JP2004287912A - Processing service provision device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve security in processing service using at least one job processor on a network such as the Internet. <P>SOLUTION: A composite machine as processing service providing device acquires security-related attribute information about a plurality of usable job processors (S20, S40, S22), acquires security requirement information required by the processing service (S12), and decides the job processor used for the processing service (S24). The composite machine directs the decided job processor to execute a job process related to the processing service (S26, S28). <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a processing service providing apparatus, and more particularly, to an apparatus for providing a processing service achieved using at least one job processing apparatus on a network.
[0002]
[Prior art]
With the spread of networks such as the Internet and LANs (local area networks) and the increase in capacity, information processing services using job processing devices on these networks have been provided. Such a service includes, for example, an OCR process for image data including characters, that is, a process of reading character information included in image data and converting it to text data. In this case, upon receiving an OCR processing command and image data input from the user, the processing service providing apparatus sends a request for OCR processing and transmission of image data to a job processing apparatus that actually performs OCR processing via a network. When the processing is completed in the job processing apparatus, a series of processing of receiving the text data of the processing result via the network and presenting it to the user is performed.
[0003]
Note that conventional techniques using job processing on a network are described in Patent Documents 1, 2, and 3 below.
[0004]
[Patent Document 1]
JP 08-123744 A
[Patent Document 2]
JP 2002-096686 A
[Patent Document 3]
JP 2001-282970 A
[0005]
[Problems to be solved by the invention]
However, there is a security concern in the processing service using such a job processing device on the network. In particular, when using a job processing apparatus on the Internet away from the LAN of the own organization, it is necessary to ensure that sufficient confidentiality of data is secured or that data is not falsified. Is concerned.
[0006]
An object of the present invention is to improve security in a processing service using a job processing device on a network.
[0007]
[Means for Solving the Problems]
In order to solve the above problem, a processing service providing apparatus according to the present invention includes a plurality of jobs that can be used in a processing service providing apparatus that provides a processing service achieved by using at least one job processing apparatus on a network. A determining unit that determines a job processing device to be used for the processing service based on the security-related attribute information of the processing device and the security requirement information required for the processing service; Instruction means for instructing the job processing device.
[0008]
According to this configuration, the job processing device to be used is selected based on the security-related attribute information of the job processing device and the security requirements. The security-related attribute information is obtained by removing general attribute information that is not related to security from the attribute information of the job processing apparatus, and includes security policy information related to a security function and affiliation information related to an installation position. Therefore, it is possible to provide a processing service that satisfies security requirements such as enhancing security regarding confidentiality and tampering prevention of information.
[0009]
Preferably, in the processing service providing apparatus of the present invention, the determining means determines a job processing apparatus to be used for each processing service to be provided, and the instructing means determines the job processing related to each processing service by the determined job. Instruct the processing unit.
[0010]
According to this configuration, the job processing apparatus to be used can be determined based on the security requirements for each of the processing services that can be provided. Therefore, for example, it is possible to set such that a high security requirement is imposed on a processing service that handles important data, and a low security requirement is imposed on general processing.
[0011]
Preferably, the processing service providing apparatus according to the present invention includes: a requesting unit that requests a job processing apparatus or an apparatus that holds information related to the job processing apparatus to provide security-related attribute information via a network; Acquiring means for acquiring attribute information, wherein the determining means uses the acquired security-related attribute information. This makes it possible to acquire security-related attribute information periodically or at an arbitrary time. Therefore, not only can security-related attribute information be acquired in advance, but also it can be acquired when a processing service is executed.
[0012]
Preferably, in the processing service providing apparatus of the present invention, the security-related attribute information and the security requirement information relate to encrypted communication using a public key. As a result, confidentiality, tampering prevention, and the like can be maintained at the security requirement level. Preferably, in the processing service providing apparatus of the present invention, the security-related attribute information and the security requirement information include a condition relating to at least one of a certification authority, a cryptographic method, and a key length for a public key.
[0013]
Preferably, in the processing service providing apparatus of the present invention, the security requirement information includes a condition that an organization in which the job processing apparatus to be used is installed is the same as an organization in which the processing service providing apparatus is installed.
[0014]
Preferably, in the processing service providing apparatus of the present invention, at least one security requirement information prepared in advance is presented to a user who requests execution of the processing service, and the user is acknowledged or selected as security requirement information used by the determination unit. And selecting means for causing the selection. In the security requirements to be presented, a plurality of requirements may be packaged. With this configuration, each user can easily approve or select security requirements.
[0015]
Preferably, in the processing service providing apparatus according to the present invention, the instruction means includes: creation means for creating instruction data describing job processing contents required for execution of the processing service; data to be processed in job processing; Security processing means for performing security processing on the data in accordance with the corresponding security requirement information or security-related attribute information and transmitting the data to the job processing apparatus.
[0016]
Preferably, in the processing service providing apparatus according to the present invention, the creating means performs a security measure required for the job processing apparatus instructing the job processing according to the corresponding security requirement information or security-related attribute information. Describe in the data.
[0017]
A processing service providing method according to the present invention is a processing service providing method for performing, using a computer, a processing service achieved using at least one job processing device on a network. A determining step of determining a job processing apparatus to be used for the processing service based on the security-related attribute information of the apparatus and security requirement information required for the processing service; and the computer determining job processing related to the processing service. And an instruction step for instructing the completed job processing device.
[0018]
The processing service providing program according to the present invention provides a processing service providing apparatus that provides processing services achieved using at least one job processing apparatus on a network, with security-related attribute information of a plurality of available job processing apparatuses. Determining a job processing device to be used for a processing service based on security requirement information required for the processing service, and instructing a job processing device related to the processing service to the determined job processing device And let it run.
[0019]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.
[0020]
FIG. 1 is a schematic diagram illustrating a configuration of a system including a processing service providing apparatus according to the present embodiment and a job processing apparatus on a network. This system includes a multifunction peripheral 10 as a processing service providing device, and servers A12, B14, and C16 as job processing devices. The multifunction device 10 is a device having a scanner, a printer, a copier, a facsimile, and other functions. The server A12 and the server B14 are connected on the same LAN, and are connected to the server C16 via the Internet 18. These servers are, for example, various information processing apparatuses such as an OCR processing apparatus, an image processing apparatus, and similar multifunction peripherals. In the illustrated example, the MFP 10 is in an environment where an arbitrary server can be selected from these three servers and information processing can be executed.
[0021]
FIG. 2 is a schematic configuration diagram of the MFP 10 as a processing service providing apparatus and the job processing apparatuses 20 such as servers A12, B14, and C16.
[0022]
First, in the multifunction peripheral 10, a UI (user interface) 102 is a user interface mechanism that displays a state of the multifunction peripheral 10, an operation menu, and the like, and receives a user's selection and parameter input thereto. It has numeric key buttons and various control buttons (copy start button, etc.). The various processing modules 104 are function modules that implement a scan function, a print function, a copy function, a facsimile transmission / reception function, and the like. These various processing modules 104 are configured by a combination of hardware such as a scan engine, a print engine, and a facsimile machine, and software for controlling the hardware. The communication control unit 106 is a functional module that performs various control processes related to communication between the MFP 10 and other devices on the network 22 such as a LAN.
[0023]
The encryption / decryption processing unit 108 performs encryption on document data transmitted from the MFP 10 to the network 22 and decrypts transmitted encrypted data as security processing means in a communication path. It is a functional module. This will be described in detail later. The token I / F (interface) 110 is a mechanism that accepts a hardware token held by a user and obtains an electronic signature using the private key of the user by communicating with the token. Here, the hardware token is a small authentication device carried by the user, and is obtained by encrypting the data to be signed with the storage chip for storing the user's private key data using the user's private key. An arithmetic circuit for generating signature data and an interface mechanism for inputting data to be signed and outputting signature data are provided. The user management unit 112 manages various types of information on a user to be served by the MFP 10. The information managed by the user management unit 112 includes, for example, authentication information (for example, password and biometrics) used for user authentication. The flow control unit 114 is a functional module that instructs each job processing apparatus 20 required to execute the processing service to execute a necessary process in order to realize the processing service requested by the user. When two or more job processing apparatuses 20 are used for one processing service, processing is sequentially instructed to the job processing apparatuses 20 targeted for execution requests according to the series of flows. The processing result of each job processing device 20 is returned to the MFP 10 as needed. Further, the job processing device selection unit 116 determines the job processing device 20 that instructs the execution of the job processing in the execution of the processing service, as described later in detail.
[0024]
The job processing device 20 includes an application 202 (program) that executes a job process provided by the device, a communication control unit 204 that executes a control process for communication with another device on the network 22, And an encryption / decryption processing unit 206 for executing encryption and decryption processing at the time. The encryption / decryption processing unit 206 has functions equivalent to those of the encryption / decryption processing unit 108 of the MFP 10. In addition, it holds security-related attribute information 208, and transmits the information via the communication control unit 204 in response to a request from the job processing device selection unit 116 of the MFP 10.
[0025]
The above-described encryption / decryption processing unit 108 supports a public key cryptosystem. As an example of the encryption processing used by the encryption / decryption processing unit 108, the target document data is encrypted using a session key (common key) generated by a random number or the like, and the session key is encrypted with the public key of the transmission destination. And transmitting the encrypted data to the destination. The receiving side obtains a session key by decrypting the received data with its own private key, and decrypts the encrypted document data with the session key. In the following description, the phrase "encrypt with a public key" means not only the case where document data is literally encrypted with a public key, but also the case where such a session key is used for encryption processing. Shall be.
[0026]
Further, the encryption / decryption processing unit 108 has a function of applying an electronic signature to the document data to be transmitted and verifying the electronic signature attached to the received data. The electronic signature is obtained by encrypting a message digest obtained from document data to be signed according to a predetermined digest method such as MD5 (RFC1321) with a private key of the signer. The verification of the electronic signature is performed by decrypting the signature data with the signer's public key and determining whether or not the decryption result matches a message digest obtained from the document data to be signed according to a predetermined digest method. Is performed by If they match, it is proved that the document data is genuine data from the signer, and that the document data has not been tampered with.
[0027]
Here, the encryption / decryption processing unit 108 stores the server A12, the server B14, the server C16, and the public key of the user. It is also preferable to provide the encryption / decryption processing unit 108 with a function of obtaining the public key of each server or user from a predetermined key management device on the network as needed. Further, the encryption / decryption processing unit 108 has a secret key of the MFP 10 itself, and can perform an electronic signature of the MFP 10.
[0028]
In this configuration, when it is necessary to perform a user's electronic signature on the target data, the communication control unit 106 creates a message digest of the target data according to a method such as MD5, and transmits the message digest to the token I / F 110. Input to the hardware token attached to. The hardware token encrypts the input message digest with the user's private key, and returns the result of the encryption process (ie, the user's signature) to the communication control unit 106. When the communication control unit 106 adds the user signature to the target data, a digital signature of the user for the target data is obtained.
[0029]
In the above, the method of performing the user's electronic signature using the user's hardware token has been described. However, as another method, the user's secret key is stored in the multifunction peripheral 10 in advance, and the secret key is used. A method of performing a digital signature of the user by the same processing as described above is also possible. In this method, in order to protect the secret key of the user, it is necessary to require the user to input authentication information such as a password and biometrics, and thereby, only when the user authentication is successful, it is necessary to control the electronic signature of the user. I do. In the case of a configuration using a hardware token, if a processing service that requires a user signature is performed, in the worst case, it is necessary to wait with the token set in the MFP 10 until the processing service is completed. Such a wait is not necessary in a configuration in which the secret key is stored in the private key.
[0030]
When security is to be improved by using the above-described encryption or the like, there is a problem as to whether or not the security countermeasures in the counterpart job processing apparatus 20 are sufficient. The job processing device selector 116 is provided to solve this problem. That is, by acquiring security-related attribute information of each job processing device 20 on the network and comparing the acquired information with security requirements required for the processing service, the job processing device 20 to be used for the processing service is determined.
[0031]
Security-related attribute information is information that is necessary in consideration of security, and includes affiliation information such as the owner, manager, and installation location of the job processing device, and security policy information related to the security function of the job processing device. Can be roughly divided into Among the affiliation information, the information on the installation position can be obtained from an IP (Internet Protocol) address based on a correspondence table or the like. The security policy information can be divided into security functions provided in the job processing apparatus 20 and information on security functions actually used as standard. There are various security functions, and as an example, a function of encrypting a communication path by a public key cryptosystem can be cited. As security policy information in this case, which certificate authority issues the public key certificate, which encryption method (RSA method, elliptic curve encryption method, etc.) is supported, and the key length to be encrypted (64 Bit or 128 bit). Further, the security policy information on another security function may include information indicating whether or not the job processing apparatus 20 includes a security protocol (for example, HTTPS: Hyper Text Transfer Protocol over SSL). Further, in the case where the level of the countermeasures for preventing unauthorized access to the job processing apparatus 20 can be indicated by the use of specific software related to security, the presence or absence of certification of a public organization, and the like, It is also possible to use such information. In addition, the job processing device 20 includes information such as whether an electronic signature of a person in a responsible position is given to the processing result, and whether compensation is performed when secret leakage or data falsification occurs. You may.
[0032]
In selecting the job processing device 20, general attribute information indicating the type of the job processing is also required. For example, when performing an OCR process or an image processing process, after selecting a job processing device 20 that can perform the OCR process or a job processing device 20 that can perform the image processing in advance, the security-related attribute information is considered. Will be done.
[0033]
The job processing device selection unit 116 has a function of acquiring security-related attribute information via a network. That is, a request for information provision is made to a plurality of pre-registered job processing apparatuses 20 periodically or at a designated timing, and information to be held is updated based on the acquired information. If there is a server that collectively manages the information of the job processing apparatuses 20, the server may be requested to provide information. In this case, it is also possible to acquire information of the job processing device 20 that is not registered in advance. Of course, the administrator may provide information by using a storage medium such as a DVD or by directly inputting.
[0034]
The security requirement for the processing service is a requirement for a security level required to be implemented for the processing service. The settings can be made in various ways. For example, the administrator of the multifunction peripheral 10 can determine the standard requirements for the multifunction peripheral 10, or the user can provide the unique requirements. The requirement setting may be performed in advance, or may be performed every time a processing service execution command is input, regardless of whether the requirement setting has been performed in advance. Further, the requirement setting can be performed individually for each processing service, or can be set collectively by giving common items to a plurality of processing services. Specific security requirements can be divided into two according to the security-related attribute information to be referred to. One is a requirement corresponding to security policy information, and the other is a requirement corresponding to affiliation information. In both cases, the specific example described above can be used as the setting requirement. For example, it is possible to impose a requirement that a 128-bit key length is used for encryption in the public key cryptosystem, and that the job processing apparatus 20 belonging to the same organization as the organization where the multifunction peripheral 10 is installed is used. It is. The requirement setting can be performed through the UI 102, but may be separately performed by inputting document data or the like.
[0035]
Note that it may be difficult for some users to appropriately set security requirements. Therefore, for example, it is effective to package a plurality of security requirements, provide hierarchical levels such as a high security level, a standard security level, and a low security level, and associate each level with a specific security requirement. For example, a high level is limited to the in-house job processing device 20 and is associated with a security requirement that an electronic signature is also added. This allows the user to easily select appropriate security requirements. The setting of this level and the association with the requirement can be incorporated in the multifunction peripheral 10 in advance, or can be set by an administrator or the like.
[0036]
The job processing device selector 116 compares the given security requirement with the security-related attribute information of the job processing device 20 and determines the job processing device 20 to be used in the processing service. In making the determination, general requirements can be added in addition to the security-related attribute information and the corresponding security requirements. The general requirement is a requirement that is not related to security, such as a requirement for a charging fee and a standard processing time. In consideration of this general requirement, necessary general attribute information can be acquired from the job processing device 20 or the like in the same manner as the security-related attribute information. The actual job processing instruction to the job processing device 20 determined in this way is performed by the flow control unit 114 described above.
[0037]
In the above description, it is assumed that all the processing services are controlled by the MFP 10. However, a cooperative processing server that realizes a processing service in cooperation with the multifunction peripheral 10 may be provided, and a part of the functions described here may be transferred to the cooperative processing server. As an example, there is a method in which the encryption / decryption processing unit 108, the user management unit 112, the flow control unit 114, the job processing device selection unit 116, and the like are provided in the cooperative processing server. In this configuration, the multifunction peripheral 10 and the cooperative processing server can be collectively regarded as a processing service providing device, or the multifunction peripheral 10 is regarded as one information input terminal or one job processing device, and the cooperative processing server performs the processing service. It can be considered that it plays the role of the providing device. When the cooperative processing server is introduced, the user can request a processing service similar to that of the multifunction peripheral 10 from another terminal such as a multifunction peripheral that can access the cooperative processing server.
[0038]
Next, a series of flows in which a specific job processing apparatus 20 is selected and a processing service is executed will be described with reference to a flowchart of FIG. First, the MFP 10 requests each job processing device 20 to provide security-related attribute information using the function of the job processing device selection unit 116 (S20). In this example, it is assumed that the request is made through the network 22 at the stage when the MFP 10 is installed or periodically. Each job processing device 20 transmits the security-related attribute information 208 via the communication control unit 204 (S40). The job processing device selection unit 116 of the MFP 10 receives this information and stores it internally (S22).
[0039]
A user who wants to use the processing service of the multifunction peripheral 10 first logs in to the multifunction peripheral 10 from the UI 102 of the multifunction peripheral 10 as a user registered in the user management unit 112, if necessary. Of course, it is also possible to use the general environment of the MFP 10 without logging in. Then, the user inputs processing service contents (S10), then inputs security requirements (S12), and inputs processing target data if necessary. For example, in the case of the OCR process, the processing target data indicates image data including a character image. In the MFP 10, the flow control unit 114 calculates a job processing type required for the processing service input by the user based on the general attribute information. The job processing device selection unit 116 selects a job processing device that can execute the job processing type. Then, the security requirement input by the user is compared with the security-related attribute information of each job processing device 20, and the job processing device 20 to be used is determined (S24).
[0040]
The flow control unit 114 creates instruction data describing the content of the job processing instructing the job processing apparatus 20 (S26). Information regarding security required in the job processing device 20 is also described in the instruction data. This description is necessary especially when not complying with the standard security policy of the job processing apparatus 20, and is performed to inform the job processing apparatus 20 of what security measures other than the standard are required. That is, in the instruction sheet data, the required security measures are described by appropriately designating corresponding security requirements or necessary security policies from the security policy indicated by the job processing apparatus 20. Then, necessary security processing is performed on the instruction sheet data and the processing target data according to the corresponding security requirement information or the security-related attribute information of the corresponding job processing apparatus 20. Transmission is performed (S28). Examples of the security processing include an encryption processing using the public key of the job processing apparatus 20 in the encryption / decryption processing unit 108 and an electronic signature processing using the secret key of the user or the multifunction peripheral 10. When a plurality of job processing devices 20 are used in such a processing service, encryption is appropriately performed using the public keys of those devices. Note that the specific implementation format of the instruction data is not directly related to the gist of the present embodiment, and thus the description thereof is omitted. Please refer to it if necessary.
[0041]
The job processing device 20 first decrypts the data received by the communication control unit 204 using the secret key in the encryption / decryption processing unit 206 (S42). If necessary, the electronic signature is decrypted using the signer's public key, and the presence or absence of tampering is verified. Then, the application 202 executes a job process based on the sent instruction data. The execution result is also treated according to the instruction data, and is generally transmitted by the communication control unit 204 after being encrypted by the encryption / decryption processing unit 206 (S42). For example, when transmitting to the next job processing apparatus 20, encryption is performed using the public key of the apparatus, and when transmitting to the MFP 10, the public key of the MFP 10 is used. And then send it. An electronic signature may be applied as appropriate.
[0042]
The multifunction peripheral 10 decrypts the received result and the like using the secret key of the multifunction peripheral 10 in the encryption / decryption processing unit 108 (S30), and outputs the result using a printer function or the like (S32). Thereby, the user can obtain the result (S16).
[0043]
Here, a specific process of selecting a job processing device will be described with reference to FIG. FIG. 4 shows a system including a multi-function device 50 as a processing service providing device and printers A52, B56 and C60 as job processing devices. The printers A52, B56, and C60 are provided with storage units 54, 58, and 62, respectively. The storage units 54, 58, and 62 store attribute information including security-related attribute information and general attribute information.
[0044]
The printer A52 includes, as security-related attribute information, security policy information that a public key certificate of Company V can be used. The general attribute information also includes information that color printing on A4 paper can be executed at a printing speed of 15 sheets per minute. Similarly, the printer B56 has information indicating that the public key certificate of Company X can be used, A4 color printing can be performed, and printing at 10 sheets per minute is possible. The printer C60 has information that the public key certificate of Company X can be used, A4 color printing can be performed, and printing at five sheets per minute is possible. Each printer periodically transmits these pieces of attribute information to the multi-function device 50 in response to a request from the multi-function device 50. That is, the multi-function device 50 holds the attribute information of each printer.
[0045]
Now, it is assumed that a user who uses the multi-function device 50 is going to use a processing service of reading color image data using the scanner function of the multi-function device 50 and printing at high speed. In this case, the user logs in to the multi-function device 50 and inputs the processing content of “A4 color printing from the scanner”. Further, it is assumed that a requirement that “printing speed is high” is input as a general requirement, and a requirement that “public key certificate of company X” can be used is input as a security requirement. In the multi-function device 50, the flow control unit 114 calculates a job processing device necessary for the processing content. When it is determined that a job processing device capable of performing A4 color printing is required, the printers A52, B56, and C60 are selected as candidates by the job processing device selection unit 116 based on the general attribute information. Further, the job processing device selection unit 116 assigns priorities to the printers A52, B56, and C60 in order from the general requirements and the general attribute information. Further, based on the security requirements and the security-related attribute information, it is determined that the two printers B56 and C60 conform to the requirements. Then, the printer B56 that meets the security requirements is selected from among the printers having the higher priority according to the general requirements. Subsequent processing is as described above. In the example of FIG. 4, the security requirement is set as an essential condition and the general requirement is set as a dependent requirement. However, there is an arbitrary rule for integrating the general requirement and the security requirement. The user only has to give a condition relating to the priority in addition to the general requirements and security conditions as necessary.
[0046]
In the above description, the configuration using the MFP 10 or the MFP 10 and the cooperative processing server has been described as the processing service providing apparatus. However, the present invention can be similarly implemented when another device is used instead of the multifunction peripheral 10. For example, the contents described above can be introduced to a system in which a general computer is used as a processing service providing apparatus and various apparatuses for performing large-scale arithmetic processing are used as job processing apparatuses.
[Brief description of the drawings]
FIG. 1 is a schematic diagram illustrating an example of a system configuration according to an embodiment.
FIG. 2 is a block diagram illustrating a configuration example of a multifunction peripheral and a job processing apparatus.
FIG. 3 is a flowchart illustrating an example of the flow of a processing service.
FIG. 4 is a schematic diagram illustrating an example of a processing service using a printer.
[Explanation of symbols]
10 MFP, 12 server A, 14 server B, 16 server C, 18 Internet, 20 job processing device, 22 network, 102 UI, 104 various processing modules, 106 communication control unit, 108 encryption / decryption processing unit, 110 token I / F, 112 user management unit, 114 flow control unit, 116 job processing device selection unit, 202 application, 204 communication control unit, 206 encryption / decryption processing unit, 208 security-related attribute information.

Claims (11)

A processing service providing apparatus that provides a processing service achieved using at least one job processing apparatus on a network,
Determining means for determining a job processing device to be used for the processing service based on security-related attribute information of a plurality of available job processing devices and security requirement information required for the processing service;
Instruction means for instructing the determined job processing apparatus to perform job processing related to the processing service;
A processing service providing apparatus, comprising: The processing service providing apparatus according to claim 1,
The determining means determines a job processing device to be used for each processing service to be provided,
The processing service providing apparatus, wherein the instruction unit instructs the determined job processing apparatus to perform job processing related to each processing service. The processing service providing apparatus according to claim 1,
Request means for requesting a job processing device or a device holding information relating to the job processing device to provide security-related attribute information through a network;
Acquisition means for acquiring security-related attribute information provided through a network;
With
A processing service providing apparatus, wherein the determining means uses the acquired security-related attribute information. The processing service providing apparatus according to claim 1,
The processing service providing device, wherein the security-related attribute information and the security requirement information relate to encrypted communication using a public key. The processing service providing apparatus according to claim 4,
A processing service providing apparatus, wherein the security-related attribute information and the security requirement information include a condition regarding at least one of a certification authority, an encryption method, and a key length for a public key. The processing service providing apparatus according to claim 1,
The processing service providing apparatus, wherein the security requirement information includes a condition that an organization in which a job processing apparatus to be used is installed is the same as an organization in which the processing service providing apparatus is installed. The processing service providing apparatus according to claim 1,
A processing service, characterized by comprising a selection means for presenting at least one security requirement information prepared in advance to a user who requests execution of the processing service and accepting or selecting the security requirement information used by the determination means. Providing device. The processing service providing apparatus according to claim 1,
The instruction means is
Creation means for creating instruction data describing job processing contents required for execution of the processing service;
Security processing means for performing security processing on the processing target data of the job processing and the instruction data according to the corresponding security requirement information or security-related attribute information and transmitting the security processing to the job processing apparatus;
A processing service providing apparatus, comprising: The processing service providing apparatus according to claim 8,
The processing means is characterized in that the creating means describes a security measure required for the job processing apparatus instructing the job processing in the instruction data according to the corresponding security requirement information or security-related attribute information. apparatus. A processing service providing method for performing, using a computer, a processing service achieved using at least one job processing apparatus on a network,
A computer, based on security-related attribute information of a plurality of available job processing devices and security requirement information required for the processing service, determining a job processing device to be used for the processing service,
An instruction step in which the computer instructs the job processing apparatus on the determined job processing apparatus,
A processing service providing method, comprising: A processing service providing apparatus that provides a processing service achieved using at least one job processing apparatus on a network,
A determination procedure for determining a job processing apparatus to be used for a processing service based on security-related attribute information of a plurality of available job processing apparatuses and security requirement information required for the processing service;
An instruction procedure for instructing the determined job processing apparatus to perform job processing related to the processing service;
A service providing program.

Images