JP2007034617A - Image formation apparatus, method for data regeneration, method for data recording, and program therefor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent leakage of information from an image formation apparatus by providing an image formation apparatus complying with media having copyright protection function. <P>SOLUTION: An image formation apparatus 100 regenerating data stored in a removable media has an access means 31 which accesses a removable media 13 having copyright protection function; a checking means which checks whether the removable media 13 has copyright protection function or not; a data recording means 33 which records data to the removable media having certificate information to which the removable media 13 having copyright protection function refers and the copyright protection function; a control information recording means 34 which records information controlling regeneration of the data; a data regenerating means 35 which regenerates data of the removable media having copyright protection function; and a control information referring means 36 which refers to information controlling regeneration of the data. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an image forming apparatus, a data reproduction (for example, printing on paper, copying) method, a data recording method, and a program, and in particular, an image forming apparatus that reproduces and records data on removable media having security information, The present invention relates to a data reproduction method, a data recording method, and a program.

  Digital cameras that hold image data of captured images as digital data have become widespread, and images captured by digital cameras can be printed by a printer without using a personal computer ( For example, see Patent Document 1.)

  Image data of an image taken with a digital camera is input to the image forming apparatus via a cable (or wireless) or a removable medium. Image data input to the image forming apparatus is stored in accordance with a predetermined format (for example, DPOF (Digital Print Order Format)), and the image forming apparatus prints a specified number of image data specified based on the format. In this way, the image forming apparatus can print an image without using a personal computer.

By the way, as security concerns regarding data, information, and the like increase, so-called secure print technology that requires authentication when image data is printed by an image forming apparatus has been developed (see, for example, Patent Document 2). . In the secure print technology, a large-scale content server is provided, connected to an image forming apparatus via a network, or a large-capacity storage device for holding print data in the image forming apparatus. An authentication server is provided separately from the content server, and secure printing is realized by authenticating the user.
JP 2005-001389 A Japanese Patent Laid-Open No. 2002-243061

  However, as in the image forming apparatus described in Patent Document 1, the security of image data has not been considered in relation to the conventional digital camera. For this reason, if a digital camera or a medium on which image data is recorded is obtained, a third party can print using the image forming apparatus.

  As described above, the image data of a medium such as a removable medium can be duplicated, and even in the conventional image forming apparatus, the number of times that the medium can be printed on the paper medium is not particularly limited, and is once written on the medium. The image data is likely to be at risk of information leakage.

  An object of the present invention is to provide an image forming apparatus, a data reproduction method, and a data recording method corresponding to a copyright protection function compatible medium.

  The copyright protection function is a function for restricting free duplication of data. Memory cards having a copyright protection function include an SD (Secure Digital (registered trademark)) card and a secure MMC (Multi Media Card (registered trademark)). Each card has a unique ID, and when data is transferred from a PC (Personal Computer), etc., encryption is performed based on the ID of the PC and the card. Prevent copying.

  To achieve the above object, the present invention provides an image forming apparatus for reproducing data recorded on a recording medium, the access means for accessing the recording medium having security information related to a copyright protection function, and the access means And confirming means for confirming the presence / absence of a copyright protection function of the recording medium based on the security information accessed.

  In addition, the present invention is characterized by having certificate information that proves that data recorded on a recording medium having a copyright protection function can be handled.

  The present invention also includes a data reproducing means for reproducing data on a recording medium having security information relating to a copyright protection function, and a control information referring means for referring to control information for controlling reproduction of the data from the security information. And the data reproduction means reproduces the data based on the control information referred to by the control information reference means.

  The present invention also includes a data recording means for recording data on a recording medium having security information relating to a copyright protection function, and a control information recording means for recording information for controlling reproduction of the data in the security information. It is characterized by.

  The present invention is also a method for reproducing data recorded on a recording medium, wherein the image forming apparatus accesses the recording medium having security information related to a copyright protection function, and the image forming apparatus includes the security information. And a confirmation step for confirming the presence or absence of a copyright protection function of the recording medium.

  The present invention also relates to a data reproduction method, wherein the image forming apparatus reproduces data recorded on a recording medium having security information relating to a copyright protection function, and control information for controlling reproduction of the data. And a control information reference step for referring to the security information. In the data reproduction step, the data is reproduced based on the control information referred to in the control information reference step.

  The present invention also relates to a data recording method, in which the image generation apparatus records data on a recording medium having security information related to a copyright protection function, and information for controlling reproduction of the data is recorded on the recording medium. And a control information recording step for recording the information.

  The present invention also provides a program for causing a computer to execute the above-described data reproduction method or data recording method.

  According to the present invention, it is possible to provide an image forming apparatus, a data reproduction method, a data recording method, and a program corresponding to a copyright protection function compatible medium.

  The best mode for carrying out the present invention will be described by way of examples with reference to the drawings. FIG. 1 is a block diagram illustrating a basic configuration example of an image forming apparatus according to an embodiment of the present invention. The image forming apparatus 100 in FIG. 1 has image scanning, copying, facsimile, and printing functions. The image forming apparatus 100 may be a facsimile, a printer, or the like instead of an MFP (Multi Function Printer) having a plurality of functions.

  The image forming apparatus 100 according to the present embodiment has a so-called direct print function that directly reads and prints image data from a recording medium such as a removable medium, but authenticates the removable medium 13 based on whether or not the removable medium has authentication information. It is characterized by doing. Therefore, even if a third party obtains the removable medium 13 or the digital camera, it is possible to prevent image data from being printed or stored by an unspecified image forming apparatus, so that the security of the image data is ensured. it can.

  Hereinafter, an example of the configuration and operation of the image forming apparatus 100 in FIG. 1 will be described.

  The image forming apparatus 100 includes a CPU 1, a ROM 2, a RAM 3, a RAM control unit 4, and an NVRAM 21 that are basic parts as processing functions. The image forming apparatus 100 includes a scanner function including a scanner engine 5, a scanner control unit 6, an image reading unit 7, and an image processing unit 8, an NCU (Network Control Unit) 9, and a FAX control unit 10. A FAX function, an external connection function including an external device 11 and a host I / F (interface) control unit 12, a printer function including a printer control unit 18, a printer engine 19, and an image writing unit 20, and removable media 13. Removable media connection function composed of media I / F 14, TRM (Tumper Resistance Module) control unit 24 and media control unit 15, and user interface function composed of operation unit 16 and operation unit I / F control unit 17. When, And a composed signal control function from Goka controller 22 and the decoding control unit 23, each block is connected by a bus.

  A CPU (Central Processing Unit) 1 includes an authentication unit 25. The authentication unit 25 compares the authentication information in the security information storage unit 29 of the removable medium 13 with the authentication information in the authentication information storage unit 26 of the NVRAM 21 and determines whether or not to authenticate the removable medium 13. In addition, the CPU 1 instructs and controls each block such as a printer engine in accordance with a user operation or the like.

  A ROM (Read Only Memory) 2 stores a program executed by the CPU 1 in advance. When the power is turned on, the CPU 1 loads the program and sends a control signal to the printer control unit 18 and the like. There may be a plurality of CPUs 1. The ROM 2 has a certificate information storage unit 28. The certificate information is information used when a removable medium having a copyright protection function determines whether or not to permit reproduction of data of the removable medium, and the image forming apparatus does not have the certificate information. May not be able to handle data of the removable media. The certificate information is device-specific information that takes various forms, but may be a device-specific model code or the like used as authentication information. The image forming apparatus uses the certificate information to confirm that the removable medium has a copyright protection function and is an appropriate device. The removable medium also has information on its own copyright protection function and the image forming apparatus's Using the certificate information, it is confirmed that the image forming apparatus is an appropriate device.

  The RAM control unit 4 receives image data and instructions from the CPU 1 and temporarily stores processing data of each block. The NVRAM 21 is a nonvolatile memory, has an authentication information storage unit 26 in which authentication information for authenticating the removable medium 13 is stored, and information unique to the image forming apparatus (for example, a counter value of the number of copies) Also holds. The authentication information may be stored in the ROM 2 and the certificate information may be stored in the NVRAM 21.

  In the scanner function, the scanner engine 5 is a block that optically scans a set original. The scanner engine 5 applies light to the original and inputs the reflected light to an image sensor such as a CCD to convert it into an electrical signal. The scanner engine 5 may be a flat bed type or a document feed type that sends a document to a fixed light source. The scanner control unit 6 controls the moving speed of the light source and the paper feed, and sends reflected light from the document or the like to the image reading unit 7. The image reading unit 7 performs A / D conversion processing on the converted electrical signal and sends it to the image processing unit 8 as digital data. The image processing unit 8 performs known image processing such as shading processing, scaling processing, edge processing, γ correction, binarization processing, and the like, and sends image data to the RAM control unit 4 via the bus. The RAM control unit 4 temporarily stores image data in the RAM 3.

  In the external connection function for receiving image data for printing from the external device 11, the external device 11 holds image data such as a digital camera, a mobile phone, a personal computer, a PDA (Personal Data Assistant), etc. It is a device. Examples of the types of interfaces controlled by the host I / F control unit 12 include a printer port (IEEE1284), USB (Universal Serial Bus), IEEE1394, and the like. These may be local connection or network connection, and may be wired or wireless. When receiving image data from the external device 11, the host I / F control unit 12 temporarily stores the image data in the RAM 3 via the RAM control unit 4.

  In the removable media connection function, the removable media 13 is a recording medium for recording image data taken by a digital camera. For example, CF (compact flash (registered trademark)), SD card, mini SD card, MMC (multimedia card), xD picture card, memory stick (registered trademark), USB memory, CD, DVD, etc. are examples. However, any recording medium that supplies image data to the image forming apparatus 100 may be used. In addition, the removable medium 13 includes a security information storage unit 29 that stores information related to the copyright protection function and authentication information. The media I / F 14 is means for physically connecting the supported removable media 13 and reads image data recorded on the removable media 13 electrically, magnetically, or optically. The TRM control unit 24 accesses the data 31 and the security information storage unit 29 of the removable medium 13 attached to the image forming apparatus 100, and confirms whether the removable medium 13 has a copyright protection function. Means 32 are provided. The TRM control unit 24 includes a data recording unit 33 that records data on a copyright protection function-compatible removable medium, a control information recording unit 34 that records content control information such as the number of data reproducible times or a data reproducible period, Data reproduction means 35 that reproduces data of the protection function-compatible removable media, and control information reference means 36 that refers to content control information such as the number of times data can be reproduced or a data reproduction possible period. The data reproducing means cannot reproduce the data of the removable medium beyond the number of times that can be reproduced set in the control information referred to by the control information referring means. Thereby, information leakage from the image forming apparatus 100 can be limited. Each of the access means 31, the confirmation means 32, the data recording means 33, the control information recording means 34, the data reproducing means 35, and the control information reference means 36 of the TRM control unit 24 is based on a program stored in the ROM 2. It may be executed by the CPU 1. Moreover, these means may exist separately as hardware or software, and a part or all may be integrated. The media control unit 15 detects that the removable medium 13 is attached to the media I / F 14 and controls access to the image data of the removable medium 13. The media control unit 15 is provided when the removable medium 13 has a copyright protection function, the image forming apparatus 100 has corresponding certificate information, and the removable medium 13 is authenticated by the authentication unit 25. The image forming apparatus 100 may read the image data from the removable medium 13 and may write the image data to the removable medium 13. Further, the media control unit 15 may be set so that the image forming apparatus 100 can access the image data of the removable medium 13 even when some or all of these conditions are not satisfied. When the image data is read from the removable medium 13, the media control unit 15 temporarily stores it in the RAM 3 via the RAM control unit 4.

  In the FAX function, the FAX control unit 10 performs facsimile transmission / reception via the NCU 9. The FAX control unit 10 performs signal processing such as data compression and modulation on the image data and transmits the image data to the other party via the public telephone network. Similarly, the transmitted image data is received, and the two-dimensional information is restored by data expansion or demodulation. When connecting to a public communication network, the NCU sends a telephone number (dial signal) to call a communication partner. At the time of FAX reception, the telephone number of the image forming apparatus 100 is designated from the public communication network, and connection from the other party is permitted. The image data received by the FAX control unit 10 is temporarily stored in the RAM 3 via the RAM control unit 4.

  In the printer function, the image data read by the scanner engine 5, the image data received by the FAX control unit 10, the image data transmitted from the external device 11, or the image data read from the removable medium 13 is read by the printer engine 19. Can be printed. That is, the image forming apparatus 100 is equipped with a direct print function for printing image data recorded on the removable medium 13 without connecting an external device 11. The printer control unit 18 acquires the image data designated via the bus from the RAM 3 and sends it to the image writing unit 20. The image writing unit 20 controls the printer engine 19 according to the method of the printer engine 19 to form an image. The image forming method of the printer engine 19 may be any method such as a laser method, an LED method, a liquid crystal shutter method, and an ink jet method.

  In the signal control function, the encryption control unit 22 and the decryption control unit 23 perform control related to encryption or decryption of image data. The encryption control unit 22 encrypts image data using a user-specific encryption key or a generated encryption key, and manages the encrypted image data, the user, and the encryption key. The decryption control unit 23 decrypts the image data using an encryption key obtained by encrypting the image data and a decryption key paired with the encryption key.

  In the user interface function, the operation unit 16 is a button or touch panel for operation, an indicator for device status display (display such as LED (Light Emitting Diode) or LCD (Liquid Crystal Display)), a display unit such as liquid crystal This is a man-machine interface unit with a device operator such as a speaker. The operation unit I / F control unit 17 monitors the operation of the operation unit 16 by the user, determines the operation content, and sends it to the CPU 1.

  Next, the directory structure of the removable medium 13 according to this embodiment will be described. FIG. 2 shows an example of a directory structure built on the removable medium 13. In the removable medium 13, each directory forms a hierarchical structure from the root directory 51 in a tree shape. Image data is stored in a PDL (Printer Description Language) data storage directory below the root directory 51. In the direct print function, it is preferable to record image data in a predetermined format such as DCF (Design rule for Camera File system) or DPOF. Further, in the case of DCF, it is possible to specify image data to be printed and the number of sheets to be recorded on the removable medium 13.

  In the directory structure of the removable medium 13, a hierarchical structure is formed so that a directory for storing authentication information is branched from the root directory 51. If the root directory 51 is the first hierarchy, there is an MFP information directory 52 in the second hierarchy, and an authentication information directory 53 in the third hierarchy. This corresponds to the security information storage unit 29 in FIG. A file is stored in the fourth hierarchy, and an authentication information file 54 is stored in FIG. The authentication information file may include information related to the copyright protection function and content control information. However, the information regarding the copyright protection function and the content control information may be in another area of the removable medium.

  The authentication information directory 53 is a predetermined directory that is referred to by the image forming apparatus when the removable medium 13 is attached to the media I / F 14. When the image forming apparatus recognizes the removable medium 13, it detects if the MFP information directory 52 exists in the root directory 51 of the removable medium 13.

  When the MFP information directory 52 is detected, if there is an authentication information directory 53 below the MFP information directory 52, it is detected and the authentication information file 54 stored in the authentication information directory 53 is read.

  The PDL data file 56 is stored in a PDL data storage directory 55 that is subordinate to the removable media root directory 51.

  Next, authentication information will be described. As described above, the image forming apparatus is equipped with the NVRAM 21, and the NVRAM 21 includes, as information unique to the image forming apparatus, a serial number and a manufacturing number of the image forming apparatus, which is called a model code, in addition to a counter value of the number of copies. A number unique to the image forming apparatus is stored. Since the model code is set in the production process as a number that does not overlap, it is used to identify each individual image forming apparatus, such as tracking defects in the production process.

  FIG. 3 shows an example of the model code stored in the NVRAM 21. The NVRAM 21 stores a model code, adjustment values 1 to 4 and the like in a predetermined format. “0x1234abcd” is recorded in the model code, and encryption key information is recorded in the adjustment value 2. The adjustment value stores information unique to the image forming apparatus, such as information used for maintenance of the image forming apparatus, such as the number of copies or the operation time, and should be continuously maintained.

  Since the model code is a number unique to the image forming apparatus, if the model code is used as authentication information, the predetermined removable medium 13 can be prevented from being authenticated by other than the image forming apparatus. That is, the authentication unit 25 authenticates the removable medium 13 and reads the image data only when the model code of the image forming apparatus is recorded in the authentication information file 54.

  In order to record the model code on the removable medium 13, the removable medium 13 is attached to the media I / F 14, or the host I / F control unit 12 and the external device 11 are connected, and the user enters the model code from the operation unit 16. Is recorded in the authentication information file 54 of the removable medium 13. When recording the model code, user authentication may be requested.

  FIG. 4 shows an example of the model code recorded in the authentication information file 54 of the removable medium 13. When shooting with a digital camera or a mobile phone, the image data is recorded on the removable medium 13 in which the model code is recorded as shown in FIG. Even if a person other than the user obtains the removable medium 13, the image forming apparatus owned by the person cannot read the image data.

  FIG. 5 is a flowchart showing a flow in which the image forming apparatus confirms a removable medium having a copyright protection function. The image forming apparatus first determines whether or not the removable medium has a copyright protection function (step 1). When the removable medium has a copyright protection function, the image forming apparatus reads information relating to the copyright protection function such as certificate information on the ROM and certificate information in the security information storage unit of the removable medium (step S2). Compare (step S3). If the information matches, the image forming apparatus recognizes that the removable medium is an appropriate device (step S4). Similarly, the removable medium compares and confirms information related to its own copyright protection function and certificate information of the image forming apparatus. When it is confirmed that both the image forming apparatus and the removable medium are mutually appropriate devices, an authentication flow described later is executed. In this case, the authentication flow may be omitted. If it is not possible to confirm that the devices are suitable for each other, the processing is interrupted without reaching the authentication flow. Thereafter, the control information reference unit 36 refers to CCI (Copy Control Information) such as the number of times data that can be played back in the removable medium and the data playback possible period as content control information. The data reproducing means cannot reproduce the removable media data exceeding the number of reproducible times set in the content control information, and the data of the removable media is not passed over the reproducible period set in the content control information. It cannot be played. This makes it possible to limit information leakage from the image forming apparatus. On the other hand, the data recording means 33 records data on the removable medium. At that time or independently, the control information recording unit 35 records content control information such as the number of times the data can be reproduced and the data holding period set by the user via the operation unit 16 on the removable medium while associating the data with the data. To do.

  FIG. 6 is a flowchart showing an authentication flow when the authentication information of the removable medium is a model code. First, the image forming apparatus reads the model code from the NVRAM and stores the value in the variable A (step S11). Next, the image forming apparatus reads the contents of the authentication information file of the removable medium and stores the contents in the variable B (step S12). Thereafter, the image forming apparatus compares the values of variables A and B (step S13). If the variables A and B are equal, the image forming apparatus recognizes that the content of the authentication information file is specific information (step S14). If the variables A and B are not equal, the image forming apparatus recognizes that the content of the authentication information file is not specific information (step S15).

  Next, another form of authentication information will be described. The authentication information may be identification information for identifying the encryption method. When the captured image data is highly confidential, the digital camera or image data management software used for shooting may encrypt the image data. Examples of encryption methods include DES (Data Encryption Standard), 3DES (Triple Data Encryption Standard), AES (Advanced Encryption Standard), and PGP (Pretty Goad encryption). The ROM 2 and the NVRAM 21 have a table in which the encryption method ID is recorded in association with.

  FIG. 7 shows an example of a table in which encryption method IDs are recorded in association with encryption methods. In FIG. 7, 0x00, 0x01, 0x02, and 0x03 are recorded as encryption method IDs in association with encryption methods such as DES, 3DES, AES, and PGP, respectively.

  In order to record the encryption method ID on the removable medium 13, the removable medium 13 is attached to the medium I / F 14, and the user selects an encryption method supported by the user's digital camera or image data management software from the operation unit 16. An operation of recording the encryption method ID in the authentication information file 54 of the removable medium 13 is performed.

  The image forming apparatus may perform encryption of the image data. In this case, in order to encrypt the image data, when the removable media 13 on which the image data is recorded is mounted on the media I / F 14 and the encryption control unit 22 encrypts the image data, the encryption used for the encryption is used. The encryption method ID of the encryption method is recorded in the authentication information file 54 of the removable medium 13.

  FIG. 8 shows an example of the encryption method ID recorded in the authentication information file 54. In FIG. 8, the first byte of the authentication information file is an encryption method ID for identifying the encryption method. The authentication unit 25 does not authenticate the removable medium 13 unless the encryption method ID is recorded in the authentication information file 54. Even if the encryption method ID is recorded, the image data cannot be correctly decrypted unless it is consistent with the encryption method, so that a third party cannot read the image data with the image forming apparatus.

  A decryption key for decrypting the encrypted image data is recorded in the ROM 2 or the NVRAM 21. The encrypted image data recorded on the removable medium 13 is decrypted by the decryption control unit 23.

  Subsequently, another form of the authentication information will be described. The authentication information may be a group ID indicating a predetermined group. The group in this case is a group or the like that means the department to which the user belongs or the affiliation of the removable medium 13 assigned in advance to the removable medium 13.

  FIG. 9 shows an example of the group ID recorded in the NVRAM 21. As in FIG. 3, the NVRAM 21 stores model codes, adjustment values, and the like in a predetermined format. In FIG. 9, the group ID is stored in the adjustment value 2.

  The group ID may be any ID, but in this embodiment, it is 0x0A, 0x0B, 0x0C, 0x0D, or the like. That is, if the group ID recorded in the authentication information file 54 matches the group ID recorded in the NVRAM 21, the image forming apparatus authenticates the removable medium 13.

  FIG. 10 shows an example of the group ID recorded in the authentication information file 54. Different from the model code, a plurality of group IDs may be recorded as shown in FIG. Group IDs 0x0A and 0x0C are recorded in the authentication information file.

  FIG. 11 is a diagram for explaining determination of whether or not the group ID recorded in the authentication information file 54 is recorded in the NVRAM 21. In FIG. 11, the group ID recorded in the authentication information file 54 in the row direction is taken, the group ID of the image forming apparatus is taken in the column direction, and OK is otherwise written as NG for the combination in which the removable medium 13 is authenticated. .

  According to FIG. 11, when “0x0A” is recorded in the authentication information file 54 and “0x0A” is recorded in the NVRAM 24 of the image forming apparatus, the removable medium 13 is authenticated. Similarly, when “0x0C” is recorded in the authentication information file 54 and “0x0C” is recorded in the NVRAM 21 of the image forming apparatus, the removable medium 13 is authenticated.

  Therefore, when a plurality of group IDs are recorded in the authentication information file 54, the removable medium 13 can be authenticated by a plurality of image forming apparatuses. The user has a printing authority according to the group ID assigned to the removable medium 13, and security for image data can be easily ensured.

  Using the configuration described above, the flow in which the image forming apparatus authenticates the removable medium 13 will be described based on the flowchart of FIG. When the user attaches the removable media 13 to the media I / F 14 of the image forming apparatus, the detection switch of the media I / F 14 is turned on and the media control unit 15 detects that the removable media 13 is installed (in step S21). YES). If the removable medium 13 is not loaded (NO in step S21), the image forming apparatus repeats the determination in step S11. Note that the external device 11 and the image forming apparatus may be connected by wire or wirelessly.

  Next, the media control unit 15 determines whether or not the authentication information file 54 is stored in a predetermined directory from the root directory 51 of the removable media 13 (step S22). If the authentication information file 54 does not exist (NO in step S22), the media control unit 15 displays an error message on the operation unit 16 and notifies the user that the removable media 13 is not authenticated (step S25). The content of the error may be displayed by turning on the LED of the operation unit 20.

  When the authentication information file 54 exists (YES in step S22), the authentication unit 25 uses the authentication information recorded in the authentication information file 54 and the authentication information recorded in the NVRAM 21 or the ROM 2 as described above. The removable medium 13 is authenticated based on whether or not there is consistency, and it is determined whether or not to read image data (step S23).

That is, the authentication means 25
If the authentication information is a model code, based on whether the model code in the authentication information file 54 and the model code in the NVRAM 21 match
If the authentication information is an encryption method ID, based on whether the encryption method ID of the authentication information file 54 matches the encryption method ID of the NVRAM 21 or ROM 2, or
If the authentication information is a group ID, based on whether the group ID of the authentication information file 54 and the group ID of the NVRAM 21 match,
The removable media 13 is authenticated, and it is determined whether or not to read image data.

  If the authentication information is not consistent (NO in step S23), the authentication unit 25 displays an error message on the operation unit 16 and notifies the user that the removable medium 13 is not authenticated (step S25). The content of the error may be displayed by turning on the LED of the operation unit 16.

  If the authentication information is consistent (YES in step S23), the image forming apparatus performs a predetermined process for reading the image data (S24). That is, the authentication unit 25 permits the media control unit 15 to read image data because the removable medium 13 has been authenticated. The media control unit 15 reads out image data for which a reading instruction has been issued from the PDL data storage directory 55 or the like and sends it to the image writing unit 20. The printer control unit 18 prints image data by the printer engine 19. In FIG. 12, the case where the image data is read from the removable medium 13 has been described. However, when the image data is stored, the removable medium 13 may be authenticated.

  As described above, the image forming apparatus according to the present embodiment can print image data of a digital camera while ensuring security by authenticating the removable medium 13. For authentication, authentication information such as a model code may be recorded on the removable medium 13, so security can be secured at low cost.

  FIG. 13 shows a configuration example of a system including a printer driver according to an embodiment of the present invention. When a user reads data from a removable medium, the user starts an application 103 such as a word processor that operates on an OS (Operating System) 102 of a host PC (Personal Computer) 101, and the specific information recorded on the removable medium from the application 103. The activation system 104 is instructed to open the data. Upon receiving the instruction, the activation system 104 calls the printer driver 105, and the called printer driver 105 uses the file system port control 108 to access the removable medium 111 via the removable drive 110 to read specific data. When the removable medium 111 corresponding to the copyright protection function is attached to the removable drive 110, the driver TRM control unit 114 accesses the security information storage unit of the removable medium, and whether the removable medium 111 has the copyright protection function. Confirm whether or not. Further, the driver TRM control unit 114 refers to CCI (Copy Control Information) such as the number of reproducible times of data set in the removable medium and the data reproducible period as content control information. The image forming apparatus cannot reproduce the corresponding data of the removable medium exceeding the number of reproducible times set in the content control information, and the removable medium exceeds the reproducible period set in the content control information. It is also impossible to play back the data. This makes it possible to limit information leakage from the image forming apparatus.

  When a user records data on a removable medium, the user activates an application 103 such as a word processor that operates on the OS 102 of the host PC 101 to create a document or open a file such as a saved document. Thereafter, the user instructs the application 103 to start the printing process by instructing the application 103 to start the printing process. Upon receiving the print processing instruction, the application 103 calls the printer driver 105 by the activation system 104 under the management of the OS 102 on the host PC 101, and the called printer driver 105 stores the data created or opened by the application 103. Based on this, data (hereinafter referred to as “PDL data”) expressed in a PDL format or a general-purpose image format (JPEG (Joint Photographic Experts Group)) or the like is created. Note that the PDL data may be encrypted by the encryption control 113. At this time, the user can instruct printing conditions to the printer driver 105 from the operation unit 112 of the user interface 106 (hereinafter referred to as “UI”), and the user is created by the method described above via the communication path 109. It is selected whether to transmit the PDL data to the printer or to record the PDL data on the removable medium 111 via the removable drive 110 using the file system port control 108. When the removable medium 110 corresponding to the copyright protection function is attached to the removable drive 110, the driver TRM control unit 114 records PDL data on the removable medium. The driver TRM control unit 114 can also record CCI (Copy Control Information) such as the number of reproducible times of PDL data and a data holding period set by the user via the UI 106 as content control information on the removable medium. Note that when recording PDL data or content control information on the removable medium 111 corresponding to the copyright protection function, the certificate information of the image forming apparatus 100 can be used as an encryption key to encrypt the data or information.

  When the PDL data is encrypted and stored in the removable medium, the printer driver stores the data encrypted by the encryption control unit 13 in the PDL data storage directory 55 of the removable medium, and information on the encryption is stored in the removable medium. It stores in the corresponding authentication information file 54 in the authentication information directory (see FIG. 2). As a result, when the PDL data is read from the removable medium later, the image forming apparatus can decrypt the PDL data by the decryption control 115 from the PDL data encryption method described in the authentication information file 54. As described above, the image forming apparatus realizes secure printing using a physical medium such as a removable medium without requiring an external server device such as a content server or a user account management server as in the conventional secure print system. It is possible to prevent information leakage.

  When the removable medium on which the PDL data is recorded by the above method is attached to the image forming apparatus, the image forming apparatus authenticates the removable medium by the method of FIG.

  FIG. 14 is a flowchart showing a flow when the image forming apparatus automatically prints PDL data. First, the image forming apparatus determines whether or not the PDL data storage directory 55 exists below the removable media root directory 51 (step S31). If it does not exist, the process ends. If it exists, the image forming apparatus determines whether the PDL data file 56 exists in the PDL data storage directory 55 (step S32). If it does not exist, the process ends. If it exists, the image forming apparatus prints the PDL data (step S33), and thereafter ends the processing. As described above, the image forming apparatus can automatically print the PDL data on the removable medium.

  FIG. 15 is a flowchart showing a flow when the user selects data and executes printing. When there are a plurality of PDL data on the removable medium, the image forming apparatus first acquires a list of PDL data files 56 from the removable medium (step S41). Next, the image forming apparatus displays the file name of the acquired PDL data file 56 on the operation unit 16 (step S42). Thereby, the user can select a desired file. The image forming apparatus waits until the user determines a file to be printed (step S43). After the user determines a file to be printed, the data of the file is printed (step S44), and the process ends. In this way, the user can select data to be printed and start printing.

  FIG. 16 shows an example of PDL data in which print permission device information is embedded. As shown in the figure, as an environment variable of PDL data, the printer driver can describe a model code of a device capable of printing predetermined data in the PDL data. The image forming apparatus that has read the PDL data described in this way compares the model code recorded in the image forming apparatus with the model code described in the print permission device information embedded in the PDL data. Authenticate and print only if they match. As described above, devices that can reproduce the data can be restricted based on the information embedded in the PLD data, and information leakage can be prevented.

  FIG. 17 is a diagram showing a configuration example of a ROM of the image forming apparatus according to the present invention. The figure shows the existence of a program section 161 for storing programs and data for controlling the image forming apparatus and a certificate section 162 for recording certificate information. Thus, the program section for storing the program and data for controlling the image forming apparatus and the certificate section for recording the certificate are separated.

  FIG. 18 shows a configuration example of a removable medium compatible with the copyright protection function. The removable medium has an IF (interface) 201 with the outside, and has its own CPU 202, ROM 204, and RAM 205 in the removable medium. The ROM 204 has a security information storage unit 208. They are used to control access to the flash memory 203 that records data. The removable medium also includes an encryption engine 206 and an encryption key 207 as functions for protecting data on the flash memory 203, and the function as a computer including the CPU 202, ROM 204, and RAM 205 allows the flash memory 203 to be protected. It is possible to perform encryption at the time of writing information to the disk, decryption at the time of reading information from the flash memory 203, and limit the number of copies and the copyable period.

  The image forming apparatus according to the present invention can access the copyright protection function and related information existing in the attached removable medium when the attached removable medium is a media corresponding to the copyright protection function.

  In addition, the image forming apparatus according to the present invention includes certificate information necessary for decrypting encrypted image data on a copyright protection function-compatible removable medium in the image forming apparatus. The converted image data can be decoded and printed.

  Also, the image forming apparatus according to the present invention can control the number of output image data on paper or the like by reading the content control information on the copyright protection function-compatible removable medium.

  Furthermore, the image forming apparatus according to the present invention can access the content control information on the removable medium compatible with the copyright protection function, and can be recorded when the image data is recorded on the removable medium or independently. Information about the upper limit of the number of times data can be reproduced can also be recorded.

1 is a block diagram illustrating a basic configuration example of an image forming apparatus. It is an example of the directory structure constructed | assembled on the removable medium. It is an example of the model code stored in NVRAM. It is an example of a model code recorded in an authentication information file of a removable medium. FIG. 10 is a flowchart illustrating a flow in which the image forming apparatus confirms a removable medium having a copyright protection function. FIG. 10 is a flowchart illustrating a flow in which the image forming apparatus confirms the contents of an authentication information file when authentication information is a model code. It is an example of the table which recorded encryption method ID matched with the encryption method. It is an example of the encryption method ID recorded on the authentication information file. It is an example of group ID recorded on NVRAM. It is an example of group ID recorded on the authentication information file. It is a figure for demonstrating determination whether the group ID recorded on the authentication information file is recorded on NVRAM. FIG. 10 is a flowchart illustrating a flow in which the image forming apparatus authenticates a removable medium. 1 is a diagram illustrating a configuration example of a system having a TRM compatible printer driver. FIG. 10 is a flowchart illustrating a flow when the image forming apparatus automatically prints PDL data. It is a flowchart figure which shows the flow in case a user selects data and performs printing. It is an example of PDL data in which print permission device information is embedded. It is a figure which shows the structural example of ROM of the image forming apparatus according to this invention. It is a figure which shows the structural example of a media corresponding to a copyright protection function.

Explanation of symbols

DESCRIPTION OF SYMBOLS 13 Removable medium 24 TRM control part 28 Certificate information storage part 29 Security information storage part 31 Access means 32 Confirmation means 33 Data recording means 34 Control information recording means 35 Data reproduction means 36 Control information reference means 114 Driver TRM control part

Claims (8)

An image forming apparatus for reproducing data recorded on a recording medium,
Access means for accessing the recording medium having security information relating to a copyright protection function;
Confirmation means for confirming the presence or absence of a copyright protection function of the recording medium based on the security information accessed by the access means;
An image forming apparatus comprising:   The image forming apparatus according to claim 1, further comprising certificate information that certifies that data recorded on a recording medium having a copyright protection function can be handled. Data reproduction means for reproducing data on a recording medium having security information related to a copyright protection function;
Control information reference means for referring to control information for controlling reproduction of the data from the security information,
The image forming apparatus according to claim 2, wherein the data reproduction unit reproduces the data based on the control information referred to by the control information reference unit. Data recording means for recording data on a recording medium having security information relating to a copyright protection function;
Control information recording means for recording information for controlling reproduction of the data in the security information;
The image forming apparatus according to claim 3, further comprising: A data reproduction method for data recorded on a recording medium,
An access step for the image forming apparatus to access the recording medium having security information related to a copyright protection function;
A confirmation step in which the image forming apparatus confirms the presence or absence of a copyright protection function of the recording medium based on the security information;
A data reproduction method characterized by comprising: A data reproduction step of reproducing data recorded on a recording medium having security information relating to a copyright protection function;
A control information reference step for referring to control information for controlling reproduction of the data from the security information,
In the data reproduction step, the data is reproduced based on the control information referred to in the control information reference step.
A data reproduction method characterized by the above. A data recording step in which the image generating apparatus records data on a recording medium having security information related to a copyright protection function;
A control information recording step for recording information for controlling reproduction of the data in the security information;
A data recording method comprising:   The program which makes a computer perform the method as described in any one of Claims 5 thru | or 7.

Images