JP2005086574A - Image processing system and image processing apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image processing system and an image processing apparatus capable of maintaining the security of image data, even when processing is performed with two or more image processing apparatuses. <P>SOLUTION: When image data received by a printer 3a is transferred to other printer 3c and distributed processing, proxy processing, or the like is performed, an encryption key which is used for encrypting the image data to be transferred to the other printer 3c, and a decoding key which is used for decoding the encrypted image data are formed by the printer 3a. By using the formed encryption key, the image data to be transferred to the other printer 3c are encrypted by the printer 3a, and the encrypted image data and the formed decoding key are transferred from the printer 3a to the other printer 3c separately at different timings. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an image processing system and an image processing apparatus capable of transferring image data to another image processing apparatus and performing distributed processing or proxy processing.

  Conventionally, inkjet printers, laser printers, and the like have been commercialized as printers connected to personal computers (hereinafter referred to as personal computers). In recent years, networking of peripheral devices such as printers and personal computers has progressed, and network printers that can be shared by a plurality of personal computers have been commercialized. Network printers have the advantage that they can be shared by multiple computers. However, when a large-volume data print job is requested by a network printer, or when a large number of print jobs are requested by a network printer, the network printer There may be a problem that the processing speed cannot keep up and the print job is stagnant.

  As a solution to this problem, a method of introducing a network printer capable of high-speed processing can be considered. However, when a network printer capable of high-speed processing is introduced, a significant cost increase occurs. Another method is to connect multiple network printers to the network, distribute the stagnated print jobs to other network printers, perform so-called distributed processing, and concentrate the jobs on specific network printers. It is conceivable to suppress (see, for example, Patent Document 1). By performing distributed processing, it is possible to level the print jobs processed by each network printer and improve the overall processing efficiency.

In addition, if a problem such as paper jam, out of paper, or out of toner occurs during the processing of a print job, a network process is used to substitute another network printer for a print job that has not been processed. It can also be done with a printer. By performing proxy processing, it is possible to continue print job processing even when trouble occurs.
JP 61-198958 A

  As described above, the network printer distributed processing or proxy processing is an effective function for efficiently processing a print job. On the other hand, in recent years, security awareness of users who use printers has been increasing, such as prevention of leakage of confidential information in a company or workplace. Therefore, it is preferable that the network printer process the print job in a state where the security level desired by the user is established.

  However, in conventional distributed processing or proxy processing, when requesting distributed processing or proxy processing to another network printer, the security of data transferred between network printers or data processed by other network printers is: Not considered much. Therefore, when distributed processing or proxy processing is requested, there is a risk that data transferred on the network or data processed by another network printer leaks.

  The present invention has been made in view of such circumstances, and image processing for encrypting image data to be transferred to another device, reducing the risk of leakage or unauthorized use of the decryption key, and improving security. It is an object to provide a system and an image processing apparatus.

  Another object of the present invention is to provide an image processing system and an image processing apparatus that reduce the risk of leakage of both encrypted image data and a decryption key of the image data, and improve the security of the image data. Objective.

  Further, the present invention provides an image processing system and an image processing apparatus that improve the security of image data by limiting image data that can use the leaked decryption key even when the decryption key is leaked. For other purposes.

  Another object of the present invention is to provide an image processing system capable of maintaining security without lowering the protection level of image data even when processing is performed by a plurality of image processing apparatuses.

  An image processing system according to the present invention includes a plurality of image processing devices that receive image data, perform processing including output of the received image data and data protection, and the image data received by the image processing device is another image processing device. In the image processing system that can be transferred to and processed by the image processing apparatus, the image processing apparatus uses the encryption key used for encrypting the image data transferred to the other image processing apparatus and the decryption of the encrypted image data. A generating unit configured to generate a decryption key; and an encrypting unit configured to encrypt image data to be transferred to another image processing device based on the encryption key generated by the generating unit. The image data and the decryption key generated by the generating means are configured to be transferred to another image processing apparatus.

  An image processing system according to the present invention is configured to transfer a part of image data received by an image processing apparatus to another image processing apparatus, and to perform image processing and distributed processing on the other image processing apparatus. The generating means is configured to generate an encryption key and a decryption key when performing distributed processing.

  The image processing system according to the present invention is configured to transfer the image data received by the image processing apparatus to another image processing apparatus, and cause the other image processing apparatus to perform the proxy processing on the transferred image data. The generation means is configured to generate an encryption key and a decryption key when performing the proxy process.

  The image processing system according to the present invention is configured to transfer the image data encrypted by the encryption unit and the decryption key generated by the generation unit at different timings.

  In the image processing system according to the present invention, the image data is processed in units of jobs including one or a plurality of image data, and the generation unit generates an encryption key and a decryption for each job including the image data to be transferred. It is configured to generate a key.

  In the image processing system according to the present invention, the image processing device is configured to perform data protection according to a protection level, and an acquisition unit that acquires a protection level of another image processing device, and the acquisition unit includes: Determining means for determining whether or not the acquired protection level is lower than its own protection level; and prohibiting means for prohibiting transfer of image data to another image processing apparatus whose protection level is lower than itself. Features.

  An image processing apparatus according to the present invention is an image processing apparatus capable of receiving image data and transferring the received image data to another apparatus for processing, and an encryption key used for encryption of the transferred image data; And generating means for generating a decryption key used for decrypting the encrypted image data, and encryption means for encrypting the image data to be transferred based on the encryption key generated by the generating means. The image data encrypted by the converting means and the decryption key generated by the generating means are transferred.

  The image processing apparatus according to the present invention is configured to transfer the image data encrypted by the encryption unit and the decryption key generated by the generation unit at different timings.

  In the image processing apparatus according to the present invention, the image data is processed in units of jobs including one or a plurality of image data, and the generation unit generates an encryption key and a decryption for each job including the image data to be transferred. It is configured to generate a key.

  In the present invention, when the image processing apparatus transfers image data to another image processing apparatus and performs distributed processing or proxy processing, the encryption key used for encrypting the image data to be transferred and the encrypted image data A decryption key used for decryption is generated by the generation means, and based on the generated encryption key, the image data to be transferred to another image processing apparatus is encrypted by the encryption means, the encrypted image data, the generated decryption key, Are transferred to another image processing apparatus. The encryption key and the decryption key are generated when it is determined to transfer the image data by, for example, distributed processing or proxy processing, and the image data encrypted with the generated encryption key and the generated decryption key are transferred. Is done. For example, if the decryption key is preset in another image processing device, the decryption key may have already leaked, but if the decryption key is generated when it is decided to transfer the image data, the past Even if the generated decryption key is leaked, there is no problem of unauthorized use, and since it has just been generated, the possibility of decryption key leakage is low.

  In the present invention, the encrypted image data and the generated decryption key are transferred at different timings. For example, when the encrypted image data and the decryption key used for decrypting the image data are transferred at the same time, when the decryption key leaks, the encrypted image data is also leaked together with the decryption key. It is possible to decrypt the image data using a decryption key. However, by transferring the encrypted image data and the decryption key of the image data at different timings, the risk of both leaking is reduced.

  In the present invention, the image data is processed in units of jobs including one or a plurality of image data. For each job including image data transferred by distributed processing or proxy processing, an encryption key and Generate a decryption key. The encryption key and the decryption key used for encryption and decryption of image data are different for each job that performs distributed processing or proxy processing. The decryption key transferred to another image processing apparatus is valid only for a job that will perform distributed processing or proxy processing from now on, and becomes invalid after the processing is completed.

  In the present invention, the image processing apparatus protects image data in accordance with the protection level, the protection level of the other image processing apparatus is acquired by the acquisition means, and the acquired protection level is higher than its own protection level. Whether or not the image data is low is determined by the determining means, and image data transfer is prohibited for other image processing apparatuses having a protection level lower than that of the image processing apparatus. The image data is transferred to another image processing apparatus having the same protection level as that of itself or a higher protection level, and distributed processing or proxy processing is performed.

  According to the present invention, when image data is transferred to another image processing apparatus and distributed processing or proxy processing is performed, the security of the image data to be transferred is improved by encrypting the image data to be transferred. In addition, when image data is transferred, an encryption key and a decryption key are generated, and the encrypted image data and the decryption key are transferred, thereby reducing the risk of leakage or unauthorized use of the decryption key. Security of image data to be performed can be further increased.

  According to the present invention, by transferring the encrypted image data and the generated decryption key at different timings, the risk of both leaking is reduced, and the security of the transferred image data is improved.

  According to the present invention, even when the decryption key is leaked by generating the encryption key and the decryption key by the generation means for each job including image data transferred by distributed processing or proxy processing, The image data that can be used by the leaked decryption key is limited, and the security of the image data is improved.

  According to the present invention, by prohibiting transfer of image data to another image processing apparatus having a protection level lower than that of itself, for example, distributed processing or proxy processing has the same protection level as that of itself or a higher protection level. This is done using other expensive image processing devices. Even when processing using another image processing apparatus is performed, the protection level of the image data is not lowered, and security is maintained.

  Hereinafter, the present invention will be specifically described with reference to the drawings showing embodiments thereof. FIG. 1 is a block diagram showing a configuration example of an image processing system according to the present invention. The image processing system 1 includes a plurality of printers (image processing apparatuses) 3a, 3b, 3c, 3d and a plurality of personal computers (hereinafter referred to as personal computers) 4, a communication network N1 such as an in-house LAN (Local Area Network). ..., 4 etc. are connected.

  FIG. 2 is a block diagram illustrating a configuration example of the printer (image processing apparatus) of the present invention, and illustrates a configuration example of the printer 3a illustrated in FIG. The printer 3a includes a control unit 11 having a CPU that performs calculations and a RAM that stores temporary information associated with the calculations. The control unit 11 includes a ROM 15 that stores a control program for controlling each unit of the printer 3a. And a management unit 14 for storing the status or operation setting of the printer 3a is connected, and the control unit 11 follows the control program stored in the ROM 15, the operation setting stored in the management unit 14, and the like. Controls each part of the printer 3a.

  Further, the control unit 11 scans and reads a document, generates an electronic image data based on the read image, an image memory 18 that temporarily stores the image data, and an image memory. 18 is connected to an image forming unit 19 that forms an image based on the image data stored in 18 on a recording sheet, and the printer 3a is a copying apparatus that outputs the image read by the image reading unit 17 to the recording sheet. It is possible to operate.

  A storage unit 16 having a hard disk or a nonvolatile memory is connected to the control unit 11, and image data is stored in the storage unit 16 under the control of the control unit 11. The control unit 11 is connected to an operation unit 12 that receives an operation from a user. The operation unit 12 includes a display unit such as a liquid crystal panel that displays information necessary for operation, and an input unit such as a touch panel or a numeric keypad that receives information such as a control command from the user.

  Further, a communication unit 13 connected to the communication network N1 is connected to the control unit 11, and the communication unit 13 exchanges information with an external device via the communication network N1. A plurality of personal computers 4 are connected to the communication network N1, image data transmitted from the personal computers 4 is received by the communication unit 13 via the communication network N1, and an image based on the image data received by the communication unit 13 is received. Is formed on the recording paper by the image forming unit 19, the printer 3 a can operate as a network printer.

  The printer 3a can operate as a network scanner by transmitting image data generated based on the image read by the image reading unit 17 from the communication unit 13 to the personal computer 4 via the communication network N1. .

  Further, the communication unit 13 can perform facsimile communication, and the image data generated based on the image read by the image reading unit 17 via a public line network (not shown) connected to the communication network N1, It is possible to perform facsimile transmission from the communication unit 13 to a facsimile apparatus (not shown) connected to the public line network. In addition, image data transmitted by facsimile from the facsimile apparatus can be received by the communication unit 13 via the public network, and an image based on the image data received by the communication unit 13 can be formed on the recording paper by the image forming unit 19. Is possible. In this way, the printer 3a can operate as a facsimile machine.

  Each unit of the printer 3a is controlled by the control unit 11 in accordance with a control program stored in the ROM 15, but the printer 3a can perform security-related control by the control unit 11 in accordance with a security program for improving security. It has become a structure. The control unit 11 operates as a means for protecting image data. As data protection, the control unit 11 receives a print job only from a user who has been authenticated, encrypts image data, or completes processing of image data stored in the storage unit 16. It is possible to overwrite the image data that has been completed.

  By exchanging the ROM that does not store the security program with the ROM 15 that stores the security program, or by receiving an instruction to operate the security program stored in the ROM 15 in the operation unit 12, the control unit 11 controls each part of the printer 3a according to the security program stored in the ROM 15 in addition to the control program.

  The control unit 11 performs processing for authenticating a user as protection of image data. For example, authentication is performed to restrict access to a storage unit 16 by a third party, or a job is accepted only from a user who has been authenticated. Security with authentication is higher than security without authentication.

  As a process for authenticating the user, a method for authenticating the user based on biometric information such as a fingerprint, a retina or facial features, a method for authenticating the user based on specific code information recorded on a magnetic card, etc., the personal computer 4 Alternatively, there is a method of authenticating a user based on a password input from the numeric keypad of the operation unit 12 or the like. Here, reading of biometric information such as a fingerprint or code information of a magnetic card is performed by, for example, a reading unit having a fingerprint scanner or a card reader provided in the operation unit 12 or a fingerprint scanner or card reader connected to the personal computer 4. It can be performed by a reading device such as. Since the probability that biometric information matches between users is extremely low, it can be said that a printer that authenticates a user based on biometric information has a high security level.

  Further, when authentication is performed using a magnetic card, a user can be reliably authenticated unless a third party steals the magnetic card. Further, in the case of a magnetic card, it is possible to use complicated code information such as 30 characters. Even if the magnetic card is stolen by a third party, illegal use of the stolen magnetic card can be prevented to some extent by using the magnetic card and the password together. Therefore, a printer that authenticates a user using a magnetic card can be said to have a medium security level.

  On the other hand, when a user is authenticated based on a password input from the keyboard of the personal computer 4 or the operation unit 12 of the printer 3a, when the password is leaked, the leaked password may be illegally used by a third party. . Further, since only limited code information of, for example, about 8 characters that can be stored by the user can be used for the password, unauthorized use by a third party is easier compared to a magnetic card. Therefore, it can be said that the printer that authenticates the user based on the password has a low security level.

  In addition, the control unit 11 performs data protection (security protection) processing on the image data. For example, image data compressed by a predetermined method is expanded and processed by a predetermined method, or image data encrypted by an encryption key is decrypted by a decryption key and processed. A printer that encrypts image data has a higher security level than a printer that does not perform encryption.

  Further, as the data protection (security protection) process, there is a case where the image data stored in the storage unit 16 such as a hard disk is overwritten (invalidated) after the process is completed. When the processed image data is overwritten, the security is higher than when the overwritten data is not overwritten.

  The configuration of the printers 3b, 3c, 3d is the same as that of the printer 3a. However, the image reading unit 17 may not be provided, and the copying function and the network scanner function may not be provided. In some cases, the facsimile function is not provided. The security function of each printer 3a, 3b, 3c, 3d is set for each printer. The security function differs depending on the security program, but even if the security program is the same, the function is different if the operation settings are different. In some cases, it does not have a security function (security program).

  FIG. 3 is a diagram illustrating an example of the security function of each printer 3a, 3b, 3c, 3d. FIG. 3 shows the printer name and security function of each printer. As security functions, personal authentication, encryption processing, and other processing (overwriting erasure) are shown. In the example of FIG. 3, the printer name of the printer 3 a is “AR-XX1”, and corresponds to personal authentication (fingerprint authentication), encryption processing, and overwriting erasure. The printer name of the printer 3b is “AR-XX2”, which does not support encryption processing, but supports personal authentication (password authentication) and overwriting erasure. The printer name of the printer 3c is “AR-XX3”, and corresponds to personal authentication (fingerprint authentication), encryption processing, and overwriting erasure. The printer name of the printer 3d is “AR-XX4” and does not support any of encryption processing, personal authentication, and overwriting erasure. The security function settings of the printers 3a, 3b, 3c, and 3d are stored in the management units 14 of the printers 3a, 3b, 3c, and 3d, respectively.

  In this description, under the control of the control unit 11, the printer 3a transfers part of the image data to be output to another printer, and uses the other printer to distribute the image data or perform output processing. It is possible to transfer target image data to another printer, and cause the other printer to perform image data substitution processing.

  When the communication unit 13 accepts a distributed processing instruction from the personal computer 4, the control unit 11 of the printer 3 a is used to decrypt an encryption key used for encrypting image data to be transferred to another printer and the encrypted image data. It operates as means for generating a decryption key and means for encrypting image data to be transferred to the other printer based on the generated encryption key.

  Further, the control unit 11 of the printer 3a encrypts image data to be transferred to another printer when performing substitution processing due to a problem such as paper jam, out of paper, or out of toner during image data output processing. And a means for generating a decryption key for use in decrypting encrypted image data and a means for encrypting image data to be transferred to the other printer based on the generated encryption key.

The control unit 11 of the printer 3a separately transfers the encrypted image data and the generated decryption key from the communication unit 13 to the other printer at different timings. The image data is processed in units of jobs including one or a plurality of image data, and the control unit 11 generates an encryption key and a decryption key for each job for which distributed processing or proxy processing is performed. As shown in FIG. 3, security functions 3b, 3c, and 3d are set for each printer, and image data protection levels vary. The control unit 11 of the printer 3a operates as means for acquiring the protection level of another printer and means for determining whether the acquired protection level is lower than its own protection level. The control unit 11 exchanges information about security functions stored in the management unit 14 of the other printers 3b, 3c, and 3d via the communication unit 13, and for example, each printer 3a, 3b, 3c, 3d shown in FIG. Are stored in the management unit 14, for example.

  In addition, the control unit 11 of the printer 3a operates as a means for prohibiting transfer of image data for performing substitution processing or the like to another printer having a protection level lower than that of the main printer (printer 3a). When the security function of each printer is the example shown in FIG. 3, the transfer of image data can be prohibited based on the presence / absence of encryption processing as the protection level. In the example of FIG. 3, since the printers 3a and 3c have encryption processing, the control unit of the personal computer 4 prohibits transfer of image data to the printers 3b and 3d.

  In addition, the personal computer 4 is not shown in the figure, but a control unit such as a CPU, a storage unit such as a RAM or a hard disk, an input unit including a keyboard or a mouse, a display unit such as a display device, and communication with the communication network N1. A communication unit that performs control is provided. The personal computer 4 executes various processes by executing a program stored in the hard disk by the control unit. For example, when performing print processing or distributed processing using the printer 3a, a printer control application program or printer driver stored in the hard disk is read and executed by the control unit, and the print processing or distributed processing is performed. .

  The control unit of the personal computer 4 acquires the protection level of each printer 3a, 3b, 3c, 3d on the communication network N1, and whether each acquired protection level is lower than the protection level of the main printer (printer 3a). It operates as a means for determining whether or not. The control unit of the personal computer 4 exchanges information about the security function stored in the management unit 14 of each printer 3a, 3b, 3c, 3d via the communication unit, and for example, each printer 3a, 3b, 3c shown in FIG. , 3d are acquired and stored in the storage unit, for example.

  Further, the control unit of the personal computer 4 prohibits transfer of image data for performing distributed processing or the like to another printer having a protection level lower than that of the main printer (printer 3a). When the security function of each printer is the example shown in FIG. 3, the transfer of image data can be prohibited based on the presence / absence of encryption processing as the protection level. In the example of FIG. 3, since the printers 3a and 3c have encryption processing, the control unit of the personal computer 4 prohibits transfer of image data to the printers 3b and 3d.

  Next, image data distribution processing in the image processing system of the present embodiment will be described. FIG. 4 is a flowchart illustrating an example of a procedure for distributing image data in the image processing system 1. When performing distributed processing of image data, the distributed processing is set. The setting of the distributed processing is performed, for example, by the personal computer 4 that requests the printer 3a on the network to process the print job. For example, when a printer control application program executed on the personal computer 4 is executed and a print instruction is issued, the input unit of the personal computer 4 is operated to open a printer driver setting window to set distributed processing. Is possible. The personal computer 4 receives the setting of distributed processing together with the print job from the input unit (S10).

  FIG. 5 is a diagram illustrating an example of a printer driver setting window. For example, when requesting a print job for causing the printer 3a (AR-XX1) to print a certain number of copies or more (for example, 100 copies or more), the input unit of the personal computer 4 is operated to be provided on the lower left side of the setting window shown in FIG. It is possible to set to perform distributed processing by putting a check mark (indicated by “Re” in the figure) in the distributed processing check box. Acceptance of print jobs and acceptance of distributed processing settings can be performed in the same manner as in the past.

  When the execution of the distributed processing is set by the user, the control unit of the personal computer 4 acquires information on the security function from each of the printers 3a, 3b, 3c, and 3d by the communication unit, or sends it to the management unit 14 of the printer 3a. Information on the security functions of the stored printers 3a, 3b, 3c, and 3d is acquired and the printer on the communication network N1 is confirmed (S12). A guaranteeable security level (security function) is confirmed (S14).

  The control unit of the personal computer 4 determines whether there is a printer that can guarantee a security level equivalent to that of the printer 3a (S16). For example, in the example of FIG. 3, it is possible to determine whether there is a printer that can guarantee a security level equivalent to that of the printer 3a based on the presence or absence of encryption processing. When it is determined that there is no printer that can guarantee the same security level as that of the printer 3a (S16: NO), the control unit of the personal computer 4 displays to the user that the distributed processing is impossible, for example, to the user. Notification is made (S18).

  If there is a printer that can guarantee the same security level as that of the printer 3a (S16: YES) and there is one printer that can be guaranteed (S20: YES), the printer is used for distributed processing by the control unit of the personal computer 4 The printer is determined (S22). In the present embodiment, as shown in FIG. 3, the printer 3c (AR-XX3) is a printer that can guarantee the same level of security as the printer 3a (AR-XX1) in that encryption processing is performed. Determined.

  In addition, there is a printer that can guarantee the same security level as the printer 3a (S16: YES), and when two or more printers can be guaranteed (S20: NO), the control unit of the personal computer 4 determines the printer that can be guaranteed. Information such as the security level and operation status is created and displayed in a list on the display unit (S24).

  FIG. 6 is a diagram illustrating an example of a printer list display screen capable of guaranteeing an equivalent security level. In the example of FIG. 6, two printers that can guarantee the same security level as the printer 3a (AR-XX1) are displayed. The personal computer 4 receives the selection of the printer that desires to execute the distributed processing at the input unit (S26).

  Here, the number of other printers used for distributed processing is not limited to one, and a plurality of printers can be used. For example, a plurality of printers can be selected on the list display screen shown in FIG. In addition, selection of a printer to be used for distributed processing can be automatically performed. For example, the control unit of the personal computer 4 can select a printer that can perform encryption processing, or if there are multiple printers that can perform encryption processing, can select a printer that is not currently executing processing. It is.

  When the printer to be used for distributed processing is determined on the personal computer 4 side as described above, information such as image data and output instructions, distributed processing instructions, and the like from the communication unit to the printer 3a are controlled by the control unit of the personal computer 4. Information such as the printer in use (printer 3c) is transferred. The control unit 11 of the printer 3a that has received the information by the communication unit 13 generates an encryption key and a decryption key (S28), and transfers the generated decryption key from the communication unit 13 to the printer 3c (S30).

  Thereafter, the control unit 11 encrypts the image data to be transferred to the printer 3c using the generated encryption key (S32). The encrypted image data is stored in the storage unit 16 by the control unit 11, and then transferred to the printer 3c from the communication unit 13 together with an output instruction and the like, and distributed processing preparation is performed (S34). Processing is started (S36). The printer 3a performs image data output processing excluding the transferred image data. Further, the control unit 11 of the printer 3c that has received the encrypted image data by the communication unit 13 decrypts the encrypted image data using the transferred decryption key, and the decrypted image data Perform output processing.

  The above description has been made by taking an example in which the personal computer 4 instructs the printer 3a to perform distributed processing, but similar distributed processing is not performed from the personal computer 4 but from the operation unit 12 of the printer 3a. It is also possible to give instructions. In this case as well as the personal computer 4, when the printer 3c to be used for distributed processing is determined on the printer 3a side, the control unit 11 generates an encryption key and a decryption key for encryption processing, and the generated decryption key Is transferred from the communication unit 13 to the printer 3c.

  Next, image data substitution processing in the image processing system of the present embodiment will be described. FIG. 7 is a flowchart illustrating an example of a proxy processing procedure for image data in the image processing system 1. For example, when the printer 3a is processing a print job requested from the personal computer 4, troubles such as paper jam, out of paper, or out of toner occur (S11), and if the print job cannot be continued, the printer The control unit 11 of 3a confirms the printer on the communication network N1, for example, by reading out information on the security function of each printer 3a, 3b, 3c, 3d stored in the management unit 14 of the printer 3a (S13) At the same time, each printer on the communication network N1 confirms a security level (security function) that can be guaranteed for the image data (S15).

  Then, the control unit 11 of the printer 3a determines whether there is a printer that can guarantee the same security level as the printer 3a (S17). For example, in the example of FIG. 3, it is possible to determine whether there is a printer that can guarantee a security level equivalent to that of the printer 3a based on the presence or absence of encryption processing. When it is determined that there is no printer that can guarantee the same security level as that of the printer 3a (S17: NO), the control unit 11 notifies the user by displaying on the operation unit 12 that proxy processing is impossible. (S19). For example, it is possible to display on the operation unit 12 of the printer 3a that a request for replenishment of consumables and that there is no printer that can request substitution processing.

  If there is a printer that can guarantee the same security level as that of the printer 3a (S17: YES), and there is one printer that can be guaranteed (S21: YES), the printer performs proxy processing by the control unit 11 of the printer 3a. The printer to be used is determined (S23). In the present embodiment, as shown in FIG. 3, the printer 3c (AR-XX3) is a printer that can guarantee the same security level as the printer 3a (AR-XX1) in that it performs encryption processing. It is determined. FIGS. 8A and 8B are diagrams illustrating examples of display screens of a printer that can guarantee the same level of security. As shown in FIG. 8A, the printer name (AR-XX3) of the printer 3c determined to be able to guarantee the same security level as the printer 3a is displayed on the operation unit 12 by the control unit 11 of the printer 3a. . In addition, it is displayed that the print job cannot be processed due to out of paper.

  If there is a printer that can guarantee the same security level as that of the printer 3a (S17: YES), and there are two or more printers that can be guaranteed (S21: NO), the security level and operation status of the printer that can be guaranteed Information is created by the control unit 11 and displayed as a list on the operation unit 12 (S25). For example, as shown in FIG. 8B, a list display screen of a plurality of printers that can be guaranteed (substitute) is displayed on the operation unit 12. The operation unit 12 of the printer 3a receives from the user the selection of a printer for which execution of proxy processing is desired (S27).

  Here, the selection of a printer to be used for the proxy process can be a selection of a plurality of printers or can be automatically performed. For example, the control unit 11 of the printer 3a can select a printer that can perform encryption processing, or if there are a plurality of printers that can perform encryption processing, can select a printer that is not currently executing processing. is there.

  When the printer to be used for the proxy process is determined as described above, the control unit 11 of the printer 3a generates an encryption key and a decryption key (S28), and transfers the generated decryption key from the communication unit 13 to the printer 3c. (S30). Thereafter, the control unit 11 encrypts the image data to be transferred to the printer 3c using the generated encryption key (S32). The encrypted image data is stored in the storage unit 16 by the control unit 11, and then transferred to the printer 3c from the communication unit 13 together with an output instruction and the like, and the proxy processing preparation is performed (S35). Processing is started (S37). The control unit 11 of the printer 3c that has received the encrypted image data by the communication unit 13 decrypts the encrypted image data by using the transferred decryption key, and outputs composite image data. Process.

  In the above description, an example in which an instruction for proxy processing is received using the operation unit 12 has been described. However, an instruction for proxy processing can be received from the personal computer 4. In this case as well as the printer 3a, the encryption key and the decryption key for the encryption process are generated by the control unit 11 of the printer 3a when the printer 3c used for the substitution process is determined on the personal computer 4 side. The decrypted key is transferred from the communication unit 13 to the printer 3c.

  When performing distributed processing or proxy processing, an encryption key and a decryption key are generated, and the image data encrypted with the generated encryption key and the generated decryption key are transferred to another printer, thereby encrypting the image data. In addition, the risk of leakage or unauthorized use of the decryption key is reduced, and security of image data transferred between printers is ensured. In addition, since the encrypted image data and the decryption key of the image data are transferred at different timings, the risk of both leaking is low. Furthermore, since the encryption key and the decryption key are generated for each job, the decryption key can be used only for a specific job, and even if the decryption key leaks, the risk of unauthorized use is low.

  Although not shown in the flowchart shown in FIG. 7, the printer 3a (AR-XX1) in which the print job is stagnant due to running out of paper is replenished with paper before requesting the substitution process, so that printing is performed. When returning to a state where processing can be resumed, it is also possible to perform print processing with the printer 3a without performing proxy processing.

  In the above-described embodiment, other printers used for distributed processing or proxy processing are selected based on the presence or absence of encryption processing. However, based on a plurality of conditions such as taking into account overwriting deletion shown in FIG. It is also possible to select another printer. For example, by selecting the printer 3c (AR-XX1) corresponding to encryption processing and overwriting processing in the same manner as the printer 3a (AR-XX1), the control unit 11 prepares for distributed processing (S34) or proxy processing preparation. In (S35), it is possible to transfer an effective instruction for overwriting erasure. The controller 11 of the printer 3c requested to perform the distributed processing or proxy processing performs overwriting processing of the image data that has been processed in accordance with the overwriting erasure effective instruction after completion of the distributed processing or proxy processing.

  Requests even when other printers are used by transferring image data to other printers with the same or higher security level, including overwriting, and performing distributed processing or proxy processing. A security level equivalent to that of the original printer can be maintained.

It is a block diagram which shows the structural example of the image processing system which concerns on this invention. 1 is a block diagram illustrating a configuration example of a printer (image processing apparatus) of the present invention. It is a figure which shows the example of the security function of each printer. It is a flowchart which shows the example of the dispersion | distribution processing procedure of image data. FIG. 6 is a diagram illustrating an example of a printer driver setting window. FIG. 6 is a diagram illustrating an example of a printer list display screen. It is a flowchart which shows the example of the substitute processing procedure of image data. It is a figure which shows the example of the display screen of the printer which can guarantee a comparable security level.

Explanation of symbols

1 Image processing system 3a, 3b, 3c, 3d Printer (image processing apparatus)
4 PC 11 Control unit 12 Operation unit 13 Communication unit 14 Management unit 15 ROM
16 storage unit 17 image reading unit 18 image memory 19 image forming unit N1 communication network

Claims (9)

Multiple image processing devices that accept image data, perform processing including output of received image data and data protection, and transfer image data received by the image processing device to other image processing devices for processing In an image processing system,
The image processing device
Generating means for generating an encryption key used for encrypting image data to be transferred to another image processing apparatus, and a decryption key used for decrypting the encrypted image data;
Encryption means for encrypting image data to be transferred to another image processing device based on the encryption key generated by the generation means, and the image data encrypted by the encryption means and generated by the generation means An image processing system configured to transfer the decrypted key to another image processing apparatus. A part of the image data received by the image processing apparatus is transferred to another image processing apparatus, and the image data is configured to be distributed and processed by the image processing and the other image processing apparatus.
The image processing system according to claim 1, wherein the generation unit is configured to generate an encryption key and a decryption key when performing distributed processing. The image data received by the image processing device is transferred to another image processing device, and the transferred image data is configured to perform substitution processing on the other image processing device.
The image processing system according to claim 1, wherein the generation unit is configured to generate an encryption key and a decryption key when performing proxy processing.   The image data encrypted by the encryption unit and the decryption key generated by the generation unit are configured to be transferred at different timings, respectively. Image processing system. The image data is processed in units of jobs including one or more image data,
The image processing system according to claim 1, wherein the generation unit is configured to generate an encryption key and a decryption key for each job including image data to be transferred. . The image processing apparatus includes:
It is configured to protect data according to the protection level,
Acquisition means for acquiring a protection level of another image processing apparatus;
Determination means for determining whether or not the protection level acquired by the acquisition means is lower than its own protection level;
6. The image processing system according to claim 1, further comprising prohibiting means for prohibiting transfer of image data to another image processing apparatus having a protection level lower than itself. In an image processing apparatus capable of receiving image data and transferring the received image data to another apparatus for processing,
Generating means for generating an encryption key used for encrypting the image data to be transferred, and a decryption key used for decrypting the encrypted image data;
Encryption means for encrypting image data to be transferred based on the encryption key generated by the generation means, and transferring the image data encrypted by the encryption means and the decryption key generated by the generation means An image processing apparatus configured as described above.   8. The image processing apparatus according to claim 7, wherein the image processing apparatus is configured to transfer the image data encrypted by the encryption unit and the decryption key generated by the generation unit at different timings. The image data is processed in units of jobs including one or more image data,
9. The image processing apparatus according to claim 7, wherein the generation unit is configured to generate an encryption key and a decryption key for each job including image data to be transferred.

Images