JP2006174246A - Image forming apparatus, data processing method, computer-readable storage medium with program stored thereon, and the program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To freely customize an encryption/decryption processing environment wherein electronic data is encrypted with an arbitrary encryption algorithm, and the electronic data encrypted with the arbitrary encryption algorithm is decrypted with an arbitrary decryption algorithm. <P>SOLUTION: A first circuit for encrypting electronic data with an arbitrary encryption algorithm or a second circuit for decrypting encrypted data with an arbitrary decryption algorithm is reloaded and formed by a reconfigurable device 1270 based on encryption circuit formation information for encrypting electronic data read from removable media 1209 or decryption circuit formation information for decrypting encrypted data. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an image forming apparatus and a data processing method for performing encryption processing on electronic data or decryption processing on encrypted data, a storage medium storing a computer-readable program, and a program.

  Currently, various office machines such as multifunction peripherals and printers have a recording medium such as a hard disk, and have a function of recording and holding a large amount of scanned images, printed images, and FAX received images.

  In general, when recording on a recording medium, the data is stored by being subjected to compression processing using a compression method such as raw data or JBIG. Such office equipment or system is usually provided with a function that can specify a storage location for each individual or department and can set a password individually.

  On the other hand, not only password setting but also products with improved security such as encryption of data to be stored by various encryption methods have been proposed (for example, Patent Document 1).

  As described above, the encryption methods currently used for encryption are roughly divided into secret key encryption and public key encryption. Here, first, the DES cipher and RSA cipher, which are currently most widely adopted, are taken as representatives of these, and the encryption algorithm will be described.

  DES is a typical secret key encryption algorithm standard employed mainly in the United States. In the DES encryption algorithm, digitized plaintext data is divided into, for example, 64-bit fixed-length blocks, and plaintext data is encrypted by performing various operations using a secret key for each block. This secret key has the same bit length as the bit length of the fixed-length block obtained by dividing the plaintext data that is the encrypted data.

  FIG. 22 is a block diagram illustrating the configuration of this type of encryption algorithm, and shows an outline of the DES encryption algorithm when the block length is 64 bits, for example.

  In FIG. 22, for example, a 64-bit encryption key is subjected to contraction transposition 1 and input to the first stage processing. Here, the contracted transposition 1 means an operation of removing a part of the input data and transposing the remaining part, and the transposition means a partial replacement operation of data.

  The transposed encryption key is divided into two parts, the first half and the second half, and cyclic shift 2 is applied to each part. Cyclic shift 2 means an operation of cyclically shifting input data to the left or right. After the cyclic shift 2, further contraction transposition 3 is performed.

  The 64-bit plaintext is transposed by transposition 4 and then divided into two parts, the first half and the second half, and input to the first stage process. Then, after one of the contraction transpositions by the contraction transposition 3, one of them is subjected to nonlinear transformation by the nonlinear transformation unit 5 using the encryption key, and is added to the other by the addition unit 6. Such processing is repeated up to the m-th stage, and the transpose 7 is applied to the result of the m-th stage processing to form a 64-bit ciphertext.

  The DES decryption algorithm is almost the same as the encryption algorithm. However, in cyclic shift 2, it is necessary to shift data in the opposite direction to the encryption algorithm.

  Next, the RSA encryption algorithm is a very strong public key encryption algorithm, and can perform not only data encryption but also message and user authentication.

  This algorithm uses two encryption keys, a public key and a secret key. The public key is disclosed in the form of data on a document or network and placed in a state where anyone can access it, but the private key must be strictly stored by the user.

The RSA encryption algorithm is numerical n = q * p (1)
e * d≡1 (mod (p-1) (q-1)) (2)
Here, p and q are prime numbers. Equation (2) is a congruent equation under the modulo (p-1) (q-1), and e * d and 1 are congruent modulo (p-1) (q-1). It is shown that.

  In other words, e * d−1 is divisible by (p−1) (q−1), and C≡Me (modn). In the decryption unit, the ciphertext C is modulo n. , M≡Cd (modn).

In order to decrypt the ciphertext C encrypted in this way, it is necessary to know the value of the secret key d. For that purpose, prime number p and prime number q obtained by factoring n must be obtained. . However, when n is a very large number, it is a principle principle in the RSA encryption algorithm that prime factorization cannot be performed within a realistic processing time with the current computer power.
JP-A-6-303440

  Protect information assets from theft and malicious browsing as the amount of data passing through the network grows with the spread of the BOX function that electronically stores a large amount of various data in hard disks such as multifunction devices and the spread of high-speed communication descriptions The importance of is increasing.

  Although it is an effective means to encrypt data, there is a problem when encrypted data is handled between devices of different manufacturers. At present, there are a variety of encryption algorithms, and at present, the direction of adopting standard algorithms worldwide has not been seen in the office equipment industry such as copiers and printers.

  Therefore, when a device-specific encryption algorithm different for each manufacturer is adopted, a problem occurs in seamless transmission / reception of encrypted data.

  On the other hand, in an environment where encrypted data based on a plurality of algorithms coexist, image data must be handled smoothly without sacrificing the performance of the entire apparatus. In particular, special consideration is required in a network multifunction peripheral in which FAX, copy, and printer functions are combined.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to perform encryption for encrypting read electronic data in an image forming apparatus having a storage unit for storing electronic data. Based on the circuit formation information or the decryption circuit formation information for decrypting the encrypted data, the first circuit for encrypting the electronic data with an arbitrary encryption algorithm or the arbitrary decryption algorithm By rewriting and forming the second circuit that decrypts the encrypted data, the electronic data can be encrypted with an arbitrary encryption algorithm, and the electronic data encrypted with an arbitrary encryption algorithm can be arbitrarily selected. By freely customizing the encryption / decryption processing environment that can be decrypted with the decryption algorithm of Image formation that greatly reduces the cost of equipment with excellent convenience that can respond freely to encoding requests, and without the need for dedicated hardware for each of the many image compression and encryption technologies. An apparatus, a data processing method, and a storage medium storing a computer-readable program and a program are provided.

  The image forming apparatus of the present invention that achieves the above object has the following configuration.

  An image forming apparatus comprising storage means for storing electronic data, comprising: encryption circuit formation information for encrypting the electronic data or decryption circuit formation information for decrypting encrypted encrypted data A circuit information reading unit to be read, and a first circuit or an arbitrary circuit for encrypting the electronic data with an arbitrary encryption algorithm based on the encrypted circuit formation information or the decryption circuit formation information read by the circuit information reading unit Circuit forming means for rewriting and forming the second circuit for decrypting the encrypted data with the decryption algorithm.

  The data processing method of the present invention that achieves the above object has the following configuration.

  A data processing method in an image forming apparatus provided with a storage means for storing electronic data, the encryption circuit forming information for encrypting the electronic data or the decryption for decrypting the encrypted data A circuit information reading step for reading circuit formation information, and a first encryption process for the electronic data using an arbitrary encryption algorithm based on the encrypted circuit formation information or the decryption circuit formation information read in the circuit information read step. Or a circuit forming step for rewriting and forming the second circuit for decrypting the encrypted data with an arbitrary decryption algorithm.

  According to the present invention, an electronic data can be encrypted with an arbitrary encryption algorithm, and an encryption / decryption processing environment in which electronic data encrypted with an arbitrary encryption algorithm can be decrypted with an arbitrary decryption algorithm can be freely used. By customizing it, it has excellent convenience that can freely respond to encryption requests or decryption requests with different algorithms, and has dedicated hardware corresponding to each of many image compression technologies and encryption technologies The cost of the apparatus can be greatly reduced.

  In addition, data security can be improved and an encryption circuit based on various encryption algorithms can be configured flexibly, so that differences in encryption methods can be absorbed regardless of the device.

  Furthermore, since the device main body does not have decryption circuit information and information that leads to decryption, it is difficult to restore data even if the HDD is stolen, and security can be improved.

  Also, even when combining files, different encryption methods for single jobs can be switched at any time, so that processing can be performed without degrading performance.

  Next, the best mode for carrying out the present invention will be described with reference to the drawings.

<Description of system configuration>
[First Embodiment]
FIG. 1 is a block diagram for explaining the configuration of an encryption processing unit applicable to the image forming apparatus showing the first embodiment of the present invention.

  In FIG. 1, reference numeral 1 denotes an external I / F circuit, which is connected to a processor of an image forming apparatus described later via a bus. A reconfigurable device 2 functions as an encryption / decryption circuit for performing encryption / decryption processing. In the reconfigurable device 2, a large number of reconfigurable arithmetic units are arranged to constitute a reconfigurable unit 3. The wiring between the arithmetic units can be changed dynamically.

  Note that the wiring is changed by the processor unit 4. Information for change is input / output by the external interface circuit 1. In addition, the reconfigurable device 2 is characterized by a built-in processor having a high degree of freedom but a slow processing speed (such as ARM / MIPS) and a processing speed that is superior to that of a general-purpose processor (ARM / MIPS). It is a “Reconfigurable” processor that can be said to be the middle of dedicated hardware (VLSI / ASIC, etc.) that can only perform fixed and fixed processing. Furthermore, there is a feature that the configuration can be changed at 1 CLK by a program.

  When the reconfigurable device 2 is an FPGA (Field Programmable Gate Array), it is possible to instantaneously switch a plurality of encryption algorithms without a software time lag compared to the time required for mapping the circuit. In an environment where a plurality of processes are processed simultaneously in parallel, it can be said that an ideal processor is selected when designing in consideration of performance.

  Further, since there are currently a large number of image compression technologies and encryption technologies, it is not necessary to have dedicated hardware corresponding to each of them, which is also effective in terms of cost design.

  The encryption processing unit configured in this way does not have an encryption chip based on a specific algorithm, and the processor unit 4 of the reconfigurable device 2 that can be flexibly rewritten encrypts and decrypts the reconfigurable unit 3 on the reconfigurable unit 3. A first circuit (encryption circuit) or a second circuit (decryption circuit) for encryption is configured. Removable media such as an IC card is provided with device-specific information (serial NO, IP address, etc.) indicating the location of data and decryption information composed of a plurality of decryption circuit configuration information (algorithms). The removable medium may be a USB flash memory.

  Note that the information necessary for the decoding process is not left on the storage device of the image forming apparatus main body.

  The circuit configuration information is downloaded from the removable medium when data is encrypted / decrypted, and the first or second circuit is re-installed on the configurable unit 3 when necessary. Constitute.

  After the encryption / decryption processing is completed, the processor unit 4 erases the circuit configured in the rewritable device at any time.

  When outputting data, the processor of the reconfigurable device 2 of the cryptographic processing unit provided in the image forming apparatus provided in the image forming apparatus that transfers the data in the form of encrypted data from the data processing apparatus that is the location of the data via the network. The unit 4 forms a second circuit (decoding circuit) on the configurable unit 3 to perform decoding and output.

  Also, as shown in the second embodiment to be described later, when connecting a single job encrypted with a plurality of types of algorithms belonging to individuals, etc., the decryption circuit is switched for each job and combined into one job for encryption. I do.

<Appearance of image forming apparatus>
FIG. 2 is a diagram showing the appearance of an image processing apparatus to which the cryptographic processing apparatus according to the present invention can be applied.

  In FIG. 2, a scanner unit 10 serving as an image input device irradiates a document image with a lamp, reads it with a CCD line sensor (not shown), and converts it into an electrical signal to perform processing as image data. The original paper is set in the original feeder 142, and the user of the apparatus gives a reading start instruction from the operation unit 140, whereby the original feeder 142 feeds the original paper one by one and performs an original image reading operation.

  The printer unit 20 that is an image output device is a part that converts image data into an image on paper. In this specification, the electrophotographic method using a photosensitive drum or a photosensitive belt will be described. An ink jet system that prints an image directly on a sheet by ejecting ink from the array may be used. The activation of the printing operation is started by an instruction from a controller (described later) inside the apparatus. The printer unit 20 has a plurality of paper feed stages so that different paper sizes or different paper orientations can be selected, and has paper cassettes 122, 124, 142, and 144 corresponding thereto. Further, the paper on which the image is formed is discharged onto the paper discharge tray 132.

  FIG. 3 is a cross-sectional view illustrating the configuration of the image forming apparatus shown in FIG. 2, and the same components as those in FIG. 2 are denoted by the same reference numerals.

In FIG. 3, reference numeral 901 denotes an original table glass, and the originals fed from the original feeder 142 are sequentially placed at predetermined positions. Reference numeral 902 denotes an original illumination lamp composed of, for example, a halogen lamp, which exposes an original placed on the original table glass 901. Reference numerals 903, 904, and 905 denote scanning mirrors which are accommodated in an optical scanning unit (not shown) and guide reflected light from the original to the CCD unit 906 while reciprocating. The CCD unit 906 includes an imaging lens 907 that forms an image of reflected light from an original on the CCD, for example, an image sensor 908 composed of a CCD, a CCD driver 909 that drives the image sensor 908, and the like. An image signal output from the image sensor 908 is converted into, for example, 8-bit digital data and then input to the controller unit 939. Reference numeral 910 denotes a photosensitive drum,
The pre-exposure lamp 912 is neutralized in preparation for image formation. Reference numeral 913 denotes a primary charger that uniformly charges the photosensitive drum 910. Reference numeral 917 denotes an exposure unit, which is composed of, for example, a semiconductor laser and exposes the photosensitive drum 910 based on image data processed by a controller unit 939 that controls image formation and the entire apparatus, thereby forming an electrostatic latent image. .

  Reference numeral 918 denotes a developing device that contains a black developer (toner). Reference numeral 919 denotes a pre-transfer charger, which applies a high voltage before transferring the toner image developed on the photosensitive drum 910 onto a sheet. Reference numerals 920, 922, 924, 942, and 944 denote paper feed units (920 is a manual paper feed unit), and the transfer paper is fed into the apparatus by driving the paper feed rollers 921, 923, 925, 943, and 945. Then, the operation is temporarily stopped at the position where the registration roller 926 is disposed, and the write-out timing with the image formed on the photosensitive drum 910 is taken and the paper is fed again. A transfer charger 927 transfers the toner image developed on the photosensitive drum 910 to a transfer sheet to be fed.

  A separation charger 928 separates the transfer sheet on which the transfer operation has been completed from the photosensitive drum 910. The toner remaining on the photosensitive drum 910 without being transferred is collected by the cleaner 911. Reference numeral 929 denotes a conveyance belt which conveys the transfer sheet on which the transfer process has been completed to the fixing device 930 and is fixed by heat, for example. Reference numeral 931 denotes a flapper, which controls the transfer path of the transfer paper after the fixing process to either the sorter 932 or the intermediate tray 937.

  Reference numerals 933 to 936 denote feeding rollers that feed the transfer sheet once the fixing process is completed to the intermediate tray 937 by being reversed (multiple) or non-reversed (both sides). Reference numeral 938 denotes a re-feed roller, which again conveys the transfer paper placed on the intermediate tray 937 to the position where the registration roller 926 is disposed. The controller unit 939 includes a microcomputer, an image processing unit, and the like, which will be described later, and performs the above-described image forming operation in accordance with an instruction from the man-machine interface device 940.

<Controller unit>
FIG. 4 is a diagram showing the configuration of the controller unit of the image forming apparatus shown in FIG.

  In FIG. 4, the controller unit 30 is electrically connected to the scanner 10 as an image input device and the printer 20 as an image output device, and on the other hand, is connected to a LAN 3000 or a public line (WAN) 1251, thereby enabling image information and devices. It functions as a controller for inputting and outputting information.

  A CPU 1201 is a controller that controls the entire image processing system. A RAM 1202 is a system work memory for the CPU 1201 to operate, and also functions as an image memory for temporarily storing image data.

  A ROM 1203 is a boot ROM, and stores a system boot program. A hard disk drive (HDD) 1204 stores system software, image data, software counter values, and the like.

  The software counter value has a counter area for each paper size and a counter area for each data processing capacity, and is calculated based on an arbitrary reference capacity value set in advance based on the number of output images and the data capacity processed by the CPU 1201. Count up is performed. Further, the counted counter value is not limited to the HDD 1204, and the storage area may be stored in an unillustrated EEPROM or the like as long as it can be stored and retained even when the power is turned off.

  The operation unit I / F 1206 is an interface unit with the operation unit (UI) 140 and outputs image data to be displayed on the operation unit 140 to the operation unit 140. Also, it plays a role of transmitting information input by the system user from the operation unit 140 to the CPU 1201. A network 1210 is connected to the LAN 3000 and inputs / outputs output image data and information related to device control.

  In addition, by the input operation in the operation unit 140, output image data corresponding to the input operation by the operation unit 140 is received from the host computer 1100 on the network or an output image data management device (not shown), and an image is output.

  The Modem 1250 is connected to the public line 1251 and inputs / outputs information. A scanner / printer communication I / F 1212 is an I / F for communicating with the CPUs of the scanner 10 and the printer 20. The above devices are arranged on the system bus 1207. The timer 1211 functions as a timer for issuing an interrupt at a time setting or a fixed time period of the image forming apparatus and the controller unit. A raster image processor (RIP) 1260 expands the PDL code into a bitmap image.

  An Image Bus I / F 1205 is a bus bridge that connects a system bus 1207 and an image bus 2008 that transfers image data at high speed, and converts a data structure. The image bus 2008 is configured by a PCI bus or IEEE1394. The following devices are arranged on the image bus 2008.

  A device I / F unit 1220 connects the scanner 10 and the printer 20 that are image input / output devices to the controller unit 30 and performs synchronous / asynchronous conversion of image data. A scanner image processing unit 1280 corrects, processes, and edits input image data. A printer image processing unit 1290 performs printer correction, resolution conversion, and the like on print output image data.

  The image rotation unit 1230 rotates image data. The image compression unit 1240 performs compression / decompression processing of JPEG for multi-valued image data and JBIG, MMR, and MH for binary image data. The reconfigurable device 1270 is a processor capable of instantaneously changing the circuit configuration at any time by a program.

  For example, although a plurality of hardware cannot be provided in terms of cost such as image compression and encryption, a circuit is configured when a function desired to be realized by a hardware circuit is required in consideration of performance. Unlike FPGA, in addition to building a flexible circuit, it is possible to instantaneously switch the circuit configuration without a software time lag. The removable media IF 1208 is an external interface that can read and write to a removable media 1209 such as an IC card, a CDROM, and a mobile hard disk. There are no restrictions on the type of USB, PCMCIA, DVD drive, etc.

<Scanner image processing unit>
FIG. 5 is a block diagram showing a configuration of the scanner image processing unit 1280 shown in FIG. 4. The same components as those in FIG. 4 are denoted by the same reference numerals.

  In FIG. 5, an image bus I / F controller 1281 is connected to the image bus 2008, and controls the bus access sequence and generates control and timing of each device in the scanner image processing unit 1280. The filter processing unit 1282 performs a convolution operation with a spatial filter.

  For example, the editing unit 1283 recognizes a closed region surrounded by a marker pen from the input image data, and performs image processing such as shading, shading, and negative / positive inversion on the image data in the closed region.

  The scaling processing unit 1284 performs enlargement / reduction by performing an interpolation operation in the main scanning direction of the raster image when changing the resolution of the read image. The scaling in the sub-scanning direction is performed by changing the scanning speed of an image reading line sensor (not shown). The table 1285 is table conversion performed to convert image data, which is read luminance data, into density data. The binarization 1286 binarizes multi-value grayscale image data by error diffusion processing or screen processing. The processed image data is transferred to the image bus 2008 via the image bus I / F controller 1281 again.

<Printer image processing unit>
FIG. 6 is a block diagram showing the configuration of the printer image processing unit 1290 shown in FIG. 4, and the same components as those in FIG. 1 are denoted by the same reference numerals.

  In FIG. 6, an image bus I / F controller 1291 is connected to the image bus 2008, and controls the bus access sequence and generates control and timing of each device in the scanner image processing unit 1280. A resolution conversion unit 1292 performs resolution conversion for converting image data coming from the Network 3000 or the public line 1251 to the resolution of the printer 20. The smoothing processing unit 1293 performs processing to smooth out jaggies (roughness of an image appearing at a black-and-white boundary portion such as an oblique line) of image data after resolution conversion.

<Image compression unit>
FIG. 7 is a block diagram showing the configuration of the image compression unit 1240 shown in FIG. 4. The same components as those in FIG. 4 are denoted by the same reference numerals.

  In FIG. 7, the image bus I / F controller 1241 is connected to the image bus 2008, controls its bus access sequence, performs timing control for exchanging data with the input buffer 1242 and the output buffer 1245, and the image Control such as mode setting for the compression unit 1243 is performed. The processing procedure of the image compression processing unit is shown below.

  Settings for image compression control are performed from the CPU 1201 to the image bus I / F controller 1241 via the image bus 2008. With this setting, the image bus I / F controller 1241 makes settings necessary for image compression (for example, MMR compression, JBIG expansion, etc.) to the image compression unit 1243. After making necessary settings, the CPU 1201 again permits image data transfer to the image bus I / F controller 1241. In accordance with this permission, the image bus I / F controller 1241 starts transferring image data from each device on the RAM 1202 or the image bus 2008.

  The received image data is temporarily stored in the input buffer 1242, and the image is transferred at a constant speed in response to an image data request from the image compression unit 1243. At this time, the input buffer determines whether image data can be transferred between the image bus I / F controller 1241 and the image compression unit 1243, reads the image data from the image bus 2008, and reads the image compression unit 1243. When it is impossible to write an image on the screen, control is performed so as not to transfer data (hereinafter, such control is referred to as handshaking).

  The image compression unit 1243 temporarily stores the received image data in the RAM 1244. This is because several lines of data are required depending on the type of image compression processing to be performed, and several lines of image data are prepared in order to compress the first one line. This is because the image cannot be compressed unless it is empty. The image data subjected to the image compression is immediately sent to the output buffer 1245.

  The output buffer 1245 performs handshaking with the image bus I / F controller 1241 and the image compression unit 1243 and transfers image data to the image bus I / F controller 1241. The image bus I / F controller 1241 transfers the transferred compressed (or expanded) image data to each device on the RAM 1202 or the image bus 2008. Such a series of processing is repeated until there is no processing request from the CPU 1201 (when processing of the necessary number of pages is completed) or until a stop request is issued from this image compression unit (when an error occurs during compression and expansion). It is.

<Image rotation part>
FIG. 8 is a block diagram showing a configuration of the image rotation unit 1230 shown in FIG. 4, and the same components as those in FIG. 4 are denoted by the same reference numerals.

  In FIG. 8, an image bus I / F controller 1231 is connected to the image bus 2008, functions to control the bus sequence, controls to set a mode or the like in the image rotation unit 1232, and transfers image data to the image rotation unit 1232. Timing control is performed. The processing procedure of the image rotation unit 1232 is shown below.

  Settings for image rotation control are performed from the CPU 1201 to the image bus I / F controller 1231 via the image bus 2008. With this setting, the image bus I / F controller 1241 performs settings necessary for image rotation (for example, image size, rotation direction / angle, etc.) for the image rotation unit 1232.

  After making necessary settings, the CPU 1201 again permits image data transfer to the image bus I / F controller 1241. In accordance with this permission, the image bus I / F controller 1231 starts transferring image data from each device on the RAM 1202 or the image bus 2008.

  Here, the size is 32 bits and the image size to be rotated is 32 × 32 (bits), and image data is transferred in units of 32 bits when transferring image data on the image bus 2008 ( The image to be handled is assumed to be binary).

  9 and 10 are diagrams illustrating an example of image rotation processing by the image rotation unit 1230 illustrated in FIG.

  As described above, in order to obtain a 32 × 32 (bit) image, it is necessary to perform the above unit data transfer 32 times, and it is necessary to transfer image data from discontinuous addresses (see FIG. 9). ).

  The image data transferred by the discontinuous addressing is written in the RAM 1233 so that it is rotated to a desired angle at the time of reading. For example, if the rotation is 90 degrees counterclockwise, the 32-bit image data transferred first is written in the Y direction as shown in FIG. By reading in the X direction at the time of reading, the image is rotated.

  After the 32 × 32 (bit) image rotation (writing to the RAM 2033) is completed, the image rotation unit 1232 reads the image data from the RAM 1233 by the above-described reading method, and transfers the image to the image bus I / F controller 1231. The image bus I / F controller 1231 that has received the rotated image data transfers the data to each device on the RAM 1202 or the image bus 2008 by continuous addressing.

  Such a series of processing is repeated until there is no processing request from the CPU 1201 (when processing of the necessary number of pages is completed).

<Device I / F>
FIG. 11 is a block diagram showing a configuration of the device I / F unit 1220 shown in FIG.

  In FIG. 11, an image bus I / F controller 1221 is connected to the image bus 2008, and controls the bus access sequence and generates control and timing of each device in the device I / F unit 1220.

  In addition, control signals to the scanner 10 and the printer 20 are generated. The scan buffer 1222 temporarily stores the image data sent from the scanner 10 and outputs the image data in synchronization with the image bus 2008. The serial-parallel / parallel-serial conversion 1223 arranges the image data stored in the scan buffer 1222 in order or disassembles and converts the image data into a data width that can be transferred to the image bus 2008.

  The parallel-serial / serial-parallel conversion 1224 decomposes the image data transferred from the image bus 2008 or arranges the image data in order, and converts the image data into a data width that can be stored in the print buffer 1225. The print buffer 1225 temporarily stores the image data sent from the image bus 2008 and outputs the image data in synchronization with the printer 20.

  The processing procedure at the time of image scanning is shown below. The image data sent from the scanner 10 is stored in the scan buffer 1222 in synchronization with the timing signal sent from the scanner 10.

  When the image bus 2008 is a PCI bus, when the image data is 32 bits or more in the buffer, the image data is sent from the buffer to the serial-parallel / parallel-serial conversion 1223 by 32 bits in a first-in first-out manner. Is transferred to the image bus 2008 through the image bus I / F controller 1221.

  When the image bus 2008 is IEEE1394, the image data in the buffer is first-in-first-out, sent from the buffer to the serial-parallel / parallel-serial conversion 1223, converted into serial image data, and then converted into serial image data through the image bus I / F controller 1221 Transfer on 2008.

  The processing procedure at the time of image printing is shown below. When the image bus 2008 is a PCI bus, 32-bit image data sent from the image bus is received by the image bus I / F controller, sent to the parallel serial-serial parallel conversion 1224, and the number of input data bits of the printer 20 Are stored in the print buffer 1225.

  When the image bus 2008 is IEEE1394, serial image data sent from the image bus is received by the image bus I / F controller, sent to the parallel serial / serial parallel conversion 1224, and the number of input data bits of the printer 20. The image data is converted and stored in the print buffer 1225. Then, in synchronization with the timing signal sent from the printer 20, the image data in the buffer is sent to the printer 20 in a first-in first-out manner.

<Operation unit>
FIG. 12 is a plan view illustrating the configuration of the operation unit 140 illustrated in FIG. 4 and corresponds to an example of the operation unit of the digital multifunction peripheral.

  In FIG. 12, a liquid crystal operation panel 2300 is a combination of a liquid crystal and a touch panel, and displays setting contents, soft keys, and the like. A start key 2302 is a hard key for instructing the start of a copy operation or the like, and has green and red LEDs incorporated therein. The green LED lights when the start is possible and the red LED lights when the start is impossible.

  A stop key 2303 is a hard key used for stopping the operation. The hard key group 2306 is provided with a numeric keypad, a clear key 2305, a reset key 2304, a guide key, and a user mode key.

<LCD panel display in copy operation mode>
FIG. 13 is a diagram showing an example of a standard screen (normal copy screen) displayed on the liquid crystal operation panel 2301 shown in FIG.

  In FIG. 13, the setting display unit 411 is a part that displays the current operation status of the digital multifunction peripheral, the set magnification, the paper, and the number of copies. The magnification soft key group 412 is provided with the same magnification, enlargement, reduction, and zoom keys that are soft keys relating to the magnification at the time of copying. The same size key is pressed to set the copy magnification to 100%.

  The reduction key and the enlargement key are pressed when performing standard reduction or enlargement. The zoom key is pressed to reduce or enlarge an irregular size in 1% increments. The sorter key 414 is used when designating a processing method of output paper. A double-sided key 415 is used when double-sided printing is applied to an original or an output method. A paper selection key 416 is used when transitioning to a screen for designating the size, color, material, etc. of the output paper. The density designation key group 417 is a part for adjusting the density of the read or output image and displaying the setting contents. The application mode key 418 is used to move to the application mode screen.

<Figure showing equipment configuration>
FIG. 14 is a block diagram showing an example of a network system to which the image forming apparatus according to the present invention is applied. For example, two image forming apparatuses can communicate with each other via a network.

  In FIG. 14, reference numerals 1401 and 1402 denote image forming apparatuses, which have interfaces capable of reading and writing to a removable medium 1209 such as an IC card. In this example, the IC card has an IP address “111.222.1111.5” and serial number “1234” of the image forming apparatus 1401 indicating the location of the encrypted data, an encrypted algorithm “Triple DES”, and the like. Information is stored via a card device (not shown).

  The image forming apparatuses are connected to each other via a network. The image forming apparatus 1402 receives data from the image forming apparatus 1401 based on information read from the removable medium 1209 and outputs the data from the image forming apparatus 1402. Of course, the same operation is possible even in a stand-alone configuration.

  Note that the image forming apparatuses 1401 and 1402 include reconfigurable devices 1401-1 and 1402-1 having the same functions as the reconfigurable device 1 having the configuration illustrated in FIG. Reference numerals 1401-2 and 1402-2 denote memories.

<Example of encryption processing>
FIG. 15 is a flowchart showing an example of a first data processing procedure in the image forming apparatus according to the present invention, and corresponds to the encryption processing procedure in the image forming apparatus. S1501 to S1510 indicate steps. Each step is realized by loading a control program stored in the ROM 1203 and the hard disk 1204 shown in FIG.

  Further, it is assumed that the user attaches the removable media 1209 to the removable media interface 1208 of the image forming apparatus 1402 before this processing.

  First, in step S1501, the encryption method displayed on the operation unit 140 is selected, and the encryption method to be applied is determined. Next, in step S1502, the scanner 10 starts a scanning operation by pressing the start button of the operation unit 140.

  Next, in step 1503, the reconfigurable device 1402-1 reads the encryption algorithm information of the encryption circuit constituting the reconfigurable device from the removable medium 1209. In step S1504, based on the read encryption algorithm information, for example, the processor unit 4 configures an encryption circuit for the reconfigurable unit 3 shown in FIG.

  In step S1505, the original is read by the scanner 10, and an encryption key is generated in step S1506. In step S1504, the data and the encryption key are input to the configured encryption circuit, and encryption processing is performed in step S1507. The encrypted data that has been encrypted is stored in the memory 1402-2 in step S1508.

  In step S1509, the processor unit 4 erases the encryption circuit configured in the reconfigurable unit 3, and in step S1501, the encrypted data including the encryption key is recorded in the removable medium 1403.

  Here, the encrypted data information is composed of the serial number, the IP address, the time stamp, the applied encryption algorithm information, the encryption key, and the like of the device that stores the encrypted data. This encrypted data information is necessary at the time of data restoration, and is not limited to this example as long as it is information necessary to uniquely identify data.

  This eliminates the need for dedicated hardware corresponding to each of a large number of image compression techniques and encryption techniques, and is effective in terms of cost design.

<Example of decryption processing>
FIG. 16 is a flowchart showing an example of a second data processing procedure in the image forming apparatus according to the present invention, and corresponds to the decoding process and the printing process procedure in the image forming apparatus. S1601 to S1614 indicate each step. Each step is realized by loading a control program stored in the ROM 1203 and the hard disk 1204 shown in FIG.

  Note that the user attaches the removable media 1209 to the removable media interface 1208 provided in the image forming apparatus 1402.

  First, in step S1601, the encrypted data information recorded at the time of encryption is read from the removable medium 1209 and used to display a list of data on the operation unit 140.

  The encrypted data information includes an encryption algorithm and an encryption key.

  In step S1602, the operation unit 140 inputs a user ID and a password set to use the image forming apparatus 1402. Next, in step S1603, it is determined whether the user ID and password input in step S1602 match. If it is determined that they match, the encrypted data information read in step S1601 is stored. The device corresponding to the original is accessed to refer to the data (S1604).

  Next, in step S1605, the CPU 1201 checks whether or not the time stamps indicating the date and time when the data is recorded match, and in step S1606, whether or not the encrypted algorithms match.

  If it is determined that the time stamp and the encryption algorithm do not match, the process proceeds to step S1614, where it is assumed that access has been made illegally, and the removable medium 1209 is made unusable (invalid) (for example, , Delete the information of the removable media), and the process ends.

  On the other hand, if YES is determined in both steps S1605 and S1606, that is, if it is determined that the time stamp and the algorithm match, a list of data that can be output to the operation unit 140 is controlled by the CPU 1201 in step S1607. indicate.

  In step S1608, the user selects data to be output from the list of data that can be output displayed on the operation unit 140.

  Next, the encryption circuit configuration information is read from the removable medium 1209 based on the encrypted data information of the selected data. In step S1610, the processor unit 4 adds a decryption circuit to the reconfigurable 3 on the reconfigurable device 1270. Constitute.

  Next, in step S1611, the encrypted data is input to the decryption circuit configured in step S1610, and decryption processing is performed. The processor unit 4 erases the decoding circuit configured, and in step S1613, the decoded image data is transferred to the printer 20 under the control of the CPU 1201, printed out, and the process ends.

  The decoded image data is printed as it is, or the printer image processing unit 1290 performs image processing based on the image processing mode stored in the removable medium 1209 or the image processing mode designated from the operation unit 140. Whether or not to print out after that is arbitrary.

  The image processing mode may be any image processing mode provided in the image forming apparatus 1402.

  This eliminates the need for dedicated hardware corresponding to each of a large number of image compression techniques and encryption techniques, and is effective in terms of cost design.

<Description of removable media>
FIG. 17 is a block diagram for explaining the configuration of the removable medium 1209 shown in FIG.

  In FIG. 17, the removable medium 1209 includes a recording unit 1702 for recording data and an interface unit 1703 connected to a removable media interface 1208 of the image forming apparatus.

  In the present invention, the type of the removable medium is not limited to a CD-ROM, flash memory, magnetic storage device, USB flash memory, or the like.

<Description of information recorded on removable media>
FIG. 18 is a diagram for explaining the data structure of the recording unit 1702 shown in FIG. 17 and corresponds to an example of information recorded on a readable / writable removable medium, for example.

  In FIG. 18, reference numeral 1800 denotes a recording area on the medium. The types of information include the file name 1801 of the data to be handled, the IP address 1802 of the printer in which the data is stored, the date and time 1803 when the data was recorded, the user ID 1804 for identifying the individual, the encryption algorithm 1805, the encryption key 1806, password 1807, etc., necessary for performing user authentication, information for uniquely identifying data, information for decrypting data, in an environment where the image forming apparatus of the present invention is connected by a plurality of networks This information is not limited to this example.

<Explanation of file combination save>
FIG. 19 is a schematic diagram for explaining an example of file combination processing in the image forming apparatus according to the present invention.

  In FIG. 19, reference numeral 1901 denotes a hard disk for storing encrypted data. Reference numeral 1902 denotes a file which is received from a host computer (not shown) and developed into a bitmap image of a predetermined print description language.

  Reference numeral 1903 denotes a file composed of bitmap data received via a FAX line. Reference numeral 1904 denotes a file composed of bitmap data which is optically read by the scanner and converted into electronic data. These individual files are combined as one file 1903 and stored again on the hard disk 1901. In the image forming apparatus of the present invention, in the file combination function, the files 1902-1904 are individually encrypted by various algorithms.

  This eliminates the need for dedicated hardware corresponding to each of a large number of image compression techniques and encryption techniques, which is also effective in terms of cost design.

[Second Embodiment]
In the first embodiment, the decryption circuit configured in the reconfigurable device 1270 on the reconfigurable device 1270 is changed to correspond to the encrypted algorithm, and the image data stored in the medium is changed. Although the case of switching the decryption has been described, it is applied to data handled by the image forming apparatus and having different attributes (for example, encrypted PDL data, FAX transmission / reception data, scan data) stored in the HDD 1204, for example. The encrypted data may be configured to be controlled by the processor unit 3 of the reconfigurable device 1270 to be combined into one data. The embodiment will be described below.

<Example of data processing when saving a file>
FIG. 20 is a flowchart showing an example of a third data processing procedure in the image forming apparatus according to the present invention, and corresponds to the decoding process and the printing process procedure in the image forming apparatus. In addition, S2001-S2011 show each step. Each step is realized by loading a control program stored in the ROM 1203 and the hard disk 1204 shown in FIG.

  In the image forming apparatus according to the present exemplary embodiment, data such as scan, print, and fax are mixedly recorded on the hard disk 1901. Each of these files is combined and stored in the hard disk 1901 again. Since each of them is encrypted with a different algorithm, the processor unit 3 of the reconfigurable device 1270 controls to switch data decryption and decryption circuits at any time during combination.

  First, in step S2001, although not shown, it is assumed that operations similar to those in steps S1601 to S1606 shown in FIG. 18 have already been performed.

  In step S2001, a selectable data list is displayed on the operation unit 140. In step S2002, the operation unit 140 designates data to be combined and a combining order. Next, in step S2003, the encrypted data is read, and in step S2004, a decryption circuit corresponding to the encrypted data is configured on the reconfigurable unit 3 of the reconfigurable device 1270. In step S2005, the processor unit Decryption processing is performed.

  Next, in step S2006, the CPU 1201 determines whether or not all the selected decoding processes have been completed, and performs a process of switching the decoding circuit corresponding to each selected data type until decoding is completed. repeat.

  If it is determined in step S2006 that all the decryption processes have been completed, the decrypted files are combined on the RAM 1202 under the control of the CPU 1201 in step S2007, and the reconfiguration is performed in step S2008. An encryption circuit is configured on the reconfigurable unit 3 of the reconfigurable device 1270. In step S2009, the processor unit 4 performs an encryption process via the reconfigurable unit 3, and after the encryption process ends, in step S2010, The encryption circuit is deleted from the reconfigurable unit 3 by the processor unit 4. Next, in step S2011, the encrypted data is stored in the hard disk 1901, and the process ends.

  As a result, even when combining files, different encryption methods can be switched as needed for each single job, so that processing can be performed without degrading performance. Furthermore, since there are many image compression techniques and encryption techniques, it is not necessary to have dedicated hardware corresponding to each of them, which is effective in terms of cost design.

[Third Embodiment]
In the second embodiment, the case where the present invention is applied to a group of encrypted data of different types has been described. However, for example, from a plurality of pages in a print job received from a data processing apparatus. When the print data to be transferred is divided into a plurality of pages and transferred, the data encrypted by different encryption processing is decrypted into a series of print data on the image forming apparatus side. The invention can be applied.

[Fourth Embodiment]
The configuration of a data processing program that can be read by the image forming apparatus according to the present invention will be described below with reference to the memory map shown in FIG.

  FIG. 21 is a diagram illustrating a memory map of a storage medium that stores various data processing programs that can be read by the image forming apparatus according to the present invention.

  Although not particularly illustrated, information for managing a program group stored in the storage medium, for example, version information, creator, etc. is also stored, and information depending on the OS on the program reading side, for example, a program is identified and displayed. Icons may also be stored.

  Further, data depending on various programs is also managed in the directory. In addition, a program for installing various programs in the computer, and a program for decompressing when the program to be installed is compressed may be stored.

  The functions shown in FIGS. 15, 16, and 20 in the present embodiment may be performed by a host computer by a program installed from the outside. In this case, the present invention is applied even when an information group including a program is supplied to the output device from a storage medium such as a CD-ROM, a flash memory, or an FD, or from an external storage medium via a network. Is.

  As described above, a storage medium storing software program codes for realizing the functions of the above-described embodiments is supplied to the system or apparatus, and the computer (or CPU or MPU) of the system or apparatus stores the storage medium in the storage medium. It goes without saying that the object of the present invention can also be achieved by reading and executing the programmed program code.

  In this case, the program code itself read from the storage medium realizes the novel function of the present invention, and the storage medium storing the program code constitutes the present invention.

  Therefore, as long as it has the function of the program, the form of the program such as an object code, a program executed by an interpreter, or script data supplied to the OS is not limited.

  As a storage medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, MO, CD-ROM, CD-R, CD-RW, magnetic tape, nonvolatile memory card, ROM, DVD, etc. Can be used.

  In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the program code constitutes the present invention.

  As another program supply method, a browser of a client computer is used to connect to a homepage on the Internet, and the computer program itself of the present invention or a compressed file including an automatic installation function is stored on a recording medium such as a hard disk from the homepage. It can also be supplied by downloading. It can also be realized by dividing the program code constituting the program of the present invention into a plurality of files and downloading each file from a different homepage. That is, a WWW server, an ftp server, and the like that allow a plurality of users to download a program file for realizing the functional processing of the present invention on a computer are also included in the claims of the present invention.

  In addition, the program of the present invention is encrypted, stored in a storage medium such as a CD-ROM, distributed to users, and key information for decryption is downloaded from a homepage via the Internet to users who have cleared predetermined conditions. It is also possible to execute the encrypted program by using the key information and install the program on a computer.

  Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) or the like running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.

  Further, after the program code read from the storage medium is written to a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that the case where the CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  The present invention is not limited to the above embodiments, and various modifications (including organic combinations of the embodiments) are possible based on the spirit of the present invention, and these are excluded from the scope of the present invention. is not.

  Although various examples and embodiments of the present invention have been shown and described, those skilled in the art will recognize that the spirit and scope of the present invention are not limited to the specific descriptions in the present specification, but the following embodiments. Needless to say, is also included. Hereinafter, Embodiments 1 to 14 will be described.

[Embodiment 1]
An image forming apparatus including storage means (for example, HDD 1204 shown in FIG. 4) for storing electronic data, wherein the encryption circuit forming information for encrypting the electronic data or the encrypted data encrypted is decrypted. Circuit information reading means for reading decryption circuit formation information, and encrypting the electronic data with an arbitrary encryption algorithm based on the encryption circuit formation information or the decryption circuit formation information read by the circuit information reading means Circuit forming means (reconfigurable device 1270 shown in FIG. 4) that rewrites and forms a first circuit to process or a second circuit to decrypt encrypted data with an arbitrary decryption algorithm An image forming apparatus.

  This makes it possible to freely customize an encryption / decryption processing environment in which electronic data can be encrypted with an arbitrary encryption algorithm and electronic data encrypted with an arbitrary encryption algorithm can be decrypted with an arbitrary decryption algorithm. This makes it easy to respond to encryption requests and decryption requests with different algorithms, and eliminates the need for dedicated hardware for each of the many image compression and encryption technologies. The device cost can be greatly reduced.

  In addition, data security can be improved and an encryption circuit based on various encryption algorithms can be configured flexibly, so that differences in encryption methods can be absorbed regardless of the device.

[Embodiment 2]
2. The image forming apparatus according to claim 1, wherein the encryption circuit formation information or the decryption circuit formation information is read from a removable medium.

  As a result, the device main body does not have the decryption circuit information and the information that leads to the decryption, so that even if the HDD is stolen, it becomes difficult to restore the data, and the security can be improved.

[Embodiment 3]
2. The image forming apparatus according to claim 1, wherein the circuit forming unit includes an invalidating unit configured to invalidate a first circuit or a second circuit to be formed.

  As a result, a single circuit forming means can respond freely to an encryption request and a decryption request for electronic data, and does not have dedicated hardware corresponding to each of a large number of image compression techniques and encryption techniques. Therefore, the apparatus cost can be greatly reduced.

[Embodiment 4]
The circuit forming means includes a programmable logic device (for example, the reconfigurable unit 3 shown in FIG. 1) and a processor (processor section 4 shown in FIG. 1) that controls circuit formation and invalidation processing in the programmable logic device. And an image forming apparatus according to the first embodiment.

  As a result, one programmable logic device can flexibly handle requests for encryption and decryption of electronic data, and has dedicated hardware for each of the many image compression and encryption technologies. The cost of the apparatus can be greatly reduced.

[Embodiment 5]
The processor controls the formation and execution of the first or second circuit by collating the encrypted circuit formation information or the decryption circuit formation information stored in the removable medium with the identification information stored in the storage means. An image forming apparatus according to Embodiment 4, wherein:

  As a result, the decryption circuit information is not stored in the device body, and it is difficult to restore the data even if the storage means is stolen because the information does not lead to the decryption, and the encryption stored in the removable medium If the circuit formation information or the decryption circuit formation information and the identification information stored in the storage means do not match, the respective processes are restricted, so that the security of electronic data can be improved.

[Embodiment 6]
The image forming apparatus according to any one of Embodiments 1 to 5, wherein the identification information includes a machine serial ID, an IP address, a user ID, and a password.

  Thereby, the machine serial ID, the IP address, the user ID, and the password are collated and the respective processes are restricted, so that the security of electronic data can be improved.

[Embodiment 7]
The circuit forming means decodes electronic data of different types by the second circuit based on decoding circuit formation information set for a plurality of electronic data of different types stored in the storage means. 2. The image forming apparatus according to claim 1, wherein after the respective electronic data are concatenated, the concatenated single electronic data can be encrypted by the first circuit.

  As a result, even when combining files, different encryption methods for each single job can be switched at any time, so that processing can be performed without degrading performance.

[Embodiment 8]
A data processing method in an image forming apparatus provided with a storage means for storing electronic data, the encryption circuit forming information for encrypting the electronic data or the decryption for decrypting the encrypted data Based on the circuit information reading step (for example, step S1503 shown in FIG. 15 or step S1601 shown in FIG. 16) for reading the circuit formation information, and the encrypted circuit formation information or the decryption circuit formation information read by the circuit information read step. A circuit forming step of rewriting and forming a first circuit that encrypts the electronic data with an arbitrary encryption algorithm or a second circuit that decrypts the encrypted data with an arbitrary decryption algorithm (for example, FIG. 15). Step S1504 shown in FIG. 16 or Step S1610 shown in FIG. Data processing method characterized by.

  Thereby, the effect equivalent to Embodiment 1 can be expected.

[Embodiment 9]
The data processing method according to claim 8, wherein the encryption circuit formation information or the decryption circuit formation information is read from a removable medium.

  Thereby, the effect equivalent to Embodiment 2 can be expected.

[Embodiment 10]
The circuit forming step includes an invalidating step (for example, step S1509 shown in FIG. 15 or step S1612 shown in FIG. 16) for invalidating the first circuit or the second circuit to be formed. The image forming apparatus according to Aspect 8.

  Thereby, the effect equivalent to Embodiment 3 can be expected.

[Embodiment 11]
The data processing method according to any one of embodiments 8 to 11, wherein the identification information includes a machine serial ID, an IP address, a user ID, and a password.

  Thereby, an effect equivalent to that of Embodiment 4 can be expected.

[Embodiment 12]
The circuit forming step uses the second circuit to decode electronic data of different types based on decoding circuit formation information set for a plurality of electronic data of different types stored in the storage means. After connecting the respective electronic data (steps S2001 to S2007 shown in FIG. 20), the connected single electronic data can be encrypted by the first circuit. 8. The data processing method according to 8.

  Thereby, an effect equivalent to that of Embodiment 5 can be expected.

[Embodiment 13]
A computer-readable storage medium storing a program for executing the method according to any one of Embodiments 8 to 12.

  Thereby, the effect equivalent to Embodiment 8-12 can be anticipated.

[Embodiment 14]
A program for executing the method according to any one of embodiments 8 to 12.

  Thereby, the effect equivalent to Embodiment 8-12 can be anticipated.

1 is a block diagram illustrating a configuration of a cryptographic processing apparatus according to a first embodiment of the present invention. It is a figure which shows the external appearance of the image processing apparatus which can apply the encryption processing apparatus which concerns on this invention. FIG. 3 is a cross-sectional view illustrating a configuration of the image forming apparatus illustrated in FIG. 2. FIG. 4 is a diagram illustrating a configuration of a controller unit of the image forming apparatus illustrated in FIG. 3. FIG. 5 is a block diagram illustrating a configuration of a scanner image processing unit illustrated in FIG. 4. FIG. 5 is a block diagram illustrating a configuration of a printer image processing unit illustrated in FIG. 4. FIG. 5 is a block diagram illustrating a configuration of an image compression unit illustrated in FIG. 4. It is a block diagram which shows the structure of the image rotation part shown in FIG. It is a figure explaining the example of an image rotation process by the image rotation part shown in FIG. It is a figure explaining the example of an image rotation process by the image rotation part shown in FIG. FIG. 5 is a block diagram illustrating a configuration of a device I / F unit illustrated in FIG. 4. FIG. 5 is a plan view illustrating a configuration of an operation unit illustrated in FIG. 4. It is a figure which shows an example of the standard screen (normal copy screen) displayed on the liquid crystal operation panel shown in FIG. 1 is a block diagram illustrating an example of a network system to which an image forming apparatus according to the present invention is applied. 3 is a flowchart illustrating an example of a first data processing procedure in the image forming apparatus according to the present invention. 6 is a flowchart illustrating an example of a second data processing procedure in the image forming apparatus according to the present invention. FIG. 5 is a block diagram illustrating a configuration of a removable medium illustrated in FIG. 4. It is a figure explaining the data structure of the recording part shown in FIG. FIG. 6 is a schematic diagram illustrating an example of file combination processing in the image forming apparatus according to the present invention. 12 is a flowchart illustrating an example of a third data processing procedure in the image forming apparatus according to the present invention. It is a figure explaining the memory map of the storage medium which stores the various data processing program which can be read with the image forming apparatus which concerns on this invention.

Explanation of symbols

10 Scanner 20 Printer 30 Controller unit 1201 CPU
1202 RAM
1203 ROM
1204 HDD
1208 Removable media interface 1209 Removable media 1270 Reconfigurable device

Claims (14)

An image forming apparatus including a storage unit that stores electronic data,
Circuit information reading means for reading encrypted circuit formation information for encrypting the electronic data or decryption circuit formation information for decrypting the encrypted data;
Based on the encryption circuit formation information or the decryption circuit formation information read by the circuit information reading means, the electronic data is encrypted with an arbitrary encryption algorithm using a first circuit or an arbitrary decryption algorithm. Circuit forming means for rewriting and forming a second circuit for decoding data;
An image forming apparatus comprising:   The image forming apparatus according to claim 1, wherein the encryption circuit formation information or the decryption circuit formation information is read from a removable medium.   The image forming apparatus according to claim 1, wherein the circuit forming unit includes an invalidating unit configured to invalidate a first circuit or a second circuit to be formed.   The image forming apparatus according to claim 1, wherein the circuit forming unit includes a programmable logic device and a processor that controls circuit formation and invalidation processing in the programmable logic device.   The processor controls the formation and execution of the first or second circuit by collating the encrypted circuit formation information or the decryption circuit formation information stored in the removable medium with the identification information stored in the storage means. The image forming apparatus according to claim 4.   The image forming apparatus according to claim 1, wherein the identification information includes a machine serial ID, an IP address, a user ID, and a password.   The circuit forming means decodes electronic data of different types by the second circuit based on decoding circuit formation information set for a plurality of electronic data of different types stored in the storage means. 2. The image forming apparatus according to claim 1, wherein after the respective electronic data are concatenated, the concatenated single electronic data can be encrypted by the first circuit. A data processing method in an image forming apparatus comprising a storage means for storing electronic data,
Circuit information reading step for reading encrypted circuit formation information for encrypting the electronic data or decryption circuit formation information for decrypting the encrypted data;
Based on the encryption circuit formation information or the decryption circuit formation information read in the circuit information reading step, the electronic data is encrypted with an arbitrary encryption algorithm by the first circuit or an arbitrary decryption algorithm. A circuit forming step of rewriting and forming a second circuit for decrypting data;
A data processing method characterized by comprising:   9. The data processing method according to claim 8, wherein the encryption circuit formation information or the decryption circuit formation information is read from a removable medium.   9. The image forming apparatus according to claim 8, wherein the circuit forming step includes a disabling step of disabling the first circuit or the second circuit to be formed.   The data processing method according to any one of claims 8 to 11, wherein the identification information includes a machine serial ID, an IP address, a user ID, and a password.   The circuit forming step uses the second circuit to decode electronic data of different types based on decoding circuit formation information set for a plurality of electronic data of different types stored in the storage means. 9. The data processing method according to claim 8, wherein after the respective electronic data are concatenated, the concatenated single electronic data can be encrypted by the first circuit.   A computer-readable storage medium storing a program for executing the data processing method according to claim 8.   A program for executing the data processing method according to any one of claims 8 to 12.

Images