JP2004289684A - Job processing apparatus, and method and program for job processing - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a mechanism for keeping secrecy of a document to be processed or of process result in a work flow system, so as not to be known except the information processing apparatus processing a particular job. <P>SOLUTION: Based on an instruction document data 300 produced in an integrated machine 100, a process server 201 encrypts charging information obtained by the own processing, with the public key of a process server 203 for clearing the charge for a user using the above charging information. Also, a process server 202 performs predetermined image conversion against a received image data 350, based on the received instruction document data. The process server 202 encrypts the image data having been image converted with a user's public key, and stores the encrypted image data into a storage 400. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a job processing apparatus that sequentially performs predetermined job processing and realizes a series of services in cooperation with each other, and particularly to a security technique in job processing.
[0002]
[Prior art]
Various services for office work by connecting a scanner, facsimile machine, printer, copier, and multifunction machine integrating those functions to a LAN (local area network) and linking it with an information processing device such as a personal computer or mail server. Has been proposed.
[0003]
In recent years, a technique for linking various web applications scattered on the Internet has been proposed. If one system can be configured by connecting application services provided by various providers on the Internet, various existing services can be used, and it is expected that system development costs can be significantly reduced. In addition, languages such as XML (extensible Markup Language) have attracted attention as a common base for realizing such cooperative services.
[0004]
Further, as a conventional workflow system, those shown in Patent Literature 1, Patent Literature 2, and Patent Literature 3 are known.
[0005]
[Patent Document 1]
JP 08-123744 A
[Patent Document 2]
JP 2002-096686 A
[Patent Document 3]
JP 2001-282970 A
[0006]
[Problems to be solved by the invention]
When a workflow is configured using a service on the Internet, a document to be processed or a processing result flows on the Internet. However, conventional workflow systems do not pay attention to the security of documents flowing through such networks.
[0007]
In addition, some documents of the processing target and the processing result are not only leaked to a third party on the network, but also are not desired to be disclosed to the information processing apparatus existing in the workflow system.
[0008]
The present invention has been made in view of such a point, and in a workflow system, a document to be processed or a processing result is kept secret so that it is not known except to an information processing apparatus that performs a specific job process. The purpose is to provide a mechanism.
[0009]
[Means for Solving the Problems]
A job processing apparatus according to the present invention is a job processing apparatus that sequentially performs job processing based on instruction data and realizes a series of services in cooperation with each other, and performs predetermined job processing based on instruction data. Means for performing, on the processing result data obtained by the job processing, an encryption process which can be decrypted by a subsequent job processing apparatus which performs another job processing, on the processing result data; and Transmitting means for transmitting the processed result data to the job processing apparatus for performing the next job processing.
[0010]
According to the present invention, the encryption unit performs, on the processing result data, encryption processing that can be decrypted by a subsequent job processing apparatus that performs another job processing on the processing result data obtained by the job processing. Thus, the processing result data can be kept private except for the subsequent processing server or the like.
[0011]
According to one aspect of the job processing apparatus according to the present invention, when the processing result data is confidential information, the encryption unit performs an encryption process on the processing result data.
[0012]
According to the present invention, since the encryption unit performs encryption when the processing result data is confidential information, unnecessary processing is not performed, and processing efficiency can be improved.
[0013]
According to another aspect of the job processing apparatus according to the present invention, the encrypting means is means for encrypting the processing result data with a public key of the subsequent job processing apparatus.
[0014]
According to another aspect of the job processing apparatus according to the present invention, each job processing apparatus transmits processing result data obtained by its own job processing to a job processing apparatus that performs the next job processing according to the instruction data. Thus, in a system for realizing a series of services, a receiving means for receiving a processing result data group from a job processing apparatus which constitutes the system and which performs the immediately preceding job processing; A decoding unit that decodes the processing result data that can be decoded by itself, a processing unit that performs its own job processing using the decoded processing result data based on the instruction book data, Based on the data, the job processing device that performs still another job processing on the processing result data obtained by its own job processing can be decrypted. Encryption means for performing a proper encryption process, processing result data received by the decryption means in the received processing result data group, and processing result data encrypted by the encryption means. , A generating unit for generating a new processing result data group, and a transmitting unit for transmitting the generated new processing result data group to a job processing apparatus that performs the immediately following job processing.
[0015]
An instruction book creation device according to the present invention sequentially executes job processing based on a job processing flow and creates instruction book data indicating job processing contents of each job processing apparatus for realizing a series of services in cooperation with each other. An identification unit for identifying, based on the job processing flow, a job processing device of which the processing result data is used for processing of a subsequent job processing device among the job processing devices; An instruction creating means for creating the instruction data for the processing device, wherein the instruction creating means converts the processing result data by the job processing device as the instruction data for the job processing device identified by the identification means. On the other hand, it includes an instruction that the subsequent job processing apparatus that performs processing using the processing result data performs an encryption process that can be decrypted. Including the means to create a 示書 data.
[0016]
In the job processing method according to the present invention, a series of services are realized in cooperation with each other by the job processing apparatus sequentially performing job processing and passing the processing result to a subsequent job processing apparatus via the job processing control apparatus. A job processing method, a receiving step of receiving instruction data from the job processing control device, a processing step of performing a predetermined job processing based on the received instruction data, and processing result data obtained by the job processing An encryption step of performing a decryption process on the processing result data, which can be decrypted by a subsequent job processing device that performs still another job processing, and transmitting the encrypted processing result data to the job processing control device Transmitting step.
[0017]
According to another aspect of the present invention, there is provided a job processing method in which a job processing device sequentially performs a job process, and passes a processing result to a subsequent job processing device via a job processing control device, so that the A job processing method for realizing a service, comprising: a receiving step of receiving instruction data from the job processing control device; a processing step of performing a predetermined job processing based on the received instruction data; and a job processing method. An encrypting step of performing, on the processed result data, an encrypted process that can be decrypted by a subsequent job processing device that performs another job process on the processed result data; Transmitting to the control device.
[0018]
In a job processing method according to another aspect of the present invention, each job processing device transmits processing result data obtained by its own job processing to a job processing device that performs the immediately following job processing according to the instruction data. A job processing method for realizing a series of services, comprising: a receiving step of receiving a processing result data group from a job processing apparatus which performs the immediately preceding job processing; A decoding step of decoding the result data, a processing step of performing its own job processing using the decrypted processing result data based on the instruction data, and a processing step of its own job processing based on the instruction data. An encryption step of performing, on the obtained processing result data, an encryption process that can be decrypted by a job processing device that performs another job process; A generation step of generating a new processing result data group by combining the processing result data that has not been decrypted by the decryption means in the processing result data group and the processing result data encrypted by the encryption means; Transmitting the generated new processing result data group to a job processing apparatus that performs the immediately following job processing.
[0019]
According to the present invention, there is provided an instruction creating method for sequentially executing job processing based on a job processing flow and creating instruction data indicating job processing contents of each job processing apparatus for realizing a series of services in cooperation with each other. An identification step of identifying a job processing apparatus whose processing result data is used for processing of a subsequent job processing apparatus among the job processing apparatuses based on the job processing flow; and An instruction creation step of creating the instruction data for the apparatus, wherein the instruction creation step includes, as instruction data for the job processing apparatus identified in the identification step, the processing result data by the job processing apparatus. An instruction data containing an instruction that a subsequent job processing device that performs processing using the processing result data performs an encryption process that can be decrypted. Comprising the step of creating the data.
[0020]
A program according to the present invention is a program for causing a job processing apparatus to sequentially perform job processing and realizing a series of services in cooperation with each other. A processing procedure for performing a predetermined job processing based on the processing result data, and an encryption processing that can be decrypted by a subsequent job processing device that performs still another job processing on the processing result data obtained by the job processing is performed on the processing result data. An encryption procedure to be performed and a transmission procedure to transmit the encrypted processing result data to the job processing apparatus that performs the next job processing are executed.
[0021]
According to another aspect of the present invention, there is provided a program that causes a job processing device to sequentially perform job processing, and passes the processing result to a subsequent job processing device via a job processing control device, thereby causing A program for realizing a service, wherein the job processing device has a receiving procedure of receiving instruction data from the job processing control apparatus, and a processing procedure of performing a predetermined job process based on the received instruction data. An encryption procedure for performing, on the processing result data obtained by the job processing, an encryption process that can be decrypted by a subsequent job processing device that performs another job processing on the processing result data; and an encrypted process. And transmitting a result data to the job processing control device.
[0022]
According to another aspect of the present invention, a program according to the present invention allows each job processing device to transmit processing result data obtained by its own job processing to a job processing device that performs the immediately following job processing in accordance with the instruction data. A program for realizing a service, wherein the job processing device includes a receiving unit that receives a processing result data group from a job processing device that performs the immediately preceding job processing; A decryption procedure for decrypting the decryptable processing result data, a processing procedure for performing its own job processing using the decrypted processing result data based on the instruction data, and a Encryption processing that can be decrypted by a job processing apparatus that performs still another job processing on the processing result data obtained by this job processing. A new processing result data group by combining the encryption result, the processing result data that has not been decrypted by the decryption means in the received processing result data group, and the processing result data that has been encrypted by the encryption means. And a transmission procedure of transmitting the generated new processing result data group to the job processing apparatus that performs the immediately following job processing.
[0023]
According to another aspect of the present invention, there is provided a program which generates instruction data indicating job processing contents of each job processing apparatus which sequentially performs job processing based on a job processing flow and realizes a series of services in cooperation with each other. A program for causing the computer to identify, based on the job processing flow, a job processing device whose processing result data is used for processing of a subsequent job processing device among the job processing devices. And an instruction creation procedure for creating the instruction data for each of the job processing apparatuses. The processing is performed on the processing result data by the job processing apparatus as the instruction data for the job processing apparatus identified in the identification procedure. A subsequent job processing device that performs processing using the result data performs a decryption process that can be decrypted. To execute the instruction sheet making procedure for creating instruction data including instructions.
[0024]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention (hereinafter, referred to as embodiments) will be described with reference to the drawings.
[0025]
FIG. 1 is a system configuration diagram of a workflow system according to the present embodiment. The multifunction peripheral 10 is a device that has functions of a scanner, a printer, a copier, a facsimile, and the like, and is a device that creates instruction data indicating the content of job processing performed by each processing server. The processing server A20, the processing server B30, and the processing server C40 are servers that perform predetermined job processing in the form of, for example, a web application service. Each of these processing servers performs one or more types of job processing. Note that the multifunction peripheral 10 can also be regarded as a type of server that provides a scan service, a print service, and the like.
[0026]
Each of these multifunction peripherals and each server has its own private key and public key in the public key encryption system. Further, each of the multifunction peripheral and each server has a public key of another processing server or the like, or sends a public key of another processing server or the like from a key server (not shown) on a network as necessary. get. In the present embodiment, a public key system is used as an encryption system, but another encryption system such as a common key system may be used.
[0027]
The processing server or the like configured as described above sequentially performs predetermined job processing, appropriately encrypts processing result data obtained by the job processing, and provides a series of services by cooperating with each other. Here, the processing result data is a parameter used for the job processing of the subsequent processing server, and may be a parameter included in the instruction data. Further, the processing result data is a job processing target of the subsequent processing server, and may be document data attached to the instruction data.
[0028]
In the present embodiment, the encryption of the processing result data is performed using the public key of the processing server that performs another job processing on the processing result data. By applying such encryption to the processing result data, the processing result data can be kept private to a third party. In addition, this processing result data can be kept private except for the processing server that holds the private key corresponding to the public key used for encryption.
[0029]
Next, the detailed configuration of the multifunction peripheral 10 and the processing server A20 will be described with reference to FIG. Note that the processing server B30 and the processing server C40 that perform the various job processes shown in FIG.
[0030]
First, in the multifunction peripheral 10, a UI (user interface) 11 is a user interface mechanism that displays the state of the multifunction peripheral 10, an operation menu, and the like, and receives a user's selection and parameter input thereto, such as a liquid crystal touch panel, It has numeric key buttons and various control buttons (copy start button, etc.).
[0031]
The instruction data storage unit 12 stores data necessary for creating instruction data. The instruction book creation unit 13 indicates the job processing contents of each processing server required to realize a series of services based on the data stored in the instruction book data storage unit 12, the parameters input from the UI 11, and the like. Create instruction data. The procedure for creating the instruction data will be described later.
[0032]
The communication control unit 14 is a functional module that performs various control processes for communication between the multifunction peripheral 10 and another device on a network 50 such as a LAN. The created instruction data is transmitted to the processing server that performs the next job processing via the communication control unit 14. The various processing modules 15 are functional modules that realize a scan function, a print function, a copy function, a facsimile transmission / reception function, and the like. These processing modules 15 are configured by a combination of hardware such as a scan engine, a print engine, and a facsimile machine, and software for controlling the hardware.
[0033]
In the processing server 20, the communication control unit 21 is a functional module that performs various control processes for communication between the processing server 20 and other devices on a network 50 such as a LAN. The encryption / decryption processing unit 22 decrypts a portion of the instruction data received from the processing server or the like at the preceding stage, which has been encrypted with its own public key, with its own private key, or performs predetermined processing based on the instruction data. Is a functional module for encrypting the processing result data and the like with the public key. The job processing unit 23 performs job processing based on the received instruction data. After performing the job processing, the instruction sheet creation unit 24 creates new instruction sheet data indicating the job processing contents of the subsequent processing server.
[0034]
Here, a procedure for creating instruction data in the MFP 10 will be described with reference to FIG. The instruction data storage unit 12 stores, for each series of services, instruction processing data indicating the content of job processing to be performed by each processing server and the flow of job processing. First, the user selects a desired series of services from several series of services displayed on the UI 11. When the series of services to be provided is one, the user may input only a service start instruction.
[0035]
Then, the script creation unit 13 acquires the script creation data corresponding to the selected series of services from the script data storage unit 12 (S101). The script creation unit 13 determines a job process and a processing flow performed by each processing server based on the acquired script creation data (S102). Here, the user is required to input parameters necessary for job processing via the UI 11 as necessary. The instruction book creating unit 13 includes a processing server that performs another job process using the processing result data among the processing result data obtained by the processing of the preceding processing server based on the determined processing flow. It is determined whether or not (S103). If the corresponding processing result data exists, it is further determined whether or not the processing result data is data that should be kept secret from anyone other than the processing server that performs the job processing (S104).
[0036]
Determination of private, for example, in advance which processing result data is stored in the instruction data storage unit 12 whether the secret information can be performed based on the stored information. Alternatively, the user may be made to register the processing result data of the confidential information in the instruction data storage unit 12 via the UI 11 each time, and the non-disclosure determination may be performed based on the registered information.
[0037]
As a result of the determination, if the processing result data is to be kept secret, the job processing for encrypting the processing result data is added to the content of the job processing of the processing server that performs the preceding job processing (S105). For encryption, a public key of a subsequent processing server that performs another job processing using the processing result data obtained by its own processing is used.
[0038]
As described above, the instruction book creating unit 13 creates the instruction book data indicating the job processing and the processing flow to be performed by each processing server according to the series of services. Each processing server performs its own job processing based on the instruction data. In the present embodiment, for each series of services, the multifunction peripheral 10 is provided with instruction creation data for storing the content of job processing to be performed by each processing server and the instruction creation data indicating the flow of the job processing. However, it may be sequentially fetched from another server or the like via a network. For example, if a template for definition data of a series of services that can be selected by the user is included in the data of the UI screen provided from the server storing the instruction sheet creation data to the MFP 10, the MFP 10 By setting various processing parameters input by the user, instruction data can be created.
[0039]
FIG. 4 is a diagram illustrating an example of a data structure of the instruction data 300 created by the instruction creating unit 13. The instruction data 300 is encrypted with job processing areas 302 and 304 (parts enclosed by <svcstep></svcstep>) including the contents of job processing executed by each server, and a public key of a predetermined server. It is composed of a processing result area 306 (a part enclosed by <messages></messages>) including processing result data. “<0>” of <svcstep svcno = “0”> shown in the job processing area 302 is a number indicating the execution order of the job processing, and this number is increased in accordance with the order of the job processing. . That is, in FIG. 4, first, the job processing of the job processing area 302 defined by “0” is performed, and then the job processing of the job processing area 304 defined by “1” is performed. Means
[0040]
The job processing contents shown in the areas 302 and 304 include, for example, the name of a file to be processed by the job processing, the file name to be given to the processing result data obtained by the processing, the processing result data and the instruction data. There are transmission destinations and storage destinations. In addition, the job processing content includes, for example, an enlargement / reduction ratio when an image is enlarged / reduced, and a target resolution when resolution conversion is performed.
[0041]
Further, the job processing area 302 includes an encryption area 312 (a part enclosed by <output></output>) indicating information necessary for performing encryption on the processing result data obtained by the job processing. include. Specifically, a server name area 322 (a part enclosed by <svcname></svcname> indicating the name of a subsequent processing server or the name of the job processing which performs another job processing on the obtained processing result data) ) And a public key area 324 (a part enclosed by <KeyInfo> // KeyInfo>) indicating information of a public key of the subsequent processing server used for encrypting the processing result data. 312 are included. The processing result data encrypted with the public key shown in the public key area 324 is included in the processing result area 306 when creating new instruction data.
[0042]
FIG. 5 shows the data structure of the instruction data in which only the area 306 is extracted. In this figure, two encrypted processing result data are shown (a part enclosed by <encdata></encdata>, an area 316, and an area 318). FIG. 6 is a diagram showing a data structure when the encrypted processing result data is correctly decrypted with its own secret key. The instruction data as described above can be described in, for example, XML. If each device such as a server and a multifunction device constituting the workflow system is compatible with XML, it is possible to request the respective devices to perform processing by using instruction data described in XML.
[0043]
Subsequently, a processing flow of the processing server in the embodiment will be described with reference to FIG.
[0044]
First, the processing server receives the instruction data from the preceding processing server or MFP (S201). The received instruction data is stored in the job processing area 302 (specifically, each processing server in the instruction data includes “n” of <svcstepsvcno = “n”> The job processing area defined by “0” is recognized as the job processing to be performed by itself), the processing result area 306 including the encrypted processing result data obtained by the job processing of the preceding server or the like, and the other processing result area 306. It is divided into parts (S202). Subsequently, decryption is attempted using the secret key that holds the encrypted processing result data in the processing result area, respectively (S203, S204).
[0045]
Each processing result data (the areas 316 and 318 in FIG. 5) included in the processing result area 306 cannot be determined at a glance as to which server (to which job processing) it is addressed. Each processing server determines whether the processing result data is the processing result data addressed to its own job processing depending on whether the parameter format is correct (for example, the area 320 enclosed by <params></params> in FIG. 6). Judge whether or not.
[0046]
After trying to decrypt all the encrypted processing result data, if there is processing result data addressed to itself, the own job processing is executed using the processing result data (S205). It is necessary to perform another job processing on the processing result data obtained by the processing by a subsequent processing server or the like, and if the processing result data is confidential information (S206), the self Since the job processing area includes information on a public key used for encryption (for example, the encryption area 314 in FIG. 4), the public key of the subsequent processing server is determined based on the public key information. Is acquired (S207), and the processing result data is encrypted with the acquired public key (S208).
[0047]
Subsequently, new instruction book data is created based on the received instruction book data and the processing result data obtained by its own processing (S209). Then, the newly created instruction data is transmitted to the processing server that performs the next job processing (S210).
[0048]
Here, how to create new instruction data in the instruction creation unit of the processing server will be described with reference to the flowchart of FIG. First, from the received instruction sheet data, the job processing area 302 indicating its own job processing content is deleted (S301), and other job processing areas 304 are left. At this time, “n” of <svcstep svcno = “n”> shown in each of the remaining job processing areas is moved down by one to “n−1” (S302). If there is encrypted processing result data among the processing result data obtained by the own processing (S303), the processing result data is additionally described in the processing result area 306 (S304).
[0049]
In the newly created instruction data, "" n "" in <svcstepsvcno = "n"> shown in the job processing area of the processing server that performs the next job processing is defined as "0". . Therefore, the processing server that performs the next job process also determines in the instruction data the job processing area in which ““ n ”” in “<svcstep svcno =“ n ”> is defined as“ 0 ”in the instruction data. Recognizes the job processing to be performed and performs its own job processing.
[0050]
As described above, according to the present embodiment, by defining the instruction data so that predetermined encryption is appropriately performed on the processing result data obtained by the job processing, another job Predetermined encryption that cannot be decrypted by a processing server or the like at the subsequent stage that performs processing can be performed, and the processing result data can be kept secret from other than the processing server at the subsequent stage.
[0051]
Here, as an example of a series of services that can be realized by the workflow system described above, an image conversion service that performs desired image conversion on image data according to a user's request will be described with reference to FIG. In FIG. 9, the multifunction peripheral 100 takes in a target image to be subjected to image conversion using a scanner function. The first processing server 201 acquires billing information (credit number, user address, etc.) from the user. The second processing server 202 performs a desired image conversion on the target image. Further, the third processing server 203 stores the converted image data in the designated storage 400. The fourth processing server 204 collects a service fee from the user based on the billing information.
[0052]
Here, the billing information is processing result data obtained by the job processing of the first processing server 201. This billing information is information that may be disclosed only to the fourth processing server 204 that performs the job processing of the fee settlement for the user. The image data converted by the third processing server is also one of the processing result data. The image data is information that only the user may disclose.
[0053]
Next, the flow of the image conversion service will be described.
[0054]
First, the user selects a certain image conversion service via the UI, and reads a target image to be subjected to image conversion using the scanner function of the multifunction peripheral. On the other hand, the multifunction peripheral creates instruction data of the selected image conversion service.
[0055]
As described above, the billing information, which is the processing result data obtained by the job processing of the first processing server 201, is information that may be disclosed only to the fourth processing server 204. Accordingly, the job processing content of the first processing server 201 of the created instruction data includes a process of encrypting the obtained accounting information with the public key of the fourth processing server 204. Similarly, image data, which is processing result data obtained by the job processing of the second processing server 202, is information that only a user may disclose. Therefore, the job processing content of the second processing server 202 of the instruction data includes a process of encrypting the image data with the user's public key.
[0056]
After the instruction data 300 is created, the created instruction data 300 and the read image data 350 are first transmitted to the first processing server 201 that performs job processing.
[0057]
The first processing server 201 requests the user to input billing information based on the job processing content described in the received instruction book data. The user inputs billing information from the MFP or another terminal (not shown) connected to the workflow system. The first processing server encrypts the input billing information with the public key of the third processing server 203. Then, new instruction data is created based on the received instruction data and the encrypted billing information. After that, the created new instruction data and image data are transmitted to the second processing server.
[0058]
The second processing server 202 performs predetermined image processing on the received image data based on the instruction data 300 received from the first processing server. Further, the image data 350 after the image conversion is encrypted with the user's public key defined in the instruction data. Subsequently, new instruction data is created and transmitted to the third processing server 203 together with the encrypted image data.
[0059]
The third processing server 203 stores the encrypted image data in the designated storage 400 as it is based on the received instruction data. After that, new instruction data is created and transmitted to the fourth processing server 204.
[0060]
The fourth processing server 204, after decrypting the encrypted accounting information in the received instruction data with its own secret key, collects a service fee to the user.
[0061]
As described above, the processing result data (corresponding to the billing information and the image data in the image conversion service) obtained by the job processing of each processing server cannot be decoded by a processing server or the like that performs another job processing at a subsequent stage. By performing a predetermined encryption such as a public key of the subsequent processing server, the processing result data can be kept secret from anyone other than the subsequent processing server.
[0062]
In the above-described embodiment, a workflow system in which each processing server sequentially receives the instruction data from the immediately preceding processing server or the like, performs its own job processing, and transmits new instruction data or the like to the immediately subsequent processing server. Was explained. However, as shown in FIG. 10, the present invention can also be implemented in a workflow system that realizes a series of services including a cooperative processing server 60 that centrally controls a processing server and the like.
[0063]
The cooperative processing server 60 requests the MFP or the processing server to perform a process according to an appropriate processing flow based on the received instruction data, and thereby executes the job processing provided by the individual MFP or the processing server. To realize a series of services.
[0064]
Therefore, the multifunction peripheral and each processing server are different from the system in the above-described embodiment in that the multifunction peripheral and each processing server transmit the instruction data and the like to the cooperative processing server instead of transmitting to the subsequent processing server that performs the next job processing. different.
[0065]
Even in such a system, job processing contents for performing a predetermined encryption which cannot be decrypted by a processing server other than the subsequent stage that performs another job processing on the processing result data obtained by the job processing are added to the instruction data. Thus, the processing result data can be kept private except for the subsequent processing server or the like.
[0066]
Furthermore, in the present embodiment, a part other than the processing result data in the instruction data is not particularly configured to be encrypted. However, a configuration other than the processing result data may be encrypted. For example, when creating instruction data in a multifunction peripheral, an area indicating the job processing content (for example, area 500 shown in FIG. 11) may be encrypted with a public key of a processing server in charge of each job processing. . FIG. 12 shows instruction data in which the area 500 is encrypted.
[0067]
【The invention's effect】
According to the present invention, the processing at the latter stage where the encryption means cannot decrypt the processing result data obtained by the job processing of the preceding processing server or the like except for the processing server or the like that performs another subsequent job processing. By performing a predetermined encryption such as a public key of the server, the processing result data can be kept secret from anyone other than the subsequent processing server.
[0068]
According to the present invention, for example, in a series of services realized in a workflow system, information to be concealed (address, contact information, credit number, and the like) input by a user is subjected to job processing using the information. By performing encryption that cannot be decrypted by a server other than the server, the processing result data can be kept secret from anyone other than the processing server.
[Brief description of the drawings]
FIG. 1 is a diagram showing an example of a system configuration of a workflow system according to the present invention.
FIG. 2 is a block diagram of a multifunction peripheral and a processing server.
FIG. 3 is a flowchart illustrating a procedure for creating instruction data in the multifunction peripheral.
FIG. 4 is a diagram illustrating an example of a data structure of instruction data.
FIG. 5 is a diagram illustrating an example of a data structure of instruction data.
FIG. 6 is a diagram illustrating an example of a data structure of instruction data.
FIG. 7 is a diagram showing a job processing flow of a processing server in a series of services.
FIG. 8 is a flowchart showing a procedure for creating new instruction data in the processing server.
FIG. 9 is a diagram showing a system configuration in an image conversion service which is one example of a series of services.
FIG. 10 is a diagram illustrating an example of a system configuration of a workflow system according to the present invention.
FIG. 11 is a diagram illustrating an example of a data structure of instruction data.
FIG. 12 is a diagram illustrating an example of a data structure of instruction data.
[Explanation of symbols]
10 MFP, 11 UI, 12 instruction data storage unit, 13 instruction creation unit, 14 communication control unit, 15 processing module, 20 processing server, 21 communication control unit, 22 encryption / decryption processing unit, 23 job processing unit, 24 instruction book creation unit, 50 network, 60 cooperation processing server, 300 instruction book data, 350 image data, 400 storage.

Claims (15)

A job processing device in a system that sequentially performs job processing based on instruction data and realizes a series of services in cooperation with each other,
Processing means for performing predetermined job processing based on the instruction data;
Encryption means for performing, on the processing result data obtained by the job processing, an encryption process that can be decrypted by a subsequent job processing apparatus that performs still another job processing;
Transmitting means for transmitting the encrypted processing result data to a job processing apparatus which performs the next job processing;
A job processing device comprising: A job processing device in a system that performs a job process based on the instruction data and passes the processing result to a subsequent job processing device via a job processing control device to realize a series of services in cooperation with each other,
Receiving means for receiving instruction data from the job processing control device;
Processing means for performing predetermined job processing based on the received instruction data,
Encryption means for performing, on the processing result data obtained by the job processing, an encryption process that can be decrypted by a subsequent job processing apparatus that performs still another job processing;
Transmitting means for transmitting the encrypted processing result data to the job processing control device;
A job processing device comprising: Each job processing device transmits processing result data obtained by its own job processing to the job processing device that performs the immediately following job processing according to the instruction data, thereby forming a series of services. A job processing device,
Receiving means for receiving a processing result data group from a job processing apparatus which performs the immediately preceding job processing;
Decoding means for decoding the processing result data which can be decoded by itself among the received processing result data group,
Processing means for performing its own job processing using the decrypted processing result data based on the instruction data;
Encrypting means for performing, on the basis of the instruction data, a process result data obtained by its own job process, an encryption process that can be decrypted by a job processing apparatus that performs another job process;
Generating a new processing result data group by combining the processing result data of the received processing result data group that has not been decrypted by the decryption means and the processing result data encrypted by the encryption means; Means,
Transmitting means for transmitting the generated new processing result data group to a job processing apparatus which performs the immediately following job processing;
A job processing device comprising: 4. The job processing apparatus according to claim 1, wherein:
The job processing apparatus according to claim 1, wherein the encryption unit performs an encryption process on the processing result data when the processing result data is confidential information. The job processing apparatus according to claim 1, wherein
The job processing apparatus according to claim 1, wherein the encryption unit encrypts the processing result data using a public key of the job processing apparatus at the subsequent stage. An instruction sheet creating apparatus that creates instruction sheet data indicating job processing contents of each job processing apparatus that sequentially performs job processing based on the job processing flow and realizes a series of services in cooperation with each other,
Identification means for identifying, based on the job processing flow, a job processing device of which processing result data is used for processing of a subsequent job processing device among the job processing devices;
An instruction creating means for creating the instruction data for each of the job processing apparatuses;
The instruction creation unit is configured to execute, as instruction data for the job processing apparatus identified by the identification unit, job processing result data of the job processing apparatus using the processing result data. An instruction book creation device, comprising means for creating instruction sheet data including an instruction to perform a decryptable encryption process. The instruction form creating apparatus according to claim 6,
When the processing result data by the job processing device identified by the identification unit is confidential information, the instruction form creating unit performs processing on the processing result data using the processing result data. An instruction book creating apparatus, which is an apparatus for creating instruction book data including an instruction to perform a decryptable encryption process. A job processing method in which a job processing device performs job processing sequentially and realizes a series of services in cooperation with each other,
A processing step of performing predetermined job processing based on the instruction data indicating the job processing content;
An encryption step of performing, on the processing result data obtained by the job processing, the processing result data with an encryption process that can be decrypted by a subsequent job processing device that performs still another job processing;
A transmitting step of transmitting the encrypted processing result data to a job processing apparatus that performs the next job processing;
A job processing method including: A job processing method in which a job processing device sequentially performs job processing and passes a processing result to a subsequent job processing device via a job processing control device to realize a series of services in cooperation with each other,
A receiving step of receiving instruction data from the job processing control device;
A processing step of performing a predetermined job process based on the received instruction data,
An encryption step of performing, on the processing result data obtained by the job processing, the processing result data with an encryption process that can be decrypted by a subsequent job processing device that performs still another job processing;
A transmitting step of transmitting the encrypted processing result data to the job processing control device,
A job processing method including: According to the job processing method for realizing a series of services, each job processing device transmits processing result data obtained by its own job processing to a job processing device that performs the immediately following job processing according to the instruction data.
A receiving step of receiving a processing result data group from a job processing apparatus that performs the immediately preceding job processing;
Of the received processing result data group, a decoding step of decoding processing result data that can be decoded by itself,
A processing step of performing its own job processing using the decrypted processing result data based on the instruction data;
An encryption step of performing, based on the instruction data, a process result data obtained by its own job process, an encryption process that can be decrypted by a job processing device that performs another job process;
Generating a new processing result data group by combining the processing result data of the received processing result data group that has not been decrypted by the decryption means and the processing result data encrypted by the encryption means; Process and
A transmitting step of transmitting the generated new processing result data group to a job processing apparatus that performs the immediately following job processing;
A job processing method including: A job order creating method for creating job order data indicating job processing contents of each job processing apparatus that sequentially performs job processing based on a job processing flow and realizes a series of services in cooperation with each other,
An identification step of, based on the job processing flow, identifying a job processing apparatus of which processing result data is used for processing of a subsequent job processing apparatus among the job processing apparatuses;
An instruction creating step of creating the instruction data for each of the job processing apparatuses;
In the instruction creation step, the subsequent job processing apparatus that performs processing using the processing result data on the processing result data by the job processing apparatus as instruction data for the job processing apparatus identified in the identification step is decrypted. An instruction book creation method including a step of creating instruction book data including an instruction to perform a possible encryption process. A program for causing a job processing device to sequentially perform job processing and realize a series of services in cooperation with each other,
In the job processing device,
A processing procedure for performing predetermined job processing based on the instruction data indicating the job processing content;
An encryption procedure for performing, on the processing result data obtained by the job processing, the processing result data, an encryption process that can be decrypted by a subsequent job processing device that performs still another job processing,
A transmission procedure for transmitting the encrypted processing result data to a job processing apparatus that performs the next job processing,
A program that executes A program for realizing a series of services in cooperation with each other by causing a job processing device to sequentially perform job processing and passing a processing result to a subsequent job processing device via a job processing control device,
In the job processing device,
A receiving procedure for receiving instruction data from the job processing control device;
A processing procedure for performing a predetermined job processing based on the received instruction data,
An encryption procedure for performing, on the processing result data obtained by the job processing, the processing result data, an encryption process that can be decrypted by a subsequent job processing device that performs still another job processing,
A transmission procedure for transmitting the encrypted processing result data to the job processing control device,
A program that executes A program for realizing a series of services by causing each job processing device to transmit processing result data obtained by its own job processing to a job processing device that performs the immediately following job processing according to the instruction data,
In the job processing device,
Receiving means for receiving a processing result data group from a job processing apparatus which performs the immediately preceding job processing;
A decryption procedure for decrypting the process result data that can be decrypted by itself among the received process result data group,
A processing procedure for performing its own job processing using the decrypted processing result data based on the instruction data,
Based on the instruction data, an encryption procedure for performing a decryption process that can be performed by a job processing apparatus that performs another job process on the processing result data obtained by the job process of the own device,
Generating a new processing result data group by combining the processing result data of the received processing result data group that has not been decrypted by the decryption means and the processing result data encrypted by the encryption means; Instructions and
A transmission procedure for transmitting the generated new processing result data group to a job processing apparatus that performs the immediately following job processing;
A program that executes A program for causing a computer to perform job processing sequentially based on a job processing flow and create instruction data indicating job processing content of each job processing apparatus that realizes a series of services in cooperation with each other,
To the computer,
An identification procedure for identifying, based on the job processing flow, a job processing device whose processing result data is used for processing of a subsequent job processing device among the job processing devices;
An instruction creation procedure for creating the instruction data for each of the job processing apparatuses, wherein the instruction result data for the job processing apparatus identified in the identification procedure is processed as the instruction data for the job processing apparatus. Instruction creation procedure for creating instruction data including an instruction to perform a decryption process that can be performed by a subsequent job processing apparatus that performs processing using
A program that executes

Images