JP2006004047A - Network system with confidential information protection function, server with confidential information protection function, and confidential information protection method for network system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a confidential information protection function which prevents information from being leaked when a network printer is shared by a plurality of client terminals. <P>SOLUTION: A plurality of client terminals 2, a network printer 8 and a center server 13 are connected to one another in the area of a LAN 5. A packet of printed information to be transmitted from the client terminals 2 is provided with a confidential information part. The center server 13 determines, in a confidential information determination part, whether a packet which it has received is confidential information, and accumulates the packet when the packet is the confidential information. When a printing-executing person pushes the confidential information output button of the network printer 8, the center server transmits the confidential information packets thus accumulated to the network printer 8, and the network printer 8 prints out printed information existing in the received packet. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a network system with a confidential information protection function, a server with a confidential information protection function, and a confidential information protection method for a network system for preventing leakage of information when a network printer is shared by a plurality of client terminals.

  In recent years, computer terminals such as personal computers have rapidly spread in facilities such as offices and schools, and the environment in which a plurality of computer terminals are installed in one room is rapidly increasing. In such an environment, several to several tens of computer terminals installed in a room are connected to a LAN as client terminals, and a network printer is arranged along with a printer server in the LAN. Is common (see, for example, Patent Document 1). In this case, the network printer prints the print information transmitted from the client terminal on a first-come-first-served basis. When print information is transmitted from a plurality of client terminals, they are printed on a first-come-first-served basis, and when one print information is in a print execution state, the other print information is put in an execution wait state, and one print information When printing is completed, other printing information is put into an execution state and printing is continuously performed.

JP 2003-015845 A

  However, in the invention described in Patent Document 1, the print information transmitted from the client terminal is immediately printed by the network server. For this reason, the user of the client terminal cannot click the print execution button on the terminal side and then go to the network printer side to check whether the print information has been correctly transmitted. On the other hand, for example, when the print button of the client terminal is pressed when the network printer is in the execution waiting state (idling state), the network printer automatically changes simultaneously from the execution waiting state to the execution state (a state where printing can be performed immediately). Printing is started. Therefore, the user of the client terminal clicks the print button a plurality of times before the network printer shifts from the executable state to the execution state, and at the same time the network printer shifts to the execution state, the same print information is displayed as the execution button. It is easy to happen that the number of clicks is printed. Further, when printing is performed within a relatively short time from a plurality of client terminals, the network printer continuously prints the plurality of print information and intermittently outputs a printed matter based on the plurality of print information. It will be stacked on the tray. For this reason, the user of each terminal who has performed printing gathers in front of the printer and waits for his / her print information to be printed, or prints his / her print information from the paper stacked on the tray It is easy for other users to see their print information. In particular, when the print information is a confidential document, such a situation has a problem that the confidential information is leaked.

  The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a security system for network printers and network printers that can maintain confidentiality relating to print information even in an environment where a network printer is shared by a plurality of client terminals. It is to provide a security method.

  The present invention relates to a network printer security system and a network printer security method for preventing leakage of information when a network printer is shared by a plurality of client terminals, and the object of the present invention is to provide a plurality of networks connected to a LAN premises. A client system and a network printer that prints print information transmitted from the client terminal, wherein the print information is stored in a server that receives the print information transmitted from the client terminal. With a confidential information protection function comprising a storage unit that temporarily stores information when it is information, and an output unit that is provided in the network printer and supplies an output signal for outputting print information stored in the storage unit Reached by network system It is.

  The object of the present invention is to provide a network system with confidential information protection function in which the server is a center server capable of communicating with the network printer via the LAN, and the server is a printer server built in the network printer. Effectively achieved by a network system with confidential information protection.

  According to another aspect of the present invention, the print information includes a sender information section for identifying a sender, and the output signal includes printer information for identifying a person who performs printing. Provided with a collation unit that collates the sender information with the printer information, and the server stores the print stored in the storage unit when the collation unit determines that the printer information is that of a valid printer. The network system with a confidential information protection function for outputting information and the collation unit are such that the printer information is the same as the sender information or the printer information of a person who has been authenticated by the sender. If the printer information is confirmed, the network system with a confidential information protection function that judges that the printer information is valid, and the printer information is at least one of a PIN code using an numeric keypad, an electronic card, and biometric information. It is more effectively accomplished by the confidential information protection function network system input by any one of means.

  Furthermore, the object of the present invention is a server that communicates with a plurality of client terminals and a network printer that prints print information transmitted from the client terminals, and identifies confidential information that identifies whether the print information is confidential information. A storage unit that temporarily stores the print information when the print information is confidential information, a printer information reception unit that receives printer information output from the network printer, the printer information, and the print information This is achieved by a server with a confidential information protection function provided with a collation unit that collates with sender information included in the information.

  The object of the present invention is to print based on a plurality of client terminals provided in a LAN premises, a server that temporarily stores print information transmitted from the client terminals, and the print information transmitted from the server. A confidential information protection method for a network system including a network printer that transmits print information including a confidential information portion indicating whether the information is confidential information from the client terminal; Identifying whether the information is confidential information; storing the print information when the print information is confidential information; transmitting an output signal from the network printer to the server; The server outputs the accumulated print information upon receiving the output signal; Is achieved by the confidential information protection method for a network system was e.

  According to another aspect of the present invention, the server includes printer information for identifying a person who performs printing in the output signal, and the printer information of the output signal received by the server is included in the print information. The step of collating with the sender information part included, and the server confirms that the printer information is the same as the sender information or the printer information of the person who has been authenticated by the sender In this case, the confidential information protection method for a network system further comprising a step of outputting the print information, and the server is built in the center server or the network printer capable of communicating with the network printer via the LAN. This is effectively achieved by the confidential information protection method in the network system as the printer server.

  According to the present invention, since the confidential information is stored in the server, the print performer can print in a standby state before the network printer. It is possible to prevent a situation where print information is seen.

  In addition, when the print information is confidential information, it is temporarily stored in the storage unit of the server, so that the storage of the print information is limited to only highly confidential print information, and the situation in which the entire printing operation is delayed is prevented. While maintaining confidentiality.

  Furthermore, when the confidential information temporarily stored in the server is output, the printer information is input to the network printer so that even if there is a plurality of confidential information stored in the server, the confidential information is stored. Can be output only by a legitimate printer, and confidentiality can be reliably ensured when using a network printer.

  The best mode for carrying out the present invention will be described below with reference to the drawings.

  FIG. 1 shows a network system as the best mode for carrying out the present invention. This network system 1 is provided in an environment where a plurality of users use a plurality of computers in one premises such as offices and schools, and client terminals 2, 2,... Formed by various computer terminal groups such as a plurality of personal computers. 2 is provided. These client terminals 2, 2,..., 2 may be used by one user for one terminal, or may be shared by a plurality of users for each terminal. When the client terminal 2 performs printing, a print screen as shown in FIG. 2 is displayed. On the print screen 3, a confidential information button 4 is provided in addition to various operation buttons used during normal printing. The confidential information button 4 is a check box, and the user of the client terminal 2 clicks the confidential information button 4 when the transmission information is to be handled as confidential information.

  The client terminals 2, 2,..., 2 are connected by a LAN 5 to form a local network. The LAN 5 may be connected to a WAN (Wide Area Network) 7 via a router 6 or the like as shown in FIG.

  A network printer 8 is connected to the LAN 5. The network printer 8 has a function of printing various print information output from each of the client terminals 2, 2,. FIG. 3 is an enlarged view of the operation panel unit of the network printer 8. The operation panel unit 9 includes an output unit for transmitting print information stored in the storage unit in addition to a display unit 10 for displaying the operation state and operation state of the printer and various operation buttons 11 for performing normal operations. A confidential information output button 12 is provided.

  A center server 13 is connected to the LAN 5. The center server 13 is a printer server, and communicates signals and data with the client terminal 2 and the network printer 5 via the LAN 7. As shown in FIG. 1, the center server 13 may be connected to the network printer 5 in parallel (13A) or serially connected (13B). FIG. 4 shows a block diagram of the internal configuration of the center server 13. The center server 13 includes a control unit 14 that controls communication of signals and data and operation of the entire server, a transmission / reception unit 15 that transmits and receives print information, and progress information that identifies whether the received print information is confidential information. An identification unit 16, a storage unit 17 that temporarily stores packets when the print information is confidential information, and a printer signal receiving unit 18 that receives information transmitted from the network printer 8 are provided.

  Further, the client terminals 2, 2,... 2 and the network printer 8 exchange data in accordance with a certain communication protocol such as TCP / IP. However, the communication protocol used may be other than TCP / IP, such as IPX / SPX or DSLINK, or a plurality of these communication protocols may be used in combination.

  On the other hand, in the network system 1, print information is packetized and communicated. FIG. 5 shows a schematic diagram of a packet transmitted from the client terminal 2. The packet 19 includes a print information main body unit 20 as divided print information, an address information unit 21 conforming to a communication protocol such as an IP address and a MAC address, a sender information unit 22 for identifying a sender, and confidential information. A confidential information section 23 for determining whether or not there is added.

  FIG. 6 shows a schematic diagram of the data flow in the network system 1 according to the present invention. In this network system 1, n (n is an arbitrary integer) packets A1, A2,... An, B1, B2,... Bn, C1, C2,. ... Cn are all transmitted to the center server 5 via the LAN 3. Of these, the print information transmitted from the client terminals 2A and 2B is confidential information, and the print information transmitted from the client terminal 2C is non-confidential information. Then, after the packet information received by the center server 13 is identified as confidential information by the confidential information identifying unit 16, the packets A1, A2,... An, B1, B2,. .. Bn is stored in the storage unit 17 of the center server 13, and the packets C1, C2,... C3 which are non-confidential information are immediately transferred to the network printer 8. In order to print the confidential information stored in the storage unit 17, the confidential information output button 12 is pushed on the network printer 8 side, and the packets A1, A2, ..., An stored in the storage unit 17 are pushed. The packets B1, B2,..., Bn are output.

  FIG. 7 is a flowchart showing a printing procedure in the network system according to the best mode of the present invention. Hereinafter, the printing procedure will be described with reference to this flowchart.

  First, when it is desired to handle the print information 2 as confidential information (step S1), the user of the client terminal 2 clicks the confidential information button 4 on the browser screen of the client terminal 2 (step S2). When the user clicks the print “OK” button on the browser screen (step S3), transmission of print information is started. The print information is divided into n pieces, and each of the divided print information is formed as packets A1, A2,..., An to which an address information part 21, a sender information part 22, and a confidential information part 23 are added. Is transmitted to the LAN 5 (step S4). Then, the center server 5 receives the packets A1, A2,... An (step S5). The center server 13 determines the packet communication protocol and the like, and the confidential information identification unit 16 determines whether the information is confidential information (step S6). If it is confidential information, it is stored in the storage unit 17 (step S7). If it is not confidential information, it is immediately transferred to the network printer 8 (step S9) and printed as it is (step S10).

  Next, when the print information stored in the storage unit 17 is taken out and printed, the print executor pushes the confidential information output button 12 of the network printer 8 (step S8). As a result, the confidential information output signal is transmitted from the network printer 8 to the center server 13, and the center server 13 that has received the output signal transmits the accumulated print information packets A1, A2,... An to the network printer 8 (step S9). ). The network printer 8 receives the print information packets A1, A2,... An and prints and outputs the print information (step S10).

  In this way, by storing the confidential information in the center server 13, it is possible to print in a state where the print executor is waiting in front of the network printer 8. It is possible to prevent the print information from being viewed. When the print information is confidential information, it is temporarily stored in the storage unit of the center server 13, so that the storage of the print information is limited to only highly confidential print information, thereby preventing the entire printing operation from being delayed. While maintaining confidentiality.

  Next, another best mode of the present invention will be described with reference to the drawings.

  FIG. 8 shows a network system as another best mode for carrying out the present invention. The network system 31 uses a printer server (not shown) built in the network printer 32 as a server, and connects the network printer 32 to the LAN 5.

  FIG. 9 shows an enlarged view of the operation panel unit of the network printer 32. In addition to the confidential information output button 12, the operation panel unit 33 is provided with a push-type numeric key 34 and an IC card card reader 35 as an output unit. The numeric keypad 34 and the card reader 35 are inputted with an ID and a personal identification number for identifying a print executor waiting for output of print information in front of the network printer 32, and these input information is handled as printer information. Is called.

  FIG. 10 is a block diagram showing the internal configuration of the printer server (not shown). In this printer server, instead of the printer signal receiving unit 18 in the configuration shown in FIG. 4, a printer information receiving unit 36 that receives the printer information input from the operation panel unit 33, and sender information of a packet A collation unit 37 for collating the information described in the section with the printer information.

  The data flow in the network 31 is as shown in FIG. 11, and confidential information packets A1, A2,..., An, B1, B2,..., Bn are stored in the storage unit 17 of the printer server (not shown). Accumulated.

  The other configuration is the same as the best mode shown in FIGS.

  Next, a printing procedure in the network system according to another best mode of the present invention will be described with reference to the flowchart shown in FIG.

  First, when it is desired to treat the print information 2 as confidential information (step S11), the user of the client terminal 2 clicks the confidential information button 4 on the browser screen of the client terminal 2 (step S12). When the user clicks the “OK” button on the browser screen (step S13), transmission of print information is started. The print information is divided into n pieces, and each of the divided print information is formed as packets A1, A2,..., An to which an address information part 21, a sender information part 22, and a confidential information part 23 are added. Is transmitted to the LAN 5 (step S14). Packets A1, A2,..., An are received by a printer server (not shown) (step S15). The network printer 32 determines the packet communication protocol and the like, and the confidential information identification unit 16 determines whether the information is confidential information (step S16). If it is confidential information, it is stored in the storage unit 17 (step S17). If it is not confidential information, it is directly output from a printer server (not shown) (step S22) and printed (step S23).

  Next, when outputting the print information stored in the storage unit 17, the print executor passes an IC card (not shown) through the card reader 35 of the operation panel 33 of the printer and sets a password on the numeric keypad 34. Input (step S18) and push the confidential information output button 12 (step S19). Information input from the card reader 35 or the numeric keypad 34 is transmitted as printer information to a printer server (not shown), and the collation unit 37 of the printer server (not shown) stores the stored packets A1, A2,. The sender information part 22 of An and the printer information are collated (step S20), and the sender of the print information is the same as the owner of the sender information or the person who has been authenticated by the sender based on the collation result (Step S21), the printer server (not shown) outputs the packets A1, A2,... An stored in the storage unit 17 (step S22), and the network printer 32 outputs the packets A1, Print information formed from A2,..., An is printed (step S23).

  In this way, when the confidential information temporarily stored in the server is output, the printer information is input to the network printer 32, so that even if there is a plurality of confidential information stored in the server The confidential information can be output only by a legitimate printer, and confidentiality can be surely maintained when the network printer 32 is used.

  Further, the server that stores confidential information is a printer server (not shown) built in the network printer 32, and the server and the printer are integrated, thereby reducing the hardware configuration requirements of the network system 31. The system can be simplified.

  In the other best mode described above, the printer information is formed by the IC card information read from the card reader 35 and the personal identification number input from the numeric keypad 34. However, the present invention is not limited to this. It can be formed by biometric information such as a finger vein or a means having a self-other identification function other than biometric authentication.

  In the best mode, as shown in the best mode, when the server is the center server 13, the print information stored in the storage unit 17 only pushes the confidential information output button 12 of the network printer 8. When the server is a printer server (not shown) built in the network printer 32, as shown in the other best mode, the print information stored in the storage unit 17 is stored in the card reader 35 and the numeric keypad 34. The printer information is formed so as not to be output unless the printer information is input. However, the present invention is not limited to this, and is stored in the storage unit when the server is the center server, contrary to the above-described combination shown in the best mode. The printer information is necessary for retrieving the print information, or the server is a printer server built in the network printer 32. Extraction of stored print information to the storage unit when it may be configured that it is only the push of the confidential information output button.

  Further, in the above-described best mode, the information from the client terminal is formed to be received by the network printer 32. However, instead of this network printer, it may be a copier, a facsimile or the like. It may have a function of both a machine and a facsimile.

1 is an overall view of a network system as one best mode of the present invention. It is a schematic diagram of the print screen of the client terminal used for a network system same as the above. It is an enlarged view of the operation panel part of the network printer used for a network system same as the above. It is a block diagram which shows the internal structure of the center server used for a network system same as the above. It is a schematic diagram of the packet transmitted in a network system same as the above. It is a schematic diagram which shows the flow of the data in a network system same as the above. It is a flowchart which shows the printing procedure in a network system same as the above. It is a general view of a network system as another best mode of the present invention. It is an enlarged view of the operation panel part of the network printer used for a network system same as the above. It is a block diagram which shows the internal structure of the printer server used for a network system same as the above. It is a schematic diagram which shows the flow of the data in a network system same as the above. It is a flowchart which shows the printing procedure in a network system same as the above.

Explanation of symbols

1 Network system 2 Client terminal 5 LAN
8 Network printer 12 Confidential information output button 13 as output unit Center server 17 Storage unit 19 Packet 22 as print information Sender information unit 31 Network system 32 Network printer 34 Numeric keypad 35 as output unit Card reader 37 as output unit Verification Part 2A, 2B, 2C Client terminals A1, A2,..., An packet as printing information B1, B2,..., Bn Packets as printing information C1, C2,.

Claims (10)

A network system comprising a plurality of client terminals connected to a LAN premises and a network printer for printing print information transmitted from the client terminals,
A storage unit that is built in a server that receives the print information transmitted from the client terminal and temporarily stores when the print information is confidential information;
An output unit provided in the network printer for supplying an output signal for outputting print information stored in the storage unit;
A network system with confidential information protection function. The network system with a confidential information protection function according to claim 1, wherein the server is a center server capable of communicating with the network printer via the LAN. The network system with a confidential information protection function according to claim 1, wherein the server is a printer server built in the network printer. The print information includes a sender information part for identifying a sender, and the output signal includes printer information for identifying a person who performs printing, and the server includes the sender information and the print. A collation unit for collating the user information, and when the collation unit determines that the printer information is that of a valid printer, the server outputs the print information stored in the storage unit. The network system with a confidential information protection function according to any one of claims 1 to 3. When the verification unit confirms that the printer information is the same as the sender information or the printer information of a person who has been authenticated by the sender, the verification information is legitimate. The network system with confidential information protection function according to claim 4, wherein the determination is made. 6. The network system with a confidential information protection function according to claim 4, wherein the printer information is input by at least one of a password using a numeric keypad, an electronic card, and biometric information. A server that communicates with a plurality of client terminals and a network printer that prints print information transmitted from the client terminals,
A confidential information identifying unit for identifying whether the print information is confidential information;
An accumulator that temporarily accumulates when the print information is confidential information;
A printer information receiver for receiving printer information output from the network printer;
A collation unit for collating the printer information and the sender information included in the print information;
A server with a confidential information protection function characterized by comprising: A network system comprising a plurality of client terminals provided in a LAN premises, a server for temporarily storing print information transmitted from the client terminal, and a network printer for printing based on the print information transmitted from the server A method for protecting confidential information,
Sending print information including a confidential information section indicating whether or not confidential information from the client terminal;
The storage unit of the server identifying whether the print information is confidential information;
The server accumulates the print information when the print information is confidential information;
Transmitting an output signal from the network printer to the server;
The server outputs the accumulated print information upon receiving the output signal;
A confidential information protection method for a network system, comprising: The server includes printer information for identifying a person who performs printing in the output signal,
Collating the printer information of the output signal received by the server with a sender information part included in the print information;
The server outputs the print information when confirming that the printer information is the same as the sender information or the printer information of a person who has been authenticated by the sender;
The confidential information protection method for a network system according to claim 8, further comprising: 10. The confidential information protecting method in the network system according to claim 8, wherein the server is a center server capable of communicating with the network printer via the LAN or a printer server built in the network printer. .

Images