JP2006074637A - Information processing unit, data transmission method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide information processing unit, data transmission method and program, enabling efficiency in cipher communication. <P>SOLUTION: When a start button of the multifunctional device 1 is depressed after a manuscript is set on a multifunctional device 1 and an addressee (mail address) of the manuscript is specified, an examination section 10 examines the validity of a public key by referring to a certificate corresponding to the addressee, stored in a certificate preservation section 12. If the certificate concerned is not stored, the certificate and the public key are obtained from a known preservation location by an acquisition section 20, so as to register into the certificate preservation section 12. Once the validity of the public key is proved in the examination section 10, a control section 8 controls a data input section 2 to start reading the manuscript for the first time. Thereafter, a transmission processing section 6 encrypts the manuscript data being read in and adds a signature, and then distributes a mail to the specified addressee. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information processing apparatus that transmits data after encryption or signature, and a data transmission method, and more particularly, to prevention of waste that may occur when transmitting encrypted or signed data.

  In recent years, in addition to functions such as a copy, a printer, and a scanner, there are models having an electronic mail function. For example, when mail delivery of a document to a predetermined client is desired, a destination (mail address of a client computer or the like) is designated from the operation screen of the multifunction device. Then, when the start button is pressed, the document is scanned, and the scanned document is distributed to a desired destination.

  By the way, an MFP equipped with an e-mail function has a communication function for exchanging information with other computers via a network. Generally, when a document or the like is transmitted via a wide area network. Security problems can occur. There is an encryption technique as a technique for solving this problem. Japanese Patent Application Laid-Open No. 2004-228561 describes a technique for executing preprocessing for e-mail transmission.

Japanese Patent No. 3187236

  However, conventionally, when a scanned document is distributed as an e-mail to a desired destination, it is not encrypted and distributed. Even if the public key is obtained from the outside and the electronic mail is encrypted and then simply delivered, the delivery of the electronic mail does not necessarily end normally. For example, an e-mail delivery error occurs when the public key used for e-mail encryption is invalid, but the e-mail sender will notice that the public key is invalid only after a delivery error occurs. . In such a case, the operation of causing the multifunction device to read the document and the process of distributing the scanned document are wasted.

  As described above, in an information processing apparatus having a communication function including an image processing apparatus such as a multifunction peripheral, an invalid public key is used when performing encrypted communication in which data such as e-mail is encrypted and then transmitted. It would be desirable to be able to prevent waste associated with the occurrence of such problems.

  SUMMARY An advantage of some aspects of the invention is that it provides an information processing apparatus, a data transmission method, and a program for improving the efficiency of encryption communication.

  In order to achieve the above object, an information processing apparatus according to the present invention includes a data input unit for inputting data, a transmission processing unit for encrypting or signing the input data, and transmitting the data. A verification unit that verifies the validity of the key by referring to a certificate corresponding to the key for encryption or signing, and the data to be transmitted is not changed until the validity of the key is verified by the verification unit. And a control unit that causes the transmission processing unit to encrypt or sign and transmit.

  A certificate storage unit that stores a certificate corresponding to the key; and a transmission destination input unit that inputs a transmission destination of the data. The verification unit receives the transmission destination input from the transmission destination input unit. A corresponding certificate is read out from the certificate storage means and the validity of the key is verified.

  Further, when the certificate corresponding to the transmission destination input from the transmission destination input unit is not stored in the certificate storage unit, the verification unit obtains the certificate from a known storage destination and acquires the certificate. It is registered in the document storage means.

  Further, the control means causes the data input means to start inputting data only after the validity of the key is proved by the verification means.

  Further, it is mounted on a multi-function device having at least an electronic mail function for transmitting input data by electronic mail.

  An input step of inputting a certificate corresponding to a key for encryption or signing in a data transmission method executed by an information processing apparatus and transmitted after encrypting or signing data. A verification step for verifying the validity of the key by referring to the certificate, and a transmission step for encrypting or signing and transmitting data to be transmitted only after the validity of the key is verified by the verification step; It is characterized by including.

  Further, the present invention is characterized by being implemented by the information processing apparatus mounted on a multi-function peripheral having at least an electronic mail function for transmitting input data by electronic mail.

  The program according to the present invention verifies the validity of a key by referring to a certificate corresponding to the key for encrypting or signing the information processing apparatus that transmits the data after encrypting or signing the data. And a function as a transmission processing means for encrypting or signing and transmitting data to be transmitted only after the validity of the key is verified by the verification means.

  In addition, the information processing apparatus mounted on a multi-function peripheral having at least an electronic mail function for transmitting input data by electronic mail is caused to function as each means.

  According to the present invention, since the validity of the key used for encryption or signature is verified before inputting the data to be transmitted, it is possible to reliably prevent a data transmission error because the encryption is not valid. can do. For this reason, it is possible to suppress waste of time and costs spent on data input processing and data transmission processing.

  Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a functional block configuration diagram showing an embodiment of an information processing apparatus according to the present invention. The information processing apparatus according to the present embodiment is a computer mounted on the multifunction machine 1 having at least a scanning function and an electronic mail function. FIG. 1 shows a data input unit 2, a destination input unit 4, a transmission processing unit 6, a control unit 8, a verification unit 10, and a certificate storage unit 12. The input unit 2 is means for inputting data to be transmitted by electronic mail. In this embodiment, the input unit 2 reads a document on which data to be transmitted by electronic mail is written by a scanner. The destination input unit 4 is means for inputting the transmission destination of the read document. Specifically, the mail addresses registered in the multifunction device 1 are displayed in a list on the liquid crystal panel of the multifunction device 1, and the distributor is selected from the list, or the mail address is directly input to the distributor, and the destination input unit 4 accepts the mail address. The transmission processing unit 6 is means for transmitting an e-mail with an e-mail function, and includes a signature processing unit 14 for signing data to be transmitted, an encryption unit 16 for encrypting data to be transmitted, And a mail distribution unit 18 for transmitting the signed and signed data to a destination designated by electronic mail. The verification unit 10 verifies the validity of the public key by referring to a certificate corresponding to the public key for encrypting data. In this embodiment, in principle, a public key and a certificate corresponding to the public key are acquired in advance from a known storage destination and stored in the certificate storage unit 12. When the key for encrypting data and the certificate corresponding to the key are not stored in the certificate storage unit 12, the acquisition unit 20 included in the verification unit 10 obtains the public key and certificate from a known storage destination. Obtain and register in the certificate storage unit 12. The control unit 8 controls the entire series of processing including data input, encryption, and transmission.

  Each processing function in the data input unit 2, the destination input unit 4, the transmission processing unit 6, the control unit 8, and the verification unit 10 is realized by executing a program that exhibits a predetermined function by a computer mounted on the multifunction peripheral. The certificate storage unit 12 is realized by an external storage device connected to a computer.

  Next, the procedure of data transmission processing in this embodiment will be described using the flowcharts shown in FIGS. Here, a case where the contents described in the manuscript are transmitted by e-mail will be described as an example.

  The user sets a document to be transmitted on the scanner of the multi-function peripheral and determines a transmission destination of the document by selecting from among mail addresses displayed on the liquid crystal panel. Thereafter, the start button of the multifunction device 1 is pressed. The process shown in FIG. 2 is started by pressing the start button.

  First, when it is detected that the start button for e-mail transmission is pressed, the control unit 8 causes the verification unit 10 to verify the validity of the public key (step 100). This public key verification process will be described with reference to FIG.

  The verification unit 10 checks the existence of the certificate corresponding to the email address by searching the certificate storage unit 12 using the email address designated as the destination as a key (step 101). Since the corresponding public key issuance target mail address is registered in the certificate, the verification unit 10 searches for a certificate including the mail address designated for input. The processing when the certificate corresponding to the destination does not exist will be described later. When the certificate corresponding to the destination exists, the verification unit 10 subsequently checks the validity of the public key with reference to the setting contents of the certificate. The deadline is confirmed (step 102). If the public key is within the validity period, the reliability of the certificate is checked this time (step 103). In this case, information related to a certificate such as a certificate issuing organization is displayed on the liquid crystal panel to allow the user to confirm. Alternatively, the verification unit 10 automatically determines the conditions such as the certificate issuing organization that the user trusts in advance and compares the set contents with the certificate information. When it is determined in this way that the certificate is reliable, the verification unit 10 finally checks the certificate revocation list issued by the certificate authority to confirm the validity of the certificate (step 104). As described above, when it is determined that the public key is valid by checking the certificate, the public key is determined to be “valid” (step 105).

  On the other hand, when the certificate is not registered in the certificate storage unit 12 (step 101), when the public key has expired (step 102), when the certificate is determined to be untrustworthy (step 102). In step 103), when the certificate is registered in the certificate revocation list (step 104), the following processing is performed.

  First, the verification unit 10 tries to acquire a certificate and a public key corresponding to the mail address by searching for a known storage destination by the acquisition unit 20 (step 106). If there are a plurality of applicable certificates, a valid and latest public key is acquired. If the corresponding certificate exists and can be obtained (step 107), the public key and certificate are registered in the certificate storage unit 12 (step 108). In step 107, verification similar to that in steps 101 to 104 is performed. When the certificate or the like has been successfully stored (step 109), it is determined that the public key is “valid” (step 105).

  On the other hand, when the corresponding certificate or the like cannot be acquired (step 107), or when the certificate or the like cannot be stored normally in the certificate storage unit 12 (step 109), the public key is determined to be “invalid”. (Step 110).

  As described above, the validity of the public key is verified by checking the certificate. When it is determined to be valid, a status of “valid” is returned, and when it is determined to be invalid, a status of “invalid” is returned.

  In the above certificate verification process, when it is determined that the public key is “invalid”, the fact is displayed on the liquid crystal panel of the multifunction peripheral or the like to notify the user (step 500). In this case, it is not possible to send an e-mail to the designated destination. When it is determined that the public key is “valid”, the control unit 8 causes the data input unit 2 to start reading a document only when it is determined to be “valid” (step 200). In this embodiment, since the scanner is driven and the data reading process is performed only after the validity of the public key is proved, the data is not read wastefully.

  When the document is read, the above-described certificate verification process is performed again (step 300). The reason for implementing again will be described later. If it is determined that the public key is “invalid” in the certificate verification process here, the fact is displayed on the liquid crystal panel of the multi-function peripheral or the like to notify the user (step 500). In this case, it is not possible to send an e-mail to the designated destination. When it is determined that the public key is “valid”, the control unit 8 causes the transmission processing unit 6 to encrypt and sign the read document, and the encrypted and signed data is sent to the destination designated by the user. The mail is transmitted (step 400).

  According to the present embodiment, the validity of the public key used for encryption is verified before the data to be transmitted is read, so that an e-mail delivery error due to the fact that the encryption is not valid can be ensured. Can be prevented. For this reason, time and cost spent on document reading processing and e-mail transmission processing are not wasted. In the above description, for the convenience of explanation, attention was paid to the verification of the validity of the public key. However, the above-described verification processing is also performed on the secret key used for the signature, and the validity of the secret key is verified. Yes.

  By the way, in the present embodiment, the reason why the procedure of performing the certificate verification process again in step 300 before the encryption is performed is as follows.

  One reason is that it is assumed that after the certificate verification process, the public key becomes invalid, such as the expiration of the validity period during reading of the document, and the issuance of a certificate revocation list including the corresponding certificate. Although it is conceivable that the certificate verification process is performed only after the document reading process (step 200), if the public key is already invalid before the document reading process is performed, a wasteful process is performed.

  The other is because it is assumed that data to be transmitted is input from another route. That is, in the present embodiment, data to be transmitted is acquired by causing the scanner to read the data. However, there is a case where data to be transmitted is input to the multi-function peripheral via a network instead of being read by a scanner. In such a case, since the start button of the multifunction device is not pressed, the certificate verification process is performed immediately before the data encryption process assuming such a case. In this case, the data input means is not a scanner, but means for receiving data via a network or an e-mail receiving function.

  The data encryption or signature and transmission in the transmission processing unit 6 may be performed after the data is encrypted or signed, or may be transmitted sequentially while performing the encryption or signature processing. May be.

  Further, in the present embodiment, both encryption and signature are performed, but the present invention can be applied to either case.

  There is no model to send e-mail after encrypting in conventional multifunction devices, and there is no model to verify the validity of the key before encryption and further before reading the original because there is no model to encrypt. . Therefore, as described in the present embodiment, it is effective to apply the present invention to a multifunction machine. However, the present invention is naturally applicable not only to a multifunction machine but also to a communication device having an information processing function such as encryption processing, and any computer having a communication function and an encryption function.

It is a functional block block diagram which showed one Embodiment of the information processing apparatus which concerns on this invention. It is the flowchart which showed the email transmission process in this Embodiment. It is the flowchart which showed the public key verification process in this Embodiment.

Explanation of symbols

  2 data input unit, 4 destination input unit, 6 transmission processing unit, 8 control unit, 10 verification unit, 12 certificate storage unit, 14 signature processing unit, 16 encryption unit, 18 mail delivery unit, 20 acquisition unit.

Claims (9)

Data input means for inputting data;
A transmission processing means for transmitting the input data after encrypting or signing;
Verification means for verifying the validity of the key by referring to a certificate corresponding to the key for encrypting or signing data;
Control means for causing the transmission processing means to encrypt or sign and transmit the data to be transmitted only after the validity of the key is verified by the verification means;
An information processing apparatus comprising: The information processing apparatus according to claim 1,
Certificate storage means for storing a certificate corresponding to the key;
A destination input means for inputting a data destination;
Have
The information processing apparatus, wherein the verification unit reads the certificate corresponding to the transmission destination input from the transmission destination input unit from the certificate storage unit and verifies the validity of the key. The information processing apparatus according to claim 2,
When the certificate corresponding to the transmission destination input from the transmission destination input unit is not stored in the certificate storage unit, the verification unit acquires the certificate from a known storage destination and stores the certificate An information processing apparatus registered in a means. The information processing apparatus according to claim 1,
The information processing apparatus, wherein the control means causes the data input means to start inputting data only after the validity of the key is proved by the verification means. The information processing apparatus according to any one of claims 1 to 4,
An information processing apparatus mounted on a multi-function peripheral having at least an electronic mail function for transmitting input data by electronic mail. In a data transmission method implemented by an information processing apparatus and transmitting after encrypting or signing data,
An input step for inputting a certificate corresponding to a key for encryption or signing;
A verification step of verifying the validity of the key by referring to the certificate;
A transmission step of encrypting or signing and transmitting data to be transmitted only after the validity of the key is verified by the verification step;
A data transmission method comprising: The data transmission method according to claim 6, wherein
A data transmission method characterized by being implemented by the information processing apparatus mounted on a multifunction machine having at least an electronic mail function for transmitting input data by electronic mail. An information processing device that transmits data after encrypting or signing it,
Verification means for verifying the validity of the key by referring to a certificate corresponding to the key for encryption or signing;
Transmission processing means for encrypting or signing and transmitting data to be transmitted only after the validity of the key is verified by the verification means;
A program characterized by functioning as The program according to claim 8, wherein
A program for causing the information processing apparatus mounted in a multi-function peripheral having at least an e-mail function to transmit input data by e-mail to function as each means.

Images