JP2005338965A - Image storage device, image processor, method of storing image, image storage program, and recording medium for recording the image storage program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image storage program that prevents stored contents from being easily reproduced even if it is analyzed in an isolated state. <P>SOLUTION: This complex machine (image storage device) records both encrypted page data and unencrypted page data in an HDD. This leads to the possibility that a third party could normally reproduce at least part of the page data by carrying the HDD away. Since the page data in the HDD appear unencrypted to third parties, the fact that part of the page data in the HDD is encrypted is hardly to be detected by third parties compared with a configuration in which all the page data are encrypted (stored discontinuously). Thus, the complex machine can significantly reduce the risk of the encrypted page data being read and used illegally by a third party who illegally carries the HDD away. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an image storage device that stores image data input from the outside.

  Usually, a complex printing / image processing device (information processing device) equipped with functions such as a fax machine and a scanner is an auxiliary storage device (hard disk) for storing (storing) captured data (image data) before printing. Etc.).

  By the way, such auxiliary storage devices often store secret data. Therefore, it is preferable that the auxiliary storage device has a structure in which stored data is not easily read even when the auxiliary storage device is detached from the image processing apparatus by a third party and analyzed alone.

In this regard, for example, in Patent Document 1 and Patent Document 2, images are input in a random order for each word / byte unit that is a memory access unit or each pixel of an image, or an image is recorded at a random address. Technology is disclosed.
In these techniques, images are stored in various locations in the recording area. Therefore, it becomes difficult for a third party to analyze (decode) the auxiliary storage device.

Patent Document 3 discloses a technique for encrypting and storing data in a hard disk device (HDD) as an auxiliary storage device.
In addition to these, a technique for erasing all data after printing (after reading) from the auxiliary storage device is also used.
JP 62-104286 A (publication date May 14, 1987) JP 62-107352 A (publication date May 18, 1987) Japanese Patent Laid-Open No. 5-94225 (publication date April 16, 1993)

However, the conventional techniques as described above have the following problems.
In other words, the techniques of Patent Documents 1 and 2 both assume that an electronic memory is used as an auxiliary storage device, and thus have a drawback of limited storage capacity. Further, when this technology is applied to a disk device, data is stored in various places on the disk, which causes a problem that the time for physically moving the head (access time) becomes long. .

  Moreover, when performing a complicated encryption process like patent document 3, many system resources are required. Furthermore, there is a problem that the data transfer rate is reduced as compared with the case where encryption is not performed.

  Further, the method of erasing data after reading has a problem that data cannot be recorded in the storage auxiliary device for a long time.

  The present invention has been made in view of the conventional problems as described above. An object of the present invention is to provide an image storage device that can avoid taking time to read image data and that does not easily reproduce the stored contents even if it is analyzed in a single state.

In order to achieve the above object, the image storage device of the present invention (the present storage device)
In an image storage device for storing image data input from the outside,
A control unit;
An image storage unit for storing image data;
A position information storage unit for storing position information indicating a storage position of image data in the image storage unit;
The above control unit
While storing part of the image data continuously in the image storage unit,
It is characterized in that the other part of the image data is divided into data pieces of a predetermined unit, and the divided data pieces are designed to be stored discontinuously in the image storage unit.

  This storage device is provided in an apparatus (image processing apparatus) that handles image data, such as a computer, a scanner, or a fax receiving apparatus, and inputs and stores image data from these apparatuses.

And in order to memorize | store image data, this memory | storage device is provided with the image memory | storage part which consists of a hard disk etc. The storage device also includes a position information storage unit for storing position information indicating the storage position (address) of image data in the image storage unit.
The storage device further includes a control unit for controlling the image data storage and the position information storage unit.

In particular, in this storage device, the control unit continuously stores a part of the image data as usual (without encryption), while storing the other part in the image storage unit in an encrypted state. It has become.
In addition, the control unit is designed to divide the image data into predetermined unit data pieces and to store the divided data pieces discontinuously at various positions in the image storage unit. ing.

Therefore, in the image data storage by the present storage device, the encrypted portion in the image data cannot be read out properly if there is no position information (position information) in the image storage unit. Yes.
For this reason, in this storage device, even if the image storage unit is illegally taken away by a third party and analyzed, as long as the position information storage unit is secured, the encrypted portion has meaning as data. It is only recognized as a set of discontinuous data pieces. Therefore, in the present storage device, it is possible to easily prevent the image data from being completely reproduced by a third party as described above.

  In addition, the present storage device is designed so that a part of the image data is stored continuously (without encryption) in the image storage unit. Accordingly, there is a possibility that only this part can be normally reproduced even by a third party who has taken away the image storage unit.

Therefore, it appears to third parties that the image data is not encrypted in the image storage unit. For this reason, as compared with the configuration in which the entire image data is encrypted (stored discontinuously), the fact that “a part of the image data in the image storage unit has been encrypted” is as described above. It is difficult for people to detect.
As described above, in the present storage device, it is possible to read the image data by a third party who illegally took away the image storage unit, and to extremely reduce the risk of being used illegally.

In the present storage device, the unit of the data piece is preferably set larger than the word / byte unit or the image pixel unit.
Thereby, it is possible to suppress a reduction in access speed to the image storage unit when the image data is encrypted and stored.

Further, the control unit may determine a part to be continuously stored (part not to be encrypted) and a part to be stored discontinuously (part to be encrypted) in the image data based on a user instruction.
As a result, a highly confidential part of the image data can be selected and encrypted by the user himself / herself.

  Further, in the present storage device, it is preferable that the image storage unit includes a position information area for storing position information. The control unit is preferably set to store the position information of the image data portion continuously stored in the image storage unit in the position information area of the image storage unit.

That is, in a normal image storage device, position information is generally stored in an image storage unit. Therefore, also in this storage device, it is preferable to store the position information of the portion of the image data that is not encrypted in the image storage unit.
As a result, it is possible to make a third party who has taken away and analyzed the image storage unit appear to be “a general storage form of image data (not encrypted at all)”. Therefore, it can be made harder to detect that part of the image data is encrypted.

Also, this multifunction device
In an image storage device for storing image data input from the outside,
A control unit;
An image storage unit for storing image data;
A position information storage unit for storing position information indicating a storage position of image data in the image storage unit;
The image storage unit includes a position information area for storing position information indicating the position of image data in the image storage unit,
The above control unit
The image data is divided into data pieces of a predetermined unit, the divided data pieces are stored discontinuously in the image storage unit,
A configuration may be adopted in which a part of the position information of the image data is set to be stored in the position information area.

In this configuration, the control unit encrypts part or all of the image data and stores it in the image storage unit.
The control unit stores a part of the position information of the stored image data in the position information area of the image storage unit.

In this case, a third party who has taken away and analyzed the image storage unit may be able to reproduce the image data portion in which the position information is stored in the position information area.
Further, as described above, in a normal image storage device, position information is generally stored in an image storage unit.

Therefore, in this configuration, it is possible to make a third person misunderstand (ie, misunderstand) that “only a reproducible part is stored in the image storage unit”.
As a result, in the present multifunction device, the presence of the image data portion whose position information is not stored in the image storage unit can be easily concealed.

In addition, the image storage method of the present invention (the present storage method)
In an image storage method of storing image data input from the outside in an image storage unit, and storing position information indicating a storage position of the image data in the image storage unit in the position information storage unit,
A continuous storage step of continuously storing a part of the image data in the image storage unit;
It includes a discontinuous storage step of dividing another portion of the image data into data pieces of a predetermined unit and storing the divided data pieces discontinuously in the image storage unit.

This storage method is a method used in the above-described storage device. Therefore, if image data is stored using this storage method, even if the image storage unit is illegally taken away by a third party and analyzed, as long as the position information storage unit is secured, the encrypted portion Is recognized only as a set of discontinuous data pieces that do not make sense as data.
Therefore, it is possible to easily prevent the image data from being completely reproduced by a third party as described above.

  Also, compared to a configuration in which the entire image data is encrypted (discontinuously stored), the third party as described above detects that “the image data in the image storage unit is encrypted”. It can be difficult. For this reason, image data can be read out by a third party who illegally took away the image storage unit, and the risk of illegal use can be greatly reduced.

The first image storage program of the present invention is a program for causing a computer provided in a storage device capable of storing image data to function as a control unit in the storage device.
The second image storage program of the present invention is a program for causing a computer provided in a storage device capable of storing image data to execute the continuous storage process and the discontinuous storage process in the storage method.

By loading these image storage programs into the computer as described above, the function of the control unit of the storage device or each step of the storage method can be performed by the computer.
Further, by storing this program on a computer-readable recording medium, the program can be easily stored and distributed.

  As described above, the image storage device (the present storage device) of the present invention is a control unit, an image storage unit that stores image data, and an image storage unit in an image storage device that stores image data input from the outside. A position information storage unit for storing position information indicating the storage position of the image data in the image data, and the control unit continuously stores a part of the image data in the image storage unit. The other part is divided into data pieces of a predetermined unit, and the divided data pieces are designed to be stored discontinuously in the image storage unit.

In this storage device, the control unit continuously stores a part of the image data as usual (without encryption), and stores the other part in the image storage unit in an encrypted state. ing.
In addition, the control unit performs this encryption by dividing the image data into data pieces of a predetermined unit and storing the divided data pieces discontinuously at various positions in the image storage unit. .

Therefore, in the image data storage by the present storage device, the encrypted portion in the image data cannot be read out properly if there is no position information (position information) in the image storage unit. Yes.
For this reason, in this storage device, even if the image storage unit is illegally taken away by a third party and analyzed, as long as the position information storage unit is secured, the encrypted portion has meaning as data. It is only recognized as a set of discontinuous data pieces. Therefore, in the present storage device, it is possible to easily prevent the image data from being completely reproduced by a third party as described above.

  In addition, the present storage device is designed so that a part of the image data is stored continuously (without encryption) in the image storage unit. Accordingly, there is a possibility that only this part can be normally reproduced even by a third party who has taken away the image storage unit.

Therefore, it appears to third parties that the image data is not encrypted in the image storage unit. For this reason, as compared with the configuration in which the entire image data is encrypted (stored discontinuously), the fact that “a part of the image data in the image storage unit has been encrypted” is as described above. It is difficult for people to detect.
As described above, in the present storage device, it is possible to read the image data by a third party who illegally took away the image storage unit, and to extremely reduce the risk of being used illegally.

An embodiment of the present invention will be described.
The digital multifunction peripheral (this multifunction peripheral) according to the present embodiment is a complex printing / image processing apparatus having a fax function, a scanner function, and a printer function.

First, the configuration of the multifunction peripheral will be described.
FIG. 2 is an explanatory diagram showing a schematic configuration of the multifunction machine.
As shown in this figure, this multifunction machine includes a CPU 2, a system controller 3, a RAM 4, a ROM 5, a nonvolatile memory 6, an HDD (Hard Disk Drive) controller 7, an HDD 8, a user authentication unit 9, and a data input / output unit 10. I have.

A CPU (control unit) 2 is a central part of the multifunction peripheral that controls all operations of the multifunction peripheral.
The system controller 3 mediates and controls communication between the CPU 2 and the other members 3 to 10.
A ROM (Read Only Memory) 5 is a memory for storing various programs used by the CPU 2.
A RAM (Random Access Memory) 4 is a primary storage unit used by the CPU 2. When the CPU 2 uses a program in the ROM 5, the CPU 2 reads it into the RAM 4.

The user authentication unit 9 is for limiting users who can use the multifunction peripheral by inputting a password and a hardware key.
That is, the user can use the multifunction device by inputting an appropriate password to the user authentication unit 9 and inserting a hardware key. That is, the user authentication unit 9 is responsible for maintaining the confidentiality of the entire MFP.

The data input / output unit 10 includes a data input unit 21 and a data output unit 22.
The data input unit 21 is a device for inputting image data to the multi-function peripheral. A scanner for reading a document image, a fax receiving device for receiving fax data transmitted from the outside, and other image data It has an input terminal for input.

  The data output unit 22 is a device for outputting image data to the outside, a print engine for printing the image data, and a fax transmission device for transmitting image data generated by the multi-function peripheral to the outside as fax data. And an output terminal for outputting other image data to the outside.

The HDD (image storage unit) 8 is a large-capacity storage medium for storing image data.
The HDD 8 includes a main area for storing the image data main body and a FAT (File Allocation Table) area for storing information (position information) indicating the position of the image data on the HDD 8.

The HDD controller 7 controls storage (writing) and reading of image data with respect to the HDD 8.
The non-volatile memory (position information storage unit) 6 is a storage device having a FAT area for storing position information of image data stored in the HDD 8.

  In addition, the multifunction machine includes an operation unit (not shown). The operation unit includes a display screen such as an LCD and operation buttons. Then, it receives a command input from the user and transmits it to the CPU 2, and has a function of showing the processing progress and processing result in the multifunction machine to the user.

Next, input / output processing (copy processing) of image data in the multifunction machine will be described.
Note that this multifunction device is designed to process image data in the RAM 4 for each piece of data (page data) corresponding to one original (one page).

FIG. 3 is a flowchart showing the flow of the copy process.
As shown in this figure, in the copy process, when a document is placed on the document placement table in the scanner of the data input unit 21 and a copy start instruction is input by the user (when the start button is pressed), the CPU 2 Then, the scanner is controlled to read the original image, and page data is generated and stored in the RAM 4 (S1 to S3).

  Thereafter, the CPU 2 determines whether or not a document whose image is to be read remains in the scanner (S4). If it is determined that the data remains, the CPU 2 checks the free capacity of the RAM 4 and determines whether page data corresponding to the next document can be stored (S5). If it is determined that it can be stored, the CPU 2 returns to S3 and stores page data corresponding to the document in the RAM 4.

  On the other hand, when the free space is insufficient, the page data in the RAM 4 is moved to the HDD 8 by a writing process described later to increase the free space in the RAM 4 (S6), and the process returns to S3.

  After reading all document images, the CPU 2 determines whether or not page data exists in the HDD 8, that is, whether or not page data needs to be read from the HDD 8 (S7).

  When there is page data in the HDD 8, the CPU 2 moves the page data in the RAM 4 to the HDD 8 according to the writing process (S8). As a result, all page data is stored in the HDD 8, and a free capacity for reading can be secured in the RAM 4.

Next, the CPU 2 confirms whether page data exists in the RAM 4 (S9). If it does not exist, the page data is read from the HDD 8 according to a read process described later, and is expanded and stored in the RAM 4 (S10).
Thereafter, the page data in the RAM 4 is printed (S11). The processes in S9 to S11 are repeated until all the page data is printed (S12), and the copy process is terminated.

Next, the writing process shown as S6 and S8 in FIG. 3 will be described.
FIG. 4 is a flowchart showing the flow of the writing process. In the writing process, the CPU 2 selects one page data in the RAM 4 (S21). Then, it is determined whether or not this page data is encrypted (S22). This determination is made based on an input instruction from the user.

  Here, the page data will be briefly described. 5A and 5B are explanatory diagrams showing examples of page data. As shown in FIG. 5A, the page data is an aggregate of a plurality of line data a to j, and can be divided for each line data as shown in FIG. 5B. .

When it is determined in S21 of FIG. 4 that encryption is not necessary, the CPU 2 controls the HDD controller 7 to continuously store all line data of page data in the HDD 8 (S29).
Further, the CPU 2 writes the information (position information) of the storage position (write position) on the HDD 8 in each image line into the FAT area on the nonvolatile memory 6 and the HDD 8 (S30).

On the other hand, if the CPU 2 determines that encryption is necessary in S22, the CPU 2 stores the line data of the page data at different positions on the HDD 8. That is, in this case, the CPU 2 determines a writing position on the HDD 8 for each line data, and generates position information corresponding to each position (S23 and S24).
At this time, the CPU 2 randomly determines the writing position of each line data from positions (distant positions) not adjacent to the line data before and after the line data.

  Thereafter, the CPU 2 controls the HDD controller 7 in accordance with the position information, stores the line data in the HDD 8, and stores the position information in the nonvolatile memory 6 (S25 and S26). And the process of S23-S26 is repeated regarding all the line data of page data (S27).

  After storing one page data in the HDD 8, the CPU 2 determines whether or not the page data stored in the HDD 8 is the last page, that is, whether or not page data to be stored in the HDD 8 is still in the RAM 4. Judgment is made (S28). If it is not the last page, the CPU 2 returns the process to S21. On the other hand, if it is the last page, the writing process is terminated.

FIG. 6 is an explanatory diagram showing a storage state on the HDD 8 when the page data shown in FIGS. 5A and 5B is not encrypted. As shown in this figure, in this case, each line data a to j of the page data is stored in this order in a continuous area of the HDD 8 (in this figure, for the sake of simplicity, the line data a to j are stored in this order. only e is shown).
Further, position information of each line data is recorded in the FAT area of the HDD 8 and the nonvolatile memory 6.

On the other hand, FIG. 7 is an explanatory diagram showing a storage state on the HDD 8 when the same page data is encrypted. As shown in this figure, in this case, the line data a to j of the page data are stored separately in discontinuous areas on the HDD 8.
Further, the position information of each line data a to j is not stored in the FAT area of the HDD 8 but is stored only in the FAT area of the nonvolatile memory 6 (the FAT area of the HDD 8 is blank).

  Further, in FIG. 1, the page data shown in FIGS. 5A and 5B is stored in the HDD 8 without being encrypted, while the other page data having the line data A and B is encrypted and stored in the HDD 8. It is explanatory drawing which shows the state of HDD8 in a case.

As shown in this figure, in this case, the line data a to j are stored in this order in successive areas of the HDD 8 as in FIG. On the other hand, the line data A and B are stored separately in discontinuous areas on the HDD 8.
Further, the position information of the line data a to j is stored in the FAT area of the HDD 8 and the nonvolatile memory 6, while the position information of the line data A and B is not stored in the FAT area of the HDD 8 but is nonvolatile. It is stored only in the FAT area of the memory 6.

Next, the reading process shown as S10 in FIG. 3 will be described.
FIG. 8 is a flowchart showing the flow of this process.
As shown in this figure, in the reading process, the CPU 2 selects one page data in the HDD 8 (S31). Then, the CPU 2 determines whether or not this page data is encrypted (S32).
This determination is made based on whether or not the position information of the selected page data exists in the FAT area of the HDD 8.

  If the page data is encrypted, the CPU 2 acquires the position information from the FAT area of the nonvolatile memory 6 for each line data. Further, line data is read from the HDD 8 based on the position information and developed in the RAM 4 (S33 to S35).

  On the other hand, when the page data is not encrypted, the CPU 2 acquires the position information for each line data from the FAT area of the HDD 8. Further, line data is read from the HDD 8 based on the position information, and is similarly developed in the RAM 4 (S36 to S38).

As described above, in this multifunction machine, the CPU 2 stores a part of page data in the HDD 8 in an encrypted state.
Further, the CPU 2 performs this encryption by dividing the page data into a predetermined unit of line data, and storing the divided line data in various positions of the HDD 8 discontinuously (separately).

Therefore, in this multi-function peripheral, the encrypted page data cannot be properly read when there is no position information.
That is, even if the HDD 8 is illegally taken away and analyzed by a third party, the encrypted page data has no meaning as data as long as the nonvolatile memory 6 is secured. It is only recognized as a set of discontinuous line data. Therefore, in this multifunction device, it is possible to easily prevent the page data from being completely reproduced by a third party as described above.

In the present embodiment, whether to encrypt page data is determined by a user instruction.
As a result, highly confidential page data can be selected and encrypted by the user himself / herself.

The user preferably issues an instruction to record both encrypted page data and non-encrypted page data in the HDD 8.
Further, the present invention is not limited to this, and the CPU 2 may be configured to encrypt part of page data without being instructed by the user, while storing other page data in the HDD 8 without encryption. Good.

With this configuration, both the encrypted page data and the unencrypted page data exist in the HDD 8.
In this case, since some page data is continuously stored in the HDD 8 (without encryption), only this page data can be normally reproduced even by a third party who has taken away the HDD 8. There is sex.

Therefore, for the third party, it seems that the page data is not encrypted in the HDD 8, and therefore, compared to the configuration in which all the page data is encrypted (stored discontinuously), “a part of the HDD 8 It is difficult for the third party to detect that the page data is encrypted.
For this reason, in this multi-function peripheral, it is possible to read the page data encrypted by a third party who illegally took away the HDD 8, and to extremely reduce the risk of being used illegally.

  In the present multifunction machine, the HDD 8 is provided with a FAT area for storing position information of line data. The CPU 2 is set to store the position information of the page data (line data) continuously stored in the HDD 8 in the FAT area of the HDD 8.

That is, in a normal image storage device, position information is generally stored in the HDD. Therefore, also in this multifunction machine, it is preferable to store the position information of the page data not encrypted in the HDD 8.
As a result, it is possible to make the third party who took away the HDD 8 and analyze it “generally storing the page data (not encrypted at all)”. Therefore, it can be further difficult to detect that some page data is encrypted.

  Further, with this configuration, it is possible to make a third person misunderstand (ie, misunderstand) that “only a reproducible portion is stored in the HDD 8”. As a result, in this multi-function peripheral, the presence of page data for which position information is not stored in the HDD 8 can be easily concealed.

In the present embodiment, whether or not to encrypt image data is determined for each page data in the writing process shown in FIG.
However, the present invention is not limited to this, and for each line data in the page data, it may be determined whether to encrypt (that is, the page data may be divided into a portion to be encrypted and a portion not to be encrypted). ).

  In this case, for example, the line data a to e in the page data shown in FIGS. 5A and 5B are not encrypted, while the line data f to j are encrypted. At this time, the storage state of each line data on the HDD 8 is as shown in FIG.

  In the present embodiment, when page data is stored in the HDD 8 without being encrypted, the position information is stored in the FAT areas of both the HDD 8 and the nonvolatile memory 6. However, the present invention is not limited to this, and the position information may be stored in one of the FAT areas of the HDD 8 and the nonvolatile memory 6. Note that when the position information is stored in the FAT area of the HDD 8, the position information acquisition speed can be increased as compared with the case where the position information is stored in the nonvolatile memory 6.

In this embodiment, when the page data is encrypted and stored in the HDD 8, the FAT area of the HDD 8 is blank.
However, the present invention is not limited to this, and part of the position information (information unrelated to the storage position of the line data) may be stored in the FAT area of the HDD 8. For example, as shown in FIG. 10, the file name (A / B) of the line data may be stored in the FAT area of the HDD 8.

Further, as long as it is set so that the position of the line data cannot be estimated from the information stored in the FAT area of the HDD 8, the position information is separated into a part stored in the FAT area of the HDD 8 and a part stored in the FAT area of the nonvolatile memory. And may be saved.
Thereby, the memory capacity required for the nonvolatile memory 6 can be reduced.

In this embodiment, the HDD 8 is used as a large-capacity storage medium for storing image data. However, the present invention is not limited to this, and other disk-like media capable of recording image data (DVD (digital versatile disk), MO (magneto-optical disc), CD (compact disc), etc.) are used as such storage media. Q
Further, instead of the HDD 8, a storage device (memory card, RAM, etc.) other than the disk-shaped medium may be used.

As the non-volatile memory 6 of the multifunction machine, a memory such as a RAM or a disk-shaped storage medium such as a hard disk can be used.
In order to store the position information, a volatile memory may be used instead of the nonvolatile memory 6.

  In this embodiment, the nonvolatile memory 6 is built in the multifunction peripheral. However, it is also possible to use a removable medium such as an IC card as the nonvolatile memory 6.

In this case, it is impossible to print the position information of the page data encrypted in the HDD 8 unless a medium storing the position information is loaded in the multifunction peripheral. Further, since the HDD 8 storing the page data and the medium including the position information can be separated, the risk that the page data and the position information are stolen at the same time can be extremely reduced.
Therefore, the security of the multifunction machine can be further improved.

In this embodiment, page data is stored in the HDD 8 for each line data (that is, the storage unit of page data is line data).
However, the present invention is not limited to this, and the page data storage unit (a data portion to be stored together (a predetermined unit data piece (unit data piece))) has a size that does not cause an obstacle to access to the HDD 8. Any data portion may be used as long as it does not make sense by itself.

  Specifically, the unit data piece is preferably set larger than the word / byte unit or the pixel unit of the image. Thereby, when the page data is encrypted and stored (and when the encrypted page data is read), it is possible to suppress a reduction in the access speed to the HDD 8.

  Further, in this multifunction machine, as shown in FIG. 1 and the like, one line data is continuously stored in the HDD 8. However, randomly discontinuous portions may be provided in the line data.

That is, normally, access to the HDD 8 is performed in units of sectors. The sector capacity is smaller than that of the unit data piece.
Accordingly, as shown in FIG. 11A, for example, when the sector capacity is 512 bytes and one line data is 5000 bytes, the end portion of the line data is stored as shown in FIG. 11B. An unused area (120 bytes in this example) is generated in the sector to be executed.

  Therefore, when one line data is continuously stored, an unused area of 120 bytes exists at the end of the line data as shown in FIG.

  Therefore, if one line data is continuously stored, the storage area of the entire line data can be easily estimated from the position of the unused area. In this case, even if the position information of the line data is kept secret, the arrangement order of the line data may be inferred by comparing the contents of the line data.

  Therefore, as shown in FIG. 11C, it is preferable to arrange the unused area in a sector in the middle of one line data. As a result, the continuity of the line data in the HDD 8 can be eliminated, so that it is difficult to estimate the storage area of one entire line data.

  Accordingly, as shown in FIGS. 12A and 12B, unused areas as described above may be arranged at various (random) positions in the line data so that the line data is discontinuous. preferable.

  Further, as shown in FIG. 12C, when an unused area is provided at a random position in the line data and each line data is randomly arranged with respect to the HDD 8, only this HDD 8 is used. It is almost impossible to reconstruct the page data.

In order to correctly read the stored line data as shown in FIG. 12C, the following read operation can be considered.
That is, the position information is normally stored in the FAT area of the nonvolatile memory 6 as shown in FIG. Here, when the line data is stored as shown in FIG. 12C, the line data becomes discontinuous in the position information stored in the FAT area of the nonvolatile memory 6 as shown in FIG. Information (discontinuity information) indicating the position and size of (a point having an unused area) may be included.
Then, by referring to the position information including the discontinuity information and performing reading while avoiding discontinuous portions in the line data, the line data can be read correctly.

Further, in the examples shown in FIGS. 11 and 12, an example in which the line data is larger than the sector is shown. However, even if the line data is smaller than the sector, there is an unused area in the sector that stores the line data. Therefore, a point where the data becomes discontinuous can be provided at an arbitrary position of the line data.
Further, even if the line data is the same size as the sector, it is possible to provide an unused area in the line data by storing the line data across two sectors.

  In the above description, one unused area is provided in the line data. However, the present invention is not limited to this, and two or more unused areas may be provided in the line data. Further, dummy (impersonation) data may be provided in the line data instead of the unused area.

In the present multifunction machine, the CPU 2 may be set to encrypt all the page data and store it in the HDD 8.
Further, in this configuration, it is preferable that the CPU 2 stores the position information of some stored page data in the FAT area of the HDD 8.

In this case, a third party who took away the HDD 8 and analyzed it may be able to reproduce the page data whose position information is stored in the FAT area.
In addition, as described above, in a normal image storage device, position information is generally stored in the HDD.

  Therefore, in this configuration, it is possible to make a third person misunderstand (ie, misunderstand) that “only a reproducible portion is stored in the HDD 8”. As a result, in this multi-function peripheral, the presence of page data for which position information is not stored in the HDD 8 can be easily concealed.

In the present embodiment, the CPU 2 stores only the position information of unencrypted page data in the FAT area of the HDD 8.
However, the present invention is not limited to this, and the CPU 2 may store position information in the FAT area of the HDD 8 for a part of the encrypted page data (low confidentiality selected by the user). .
Even in this case, the above-mentioned misunderstanding can be given to a third party.

  In the processing shown in FIG. 4, the CPU 2 determines page data to be encrypted and page data not to be encrypted according to a user instruction. Therefore, in this process, the encrypted page data may not be stored in the HDD 8 at all.

  Therefore, the storage device of the present invention is an image storage device for storing image data input from the outside, and stores a control unit, an operation unit (instruction input unit) for transmitting a user instruction to the control unit, and image data. And a position information storage unit for storing position information indicating a storage position of the image data in the image storage unit, and the control unit encrypts the image data based on a user instruction. The first part to be encrypted and the second part to be encrypted are determined and continuously stored in the first partial image storage unit, while the second part is divided into data pieces of a predetermined unit, and the divided data pieces are stored in the image It is also possible to express that the configuration is designed so as to be stored in a discontinuous manner.

  Further, in the present embodiment, the CPU 2 divides page data into data pieces (line data) and stores the pieces of data separately (discontinuously) in the HDD 8 in order to encrypt some page data. If so. However, the encryption performed by the CPU 2 may be performed by any other method.

  Therefore, the storage device of the present invention is an image storage device that stores image data input from the outside, a control unit, an image storage unit that stores image data, and a position that indicates a storage position of image data in the image storage unit. A position information storage unit for storing information, and the control unit can be expressed as a configuration in which only a part of the image data is encrypted and stored in the image storage unit.

  In the present embodiment, the image storage device of the present invention is provided in a digital multi-function peripheral. However, the present invention is not limited to this, and the image storage apparatus of the present invention can be applied to any apparatus (image processing apparatus) that handles image data, such as a fax machine, a copying machine, a printer, and a computer.

  In the above description, it is assumed that all processes in the multifunction machine are performed under the control of the CPU 2. However, the present invention is not limited to this, and an information processing apparatus (computer) capable of recording a program for performing these processes on a recording medium and reading the program may be used instead of the CPU 2.

  In this configuration, the arithmetic unit (CPU or MPU) of the information processing apparatus reads the program recorded on the recording medium and executes the process. Therefore, it can be said that this program itself realizes the processing.

  Here, as the information processing apparatus, in addition to a general computer (workstation or personal computer), a function expansion board or a function expansion unit mounted on the computer can be used.

  The above program is a program code (execution format program, intermediate code program, source program, etc.) of software that realizes processing. This program may be used alone or in combination with other programs (such as OS). The program may be read from a recording medium, temporarily stored in a memory (RAM or the like) in the apparatus, and then read and executed again.

  The recording medium for recording the program may be easily separable from the information processing apparatus, or may be fixed (attached) to the apparatus. Furthermore, it may be connected to the apparatus as an external storage device.

  Such recording media include magnetic tapes such as video tapes and cassette tapes, magnetic disks such as floppy (registered trademark) disks and hard disks, and optical disks such as CD-ROM, MO, MD, DVD, and CD-R (magneto-optical). Disc), memory cards such as IC cards and optical cards, semiconductor memories such as mask ROM, EPROM, EEPROM, and flash ROM.

  Also, a recording medium connected to the information processing apparatus via a network (intranet / Internet) may be used. In this case, the information processing apparatus acquires the program by downloading via the network. That is, the above program may be acquired via a transmission medium (a medium that dynamically holds the program) such as a network (connected to a wired line or a wireless line). The program for downloading is preferably stored in advance in the apparatus (or in the transmission side apparatus / reception side apparatus).

  In addition, the present invention is an image processing apparatus having a disk storage device and a nonvolatile memory, which is stored when the disk storage device is illegally removed from the image processing device by a third party and analyzed alone. It can also be said that the present invention relates to an image processing apparatus that avoids reading data.

  In general, an information processing apparatus as a multifunction machine having functions such as a fax machine and a scanner is provided with an auxiliary storage device for storing captured data (images), but the captured data content requires a secret. In the case of data, it is necessary to prevent the stored contents from being easily read by a third party. In order to solve such a problem, for example, Patent Document 3 discloses a technique for encrypting the storage contents of a disk storage device such as a hard disk device (HDD). In addition to the above, a method such as erasing all the data after reading is used for maintaining the confidentiality of the stored contents in the disk storage device.

  However, the encryption of the storage contents as seen in Patent Document 3 requires a lot of system resources, and the processing is complicated, so that it is required for the image processing apparatus compared to the case where the encryption is not performed. There is a problem that it is difficult to satisfy the printing speed and transfer rate, and there is a problem that data cannot be stored for a long time when data is erased after reading. The two publications of Patent Document 1 and Patent Document 2 are both directed to memory, and are disk storage devices that need to physically move the read head at the time of reading / writing, in word / byte units. If reading is performed at random locations, the waiting time until the read head moves to the target disk position increases, and the read / write speed is significantly adversely affected. Furthermore, even if the data is randomly placed on the disk storage device in units of words / bytes, if the data storage position information exists in the disk storage device, the disk storage device is removed from the image processing apparatus. In this case, there is a problem that the stored contents can be easily reconfigured by a third party simply by rearranging the data according to the data storage position information inside the disk storage device.

  Also, by dividing the image image into lines and distributing the data of each line to random positions on the disk storage device, and simultaneously storing the data storage position information in a non-volatile memory outside the disk storage device, the waiting time can be reduced. Forming an image processing apparatus having a disk storage device that prevents loss and makes it difficult for a third party to reproduce the stored contents even when the disk storage device is illegally removed from the image processing device and analyzed. You can also. However, if all the data is divided into small pieces that cannot be semantically deciphered, a third party who tries to illegally refer to the contents of the disk storage device can easily detect that the disk contents are encrypted. it can. Therefore, when the encryption strength is not strong, the data protection effect when the fact that it is encrypted is detected is greatly reduced compared to the case where it is not detected.

  Also, the present invention performs encryption by storing at least a part of data stored in the disk storage device that does not need to be encrypted in the disk device in an ordinary manner without encryption. It can be said that by making it difficult to detect that data is stored in the disk device, it is difficult to analyze the stored content by a third party.

  Another object of the present invention is an image processing apparatus for storing or temporarily storing image images in a disk storage device, storing image images divided into predetermined units, and discontinuously storing continuous images in the disk storage device. If the contents of the stored data are difficult to analyze by distributing and writing, it may be difficult to detect that the divided / discontinuous storage is performed by not dividing / discontinuously storing a part of the stored contents. I can say that.

  Further, the present invention can be expressed as the following first and second image processing apparatuses. That is, the first image processing apparatus is an image processing apparatus including a disk storage device and a nonvolatile memory, and stores image images in the disk storage device in a discontinuous manner, and stores the data storage position information on the disk. Data is encrypted by being managed by a non-volatile memory outside the storage device, and a part of the data stored in the disk storage device is stored in a certain unit without being stored discontinuously. In this configuration, when a disk storage device is taken out from the image processing device by an unauthorized means by a third party and analyzed, only a part thereof is read out. Thus, unlike the case where all data in the storage device is encrypted, it is difficult to detect that processing such as discontinuity has been performed on the data stored in the storage device. Moreover, in order to correctly read discontinuously stored data from the disk storage device, it is necessary to simultaneously refer to data storage position information in the external nonvolatile memory in addition to the content of the disk storage device. Even if the contents are clarified, the data is only a set of discontinuous data pieces and does not make sense as data. As a result, there is an effect that data stored in the disk storage device can be read by a third party who has illegally removed the disk storage device and used unjustly.

  In addition, the second image processing apparatus has a configuration in which the FAT is arranged in the disk storage device in the first image processing apparatus in the same manner as normal data storage for data that is continuously stored. In this configuration, since a part of the storage contents in the disk storage device takes a normal data storage format, when a third party analyzes the data in the disk storage device in the image processing apparatus, the normal data storage form You can pretend that you are taking This has the effect that it is difficult to detect that some data is randomly arranged and encrypted by discontinuity.

  The present invention can be suitably used for apparatuses (image processing apparatuses) that handle image data, such as fax machines, copiers, printers, and computers.

FIG. 4 is an explanatory diagram showing a state of the HDD when one page data (image data for one page) is stored in the HDD without being encrypted, while another page data is encrypted and stored in the HDD. It is explanatory drawing which shows the structure of the digital multifunctional device concerning this Embodiment. 3 is a flowchart showing a flow of copy processing in the digital multi-function peripheral shown in FIG. 2. 4 is a flowchart showing a flow of a writing process indicated as S6 and S8 in FIG. FIGS. 5A and 5B are explanatory diagrams illustrating an example of page data (image data for one page). FIG. 6 is an explanatory diagram showing a storage state on the HDD when the page data shown in FIGS. 5A and 5B is not encrypted. 6 is an explanatory diagram showing a storage state on the HDD 8 when encryption is performed on the page data shown in FIGS. It is a flowchart which shows the flow of the read-out process shown as S10 in FIG. FIG. 6 is an explanatory diagram showing a storage state on the HDD 8 when a part of the line data in the page data shown in FIGS. 5A and 5B is not encrypted while the other line data is encrypted. It is explanatory drawing which shows the state of HDD when one page data is memorize | stored in HDD, without encrypting, while another page data is encrypted and memorize | stored in HDD. FIG. 11A is an explanatory diagram showing a comparison between the size of line data stored in the HDD and the sector size of the HDD. FIG. 11B is an explanatory diagram showing a state in which an unused area is provided in the sector that stores the end portion of the line data. FIG. 11C is an explanatory diagram showing a state in which an unused area is provided in a sector that stores a midway portion of line data. FIG. 11D is an explanatory diagram showing a case where line data having an unused area at the end is stored in the HDD without being encrypted. FIGS. 12A and 12B are explanatory diagrams showing a state in which an unused area is provided in a sector that stores a halfway portion of line data stored in the HDD. FIG. 12C is an explanatory diagram showing a state in which the line data shown in FIGS. 12A and 12B is encrypted and stored in the HDD. FIG. 12D is an explanatory diagram illustrating position information that does not include the position or size of the discontinuous area in the data. FIG. 12E is an explanatory diagram showing position information for reading out the line data stored in the state shown in FIG. 12C from the HDD.

Explanation of symbols

2 CPU (control unit)
3 System controller 4 RAM
5 ROM
6 Non-volatile memory (location information storage unit)
7 HDD controller 8 HDD (image storage unit)
9 User Authentication Unit 10 Data Input / Output Unit 21 Data Input Unit 22 Data Output Unit

Claims (9)

In an image storage device for storing image data input from the outside,
A control unit;
An image storage unit for storing image data;
A position information storage unit for storing position information indicating a storage position of image data in the image storage unit;
The above control unit
While storing part of the image data continuously in the image storage unit,
An image storage device designed to divide another portion of image data into data pieces of a predetermined unit and store the divided data pieces discontinuously in an image storage unit.   2. The image storage according to claim 1, wherein the control unit is set so as to determine a continuous storage portion and a discontinuous storage portion in the image data based on a user instruction. apparatus. The image storage unit includes a position information area for storing position information indicating the position of image data in the image storage unit,
2. The image storage device according to claim 1, wherein the control unit is set to store position information of image data portions continuously stored in the image storage unit in the position information area. . In an image storage device for storing image data input from the outside,
A control unit;
An image storage unit for storing image data;
A position information storage unit for storing position information indicating a storage position of image data in the image storage unit;
The image storage unit includes a position information area for storing position information indicating the position of image data in the image storage unit,
The above control unit
The image data is divided into data pieces of a predetermined unit, the divided data pieces are stored discontinuously in the image storage unit,
An image storage apparatus configured to store a part of position information of image data in the position information area.   An image processing apparatus comprising the image storage device according to claim 1. In an image storage method of storing image data input from the outside in an image storage unit, and storing position information indicating a storage position of the image data in the image storage unit in the position information storage unit,
A continuous storage step of continuously storing a part of the image data in the image storage unit;
An image storage method comprising: a discontinuous storage step of dividing another part of image data into data pieces of a predetermined unit and storing the divided data pieces discontinuously in an image storage unit.   An image storage program for causing a computer provided in a storage device capable of storing image data to function as a control unit in the image storage device according to claim 1 or 4.   An image storage program for causing a computer provided in a storage device capable of storing image data to execute the continuous storage step and the discontinuous storage step in the image storage method according to claim 6.   A recording medium on which the image storage program according to claim 7 is recorded.

Images