JP2005301798A - Information processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perfectly prevent presence of non-compressed/non-encrypted data on a storage device to improve security, in an information processor compressing/encrypting input/output data and storing them in the storage device. <P>SOLUTION: A chain of input processes for compressing/encrypting the image data inputted from a reading part 12 by a compression part 21 and a cipher part 22 and storing them in the storage device 17 are pipeline-processed, and delivery of the data is directly performed between devices not through a memory. The compressed/encrypted data stored in the storage device 17 are decrypted/expanded by a decryption part 23 and an expansion part 24 to be restored to the original data, and a chain of output processes until outputting them from a print part 13 are similarly pipeline-processed. Thereby, a copy job or a print job can be executed without making the non-compressed/non-encrypted data present on the storage device once. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information processing apparatus having a function of compressing / encrypting data and storing it in a storage means, and more particularly, an information processing apparatus having a function of compressing / encrypting and storing image data like a digital copying machine. About.

  When data is stored in the information processing apparatus, the data is compressed and encrypted from the viewpoint of reducing the required storage capacity and maintaining confidentiality. Normally, input data is temporarily stored in a memory, and the data is sequentially read out from the memory, compressed and encrypted, and then stored in a storage device such as a hard disk device. In addition, when outputting compressed / encrypted data stored in the storage device, the decrypted / decompressed data is restored to the original data, then temporarily stored in the memory, then sequentially read from this memory and printed. The data is output to the device or transmitted to an external device (for example, see Patent Document 1).

International Publication No. WO97 / 10659 Pamphlet

  Data confidentiality is enhanced by storing the compressed and encrypted data, but conventionally, the data before compression / encryption and the data after decryption / decompression are temporarily stored in the memory. There was a possibility of data leakage from the remaining information. In particular, when storing uncompressed / encrypted data on a hard disk drive, the original information can be reproduced from the remaining magnetic information even if the data is normally deleted, ensuring sufficient confidentiality. It was difficult to do.

  The present invention is intended to solve the above-described problem. Input / output data is compressed / encrypted and stored in the storage device without any data that has not been compressed / encrypted on the storage device. An object of the present invention is to provide an information processing apparatus with high security.

The invention according to claim 1 comprises data input means (12, 15, 16, 25), compression means (21), encryption means (22), and storage means (17).
Data input from the input means (12, 15, 16, 25) is compressed and encrypted using the compression means (21) and the encryption means (22) and stored in the storage means (17). An information processing apparatus for performing a series of input processing without storing data before compression / encryption is completed in a storage means (17).

  According to the above invention, a series of input processing until the input data is compressed / encrypted and stored in the storage means (17), the data before completion of compression / encryption is stored in the storage means (17) halfway. It is done without doing. In other words, the input data is compressed and encrypted and then stored in the storage means (17). That is, only the compressed / encrypted input data is stored in the storage means (17).

  Encryption may be performed after compression, or data that is compressed and encrypted at once from raw data may be generated. Data before completion of compression / encryption is not stored in any storage means (17) including not only the storage means (17) for storing the data after compression / encryption but also other memory and storage devices. For example, when handling image data, a memory such as a page memory or a line memory is also included. However, it does not include a register or memory that the compression means (21) and encryption means (22) have in order to perform compression processing and encryption processing. The storage means (17) may be a hard disk device or other type of storage device in addition to the semiconductor memory.

The invention according to claim 2 comprises storage means (17), decryption means (23), decompression means (24), and data output means (13).
The compressed / encrypted data stored in the storage means (17) is restored to the original data by using the decryption means (23) and the decompression means (24), and is returned from the output means (13). An information processing apparatus for performing a series of output processes to be output without storing the decrypted data in a storage means (17).

  According to the above-described invention, a series of processes until the compressed / encrypted data stored in the storage means (17) is decrypted and decompressed to return to the original data and output to the output means (13). The output process is performed without storing the decrypted data in the storage means (17) during the output process.

  The decompression may be performed after the decryption, or the raw data may be generated at once from the compressed / encrypted data. The decrypted data is not stored in any storage means (17) including not only the storage means (17) storing the compressed and encrypted data but also other memories and storage devices. For example, when handling image data, a memory such as a page memory or a line memory is also included. However, the register and memory that the decompression means (24) and the decryption means (23) have in order to perform the decompression process and the decryption process, and the line memory that the printer unit as the output means (13) has are Not included.

The invention according to claim 3 is a data input means (12, 15, 16, 25), a data output means (13), a compression means (21), an encryption means (22), and a storage means ( 17), decoding means (23), and decompression means (24),
Data input from the input means (12, 15, 16, 25) is compressed and encrypted using the compression means (21) and the encryption means (22) and stored in the storage means (17). A series of input processing is performed without storing the data before compression / encryption is completed in the storage means (17),
The compressed / encrypted data stored in the storage means (17) is restored to the original data by using the decryption means (23) and the decompression means (24), and is returned from the output means (13). An information processing apparatus for performing a series of output processes to be output without storing the decrypted data in a storage means (17).

  According to the above invention, a series of input processing until the input data is compressed / encrypted and stored in the storage means (17), the data before completion of compression / encryption is stored in the storage means (17) halfway. It is done without doing. In addition, a series of output processing until the compressed / encrypted data stored in the storage means (17) is decrypted / expanded to the original data and output to the output means (13) is decrypted. This is done without storing the converted data in the storage means (17) during the output process. That is, the input data is not stored in the storage means (17) in an unencrypted state between input and output.

In the invention according to claim 4, data is not transferred between the input means (12, 15, 16, 25), the compression means (21), and the encryption means (22) without the storage means (17). The information processing apparatus according to claim 1, wherein the information processing apparatus delivers the information.

  According to the above invention, the data inputted from the input means (12, 15, 16, 25) is directly inputted to the compression means (21) without going through the storage means (17), and the output of the compression means (21). The compressed data to be input is directly input to the encryption means (22) without going through the storage means (17).

The invention according to claim 5 is characterized in that data is transferred between the decoding means (23), the decompression means (24) and the output means (13) without going through the storage means (17). The information processing apparatus according to claim 2 or 3.

  According to the above invention, the decrypted data (compressed data) output from the decryption means (23) is directly input to the decompression means (24) without going through the storage means (17), and the decompression means (24). Is directly input to the output means (13) without going through the storage means (17).

The invention according to claim 6 is the information processing apparatus according to claim 1, 2, 3, 4 or 5, wherein the processing is performed by a flow work.

  According to the above invention, each process is executed by a so-called pipeline system. That is, in the input process, the input means (12, 15, 16, 25), the compression means (21), and the encryption means (22) operate simultaneously in parallel, and the data is compressed and encrypted one after another in the order of input. And stored in the storage means (17). In the output process, the decryption means (23), the decompression means (24) and the output means (13) operate in parallel, and the data is decrypted and decompressed one after another in the order read from the storage means (17). Then, it is passed to the output means (13) for output.

The invention according to claim 7 is the information processing apparatus according to claim 1, 2, 3, 4, 5 or 6, wherein the data is image data.

  Since image data tends to increase in data amount as the resolution and color increase, the image data is suitable as target data of the present invention for compression and encryption. For example, when the information processing apparatus according to the present invention is a digital copying machine that handles image data, the scanner unit and the print controller serve as input means (12, 15, 16, 25), and the printer section serves as the output means (13). Become.

  According to the information processing apparatus according to the present invention, only the compressed / encrypted data is stored in the storage means, and there is no unencrypted data in the storage means. Even when data remaining in the storage means is leaked, the contents are not known unless the data is decrypted, and confidentiality is ensured, and security is improved.

  In the case of performing the input process until data is input and compressed / encrypted and stored, and the output process until the data in the storage means is decrypted / decompressed and output, the input means, the compression means, No buffer memory is required to temporarily store data between the compression means and the encryption means, and input processing and output processing that does not store uncompressed / encrypted data in the storage means are easily realized. be able to.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 shows a configuration of an image processing apparatus 10 as an information processing apparatus according to an embodiment of the present invention. The image processing apparatus 10 is configured as a digital multifunction machine having a scanner function, a printer function, a facsimile function, and the like, in addition to a copy function for reading a document and forming a corresponding image on a recording sheet for output.

  The image processing apparatus 10 includes a control unit 11 that performs overall control of the operation of the apparatus. The control unit 11 includes a circuit having a CPU (Central Processing Unit), a ROM (Read Only Memory), and a RAM (Random Access Memory) (not shown) as main parts.

  Various functional units are connected to the control unit 11 through a system bus. Among these, the reading unit 12 functions to read a document image and capture corresponding image data. The reading unit 12 includes a light source that irradiates the document, a line image sensor that reads the document for one line in the width direction, a moving unit that moves the reading position in units of lines in the length direction of the document, and reflected light from the document. And an optical path composed of a lens and a mirror for guiding the light to a line image sensor to form an image. The line image sensor is composed of a CCD (Charge Coupled Device). The analog image signal output from the line image sensor is A / D converted, further binarized by error diffusion processing, etc., and output as digital image data.

  The printing unit 13 functions to form and output an image corresponding to the image data on a recording sheet by an electrophotographic process. The printing unit 13 is configured as a so-called laser printer having a recording paper conveyance device, a photosensitive drum, a charging device, a laser unit, a developing device, a transfer separation device, a cleaning device, and a fixing device. ing.

  The display operation unit 14 includes a liquid crystal display having a touch panel on the surface and various operation switches, and has a function of performing various guidance displays and status displays to the user, and receiving various operations from the user. Yes. The network I / F unit 15 is an interface unit for connecting and communicating with a network such as a LAN (local area network). The local connection I / F unit 16 is an interface unit for locally connecting devices in accordance with a communication standard such as IEEE1284.

  The image processing unit 20 includes a compression unit 21 as a compression unit, an encryption unit 22 as an encryption unit, a decryption unit 23 as a decryption unit, an expansion unit 24 as an expansion unit, and a rasterization unit 25. ing. The image processing unit 20 is configured by an integrated circuit such as an ASIC (Application Specific Integrated Circuit).

  The compression unit 21 performs a function of compressing data by a predetermined compression method. The encryption unit 22 functions to encrypt data. The decompression unit 24 functions to return the data encrypted by the encryption unit 22 to the state before encryption. The decoding unit 23 functions to return the data compressed by the compression unit 21 to the state before compression. The rasterizing unit 25 has a function of developing print data expressed in a page script language into image data.

  The compression unit 21, the encryption unit 22, the decryption unit 23, and the decompression unit 24 are internally provided with buffer memories necessary for performing their functions. A necessary amount of this buffer memory may be prepared according to the compression method, encryption method, and the like. The image processing unit 20 compresses and encrypts data by pipeline processing in which the compression unit 21 and the encryption unit 22 operate in parallel. Also, processing for decoding / decompressing data is performed by pipeline processing in which the expansion unit 24 and the decoding unit 23 operate in parallel.

  The storage device 17 functions to store the compressed / encrypted data output from the image processing unit 20. Here, a hard disk device (HDD) is used for the storage device 17, but the present invention is not limited to this.

  Next, an operation flow when the image processing apparatus 10 executes a copy job for creating a copy of a document will be described. FIG. 2 shows the flow of image data in a copy job. In the copy job, an input process from reading a document, compressing / encrypting the image data to storing it in the storage device 17, and decrypting / decompressing the compressed / encrypted data stored in the storage device 17. This is realized in combination with output processing for printing out. These input processing and output processing are each performed as a flow operation.

  First, when the reading unit 12 starts reading an original, image data corresponding to the read original image is sequentially output from the reading unit 12 to the compression unit 21 of the image processing unit 20 (step S101). The compression unit 21 sequentially compresses the image data input from the reading unit 12 (step S102), and sequentially passes the compressed data (compressed data) to the encryption unit 22 in the image processing unit 20. Data transfer from the compression unit 21 to the encryption unit 22 is performed directly in the image processing unit 20.

  The encryption unit 22 sequentially encrypts the compressed data input from the compression unit 21 and outputs the compressed / encrypted data (step S103). The compressed / encrypted data output from the encryption unit 22 is sent from the image processing unit 20 to the storage device 17 and stored therein. Up to here is the input processing.

  As described above, the input process from reading by the reading unit 12 until compression and encryption is stored is performed by pipeline processing in a flow work, and image data that is not compressed and encrypted is stored in the memory. There is nothing.

  In the copy job, the output process is started when a predetermined number of pages of compressed / encrypted data are stored in the storage device 17. The compressed / encrypted data is read from the storage device 17 in the order of storage (step S105), and the read compressed / encrypted data is sequentially input to the decrypting unit 23 of the image processing unit 20.

  The decryption unit 23 sequentially decrypts the compressed / encrypted data sequentially input from the storage device 17 and returns the compressed data to the compressed data (step S106), and sequentially delivers it to the decompression unit 24. The decompression unit 24 sequentially decompresses the compressed data sequentially input from the decoding unit 23 and returns the compressed image data to the uncompressed image data (step S107), which is sequentially output from the image processing unit 20 to the printing unit 13. The printing unit 13 sequentially forms and prints out images corresponding to the input image data (step S108). Steps S105 to S108 are output processing.

  FIG. 3 shows how image data is processed in a flow process. This figure shows an example in which one copy of a two-page document is copied. The compression process 52 is started slightly after the start of the scanner-in process 51. Further, the encryption process 53 starts to be executed slightly after the start of the compression process 52, and the process 54 of the memory IN is started further slightly after the start of the encryption process 53.

  When the storage of the compressed / encrypted data of the first page is completed, the processing 55 of the memory OUT is started. The decoding process 56 is started slightly after the start of the process 55 of the memory OUT, and the decompression process 57 is started slightly after the start of the decoding process 56. Further, the printout process 58 is started slightly after the start of the expansion process 57. By processing the image data in the flow operation in this way, a series of processing is executed without the raw image data existing in the memory.

  FIG. 4 shows an operation flow when the image processing apparatus 10 executes a print job for receiving print data from an external apparatus and printing out a corresponding image. The print job receives the print data, performs input processing until the rasterized version is compressed / encrypted and stored in the storage device 17, and decrypts the compressed / encrypted data stored in the storage device 17. This is realized by a combination with output processing that prints out and prints out. These input processing and output processing are each performed as a flow operation.

  First, an apparatus such as a personal computer outputs print data from an application program through a printer driver, and the image processing apparatus 10 receives the print data through the network I / F unit 15 and the local connection I / F unit 16.

  When the image processing apparatus 10 starts receiving print data (step S201), the print data is input to the rasterizing unit 25 of the image processing unit 20 in the order of reception. The rasterizing unit 25 rasterizes the print data in the input order to sequentially generate image data of the image (step S202), and sequentially transfers the generated image data to the compressing unit 21. The transfer of the image data from the rasterizing unit 25 to the compression unit 21 is performed directly in the image processing unit 20.

  The compression unit 21 sequentially compresses the image data input from the rasterization unit 25 (step S203), and delivers the compressed data (compressed data) to the encryption unit 22 one after another. Data transfer from the compression unit 21 to the encryption unit 22 is performed directly in the image processing unit 20. The encryption unit 22 sequentially encrypts the compressed data input from the compression unit 21 and outputs the compressed / encrypted data (step S204). The compressed / encrypted data output from the encryption unit 22 is sent from the image processing unit 20 to the storage device 17 and stored therein. Up to here is the input processing.

  As described above, the input processing from the reception of the print data to the rasterization, compression / encryption and storage is performed by the pipeline process in a flow work, and the uncompressed / encrypted image data is stored in the memory. There is nothing.

  In the print job, output processing is started when compressed / encrypted data for a predetermined number of pages (for example, one page) is stored in the storage device 17. The output process (steps S206 to S209) is the same as steps S105 to S108 in the copy job, and a description thereof will be omitted.

  The embodiment of the present invention has been described with reference to the drawings. However, the specific configuration is not limited to that shown in the embodiment, and there are changes and additions within the scope of the present invention. Are also included in the present invention. For example, in the embodiment, the compression process and the encryption process are performed independently. However, both the compression process and the encryption process are performed at a time, and the compressed / encrypted data is simultaneously generated from the raw image data. You may comprise so that it may produce | generate. The same applies to decoding / decompression.

  The image processing unit 20 and the printing unit 13 store uncompressed / encrypted image data for one to several lines, but the image data is overwritten one after another in the same place, so the image data Is sufficiently secure.

  In the embodiment, the image processing apparatus 10 capable of both input processing and output processing has been described as an example. However, the image processing apparatus 10 may perform either input processing or output processing. For example, as a device having a function of inputting compressed and encrypted image data and storing it in a storage device, and a function of decoding and decompressing and outputting compressed / encrypted data stored in the storage device It may be configured. Also, a function to compress and encrypt input image data and a function to output the stored compressed / encrypted data to an external device as it is, for example, FTP (File Transfer Protocol) transfer or an attached file of an e-mail As an apparatus having a function of outputting as

It is a block diagram which shows the structure of the image processing apparatus concerning embodiment of this invention. 3 is a flowchart illustrating a data flow when an image processing apparatus according to an embodiment of the present invention executes a copy job. It is explanatory drawing which shows a mode that the image processing apparatus concerning embodiment of this invention processes image data in flow work. 3 is a flowchart illustrating a data flow when an image processing apparatus according to an embodiment of the present invention executes a print job.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Image processing apparatus 11 ... Control part 12 ... Reading part 13 ... Printing part 14 ... Display operation part 15 ... Network I / F part 16 ... Local connection I / F part 17 ... Storage device 20 ... Image processing part 21 ... Compression part DESCRIPTION OF SYMBOLS 22 ... Encryption part 23 ... Decryption part 24 ... Decompression part 25 ... Rasterization part 51 ... Scanner-in process 52 ... Compression process 53 ... Encryption process 54 ... Memory IN process 55 ... Memory OUT process 56 ... Decryption process 57 ... Decompression processing 58 ... Printout processing

Claims (7)

A data input means, a compression means, an encryption means, and a storage means;
A series of input processes in which data input from the input unit is compressed and encrypted using the compression unit and the encryption unit and stored in the storage unit, and data before compression / encryption is stored An information processing apparatus characterized in that it is performed without storing in the means. A storage unit, a decoding unit, a decompression unit, and a data output unit;
A series of output processes in which the compressed / encrypted data stored in the storage means is restored to the original data using the decryption means and the decompression means and output from the output means, An information processing apparatus for performing data without storing the data in a storage means. Data input means, data output means, compression means, encryption means, storage means, decryption means, and decompression means,
A series of input processes in which data input from the input unit is compressed and encrypted using the compression unit and the encryption unit and stored in the storage unit, and data before compression / encryption is stored Without storing it in the means,
A series of output processes in which the compressed / encrypted data stored in the storage means is restored to the original data using the decryption means and the decompression means and output from the output means, An information processing apparatus for performing data without storing the data in a storage means. 4. The information processing apparatus according to claim 1, wherein data is transferred between the input unit, the compression unit, and the encryption unit without using a storage unit. 5. 4. The information processing apparatus according to claim 2, wherein data is exchanged between the decryption unit, the decompression unit, and the output unit without using a storage unit. 5. The information processing apparatus according to claim 1, 2, 3, 4, or 5, wherein the processing is performed by a flow work. The information processing apparatus according to claim 1, 2, 3, 4, 5, or 6, wherein the data is image data.

Images