherein the authentication device is unique to the client device when a public key request is received from the printer device. Secret key generation means for generating secret key information corresponding to the identification information of, and public key processing means for generating public key information from the secret key information generated by the secret key generation means and transmitting the generated public key information to the client device. The printer device, upon receiving print data from the client device, performs the authentication. A request for determining the validity of the key is transmitted to the device, and when the received determination result is valid, a decryption unit for decrypting the print data with the secret key information; and Document decrypting means for decrypting the encrypted application document data using document authentication information, and printing means for printing the application document data decrypted by the document decrypting means. .
[0020]
According to the invention of claim 5, when the authentication device receives the public key request from the printer device, the authentication device generates secret key information corresponding to the identification information unique to the client device, and generates the public key information from the generated secret key information. Is generated and transmitted to the client device.If the printer device receives the print data from the client device, it transmits a request for a key validity determination to the authentication device, and if the received determination result is valid, By decrypting the print data with the secret key information, decrypting the application document data encrypted with the document authentication information included in the print data, and printing the application document data decrypted by the document decryption unit, the application document Client device with data encrypted and document authentication information for decryption encrypted with public key information Since et reception, it is possible to reliably prevent malicious content app document data on the network third party to intercept. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. Can be prevented from being browsed or tampered with, and security in printing the encrypted document can be improved. In addition, the printer device receives the public key request from the client device and makes a request for the public key to the authentication device, so that the printer device side can know the start of printing of the encrypted document data of the client device. Can be taken.
[0021]
According to a sixth aspect of the present invention, in the printer system according to any one of the first to fifth aspects, the authentication device is configured to validate the identification information of the client device, the secret key information, and the secret key information. A storage unit for storing key management information associated with a period, wherein the public key processing unit of the authentication device further receives a request from the printer device, refers to the key management information, Determining whether or not the secret key information corresponding to the information is within the validity period; transmitting a determination result and secret key information for the client device to the printer device; Transmits a key validity determination request to the authentication device when print data received from the client device is received, and if the received determination result is If it is, it characterized by decoding the print data by the secret key information.
[0022]
According to the invention of claim 6, the authentication device stores the key management information in which the identification information of the client device, the secret key information, and the validity period of the secret key information are associated, and the authentication device receives a request from the printer device. Receiving the key management information, determining whether the secret key information corresponding to the client information is within the validity period, transmitting the determination result and the secret key information for the client device to the printer device, When the device receives the print data received from the client device, the device transmits a request for a key validity determination to the authentication device, and when the received determination result is valid, the print data is transmitted according to the secret key information. The decryption prevents the decryption and printing of the application document data by the secret key information that has expired and may be intercepted by a third party. It can be further improved.
[0023]
According to a seventh aspect of the present invention, there is provided a client apparatus which issues a print request of encrypted data, and a printer apparatus which receives a print request from the client apparatus and performs a printing process, and which is connected via a network, An authentication device that manages the client device, and when receiving a public key request from the client device, generates secret key information for identification information unique to the client device, and generates the secret key information together with the identification information of the client device. Secret key generating means for transmitting information to the printer device; and public key processing means for generating public key information from the secret key information generated by the secret key generating means and transmitting the generated public key information to the client device. It is characterized by.
[0024]
According to the invention of claim 7, when a public key request is received from a client device, secret key information for identification information unique to the client device is generated, and the secret key information generated together with the identification information of the client device is generated. By transmitting to the printer device, generating public key information from the generated private key information and transmitting the generated public key information to the client device, the encrypted application document data is transmitted to the printer device without decryption, and is transmitted at the same time. Since the document authentication information is also transmitted in an encrypted state and can be decrypted and printed on the printer device side, it is possible to prevent a malicious third party from intercepting the contents of the application document data on the network, It is possible to improve security in printing an encrypted document.
[0025]
According to an eighth aspect of the present invention, in the authentication device according to the seventh aspect, key management information in which identification information of the client device, the secret key information, and a validity period of the secret key information are stored. A storage unit, wherein the public key processing unit receives a request from the printer device, refers to the key management information, and the secret key information corresponding to the client information is within the validity period. And transmitting the result of the determination and the secret key information for the client device to the printer device.
[0026]
According to the present invention, the key management information in which the identification information of the client device, the secret key information, and the validity period of the secret key information are associated with each other is stored. To determine whether the private key information corresponding to the client information is within the validity period, and transmit the result of the determination and the private key information for the client device to the printer device. Decryption and printing of the application document data by the secret key information that may have been intercepted can be prevented, and the security can be further improved.
[0027]
According to a ninth aspect of the present invention, a client device for making a print request for encrypted data and an authentication device for managing key information relating to the encrypted data are connected via a network, and a print request is received from the client device for print processing. And a decryption unit for decrypting the print data with the secret key information received from the authentication device when the print data received from the client device is received, and Document decrypting means for decrypting the encrypted application document data included in the print data according to the document authentication information, and printing means for printing the application document data decrypted by the document decrypting means. It is characterized by the following.
[0028]
According to the ninth aspect of the invention, when print data received from the client device is received, the print data is decrypted by the secret key information received from the authentication device, and the print data is decrypted by the document authentication information included in the print data. By decrypting the encrypted application document data contained in the application document and printing the decrypted application document data, the document authentication information for decrypting the application document data in an encrypted state and releasing it is released Since the application document data is received from the client device in a state of being encrypted with the key information, it is possible to reliably prevent a malicious third party from intercepting the contents of the application document data on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. Can be prevented from being browsed or tampered with, and security in printing the encrypted document can be improved.
[0029]
According to a tenth aspect of the present invention, there is provided a client apparatus which issues a print request for encrypted data and an authentication apparatus which manages key information related to the encrypted data via a network. When receiving the public key information from the authentication device, the printer device transmits the received public key information to the client device, and when receiving print data from the client device, the printer device performs A request for determining the validity of the key, and when the received determination result is valid, decryption means for decrypting the print data with secret key information received from the authentication device; and A document decryption method for decrypting the encrypted application document data included in the print data using the included document authentication information. When, characterized by comprising a printing unit for printing the decrypted application document data by the document decoding means.
[0030]
According to the tenth aspect, when the public key information is received from the authentication device, the received public key information is transmitted to the client device, and when the print data is received from the client device, the authentication device is transmitted to the authentication device. A request for a key validity determination is transmitted, and if the received determination result is valid, the print data is decrypted by the secret key information received from the authentication device, and the print data is decrypted by the document authentication information included in the print data. By decrypting the contained application document data and printing the decrypted application document data, the document authentication information for decrypting the application document data while keeping the application document data in an encrypted state is also public key. Since the information is received from the client device in a state encrypted with the information, the contents of the application document data may be intercepted by a malicious third party on the network. It can be reliably prevented. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. Can be prevented from being browsed or tampered with, and security in printing the encrypted document can be improved. Further, by transmitting the public key from the printer device to the client device instead of the authentication device, the printer device can manage the public key of the client device.
[0031]
According to an eleventh aspect of the present invention, in the printer device according to the tenth aspect, the decryption unit immediately transmits the public key information to the client device.
[0032]
According to the eleventh aspect of the present invention, by transmitting the public key information to the client device immediately, it is possible to immediately transmit different public key information for each print job when requested, and Security can be further improved.
[0033]
According to a twelfth aspect of the present invention, in the printer device according to the tenth aspect, the decryption unit transmits the public key information to the client device when the printer becomes printable. And
[0034]
According to the twelfth aspect of the present invention, the public key information is transmitted to the client device when it becomes printable, so that when there is a time lag from the time of the request to the time of the start of printing, the actual Since the public key information can be transmitted at the time of printing start, it is possible to prevent a third party from intercepting from the request time to the printing start time, thereby further improving the security in printing the encrypted document. be able to.
[0035]
According to a thirteenth aspect of the present invention, a client device that issues a print request for encrypted data and an authentication device that manages key information related to the encrypted data are connected via a network, and receive a print request from the client device to perform a print process. A print device that receives a print data from the client device, sends a request for a key validity determination to the authentication device, and, if the received determination result is valid, performs the printing. Decryption means for decrypting data with private key information received from the authentication device; and document decryption for decrypting encrypted application document data included in the print data with document authentication information included in the print data. And a printing unit for printing the application document data decrypted by the document decrypting unit. And it features.
[0036]
According to the thirteenth aspect, when print data is received from a client device, a request for a key validity determination is transmitted to the authentication device, and when the received determination result is valid, the print data is transmitted. Is decrypted by the private key information received from the authentication device, the encrypted application document data included in the print data is decrypted by the document authentication information included in the print data, and the application document decrypted by the document decryption unit is decrypted. By printing the data, the application document data is received from the client device in an encrypted state and the document authentication information for decryption is encrypted with the public key information from the client device. It is possible to reliably prevent a malicious third party from intercepting the contents on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. Can be prevented from being browsed or tampered with, and security in printing the encrypted document can be improved. In addition, the printer device receives the public key request from the client device and makes a request for the public key to the authentication device, so that the printer device side can know the start of printing of the encrypted document data of the client device. Can be taken.
[0037]
According to a fourteenth aspect of the present invention, there is provided a printer driver program for transmitting print data to a printer connected to a network and making a print request, and decrypts application document data encrypted by a predetermined application. Generating document authentication information for allowing a user to input document authentication information for encrypting, and generating print data including the document authentication information input by the document authentication information processing procedure and the encrypted application document data. A print data generation procedure, an encryption procedure for requesting public key information to the authentication device, and encrypting the print data with the public key information received from the authentication device, and print data encrypted by the encryption procedure. A sender that sends identification information unique to a client device to a printer device connected to a network. When a printer driver program for causing a computer to execute the.
[0038]
According to the fourteenth aspect, the user is required to input document authentication information for decrypting application document data encrypted by a predetermined application, and the input document authentication information and the encrypted application document data are input. Requesting public key information from the authentication device, encrypting the print data with the public key information received from the authentication device, and transmitting the encrypted print data and identification information unique to the client device to the network. By transmitting the encrypted application document data to the printer device connected to the printer device without decrypting the encrypted application document data, and encrypting the document authentication information for decryption with the public key information and transmitting it to the printer device, It is possible to reliably prevent a malicious third party from intercepting the contents of the application document data on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. Can be prevented from being browsed or tampered with, and security in printing the encrypted document can be improved.
[0039]
According to a fifteenth aspect of the present invention, there is provided a printer driver program for transmitting print data to a printer connected to a network and making a print request, and decrypts application document data encrypted by a predetermined application. Generating document authentication information for allowing a user to input document authentication information for encrypting, and generating print data including the document authentication information input by the document authentication information processing procedure and the encrypted application document data. A print data generation procedure, requesting public key information from an authentication device, receiving the public key information generated by the authentication device via the printer device, and encrypting the print data with the received public key information. Encrypting the print data encrypted by the encryption procedure and identification information unique to the client device; A printer driver program for executing a transmission step of transmitting to the connected printer to a network, to a computer.
[0040]
According to the fifteenth aspect, the user is required to input document authentication information for decrypting application document data encrypted by a predetermined application, and the input document authentication information and the encrypted application document data are input. Requesting public key information from the authentication device, receiving the public key information generated by the authentication device via the printer device, encrypting the print data with the received public key information, By transmitting the encrypted print data and identification information unique to the client device to a printer device connected to a network, the encrypted application document data can be decrypted without decrypting the application document data. Since the authentication information is encrypted with the public key information and transmitted to the printer, the contents of the application document data can be intercepted by a malicious third party on the network. It is possible to reliably prevent the. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. Can be prevented from being browsed or tampered with, and security in printing the encrypted document can be improved. Further, by transmitting the public key from the printer device to the client device instead of the authentication device, the printer device can manage the public key of the client device.
[0041]
According to a sixteenth aspect of the present invention, there is provided a printer driver program for transmitting print data to a printer connected to a network and issuing a print request, and decrypts application document data encrypted by a predetermined application. Generating document authentication information for allowing a user to input document authentication information for encrypting, and generating print data including the document authentication information input by the document authentication information processing procedure and the encrypted application document data. A print data generation procedure, an encryption procedure for requesting public key information from the printer apparatus, receiving the public key information from the authentication apparatus, and encrypting the print data with the received public key information; Connects the print data encrypted by the encryption procedure and identification information unique to the client device to the network A transmission step of transmitting to the printer device, a printer driver program for causing a computer to execute the.
[0042]
According to this invention, the user is required to input document authentication information for decrypting the application document data encrypted by the predetermined application, and the input document authentication information and the encrypted application document data are decrypted. Requesting public key information from the printer device, receiving the public key information from the authentication device, encrypting the print data with the received public key information, and encrypting the print data with the encryption procedure. By transmitting print data and identification information unique to the client device to a printer device connected to the network, the document authentication information for decrypting the encrypted application document data without decrypting the application document data is disclosed. Since it is encrypted with the key information and transmitted to the printer, the contents of the application document data can be intercepted by malicious third parties on the network It can be reliably prevented. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. Can be prevented from being browsed or tampered with, and security in printing the encrypted document can be improved. Further, the printer device can request the public key from the authentication device in response to the public key request from the client device, and the printer device can know the start of printing the encrypted document data of the client device on the printer device side. It is possible to take measures.
[0043]
BEST MODE FOR CARRYING OUT THE INVENTION
Preferred embodiments of a printer system, an authentication device, a printer device, and a printer driver program according to the present invention will be described in detail below with reference to the accompanying drawings.
[0044]
(Embodiment 1)
FIG. 1 is a block diagram showing a network configuration and a functional configuration of a client device (PC) 100, an authentication device 160, and a printer device 130 according to the first embodiment of the present invention. In the PC 100 according to the first embodiment, PDF document data is created and encrypted by Acrobat (R) which is an application 120 on the PC, and the encrypted PDF document data which can be decrypted by inputting a document password is directly decrypted (decrypted). Instead, the data is transmitted to the printer device 130 and printed by the printer device 130. In addition, the authentication device 160 generates, manages, and authenticates a secret key and a public key.
[0045]
The printer device 130, the authentication device 160, and the PC 100 are connected by a network such as a LAN 170. As shown in FIG. 1, the PC 100 has a printer driver 110 installed therein. The printer driver 110 includes a PDL processing unit 111, a document password processing unit 112, an encryption unit 118, a job control unit 119, It mainly includes a user interface unit 113 and a host I / F control unit 114.
[0046]
The document password processing unit 112 requests an input instruction of a document password necessary for decrypting the encrypted PDF document data inside the application 120, and receives the input document password. Then, the document password input by the user is added to the head of the encrypted PDF document data as PJL document password designation data. Also, PJL data, which is data relating to a print job, is added to the end of the encrypted PDF document data to which the PJL document password designation data has been added.
[0047]
The PDL processing unit 111 is used when printing PDF document data (unencrypted data), and converts print document data of the unencrypted PDF document data into PDL data (PDL: Page Description Language). : Page description language) to generate print data.
[0048]
The job control unit 119 requests the authentication device 160 for a public key. The encryption unit 118 encrypts PJL document password designation data, encrypted PDF document data, and PJL data, which is data relating to a print job, using the public key received from the authentication device 160. Then, the encryption unit 118 sets the three encrypted data, that is, the PJL document password designation data, the encrypted PDF document data, and the PJL data as print data.
[0049]
The user interface unit 113 displays various screens on the monitor 115 and receives an input event from the keyboard 116 by the user.
[0050]
The host I / F control unit 114 transmits the encrypted PDF document data from the host I / F 117 to the printer device 130 via the LAN 170.
[0051]
A printer controller 140 is mounted on the printer device 130. The printer controller 140 includes a PDL processing unit 142, a PJL processing unit 141, a host I / F control unit 143, a decoding unit 151, and a panel control unit. It mainly includes a unit 144, an accumulation control unit 145, and a print control unit 146.
[0052]
The decryption unit 151 transmits a request to check the key table to the authentication device 160, and decrypts the print data transmitted from the PC 100 using the secret key received from the authentication device 160.
[0053]
The PJL processing unit 141 interprets a PJL document password specification described in a printer job language (PJL) attached to print data received from the PC 100, and acquires a document password. The PJL processing unit 141 performs various controls related to the other printing job.
[0054]
The PDL processing unit 142 determines the validity of the document password acquired by the PJL processing unit 141. If the document password is valid, the PDL processing unit 142 decrypts the PDF document data encrypted using the document password, and converts the drawing data. Generate. The PDL processing unit 142 constitutes a document decrypting unit according to the present invention.
[0055]
The host I / F control unit 143 controls transmission and reception of various data with the PC 100 and the authentication device 160 via the LAN 115 and the host I / F 147.
[0056]
The panel control unit 144 controls display output to the operation panel 148, acquisition of input events, and the like. The storage control unit 145 controls reading / writing from / to a hard disk device (HDD) 149 or a memory. The print control unit 146 controls a print request to the print engine 150.
[0057]
The authentication device 160 is specifically a print server, a printer device, or a computer such as a PC. The authentication device 160 mainly includes a secret key generation unit 161, a public key processing unit 162, a host I / F control unit 164, and a storage control unit 165.
[0058]
The secret key generation unit 161 generates a secret key in response to a request from the PC 100. The public key processing unit 162 generates a public key from a secret key, registers the generated public key in a key table, and transmits the generated public key to the requesting PC 100. Further, the public key processing unit 162 determines the expiration date of the secret key according to a request from the printer device 130, and transmits the result of the determination and the secret key (if valid) to the printer device 130.
[0059]
The host I / F control unit 167 controls transmission and reception of various data. The accumulation control unit 165 controls reading / writing from / to the HDD 169.
[0060]
Next, the printing process of the encrypted PDF document data by the printer system according to the embodiment configured as described above will be described. FIG. 2 is a flowchart illustrating a procedure of a process of printing encrypted PDF document data by the printer system according to the present embodiment. FIG. 3 is an explanatory diagram showing data exchange between the PC 100, the authentication device 160, and the printer device 130.
[0061]
First, the user encrypts the PDF document with the document password using the application 120 (Acrobat (R) or Acrobat Reader (R)), and specifies the IP address of the printer device 130 on the print screen of the application 120 in the encrypted state. Consider the case where a print command is issued.
[0062]
At this time, the job control unit 119 transmits the IP address, which is the client information of the PC 100, the print notification, and the public key request to the authentication device 160 (Step S201).
[0063]
In the authentication device 160 that has received the IP address, the print notification, and the public key request, the secret key generation unit 161 generates a secret key unique to the IP address (step S202). Then, the public key processing unit 162 generates a public key from the secret key and transmits it to the requesting PC 100 (step S203). After generating the public key, the public key processing unit 162 generates a key table in the HDD 149, and registers the generated public key and secret key (step S204).
[0064]
FIG. 5 is a data structure diagram of the key table. As shown in FIG. 5, the key table includes an IP address, a public key, a secret key, and an expiration date of the key, which are client information.
[0065]
In the PC 100, when the host I / F control unit 114 receives the public key (step S205), the document password processing unit 112 requests the user interface unit 113 to display a document password input screen, and the user interface unit 113 Displays a document password input screen on the monitor 115 (step S206).
[0066]
When the user inputs the document password for the encrypted PDF document data from the document password input screen from the keyboard 116, the key event is acquired by the user interface unit 113. Then, the document password processing unit 112 adds the obtained document password to the beginning of the encrypted PDF document data as PJL document password designation data (step S207). Then, the document password processing unit 112 adds the PJL data to the end of the encrypted PDF document data to which the PJL document password designation data has been added, and the encryption unit 118 encrypts these three data with the public key ( Step S208).
[0067]
Next, the encryption unit 118 generates, as print data, data obtained by encrypting three data of PJL document password designation, encrypted PDF document data, and PJL data (step S209). The generated print data is transmitted to the printer device 130 by the host I / F control unit 114 together with the IP address as the client information of the PC 800 (step S210).
[0068]
FIG. 6 is a data structure diagram showing a structure of print data generated by the printer driver 110 according to the present embodiment. As shown in FIG. 6, client information (IP address) is added to the head of the print data, PJL document password designation (encryption), encrypted PDF document data (encryption), and PJL data (encryption) It is composed of In some cases, PJL data is not added.
[0069]
In the printer device 130, the host I / F control unit 143 receives the print data (step S211), and the decryption unit 151 transmits a check request of the key table together with the client information to the authentication device 160 (step S212). ).
[0070]
When the authentication device 160 receives the client information and the request for checking the key table (step S213), the key authentication unit 163 refers to the key table and determines whether the public key corresponding to the received client information of the IP address is valid. It is determined whether or not it is (step S214). Then, if it is valid, a check result notification of validity and a secret key corresponding to the client information are transmitted to the printer, and if not, a check result of invalidity is transmitted to the printer 130. (Step S215).
[0071]
In the printer device 130, upon receiving the check result (step S216), the decryption unit 151 refers to the contents of the check result and determines whether the key is valid (step S217). If the print data is valid, the decryption unit 151 decrypts the print data with the secret key received from the authentication device 160 (step S218). Then, data interpretation processing of the decrypted print data is performed (step S219), and printing is performed by the print control unit 146 (step S220).
[0072]
On the other hand, if the result of the check indicates that the key is not valid, the received print data is discarded and no decryption processing is performed (step S221).
[0073]
Here, the process of interpreting print data in step S219 will be described. FIG. 4 is a flowchart illustrating the procedure of the print data interpretation process. First, the PJL processing unit 141 interprets the PJL document password specification included in the print data and acquires a document password (step S401). Then, the PDL processing unit 142 checks whether or not the acquired document password matches the document password included in the encrypted PDF document data, thereby determining the validity of the document password included in the print data. (Step S402). Here, the document password included in the encrypted PDF document data is obtained by calling a password obtaining function provided to the application 120.
[0074]
If the two document passwords match, the document password is determined to be valid, and the PDL processing unit 142 decrypts the encrypted PDF document data to generate drawing data (step S403). On the other hand, if the two document passwords do not match, it is determined that the document password is invalid, the print data is discarded, and the printing process is not performed (step S404).
[0075]
As described above, in the printer system according to the first embodiment, when the authentication device 160 receives a public key request from the PC 100, the authentication device 160 generates secret key information for the identification information unique to the PC 100, and generates the secret key information together with the IP address of the PC 100. The key information is transmitted to the printer device 130, public key information is generated from the generated secret key information, transmitted to the PC 100, and when the printer device 130 receives the print data received from the PC 100, the print data is transmitted to the private key. Since the document data is decrypted by the information, the PDF document data encrypted by the document password included in the print data is decrypted, and the decrypted PDF document data is printed, the PDF document data remains in an encrypted state. In addition, if the document password for decryption is encrypted with the public key, the PC 100 Since received, it is possible to reliably prevent malicious content app document data on the network third party to intercept. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. Can be prevented from being browsed or tampered with, and security in printing the encrypted document can be improved.
[0076]
(Embodiment 2)
In the printer system according to the second embodiment, after the authentication device 160 generates a public key, the authentication device 160 transmits the public key to the printer device 130, and transmits the public key from the printer device 130 to the PC 100.
[0077]
The functional configurations of the printer system, the PC 100, the authentication device 160, and the printer device 130 according to the second embodiment are the same as those in the first embodiment.
[0078]
The decryption unit 151 of the printer device 130 transmits the public key received from the authentication device 160 to the PC 100 of the received client information (IP address). Further, the decryption unit 151 transmits a request to check the key table to the authentication device 160. Further, the decryption unit 151 decrypts the print data transmitted from the PC 100 using the secret key received from the authentication device 160.
[0079]
A public key processing unit 162 of the authentication device 160 generates a public key from a secret key, registers the generated public key in a key table, and transmits the generated public key to the printer device 130 together with client information (IP address) of a request source. It is. Further, the public key processing unit 162 determines the expiration date of the secret key according to a request from the printer device 130, and transmits the result of the determination and the secret key (if valid) to the printer device 130. The other configuration is the same as that of the printer system according to the first embodiment, and the description is omitted.
[0080]
Next, the printing process of the encrypted PDF document data by the printer system according to the embodiment configured as described above will be described. FIG. 7 is a flowchart illustrating a procedure of a process of printing encrypted PDF document data by the printer system according to the present embodiment. FIG. 8 is an explanatory diagram showing data exchange between the PC 100, the authentication device 160, and the printer device 130.
[0081]
First, the user encrypts the PDF document with the document password using the application 120 (Acrobat (R) or Acrobat Reader (R)), and specifies the IP address of the printer device 130 on the print screen of the application 120 in the encrypted state. Consider the case where a print command is issued.
[0082]
At this time, the job control unit 119 transmits an IP address, which is client information of the PC 100, a print notification, and a public key request to the authentication device 160 (step S701).
[0083]
In the authentication device 160 that has received the IP address, the print notification, and the public key request, the secret key generation unit 161 generates a secret key unique to the IP address (step S702). Then, the public key processing unit 162 generates a public key from the secret key, and transmits the client information (IP address) of the requesting PC 100 and the generated public key to the printer device 130 (step S703).
[0084]
After generating the public key, the public key processing unit 162 generates a key table in the HDD 149, and registers the generated public key and secret key (step S704). Here, the data structure of the key table is the same as the structure of the key table of the first embodiment.
[0085]
Upon receiving the client information and the public key from the authentication device 160 (step S705), the printer device 130 transmits the received public key to the PC 100 having the IP address of the received client information (step S706).
[0086]
Here, the timing of generating and transmitting the public key may be such that the public key is received immediately from the authentication device 160 and is transmitted immediately after the printer device 130 becomes printable.
[0087]
The PC 100 receives the public key from the printer device 130 (step S707), and the subsequent print processing of the encrypted PDF document data (steps S708 to S723) is the processing in the first embodiment (steps S206 to S206 in FIG. 2). This is performed in the same manner as in S221). The structure of the print data generated by the printer driver 110 is the same as in the first embodiment.
[0088]
As described above, in the printer system according to the second embodiment, similarly to the first embodiment, it is possible to reliably prevent a malicious third party from intercepting the contents of the PDF document data on the network. The PDF document data and document authentication information can be stored in an encrypted state on a storage medium or the like until decryption using the private key information, so that the contents of the application document data can be viewed by a malicious system administrator. It can be prevented from being falsified or tampered with, and security in printing an encrypted document can be improved. Further, since the public key is transmitted from the printer device 130 to the PC 100 instead of the authentication device 160, the printer device can manage the public key of the client device.
[0089]
(Embodiment 3)
The printer system according to the second embodiment issues a print notification and a request for a public key from the PC 100 to the printer device 130, issues a public key request from the printer device 130 to the authentication device 160, and generates the authentication device 160. The transmitted public key is transmitted to the PC 100.
[0090]
The functional configurations of the printer system, the PC 100, the authentication device 160, and the printer device 130 according to the third embodiment are the same as those in the first embodiment.
[0091]
The job control unit 119 of the printer driver 110 requests a public key not to the authentication device 160 but to the printer device 130.
[0092]
Upon receiving the public key request and the client information (IP address) from the PC 100, the decryption unit 151 of the printer device 130 transmits the received public key request and the client information (IP address) to the authentication device 160. Further, the decryption unit 151 transmits a request to check the key table to the authentication device 160. Further, the decryption unit 151 decrypts the print data transmitted from the PC 100 using the secret key received from the authentication device 160.
[0093]
Upon receiving the client information and the public key request from the printer device 130, the secret key generation unit 161 of the authentication device 160 generates a secret key. The other configuration is the same as that of the printer system according to the first embodiment, and the description is omitted.
[0094]
Next, the printing process of the encrypted PDF document data by the printer system according to the embodiment configured as described above will be described. FIG. 9 is a flowchart illustrating a procedure of a process of printing encrypted PDF document data by the printer system according to the present embodiment. FIG. 10 is an explanatory diagram showing data exchange between the PC 100, the authentication device 160, and the printer device 130.
[0095]
First, the user encrypts the PDF document with the document password using the application 120 (Acrobat (R) or Acrobat Reader (R)), and specifies the IP address of the printer device 130 on the print screen of the application 120 in the encrypted state. Consider the case where a print command is issued.
[0096]
At this time, the job control unit 119 transmits client information (IP address), which is client information of the PC 100, a print notification, and a public key request to the printer device 130 (step S901).
[0097]
The printer device 130 that has received the client information (IP address), the print notification, and the public key request transmits the received client information (IP address) and public key request to the authentication device 160 (step S902).
[0098]
Upon receiving the client information (IP address) and the public key request (step S903), the authentication device 160 generates a secret key unique to the IP address by the secret key generation unit 161 (step S904). The public key processing unit 162 generates a public key from the secret key, and transmits the client information (IP address) of the requesting PC 100 and the generated public key to the printer device 130 (step S905).
[0099]
After generating the public key, the public key processing unit 162 generates a key table in the HDD 149, and registers the generated public key and secret key (step S906). Here, the data structure of the key table is the same as the structure of the key table of the first embodiment.
[0100]
The PC 100 receives the public key from the authentication device 160 (step S907), and the subsequent print processing of the encrypted PDF document data (steps S908 to S923) is the processing in the first embodiment (steps S206 to S206 in FIG. 2). This is performed in the same manner as in S221). The structure of the print data generated by the printer driver 110 is the same as in the first embodiment.
[0101]
As described above, in the printer system according to the third embodiment, similarly to the first embodiment, it is possible to reliably prevent a malicious third party from intercepting the contents of the PDF document data on the network. The PDF document data and document authentication information can be stored in an encrypted state on a storage medium or the like until decryption using the private key information, so that the contents of the application document data can be viewed by a malicious system administrator. It can be prevented from being falsified or tampered with, and security in printing an encrypted document can be improved. Further, when the printer device 130 receives the public key request from the PC 100 and makes a request for the public key to the authentication device 160, the printer device can know the start of printing of the encrypted document data of the PC 100 on the printer device side. Can be taken.
[0102]
In the above-described embodiment, the process of encrypting and decrypting print data using a public key and a secret key has been described. However, for example, a configuration using SEED and a SEED source may be used.
[0103]
In the embodiment described above, the secret key is transmitted from the authentication device 160 to the printer device 130. However, in order to further improve security, this secret key is a key whose expiration date expires only once. Can be used.
[0104]
Further, in the above-described embodiments, printing of PDF document data is described as an example, but any document data encrypted by the application 120 is not limited to PDF document data. The present invention can be applied to document data.
[0105]
In the embodiment described above, the IP address is used as the client information of the PC. However, any data that can identify the PC, such as an apparatus unique identification number, is used as the client information. Can be used.
[0106]
【The invention's effect】
As described above, according to the first aspect of the present invention, the client device is kept in a state where the application document data is encrypted and the document authentication information for decryption is encrypted with the public key information. , The content of the application document data can be reliably prevented from being intercepted by a malicious third party on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. In this case, it is possible to prevent the contents from being viewed or falsified, and to improve the security in printing the encrypted document.
[0107]
According to the second aspect of the invention, the application document data is received from the client device in a state where the application document data is encrypted and the document authentication information for decryption is encrypted with the public key information. This has the effect that it is possible to reliably prevent a malicious third party from intercepting the contents of the application document data on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. In this case, it is possible to prevent the contents from being viewed or falsified, and to improve the security in printing the encrypted document. Also, by transmitting the public key from the printer device to the client device instead of the authentication device, the printer device can manage the public key of the client device.
[0108]
Further, according to the third aspect of the invention, different public key information can be transmitted for each print job immediately at the time of the request, and the security of printing the encrypted document can be further improved. Play.
[0109]
According to the fourth aspect of the present invention, when there is a time difference between the time of a request and the start of printing, the public key information can be actually transmitted at the start of printing. It is possible to prevent an eavesdropping by a third party before the point in time, and it is possible to improve security in printing the encrypted document.
[0110]
According to the fifth aspect of the present invention, the application document data is received from the client device in an encrypted state and the document authentication information for decryption is encrypted with the public key information. This has the effect that it is possible to reliably prevent a malicious third party from intercepting the contents of the application document data on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until the printer document is decrypted using the secret key information, a malicious system administrator can save the application document data. In this case, it is possible to prevent the contents from being viewed or falsified, and to improve the security in printing the encrypted document. In addition, the printer device receives the public key request from the client device and makes a request for the public key to the authentication device, so that the printer device side can know the start of printing of the encrypted document data of the client device. This makes it possible to take the effect of
[0111]
Further, according to the invention of claim 6, it is possible to prevent decryption and printing of application document data by secret key information which is likely to be intercepted due to the expiration of the validity period, thereby further improving security. This has the effect that it can be performed.
[0112]
According to the seventh aspect of the present invention, the encrypted application document data is transmitted to the printer without being decrypted, and the document authentication information to be transmitted at the same time is transmitted in an encrypted state. Can be decrypted and printed, so that the contents of the application document data can be prevented from being intercepted by a malicious third party on the network, and the security in printing the encrypted document can be improved. It works.
[0113]
Further, according to the invention according to claim 8, it is possible to prevent decryption and printing of the application document data by the secret key information which is likely to be intercepted due to the expiration of the validity period, thereby further improving the security. It has the effect of being able to do it.
[0114]
According to the ninth aspect of the present invention, the application document data is received from the client device in an encrypted state and the document authentication information for decryption is encrypted with the public key information. In addition, it is possible to reliably prevent a malicious third party from intercepting the contents of the application document data on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. In this case, it is possible to prevent the contents from being viewed or falsified, and to improve the security in printing the encrypted document.
[0115]
According to the tenth aspect of the present invention, the application document data is received from the client device in a state where it is encrypted and the document authentication information for decryption is encrypted with the public key information. This has the effect that it is possible to reliably prevent a malicious third party from intercepting the contents of the application document data on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. In this case, it is possible to prevent the contents from being viewed or falsified, and to improve the security in printing the encrypted document. Also, by transmitting the public key from the printer device to the client device instead of the authentication device, the printer device can manage the public key of the client device.
[0116]
According to the eleventh aspect of the present invention, different public key information can be transmitted for each print job immediately when requested, and the security of printing an encrypted document can be further improved. Play.
[0117]
According to the twelfth aspect of the present invention, when there is a time lag between the time of a request and the start of printing, the public key information can be actually transmitted at the start of printing. It is possible to prevent an eavesdropping by a third party before the point in time, and it is possible to improve security in printing the encrypted document.
[0118]
According to the thirteenth aspect of the present invention, the application document data is received from the client device in an encrypted state and the document authentication information for decryption is encrypted with the public key information. This has the effect that it is possible to reliably prevent a malicious third party from intercepting the contents of the application document data on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until the printer document is decrypted using the secret key information, a malicious system administrator can save the application document data. In this case, it is possible to prevent the contents from being viewed or falsified, and to improve the security in printing the encrypted document. In addition, the printer device receives the public key request from the client device and makes a request for the public key to the authentication device, so that the printer device side can know the start of printing of the encrypted document data of the client device. This makes it possible to take the effect of
[0119]
According to the invention of claim 14, since the encrypted application document data is not decrypted, and the document authentication information for decryption is encrypted with the public key information and transmitted to the printer device, This has the effect of reliably preventing malicious third parties from intercepting the contents of the application document data on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. In this case, it is possible to prevent the contents from being viewed or falsified, and to improve the security in printing the encrypted document.
[0120]
According to the invention according to claim 15, the encrypted application document data is not decrypted, and the document authentication information for decryption is encrypted with the public key information and transmitted to the printer device. This has the effect of reliably preventing malicious third parties from intercepting the contents of the application document data on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until decrypted by using the private key information in the printer device, a malicious system administrator can store the application document data and the document authentication information. In this case, it is possible to prevent the contents from being viewed or falsified, and to improve the security in printing the encrypted document. Also, by transmitting the public key from the printer device to the client device instead of the authentication device, the printer device can manage the public key of the client device.
[0121]
According to the invention of claim 16, since the encrypted application document data is not decrypted, and the document authentication information for decryption is encrypted with the public key information and transmitted to the printer device, This has the effect of reliably preventing malicious third parties from intercepting the contents of the application document data on the network. In addition, since the application document data and the document authentication information can be stored in an encrypted state on a storage medium or the like until the printer document is decrypted using the secret key information, a malicious system administrator can save the application document data. In this case, it is possible to prevent the contents from being viewed or falsified, and to improve the security in printing the encrypted document. Further, the printer device can request the public key from the authentication device in response to the public key request from the client device, and the printer device can know the start of printing the encrypted document data of the client device on the printer device side. This has the effect of making it possible to take measures.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a network configuration and a functional configuration of a client device (PC), an authentication device, and a printer device according to a first embodiment of the present invention.
FIG. 2 is a flowchart illustrating a procedure of a process of printing encrypted PDF document data by the printer system according to the first embodiment;
FIG. 3 is an explanatory diagram showing data exchange between a PC, an authentication device, and a printer device in the printer system according to the first embodiment.
FIG. 4 is a flowchart illustrating a procedure of a print data interpretation process.
FIG. 5 is a data structure diagram of a key table.
FIG. 6 is a data structure diagram showing a structure of print data generated by a printer driver.
FIG. 7 is a flowchart illustrating a procedure of a process of printing encrypted PDF document data by the printer system according to the second embodiment;
FIG. 8 is an explanatory diagram showing data exchange between a PC, an authentication device, and a printer device in a printer system according to a second embodiment.
FIG. 9 is a flowchart illustrating a procedure of a process of printing encrypted PDF document data by the printer system according to the third embodiment;
FIG. 10 is an explanatory diagram showing data exchange between a PC, an authentication device, and a printer device in a printer system according to a third embodiment.
FIG. 11 is a data structure diagram showing a structure of print data flowing between a conventional printer driver and a printer device.
[Explanation of symbols]
100 PC (client device)
110 Printer Driver
111 PDL processing unit
112 Document Password Processing Unit
113 User interface section
115 monitor
116 keyboard
118 Encryption unit
119 Job control unit
120 applications
130 Printer
140 Printer controller
141 PJL processing unit
142 PDL processing unit
144 Panel control unit
145 accumulation control unit
146 Print control unit
148 Operation panel
150 print engine
151 Decoding unit
160 Authentication device
161 Secret key generation unit
162 Public key processing unit
165 accumulation control unit
169 Authentication device

Claims (16)

An authentication device that is connected via a network to a client device that makes a print request for encrypted data, and that is connected to the client device and the authentication device over a network, and that receives a print request from the client device; A printer system that performs a printing process by performing
The authentication device,
When a public key request is received from the client device, secret key information for identification information unique to the client device is generated, and secret key information generated together with the identification information of the client device is transmitted to the printer device. Key generation means;
Public key processing means for generating public key information from the secret key information generated by the secret key generation means, and transmitting the generated public key information to the client device;
The printer device includes:
When receiving print data received from the client device, a decryption unit that decrypts the print data with the secret key information,
Document decryption means for decrypting the encrypted application document data by the document authentication information included in the print data,
Printing means for printing the application document data decrypted by the document decrypting means,
A printer system comprising: An authentication device that is connected via a network to a client device that makes a print request for encrypted data, and that is connected to the client device and the authentication device over a network, and that receives a print request from the client device; A printer system that performs a printing process by performing
The authentication device,
Secret key generation means for generating secret key information for identification information unique to the client device when receiving a public key request from the client device;
Public key processing means for generating public key information from the secret key information generated by the secret key generation means and transmitting the generated public key information to the printer device,
The printer device includes:
When receiving the public key information from the authentication device, the received public key information is transmitted to the client device, and when print data is received from the client device, the authentication device determines whether the key is valid. Transmitting a request, and when the received determination result is valid, a decryption unit that decrypts the print data with the secret key information;
Document decryption means for decrypting the encrypted application document data by the document authentication information included in the print data,
Printing means for printing the application document data decrypted by the document decrypting means,
A printer system comprising: The printer system according to claim 2, wherein the decryption unit of the printer device immediately transmits the public key information to the client device. The printer system according to claim 2, wherein the decryption unit of the printer device transmits the public key information to the client device when the printer device becomes printable. An authentication device that is connected via a network to a client device that makes a print request for encrypted data, and that is connected to the client device and the authentication device over a network, and that receives a print request from the client device; A printer system that performs a printing process by performing
The authentication device,
A secret key generation unit that generates secret key information for identification information unique to the client device when a public key request is received from the printer device;
Public key processing means for generating public key information from the secret key information generated by the secret key generation means, and transmitting the generated public key information to the client device;
The printer device includes:
When print data is received from the client device, a request for a key validity determination is transmitted to the authentication device, and when the received determination result is valid, the print data is decrypted by the secret key information. Decrypting means for converting
Document decryption means for decrypting the encrypted application document data by the document authentication information included in the print data,
Printing means for printing the application document data decrypted by the document decrypting means,
A printer system comprising: The authentication device further includes a storage unit that stores key management information in which identification information of the client device, the secret key information, and a validity period of the secret key information are associated with each other,
The public key processing unit of the authentication device further receives a request from the printer device, refers to the key management information, and determines whether the secret key information corresponding to the client information is within the validity period. Determine whether or not, transmitting the determination result and secret key information for the client device to the printer device,
The decryption unit of the printer device transmits a key validity determination request to the authentication device when receiving the print data received from the client device, and when the received determination result is valid. 6. The printer system according to claim 1, wherein the print data is decrypted by using the secret key information. An authentication device that is connected to a client device that issues a print request for encrypted data and a printer device that receives a print request from the client device and performs print processing over a network, and manages key information related to the encrypted data,
When a public key request is received from the client device, secret key information for identification information unique to the client device is generated, and secret key information generated together with the identification information of the client device is transmitted to the printer device. Key generation means;
Public key processing means for generating public key information from the secret key information generated by the secret key generation means, and transmitting the generated public key information to the client device;
An authentication device comprising: A storage unit for storing key management information in which the identification information of the client device, the secret key information, and the validity period of the secret key information are associated with each other,
The public key processing unit receives the request from the printer device, refers to the key management information, and determines whether the secret key information corresponding to the client information is within the validity period. The authentication device according to claim 7, wherein the authentication device transmits the determination result and secret key information for the client device to the printer device. A printer device that is connected via a network to a client device that issues a print request for encrypted data and an authentication device that manages key information related to the encrypted data, and that performs a print process by receiving a print request from the client device,
When receiving the print data received from the client device, a decryption unit that decrypts the print data with secret key information received from the authentication device,
Document decryption means for decrypting the encrypted application document data included in the print data, according to the document authentication information included in the print data,
Printing means for printing the application document data decrypted by the document decrypting means;
A printer device comprising: A printer device that is connected via a network to a client device that issues a print request for encrypted data and an authentication device that manages key information related to the encrypted data, and that performs a print process by receiving a print request from the client device,
When receiving the public key information from the authentication device, the received public key information is transmitted to the client device, and when print data is received from the client device, the authentication device determines whether the key is valid. Transmitting a request, and when the received determination result is valid, a decryption unit that decrypts the print data with the secret key information received from the authentication device;
Document decryption means for decrypting the encrypted application document data included in the print data, according to the document authentication information included in the print data,
Printing means for printing the application document data decrypted by the document decrypting means,
A printer device comprising: 11. The printer device according to claim 10, wherein the decryption unit immediately transmits the public key information to the client device. 11. The printer device according to claim 10, wherein the decryption unit transmits the public key information to the client device when it becomes printable. A printer device that is connected via a network to a client device that issues a print request for encrypted data and an authentication device that manages key information related to the encrypted data, and that performs a print process by receiving a print request from the client device,
When print data is received from the client device, a request for a key validity determination is transmitted to the authentication device, and when the received determination result is valid, the print data is received from the authentication device. Decryption means for decrypting with the secret key information;
Document decryption means for decrypting the encrypted application document data included in the print data, according to the document authentication information included in the print data,
Printing means for printing the application document data decrypted by the document decrypting means,
A printer device comprising: A printer driver program for sending print data to a printer device connected to a network and making a print request,
A document authentication information processing procedure for allowing a user to input document authentication information for decrypting application document data encrypted by a predetermined application,
A print data generation procedure for generating print data including the document authentication information and the encrypted application document data input by the document authentication information processing procedure;
Requesting public key information to the authentication device, an encryption procedure for encrypting the print data with the public key information received from the authentication device,
Transmitting a print data encrypted by the encryption procedure and identification information unique to the client apparatus to a printer apparatus connected to a network;
Printer driver program that causes a computer to execute A printer driver program for sending print data to a printer device connected to a network and making a print request,
A document authentication information processing procedure for allowing a user to input document authentication information for decrypting application document data encrypted by a predetermined application,
A print data generation procedure for generating print data including the document authentication information and the encrypted application document data input by the document authentication information processing procedure;
Requesting public key information to an authentication device, receiving the public key information generated by the authentication device via the printer device, and encrypting the print data with the received public key information,
Transmitting a print data encrypted by the encryption procedure and identification information unique to the client apparatus to a printer apparatus connected to a network;
Printer driver program that causes a computer to execute A printer driver program for sending print data to a printer device connected to a network and making a print request,
A document authentication information processing procedure for allowing a user to input document authentication information for decrypting application document data encrypted by a predetermined application,
A print data generation procedure for generating print data including the document authentication information and the encrypted application document data input by the document authentication information processing procedure;
Requesting the printer device for public key information, receiving the public key information from the authentication device, and encrypting the print data with the received public key information;
Transmitting a print data encrypted by the encryption procedure and identification information unique to the client apparatus to a printer apparatus connected to a network;
Printer driver program that causes a computer to execute

Images