JP2006115237A - Watermark embedding program, watermark embedding method, and watermark embedding device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a watermark embedding program for embedding watermark documents in print images, which reduces the processing burden by embedding and printing a watermark document effective for tracking a leakage route at the time of information leakage, in a print image when printing a file and efficiently selecting an object in which the watermark document should be embedded. <P>SOLUTION: A file path and a user ID are acquired from a print event, and it is determined whether it is necessary to embed a watermark document by referring to a rule defining necessities of embedding watermark documents about file paths and user IDs. When it is necessary to embed a watermark document, address information or the like discriminating a terminal and date information are acquired, and watermark data obtained by combining user information and file information is prepared and is embedded in the print image and is outputted. Since a leakage source can be specified from the watermark document when information is leaked, this invention is effective as a countermeasure against information leakage. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a watermark embedding program, a watermark embedding method, and a watermark embedding apparatus for embedding a watermark document effective for tracking a leakage route at the time of information leakage in a print image.

  While various important information is generally managed as an electronic file, establishment of information security technology for preventing leakage and falsification of the electronic file has become an important social issue. As technologies for preventing leakage and falsification of electronic files, passwords, access authority settings, encryption, etc. are widely used for electronic files, but these technologies protect electronic files themselves. However, once an electronic file is output to a paper medium, there is a limit that important information cannot be prevented from being leaked due to illegal copying of the paper medium.

  In response to such problems, security information similar to electronic files can be applied to paper media by embedding confidential information in a print image as a watermark when printing electronic files on paper media. An invention relating to a watermark information embedding device and a watermark information detection device is disclosed (see, for example, Patent Document 1).

  Further, as a specific method for preventing the leakage or falsification of information by using the watermark information embedding device and the watermark information detecting device, the watermark information is embedded in the print image printed from the electronic file and output. For example, an invention that embeds a visible print pattern as a watermark and confirms the presence or absence of falsification based on comparison with information printed on paper (for example, see Patent Document 2), and authentication information such as identification information and a password In the invention, the authority is authenticated using the authentication information read from the watermark as a key (see, for example, Patent Document 3 and Patent Document 4).

JP 2003-101762 A JP 2004-64327 A JP 2004-58410 A JP 2004-94348 A

  According to the invention described in Patent Document 1, a print image printed from an electronic file can be embedded with a watermark and output for use in security management such as information leakage or tampering. Whether security management is realized by embedding information as a watermark needs to be developed for each purpose. The invention described in Patent Document 2 is effective for preventing falsification of information, but cannot cope with information leakage illegally used without falsifying information.

  On the other hand, the inventions described in Patent Document 3 and Patent Document 4 are effectively used for information leakage by embedding a key such as authentication information in the watermark information to limit the output of the target electronic file. It becomes possible. However, it was output after confirming the authority, such as when the authorized person illegally leaks the information output after confirming the authority, or when a third party illegally obtains the information that the authorized person has output correctly It is not possible to deal with cases where information is leaked illegally.

  Although it is difficult to prevent unauthorized information leakage itself after output by such authorized person, as a countermeasure after information leakage, the route of information leakage is traced and the information leakage source is promptly identified. It is preferable to specify. If the technique related to watermark embedding can be applied to the tracking of information leakage route, it is possible to provide an effective means against unauthorized information leakage after output by the authorized person as described above.

  In addition, when using watermark embedding technology for countermeasures against information leakage, not all electronic files that are output are confidential information, which shortens the printing process time, reduces the load on the computer, In consideration of the toner saving, it is preferable that the target for embedding the watermark is limited to a necessary and sufficient range and processed efficiently. Furthermore, the information acquired in the process for limiting the target for embedding the watermark is applied to the watermark embedding process for tracking the information leakage route, and the information embedded as the watermark is more suitable for tracking the information leakage route It is still preferable.

  The present invention has been made to cope with such a problem. When a file is printed, a watermark document effective for tracking a leakage route at the time of information leakage is embedded in the print image and printed, and the watermark document is embedded. An object of the present invention is to provide a watermark embedding program, a watermark embedding method, and a watermark embedding apparatus for embedding a watermark document in a print image, which can reduce the processing burden by efficiently selecting an object. .

  A first invention for solving the problem according to the present application is a watermark embedding program for embedding a watermark document in a print image, and a print event for outputting the print image to a computer executing print image output processing. A file information for identifying a file to be a target of the print image and user information for identifying a user who has instructed output of the print image from the print event, and the file information and The user information is created by the print event in comparison with file information and user information stored in a watermark print rule storage unit that stores a file to be embedded with a watermark document when outputting a print image and a rule relating to the user. Whether to embed a watermark document in the print image Determining whether to embed a watermark document in the print image, and acquiring from the computer at least one of terminal information for identifying the computer or output time information related to a time for outputting the print image Generating watermark data for embedding the watermark document from at least one of the file information, the user information, the terminal information, or the output time information, and determining that the watermark document is embedded in the print image A watermark embedding program for starting a program for embedding a watermark document in the print image and embedding the watermark data in the print image created by the print event. .

  In the first invention, by acquiring and using an output file, an output user, an output terminal, an output time, etc. as watermark data for embedding a watermark document, it is obtained by a person who has a legitimate authority. When an output printed matter or the like is illegally leaked, it is possible to trace the outflow source from the watermark document. In addition, before starting the watermark document embedding program, the watermark document embedding is leaked when information is leaked by determining whether or not the watermark document should be embedded from the file subject to the print event and the user who executed the print event. It becomes possible to limit to cases where original tracking is required.

  A second invention for solving the problem according to the present application is a watermark embedding program for embedding a watermark document in a print image, and a print event for outputting the print image to a computer executing print image output processing. A file information for identifying a file to be a target of the print image and user information for identifying a user who has instructed output of the print image from the print event, and the file information and The user information is created by the print event in comparison with file information and user information stored in a watermark print rule storage unit that stores a file to be embedded with a watermark document when outputting a print image and a rule relating to the user. Whether to embed a watermark document in the print image Determining whether to embed a watermark document in the print image, the second file information to be used for the watermark document related to the file information or the watermark document related to the user information At least one piece of second user information to be used is obtained from the watermark printing rule storage unit, and at least one piece of terminal information for identifying the computer or output time information relating to the time to output the print image is Obtaining watermark data for embedding the watermark document from at least one of the second file information, the second user information, the terminal information, or the output time information, obtained from a computer; If it is determined that the watermark document is embedded in the print image, the print image is transparent. Start program for embedding a document to a watermarking program, characterized in that to execute the steps of embedding the watermark data into print image created by the printing event.

  In the second invention as well, watermark data for embedding a watermark document is output by an authorized person using the output file, the user who performed the output, the terminal that performed the output, the output time, etc. As in the case of the first invention, it is possible to trace the outflow source from the watermark document when the printed matter or the like leaks illegally. Further, as in the first aspect, before starting the program for embedding a watermark document, whether or not to embed a watermark document is determined from the file subject to the print event and the user who executed the print event. By acquiring file information and user information for embedding as a watermark document from the database or the like used in the above, it is possible to embed more information necessary for tracking the outflow source in the watermark document.

  As a specific example of the second file and the second user information, for example, when a file path is acquired as file information from a print event, the file size, update date and time, etc. can be used as the second file information. For example, when a user ID is acquired as user information from a print event, the user name, department or the like can be used as the second user information.

  In the first and second inventions, in the step of creating the watermark data, second terminal information for identifying a computer that has instructed output of the print image is acquired from the print event, and The terminal information of 2 is used for the creation of the watermark data.

  In the first and second aspects of the invention, terminal information and time information for executing processing related to a print event are embedded in the watermark document. If the print event is requested from another terminal through the network, As described above, it is preferable to embed information for identifying the terminal that has requested the print event in the watermark document and add it as information for tracking the outflow source when information leaks.

  Furthermore, the first invention and the second invention can also be configured as a watermark embedding method executed by the watermark embedding program according to each invention and a watermark embedding apparatus for executing processing by the watermark embedding program.

  In other words, the watermark embedding method corresponding to the first invention is a watermark embedding method for embedding a watermark document in a print image, and a computer executing print image output processing performs printing for outputting the print image. Acquiring an event; and specifying, from the print event, file information that identifies a file that is a target of the print image and user information that identifies a user who has issued an instruction to output the print image. The computer compares the file information and the user information with the file information and user information stored in a watermark printing rule storage unit that stores a file and a user-related rule for embedding a watermark document when outputting a print image. By the print event Determining whether to embed a watermark document in a print image to be formed; and, if the computer determines to embed a watermark document in the print image, relates to terminal information for identifying the computer or a time for outputting the print image Obtain at least one piece of output time information from the computer, and create watermark data for embedding the watermark document from the file information, the user information, the terminal information, or the output time information. And, when the computer determines to embed a watermark document in the print image, starts a program for embedding the watermark document in the print image, and embeds the watermark data in the print image created by the print event And have It is a watermark embedding method characterized.

  A watermark embedding method corresponding to a second invention is a watermark embedding method for embedding a watermark document in a print image, and a computer executing print image output processing performs a print event for outputting the print image. Obtaining the file information identifying the file that is the target of the print image and the user information identifying the user who has instructed the output of the print image from the print event; and The computer compares the file information and the user information with the file information and user information stored in a watermark printing rule storage unit that stores a file and a user-related rule for embedding a watermark document when outputting a print image. , Created by the print event Determining whether to embed a watermark document in the print image; and, if the computer determines to embed a watermark document in the print image, second file information to be used for the watermark document associated with the file information Alternatively, at least one piece of second user information to be used for the watermark document related to the user information is acquired from the watermark printing rule storage unit, and terminal information for identifying the computer or the print image is output. Obtaining at least one piece of output time information relating to time from the computer, and extracting the watermark document from at least one of the second file information, the second user information, the terminal information or the output time information. Creating watermark data for embedding; and If it is determined that the watermark document is embedded in the print image, a program for embedding the watermark document in the print image is started, and the watermark data is embedded in the print image created by the print event. This is a watermark embedding method.

  In the watermark embedding method corresponding to the first invention and the second invention, in the step of creating the watermark data, the computer uses the second terminal information for identifying the computer that issued the print image output instruction as the second terminal information. The second terminal information obtained from a print event may be used to create the watermark data.

  A watermark embedding device corresponding to the first invention is a watermark embedding device for embedding a watermark document in a print image, the acquisition means for acquiring a print event for outputting the print image, and the print event A specifying means for specifying file information for identifying a file to be a print image and user information for identifying a user who has instructed output of the print image, and a file and a user for embedding a watermark document when the print image is output A print rule created by the print event by comparing the file information and the user information with the file information and user information stored in the watermark print rule storage means. Determination means for determining whether or not to embed a watermark document If the determination unit determines to embed a watermark document, terminal information for identifying a computer that executes the print image output process or at least one piece of output time information related to a time for outputting the print image is acquired from the computer. And creating means for creating watermark data for embedding the watermark document from at least one of the file information, the user information, the terminal information or the output time information, and the determination means embeds the watermark document. A watermark embedding device comprising: embedding means for embedding the watermark data in the print image created by the print event by activating a program for embedding the watermark document in the print image when determined is there.

  A watermark embedding device corresponding to the second invention is a watermark embedding device for embedding a watermark document in a print image, the acquisition means for acquiring a print event for outputting the print image, and the print event A specifying means for specifying file information for identifying a file to be a print image and user information for identifying a user who has instructed output of the print image, and a file and a user for embedding a watermark document when the print image is output A print rule created by the print event by comparing the file information and the user information with the file information and user information stored in the watermark print rule storage means. Determination means for determining whether or not to embed a watermark document If the determination unit determines to embed a watermark document, the second file information to be used for the watermark document related to the file information or the second user information to be used for the watermark document related to the user information At least one piece of information from the watermark printing rule storage means, and terminal information for identifying a computer that executes the print image output process or at least one piece of output time information related to the time to output the print image Creating means for creating watermark data for embedding the watermark document from at least one of the second file information, the second user information, the terminal information, or the output time information, obtained from a computer; If the determination means determines that the watermark document is to be embedded, the transparent image is added to the print image. Start program for embedding a document with a watermark embedding apparatus comprising: an embedding unit embeds the watermark data into print image created, the by the printing event.

  In the watermark embedding device corresponding to the first invention and the second invention, the creating means acquires second terminal information for identifying a computer that has issued an instruction to output the print image from the print event, and The terminal information of 2 is used for the creation of the watermark data.

  According to the present invention, when a printed matter or the like output by a person having a legitimate authority is illegally leaked, it is possible to identify an outflow source from information printed as a watermark document and to trace an illegal source. . In addition, by embedding a watermark document by limiting the target files at the time of printing, it is possible to efficiently reduce the processing burden for embedding the watermark document.

  The best mode for carrying out the present invention will be described below in detail with reference to the drawings. The following description is an example of an embodiment of the present invention. Embodiments of the present invention such as a combination of data used for determining whether or not to embed a watermark document and data printed as a watermark document are described below. It is not limited to.

FIG. 1 and FIG. 2 are block diagrams showing the configuration when the watermark embedding apparatus according to the present invention is used on a network and used standalone. 3 and 4 are diagrams showing an outline of the processing flow of the watermark embedding program according to the present invention and a specific example of the processing flow. 5 and 6 are diagrams showing examples of a table for specifying file information and a table for specifying user information, respectively, as watermark printing rules used in the watermark embedding apparatus according to the present invention. 7 and 8 are first and second flowcharts showing the processing flow of the watermark embedding program according to the present invention.

  FIG. 1 shows a configuration when a watermark embedding apparatus according to the present invention is used on a network. An electronic watermark embedding device according to the present invention is provided in a printer server 10 connected to an in-house network such as a LAN, and executes print processing from the user terminal 20, the user terminal 30, or the user terminal 40 via the in-house network. When a print event for printing is received, it is determined whether the watermark document needs to be embedded. If the watermark document needs to be embedded, a print image in which the watermark document is embedded in the print event is determined. Processing for outputting the print image from the printer 50 is executed.

  More specifically, for example, when a user who operates the user terminal 20 on the in-house network wants to print a certain file, when the user terminal 20 selects to execute the printing process of the file, the print program 251 stored in the HDD 25 reads the file. The CPU 24 executes arithmetic processing while the RAM 22 functions as a working area, and sends a print event for outputting the file from the NIC 21 to the internal network.

  The sent print event is received by the NIC 11 of the printer server 10. The printer server 10 that has received the print request by the print event activates the print program 151 and executes the output process. In order to determine whether it is necessary to embed a watermark document when outputting the file specified by the print event. In addition, the watermark determination program 153 is read out.

  The watermark determination program 153 executes arithmetic processing in the CPU 14 while functioning the RAM 12 as a working area, and determines whether to embed a watermark document. The file information of the file to be output included in the received print event and the user information for identifying the user who made the print request are used for the determination, and the file information and user information of the case where the watermark document needs to be embedded By comparing with the data stored in the watermark printing rule storage unit 154 specified as the rule, when the watermark document needs to be embedded, the watermark printing program 152 is activated to generate the watermark data to be embedded in the print image. . The generated watermark data is transferred to the print program 151. The print program 151 creates an output print image in which the watermark data is embedded in the print image to output the file contents, and outputs the print image to the printer 50. Send a request. In the printer 50, the image in which the watermark document is embedded is output to a paper medium.

  On the other hand, if embedding of the watermark document is unnecessary, the watermark printing program 152 is not started, the print program 151 creates a print image for outputting the contents of the file according to the print event, and requests the printer 50 to output the print image. Is sent out. The printer 50 outputs an image in which a watermark document is not embedded on a paper medium.

  When the watermark embedding apparatus according to the present invention is used stand-alone, it is configured as in the example of FIG. The digital watermark embedding device according to the present invention is provided in the terminal device 60 used as a stand-alone device. When a print event for executing a printing process is received by an input operation from the input device 70, a watermark document embedding process is required. If it is determined that the watermark document is to be embedded, the printer 80 executes a process of outputting a print image in which the watermark document is embedded in the print event, and if not required, a print image according to the print event is output from the printer 80.

  More specifically, a user operating the terminal device 60 activates application software such as document creation software, specifies a file to be printed from the input device 70, and selects execution of printing processing. When the selection of the printing process is accepted, in many cases, the printing program 651 stored in the HDD 65 which is a part of the application software is read, and the CPU 64 executes the calculation process while functioning as the working area. Generate a print event.

  When the print event is generated, the print program 651 generates a print image for outputting the specified file, and passes it to the printer driver to execute the file output process. Here, the print event is specified by the print event. In order to determine whether it is necessary to embed a watermark document when outputting a file, the watermark determination program 653 is read.

  The watermark determination program 653 executes arithmetic processing in the CPU 64 while functioning the RAM 62 as a working area, and determines whether to embed a watermark document. The file information of the file to be output included in the received print event and the user information for identifying the user who made the print request are used for the determination, and the file information and user information of the case where the watermark document needs to be embedded By comparing with data stored in the watermark printing rule storage unit 654 designated as a rule, when embedding a watermark document is necessary, the watermark printing program 652 is started to create watermark data to be embedded in the print image. . The created watermark data is delivered to the print program 651. The print program 651 creates an output print image in which the watermark data is embedded in the print image to output the contents of the file, and delivers it to the printer driver. The image in which the watermark document is embedded is output to a paper medium by the printer 80.

  On the other hand, when it is not necessary to embed a watermark document, the watermark print program 652 is not started, and the print program 651 creates a print image to output the contents of the file in accordance with the print event, and passes it to the printer driver to transfer the watermark An image in which the document is not embedded is output to a paper medium by the printer 80.

  An outline of a flow for creating a print image in which a watermark document is embedded from a received print event by the watermark embedding program according to the present invention will be described with reference to FIG. When a computer having a print function receives a print event, in a normal process, a print image is generated from a file specified by the print event, and an output process is executed. The file acquired by the print event is not limited to a file format such as a document file or an image file, but is converted into image data when output.

  On the other hand, the watermark embedding program according to the present invention intercepts a print event before executing an output process, and identifies a file path and the like specifying a file to be printed included in the print event and a user who has made a print request. Get user ID, etc. When the file path and the user ID are acquired, the file path and the user ID in which the acquired file path and the user ID are specified as the watermark printing rule in contrast to the watermark printing rule that specifies the file and the user that need to embed the watermark document. Is included, the watermark data for embedding the watermark document is created.

  In the watermark document embedded in the output print image, information effective for tracking the outflow source when information leakage occurs is described. Therefore, when creating watermark data, the IP address and MAC address for specifying the terminal that executes the printing process are acquired from the OS and NIC, and the information regarding the output date and time is acquired from a timer provided in the computer. Thus, the information useful for specifying the output location and time is described as a watermark document. Furthermore, by using the file path and user ID used to determine whether or not to embed a watermark document in the watermark document for use in creating watermark data, it can be used as information useful for identifying the output target and the person who performed the output. can do. When a print image in which a watermark document is embedded is output, information relating to the print history such as the printed file, the user who requested printing, and the printing date and time is stored in the print history recording database. As for the recording of such history, it is also possible to record information that has been printed with a watermark document embedded as part of an audit log or the like for monitoring information leakage.

  In the above, the information included in the print event is used for the file path and user ID used to create the watermark data, but in addition to or instead of these information, the watermark document embedding is used. File information and user information stored in the database may be used together with the watermark printing rule used for necessity determination. For example, information on the file name, file size, update date and time as file information may be obtained from the database and described as a part of the watermark document, or information on the user name and the department to which the user belongs as database information. It may be acquired and described as part of a watermark document. By adding additional information to the watermark document in this way, it becomes easy to specify the environment output by reading the watermark document when information leakage occurs and the source of the information is traced.

  In addition, as a step before determining whether to embed a watermark, predetermined information may be acquired from a print event to determine whether printing is possible. In addition to measures for tracking outflow sources after output, by setting a case where the output of information is not permitted in the first place, more effective measures can be taken to prevent information leakage.

  The method for determining whether or not printing is possible is not particularly limited. Access control specifying a file name and a user ID, determination based on a rule base in which a general pattern that does not permit information output is set as a rule, Accumulation of behavior patterns as profiles and determination of singular behavior compared to the profile of the user who made the output request, accumulation of operation patterns for the terminal as profiles and determination of singular operations compared to the profile of the terminal that accepted the output request, etc. Whether or not printing is possible can be determined by various methods. Moreover, it is good also as performing a more elaborate determination combining these methods (for example, the technique disclosed in Japanese Patent Application No. 2003-387213 can be used). When printing is rejected, the printing process may be stopped immediately or a password input for confirming authority may be requested.

  FIG. 4 shows a specific example of the flow described in FIG. The file path acquired from the print event (C: \ security \ documents \ file01.doc in the example of FIG. 4) and the user ID (iwi10101 in the example of FIG. 4) are specified to embed a watermark document in the watermark printing rule. Contrast with file path and user ID, respectively. If both are included in the watermark printing rule, an IP address or MAC address (210.159.128.143 in the example of FIG. 4) is used as information for specifying the terminal that executes the output process in order to create watermark data. ) Is further acquired from the terminal that executes the output process, for date and time information (2004/08/02 in the example of FIG. 4) for specifying the output time.

  As the watermark data to be embedded as a watermark document, the file path and user ID acquired from the print event are used in addition to the data acquired from the terminal executing the output process. Further, in addition to the data acquired from the print event, or in place of the data acquired from the print event, more detailed file information acquired from the database storing the watermark printing rule used for determining whether or not to embed the watermark document User information can also be used. An image of a watermark-like watermark document is created from the watermark data acquired in this way, and is embedded in a print image created to output a designated file.

  For example, in the example of the watermark document in FIG. 4, the file name, file size, and update date / time are embedded from the file information, and the user name and department are embedded from the user information. Such information is acquired from a table that designates file information and user information as the watermark printing rule shown in FIGS.

  Such a table is stored in the watermark printing rule storage unit 654 in the configuration of FIG. 2, and is also used for determining whether or not to embed a watermark document. FIG. 5 shows an example of a table for specifying file information as a watermark printing rule. A file that needs to be embedded with a watermark document is specified by a file path, and other information related to the file such as a file name and size is also included. Stored. If the file path acquired from the print event exists in contrast to the path specified in this table, it is determined that the file needs to be embedded with a watermark document.

  FIG. 6 is an example of a table for specifying user information as a watermark printing rule. The user operation that needs to embed a watermark document is specified by a user ID, and other information about the user such as a user name and department Are also stored. In contrast to the user ID specified in this table, if there is a user ID acquired from the print event, it is determined that the file needs to be embedded with a watermark document.

  In determining whether to embed a watermark document, the relationship between the file path and the user ID is not particularly limited. However, in order to limit the embedding of the watermark document as much as possible, both the file path and the user ID are It is preferable to determine that embedding of the watermark document is necessary on the condition that they match. In addition, a user who needs to embed a watermark document may be designated for each file. In the example of the table of FIG. 5, a user ID of a user who needs to embed a watermark document is designated corresponding to the file path. . That is, in the case of FIG. 4, the file path “C: \ security \ documents \ file01.doc” includes the user ID “iwi10101” for the user who needs to embed the watermark document. It is determined that embedding is necessary.

  7 and 8 show the processing flow of the watermark embedding program according to the present invention. When a program for performing print processing is started and a print processing request is made, the watermark embedding program according to the present invention acquires a print event generated by the program for performing print processing (S01). From the data included in the print event, a file path and a user ID for use in determining whether printing is possible and whether watermark document embedding is necessary are acquired (S02).

  First, in order to determine whether or not the designated file can be printed, it is compared with a printing rule such as whether the file is permitted to be printed or a request from a user having printing authority (S03). Then, it is determined whether the accepted print event does not correspond to the print cancellation rule (S04). If the printing cancellation rule is satisfied, the printing is canceled (S07). Instead of immediately canceling printing, it is also possible to perform authority confirmation such as password entry, and to perform cancellation processing when authority is not confirmed.

  If it is determined that it does not correspond to the print cancellation rule, whether the print event is an operation specific to the user's normal action pattern or the user's past operation pattern corresponding to the user ID that made the print request is With reference to the recorded profile (S05), it is determined whether the received print event does not correspond to a specific action (S06). If the specific action rule is applicable, there is a possibility that the output is invalid, and printing is stopped (S07). It should be noted that, as in the previous case, the print cancel process may not be performed immediately, but the cancel process may be performed when the authority is not confirmed even by inputting a password.

  If it is determined that it does not correspond to the specific action, it is determined that the request is a legitimate output request by a person having printing authority, and the process proceeds to a step of determining whether or not the next watermark document embedding is necessary. Note that the flow shown in FIG. 7 is an example of a print authority determination flow, and the determination items and the determination order are not limited to this flow.

  Subsequently, by using the file path and user ID acquired in step 02 and comparing with the watermark printing rule, it is determined whether or not it is necessary to embed the watermark document in the file to be printed (S08). First, it is determined whether the acquired file path is included in the file path defined in the watermark printing rule (S09). If it is included in the file path defined in the rule, it is determined whether or not the acquired user ID is included in the user ID defined in the watermark printing rule (S10).

  If at least one of them does not meet the watermark printing rule, it is determined that embedding of the watermark document is unnecessary, and printing is performed to the printing program so that the print image created according to the contents of the print event is output as it is. An instruction is given (S15). Note that the criterion for determining whether or not unnecessary is not limited to the setting that determines that it is not required when at least one of them does not correspond to the watermark printing rule. It may be determined that it is unnecessary. In this case, if any one of the watermark printing rules is satisfied, the watermark document is embedded.

  If both the file path and the user ID are included in the watermark printing rule, additional information regarding the user and the file such as the user name is acquired from the database storing the watermark printing rule (S11). For example, the file name and file update date and time for the file, and for the user, for example, information related to the user name and the department to which the user belongs, and by embedding such information as a watermark document, the source of the leak at the time of information leakage can be specified. It becomes easy.

  In addition, address information such as an IP address and a MAC address for identifying the terminal and date / time information at the time of processing for specifying the output time are acquired from the terminal that executes the processing and output processing by the watermark embedding program ( S12). In addition, the processing procedure of step 11 and step 12 is not specifically limited.

  When information necessary for creating a watermark document is acquired in steps 11 and 12, data such as a file path, a file name, a file update date, a user ID, a user name, a user department, an IP address, and an output process date Is used to create watermark data for outputting a watermark document (S13). Items included in the watermark data are not particularly limited, and a part of the information may be used, or other information may be added.

  When the watermark data is created, a watermark printing program is read to create an image for embedding the watermark data in the image for printing. The watermark printing program takes over the created watermark print data, embeds the watermark data in the print image created by the print event, and creates an output print image (S14). Note that the start timing of the watermark printing program is not limited to the above-described flow, and may be any timing that allows the watermark data created by the watermark embedding program to be taken over.

  When a print image in which watermark data is embedded is created, a print instruction is issued to the print program so as to output the print image (S15). When a print instruction is issued, history information about the printed file, the user who performed the printing, and the printing time is created, and information about the operation that performed the watermark printing is stored in a database that records an audit log or the like ( S16). The printing history may be stored for all printing processes, or only for documents in which a watermark document is embedded.

It is a block diagram which shows the structure in the case of using the watermark embedding apparatus concerning this invention on a network. It is a block diagram which shows the structure in the case of using the watermark embedding apparatus concerning this invention stand-alone. It is a figure which shows the outline | summary of the processing flow of the watermark embedding program concerning this invention. It is a figure which shows the specific example of the processing flow of the watermark embedding program concerning this invention. It is a figure which shows an example of the table which designates file information as a watermark printing rule used with the watermark embedding apparatus concerning this invention. It is a figure which shows an example of the table which designates user information as a watermark printing rule used with the watermark embedding apparatus concerning this invention. It is a 1st flowchart which shows the processing flow of the watermark embedding program concerning this invention. It is a 2nd flowchart which shows the processing flow of the watermark embedding program concerning this invention.

Explanation of symbols

10 Printer server 11 NIC
12 RAM
13 ROM
14 CPU
15 HDD
151 Print Program 152 Watermark Print Program 153 Watermark Determination Program 154 Watermark Print Rule Storage Unit 155 Print History Storage Unit 20 User Terminal 21 NIC
22 RAM
23 ROM
24 CPU
25 HDD
251 Print program 30 User terminal 31 NIC
32 RAM
33 ROM
34 CPU
35 HDD
351 Print program 40 User terminal 41 NIC
42 RAM
43 ROM
44 CPU
45 HDD
451 Print program 50 Printer 60 Terminal device 62 RAM
63 ROM
64 CPU
65 HDD
651 Print program 652 Watermark print program 653 Watermark determination program 654 Watermark print rule storage unit 655 Print history storage unit 70 Input device 80 Printer

Claims (9)

A watermark embedding program for embedding a watermark document in a print image, the computer executing print image output processing,
Obtaining a print event for outputting the print image;
Identifying file information for identifying a file to be a target of the print image and user information for identifying a user who has instructed to output the print image from the print event;
The file information and the user information are compared with the file information and user information stored in a watermark printing rule storage unit that stores a file and a user-related rule for embedding a watermark document when outputting a print image. Determining whether to embed a watermark document in a print image created by an event;
When it is determined that a watermark document is embedded in the print image, at least one information of terminal information for identifying the computer or output time information regarding a time for outputting the print image is acquired from the computer, and the file information, Creating watermark data for embedding the watermark document from at least one of the user information, the terminal information or the output time information;
When it is determined that a watermark document is embedded in the print image, a step of activating a program for embedding a watermark document in the print image and embedding the watermark data in the print image created by the print event;
A watermark embedding program characterized in that is executed. A watermark embedding program for embedding a watermark document in a print image, the computer executing print image output processing,
Obtaining a print event for outputting the print image;
Identifying file information for identifying a file to be a target of the print image and user information for identifying a user who has instructed to output the print image from the print event;
The file information and the user information are compared with the file information and user information stored in a watermark printing rule storage unit that stores a file and a user-related rule for embedding a watermark document when outputting a print image. Determining whether to embed a watermark document in a print image created by an event;
If it is determined to embed a watermark document in the print image, second file information to be used for the watermark document related to the file information or a second user to be used for the watermark document related to the user information Obtaining at least one piece of information from the watermark printing rule storage unit, obtaining at least one piece of terminal information for identifying the computer or output time information relating to a time for outputting the print image from the computer; Creating watermark data for embedding the watermark document from at least one of the second file information, the second user information, the terminal information, or the output time information;
When it is determined that a watermark document is embedded in the print image, a step of activating a program for embedding a watermark document in the print image and embedding the watermark data in the print image created by the print event;
A watermark embedding program characterized in that is executed. In the step of creating the watermark data, second terminal information for identifying a computer that has instructed output of the print image is acquired from the print event, and the second terminal information is used for creating the watermark data. The watermark embedding program according to claim 1 or 2. A watermark embedding method for embedding a watermark document in a print image,
A computer executing print image output processing obtaining a print event for outputting the print image;
The computer specifying file information for identifying a file to be a target of the print image and user information for identifying a user who has instructed output of the print image from the print event;
The computer compares the file information and the user information with file information and user information stored in a watermark print rule storage unit that stores a file and a user-related rule for embedding a watermark document when outputting a print image. Determining whether to embed a watermark document in a print image created by the print event;
If the computer determines to embed a watermark document in the print image, the computer obtains at least one information of terminal information for identifying the computer or output time information related to a time for outputting the print image from the computer, and the file Creating watermark data for embedding the watermark document from at least one of information, the user information, the terminal information, or the output time information;
When the computer determines to embed a watermark document in the print image, it starts a program for embedding the watermark document in the print image, and embeds the watermark data in the print image created by the print event;
A watermark embedding method characterized by comprising: A watermark embedding method for embedding a watermark document in a print image,
A computer executing print image output processing obtaining a print event for outputting the print image;
The computer specifying file information for identifying a file to be a target of the print image and user information for identifying a user who has instructed output of the print image from the print event;
The computer compares the file information and the user information with file information and user information stored in a watermark print rule storage unit that stores a file and a user-related rule for embedding a watermark document when outputting a print image. Determining whether to embed a watermark document in a print image created by the print event;
If the computer determines to embed a watermark document in the print image, second file information for use with the watermark document associated with the file information or second for use with the watermark document associated with the user information. At least one piece of user information is acquired from the watermark printing rule storage unit, and at least one piece of terminal information for identifying the computer or output time information related to a time for outputting the print image is acquired from the computer. Creating watermark data for embedding the watermark document from at least one of the second file information, the second user information, the terminal information, or the output time information;
When the computer determines to embed a watermark document in the print image, it starts a program for embedding the watermark document in the print image, and embeds the watermark data in the print image created by the print event;
The watermark embedding method is characterized in that: In the step of creating the watermark data, the computer obtains second terminal information for identifying a computer that has instructed to output the print image from the print event, and the second terminal information is stored in the watermark data. 6. The watermark embedding method according to claim 4, wherein the watermark embedding method is used for creation. A watermark embedding device for embedding a watermark document in a print image,
An acquisition means for acquiring a print event for outputting a print image;
Specifying means for specifying file information for identifying a file to be a target of the print image and user information for identifying a user who has instructed to output the print image from the print event;
Watermark printing rule storage means for storing a file and a user-related rule for embedding a watermark document when outputting a print image;
Determination means for comparing the file information and the user information with the file information and user information stored in the watermark printing rule storage means to determine whether to embed a watermark document in a print image created by the print event. When,
If the determination means determines that the watermark document is to be embedded, at least one piece of terminal information for identifying a computer that executes the output processing of the print image or output time information related to a time for outputting the print image is acquired from the computer. Creating means for creating watermark data for embedding the watermark document from at least one of the file information, the user information, the terminal information, or the output time information;
When the determination unit determines to embed a watermark document, an embedding unit that starts a program for embedding a watermark document in a print image and embeds the watermark data in the print image created by the print event;
A watermark embedding apparatus comprising: A watermark embedding device for embedding a watermark document in a print image,
An acquisition means for acquiring a print event for outputting a print image;
Specifying means for specifying file information for identifying a file to be a target of the print image and user information for identifying a user who has instructed to output the print image from the print event;
Watermark printing rule storage means for storing a file and a user-related rule for embedding a watermark document when outputting a print image;
Determination means for comparing the file information and the user information with the file information and user information stored in the watermark printing rule storage means to determine whether to embed a watermark document in a print image created by the print event. When,
If the determination unit determines to embed a watermark document, the second file information to be used for the watermark document related to the file information or the second user information to be used for the watermark document related to the user information Acquire at least one piece of information from the watermark printing rule storage means, and at least one piece of terminal information for identifying a computer executing the print image output process or at least one piece of output time information related to the time to output the print image Creating means for creating watermark data for embedding the watermark document from at least one of the second file information, the second user information, the terminal information, or the output time information;
When the determination unit determines to embed a watermark document, an embedding unit that starts a program for embedding a watermark document in a print image and embeds the watermark data in the print image created by the print event;
A watermark embedding apparatus comprising: The creation means acquires second terminal information for identifying a computer that has instructed output of the print image from the print event, and the second terminal information is used for creation of the watermark data. The watermark embedding apparatus according to claim 7 or 8.