JP2007047923A - Security system using rfid function - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve a problem that the security for information inserted in a printed form is not protected, in a state in which the printed form is left in an output tray during printing via a network. <P>SOLUTION: A security system using an RFID comprises an MFP installed in a security area defined in the security system, a gate means, respective client PCs, and an image processor (MFP) having a printing function. If the gate means determines presence of an outsider in the security area, for printing from each of the respective client PCs, a selection means for selecting whether to perform secure print or to print immediately is displayed on the client PC, thus allowing a user to select a printing mode. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention limits the output of data output from an image processing device in a security system depending on the situation in the security area in a security system using a non-contact IC such as RFID for input / output management.

  Conventionally, when printing is performed via a network, the printed paper is left in the output tray, and the security of the information posted on the printed paper is not maintained.

Moreover, as a prior art example, patent document 1 and patent document 2 can be mention | raise | lifted, for example.
JP 2000-15898 JP 2001-341362 A

  If the printed paper is left in the output tray when printing is performed via the network, the security of the information posted on the printed paper cannot be maintained. In this state, when an external person is in the vicinity, there is a possibility that confidential information written on the printed paper can be seen.

  The present invention relates to a security system using RFID, an MFP installed in a security area defined by the security system, gate means connected via a network, each client PC, and an image processing apparatus having a print function (MFP), and if the outsider is determined to be in the security area by the gate means, when printing is performed on each client PC, secure printing is performed or printing is performed immediately. Selection means for selecting whether or not to be displayed on the client PC. If the printed matter cannot be picked up immediately, secure printing is selected from the selection means, and picked up later.

  If there are no outsiders in the security area, the selection unit is not displayed on each client PC, and printing is performed immediately.

  As described above, when there is an outsider of the present invention, it becomes possible to select the secure print without the user being aware, so that the printing paper is left on the output tray. You can prevent this and improve the security of information that you do not want to disclose outside the department.

  The overall system of the present invention is shown in FIG. In this system, a security area 100 is defined that is separated from the outside by a plurality of gates 101 and walls (not shown) that are physical partitions. Within the security area, confidential information is exchanged. Each of the plurality of gates 101 includes a reader 500 that can read information stored in the RFID means 105 possessed by the user 104 and exchanges information without contact. The gates 101 are connected to each other by network means 102, and exchange information with a host computer (such as a personal computer server) connected to the network means 102. In order to improve confidentiality, it is desirable that the above network means be separated from the external network (Internet). However, the network means is separated by information such as a gateway (not shown). Also good.

  When the user 103 passes through the gate means 101 and enters the security area 100, the reader means 500 automatically reads out personal information from the portable RFID 105 without contact.

  In the above system, if the user who entered the security area 101 is a person who cannot disclose confidential information, the fact is notified to other terminals connected to the network means 102.

  FIG. 2 shows in detail the configuration of the part of the MFP that processes the electrical signal of the printer unit that prints on a recording medium such as paper. Reference numeral 201 denotes a CPU for controlling each part of the printer. Reference numeral 202 denotes a RAM for temporarily storing results calculated by the CPU and image data handled by the printer. A ROM 203 stores a program for operating the CPU, font data for generating image data, and the like. Reference numeral 204 denotes a local bus to which the CPU, RAM, and ROM are connected. Reference numeral 205 denotes an I / O bus, which is an internal bus for function expansion. Reference numeral 206 denotes a bridge circuit for connecting the local bus and the I / O bus. A printer unit 207 is a part for forming an image on a recording medium such as paper. There are various types of printer units such as an electrophotographic system and a bubble jet (registered trademark) system. A printer interface unit 208 connects the printer unit to the I / O bus, and can transfer image data stored in the RAM 202 to the printer unit 207 in accordance with instructions from the CPU. It is. Reference numeral 209 denotes a hard disk drive for storing image data spools and programs for the CPU 201 to perform various processes. A network interface controller 211 is used for connecting to a local area network. An image processing unit (hereinafter referred to as IPU) 212 performs image processing such as resolution conversion. Reference numeral 213 denotes a raster image processor. In response to an instruction from the CPU 201, the image data in the page description language transferred from the outside via the network interface circuit 211 is expanded into a bitmap image, and is expanded into the RAM 202. Used to store map data. Reference numeral 214 denotes a video RAM into which display data displayed on an external CRT or LCD panel is written by the CPU. A video interface 215 serves as an interface for displaying display data stored in the VRAM on an external CRT or LCD panel. Reference numeral 216 denotes an extended I / O interface, which is, for example, an interface circuit for allowing the CPU 201 to communicate with a portable device or the like.

  Communication forms include serial communication and wireless communication such as the Bicentro interface.

  FIG. 3 is a configuration diagram of each reader / writer of the RFID unit.

  The reader / writer unit 300 for reading or writing the non-contact IC attached to the manual feed tray unit and the paper discharge unit will be described in detail. The reader / writer unit 300 includes a transmission antenna unit 301 for transmitting radio waves to 500 non-contact IC units, a modulation circuit 3002 for modulating radio waves transmitted from the transmission antennas, and a non-contact IC unit 300 Receiving antenna units 303 and 303 for receiving radio waves transmitted from the demodulator circuit 304 for demodulating the signals received from the receiving antenna unit, the transmitting antenna unit 301, the modulating circuit 302, and the receiving unit 303 An antenna unit, a control unit 305 for controlling the demodulation circuit of the circuit 304, an I / F unit 306 for communicating with the host device, and a transmission antenna unit 301 are connected to supply power to 500 non-contact ICs. It consists of a power supply 307.

  The control unit 305 modulates a radio wave for supplying power and data to be transmitted using a modulation circuit 302 in accordance with an instruction from the outside, and transmits the radio wave from the transmission antenna unit 301 to the outside. Further, a radio signal received from the outside can be received by the receiving antenna unit 303 and demodulated by a demodulating circuit 304, and then converted so that it can be handled as a data signal.

  In FIG. 4, the non-contact IC unit 400 will be described in detail. The non-contact IC unit 400 includes a non-volatile memory 401, an antenna unit for transmitting / receiving a radio wave 402, a resonance capacitor unit 402, a power forming unit rectifying and smoothing a power source 404, and a radio wave 405. Are composed of a post-modulation unit for performing modulation and demodulation, and a control unit for 4006.

  The antenna unit 402 is combined with a resonance capacitor 403 so that a resonance circuit can be configured. When a radio signal for supplying electric power is sent from the outside, it is received by the resonance circuit and supplied to the electric power generation unit shown in the above-mentioned 404, and the electric power generation unit of 404 operates the non-contact IC of 400 Therefore, it becomes possible to supply electric power. The power is supplied to a non-volatile memory 401 and a post-modulation circuit 405. The control unit 4006 is for controlling the non-contact IC unit 400.

  Along with the radio wave for supplying power from the outside, data for reading or writing from the non-contact IC unit is also transmitted and received at the same time, and the signal sent to the non-contact IC unit of 400 is re-modulated to 405 It is demodulated by the circuit and stored in the non-volatile memory 401 via the control unit 4006. The data read from the non-volatile memory 401 by the control unit 4006 is modulated by the post-modulation circuit 405 and can be transmitted as a radio signal from the antenna unit 402.

FIG. 5 is a flowchart showing the control when the user enters. The user holds the RFID over the reader / writer installed when entering the area. (S501) The reader / writer unit determines from the read user ID (S502) whether or not the user is allowed to disclose information (S503). If so, the process ends and the user enters. In the case of a user whose information should not be disclosed, the user ID is stored (S504) and the MFP is notified of this (S505).
FIG. 6 is a flowchart showing the control when the user leaves. The user holds the RFID over the reader / writer installed when leaving the area. (S601) The reader / writer unit determines from the read user ID (S602) whether the user ID is stored in the storage unit. (S603) If the user ID does not remain in the storage unit, the process ends. If the user ID remains in the storage unit, the user ID is deleted from the storage unit, and (S605) ends the process.

  FIG. 7 is a flowchart showing MFP control when a user who cannot disclose information is in the security area. When the MFP receives information that there is a user who cannot publish information in the area (S701), when it receives a print job (S702), it requests to select whether to perform printing immediately (S703). A selection screen for the user is displayed above (S705), prompting the user to select a print mode (S706), while the MFP generates a print image (S704) and prompts the user to select whether to print immediately (S707) When printing immediately, the image is printed because there is no risk of browsing the information by a user who should not disclose the information (S711). If printing is not performed immediately, the print image is stored (S708), and if printing is actually desired, the user is asked to enter an ID and password (S709), and whether authentication is correct is determined (S710). Print only if it is correct.

  Based on the above configuration, embodiments of the present invention will be described below with reference to the drawings.

(First embodiment)
In this embodiment, when a person who cannot disclose confidential information enters the gate, the MFP notifies the MFP to that effect.

In the configuration as shown in FIG. 1, when a user enters the security area 100, the user holds the RFID 105 possessed by the RFID unit provided in the gate 101 (S501). In the gate 101, user information is read from the RFID 105 held over (S502). Next, information indicating whether or not the user 104 may disclose confidential information is acquired from the read user information (S503). Here, as the determination means, information on whether or not this user may directly disclose information is incorporated in the RFID provided by the user, and the gate itself solders, or based on the obtained user information. It is also possible to make an inquiry to other devices via the network means 102. When this user cannot disclose confidential information, the gate 101 notifies the MFP 106 connected to the network via the network means 102 (S505). In this embodiment, the MFP is notified to that effect, but this notification destination exists in the security area, and any device connected to the network means 102 can be used. . At the same time, it is stored in a storage device having the user ID of the user (S504). As described above, if the storage destination exists in the network means 102 and can transmit and receive data, it can be stored in a storage device in the device. Next, in the MFP, when a print job is received from the other host computer 103 existing in the system via the first network means 102 (S702), a user who cannot currently disclose confidential information in the MFP 106 is in the security area. Therefore, a notification prompting selection of whether or not to output the transmitted job is transmitted to the host computer (S703). Next, on the host computer, a screen for selecting whether or not to output immediately is displayed on a display (not shown) provided in the host computer by a function pre-installed in the host computer (S705). When the user selects one of the modes from the displayed selection screen (S708) and the user selects a mode in which output is not performed immediately, the CPU 201 in the MFP 106 uses the interrupt signal to cause the bridge circuit 206, A processing program stored in advance in the HDD 209 is read via the bus 205 (S102). According to the program, an image is formed by the printing method shown in FIG. 2 (S704), but output is not performed, and the data is stored in the HDD 209 via the bus 205. (S708)
Thereafter, the user inputs the user ID and password set for each user from the operation unit of the MFP 102 (S709).

  The MFP checks whether this user ID and password match (S710). If they do not match, it issues a warning and prompts the user to input again. If it is recognized that the user ID and password match, it is stored in the HDD. The printed data is printed and output (S711).

  When the user selects a mode for immediate output, the CPU 201 in the MFP reads a processing program stored in advance in the HDD 209 via the bridge circuit 206 and the I / O bus 205 by the interrupt signal (S102). . According to the program, an image is formed by the printing method shown in FIG. 2 and printed and output (S711).

  Here, when the user leaves the security area 100, the user holds the RFID 105 possessed by the RFID unit provided in the gate 101. In the gate 101, user information is read from the held RFID 105. Next, the user ID is read from the read user information, and when the read user ID matches the previously stored user ID that cannot disclose confidential information, the user ID is deleted from the storage unit. When there is no user ID for which information is not desired to be disclosed in the storage unit, that is, when there is no user whose information is not desired to be disclosed in the security area 100, the MFP 106 is notified accordingly.

It is a figure which shows the structure of the security printing system shown in a present Example. FIG. 2 is a diagram illustrating in detail a configuration of an electric signal processing unit of a printer unit that performs printing on a recording medium in the MFP of FIG. 1. It is a block diagram which shows the structure of a RFID process part in detail. It is a block diagram which shows the structure of a non-contact IC part in detail. It is a flowchart which shows the control in case the user shown in a present Example enters. It is a flowchart which shows the control in case the user shown in a present Example leaves. It is a flowchart which shows the control when the user who cannot disclose the information in a present Example exists in a security area.

Explanation of symbols

100 Security Area 101 Gate 102 Network Means 103 Host Computer 104 User 105 RFID
106 MFP
107 server 201 CPU
202 RAM
203 ROM
204 Local bus 205 I / O bus 206 Bridge circuit 207 Printer unit 208 Printer interface unit 209 Hard disk drive 210 IDE I / F
211 NIC
212 IPU
213 RIP
214 VRAM
215 VIDEO I / F
216 Extend I / OI / F
DESCRIPTION OF SYMBOLS 301 Transmission antenna part 302 Modulation circuit 303 Reception antenna part 304 Demodulation circuit 305 Demodulation circuit control part 306 I / F part 307 Power supply 401 Non-volatile memory 402 Antenna part 403 Resonance capacitor part 404 Power formation part 405 Double modulation circuit 406 Control part

Claims (4)

  Non-contact IC means, a plurality of gate means provided with reader / writer means for reading / writing information stored in the non-contact IC means in a non-contact manner, and even when a print job is received, it can be output as it is. An image processing apparatus having a function to be held inside, a data transmission / reception apparatus capable of transmitting / receiving data to / from the image processing apparatus and the gate means, and the plurality of gate means, the image processing apparatus, and the data transmission / reception apparatus, respectively. In the security system for entrance / exit management composed of network means, the security level stored in the non-contact IC means is read in the security area defined by the security system, and information is stored in the security area. If you recognize a security level that you do not want to publish, Printing system it is possible to hold in the image processing apparatus without directly outputs the drive.   The security area according to claim 1, wherein the range of the area can be freely set separately.   The security system according to claim 1, wherein the security level can be set also in other devices connected to the gate means and network means according to claim 1.   The printing system according to claim 1, wherein when a target whose information is not desired to be disclosed in the security area is recognized, the printing system can select whether to hold the information in the image processing apparatus.

Images