JP2007072700A - Data output system, data output method and data output program with high-security - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data output system, a data output method and a data output program to provide high security when a client computer is spatially separated from an output device. <P>SOLUTION: The vein image of a user is registered with a computer beforehand. For outputting data, an output instruction is input into the client computer, a vein image is input to a user authentication device provided near an output device, the user authentication device transmits user vein image data and an authentication request to the client computer, the client computer determines whether or not previously registered vein image data matches the received user vein image data, and transmits output data to the output device if they match to allow the output device output to an output medium, thus avoiding that a third party seizes or steals a glance at the output medium with the output data recorded thereon. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a data output system, a data output method, and a data output program for outputting output data using various output devices such as a printer at a location remote from a client computer for inputting an output instruction, and in particular, vein data. Data output system, data output method, and data output that eliminate the time difference between output instruction and actual output by avoiding information leakage such as stealing or snooping by a third party by performing authentication according to Regarding the program.

  When outputting output data from a client computer using various output devices such as a printer, conventionally, when a data output instruction is issued from the client computer, the user moves from the location of the client computer to the location of the output device. To obtain an output medium.

Patent Document 1 discloses the following invention as an attempt to increase the security of such output media.
The client computer that gives the output instruction divides the output data into data A and data A ′, issues a management number A and a management number A ′, and sends the data A and the management number A to the output device. The user records the data A ′ and the management number A ′ on a portable medium. The user brings the medium into the output device, and after the personal authentication apparatus performs personal authentication, the output device combines the data A having the management number A corresponding to the management number A ′ and the data A ′ and outputs the data. .
JP 2004-363803 A

  However, in the conventional method, there is a time difference between the output instruction and the acquisition of the output medium. During this time difference, a malicious third party can take the output medium or steal the output medium. There was a problem of being able to do it.

As a specific example, a conventional data output method will be described with reference to FIG.
When the user 10 issues an output instruction 300 to the client computer 1, if an output device such as the printer 5, the magnetic tape device 6, or the CD-ROM device 7 is installed in a spatially separated place, the user Before 10 arrives at these output devices, the output data 1c arrives at the printer 5 through the network line 330 (reference numeral 322), and output begins.

  As described above, according to the related art, when there is a time until the user 10 arrives at the printer 5 after the output is finished, the third party 20 takes or steals the output medium. As a result, there is a problem that information leakage 302 is possible.

  In addition, the method disclosed in Patent Document 1 requires carrying the divided data, and there is a risk of loss, and it takes time to write and read output data on a portable medium. There was a malfunction.

  SUMMARY OF THE INVENTION In view of such circumstances, an object of the present invention is to provide a data output system, a data output method, and a data output program that avoid information leakage such as take-out of an output medium or snooping during a time difference that occurs between an output instruction and actual output Is to provide.

In order to achieve the above object, the invention according to claim 1 is a data output system for outputting output data using an output device connected to a client computer via a communication network.
A client computer for storing output data; a first vein reader connected to the client computer for reading user veins as registered vein data; and a user authentication device connected to the client computer via the communication network; A second vein reader connected to the user authentication device and reading the user's veins as user vein data; and an output device for outputting output data of the client computer via the communication network;
When the registered vein data of the user is stored in the client computer and an output instruction to the output device is input,
The user authentication device transmits the user vein data of the user read using the second vein reader to the client computer;
The client computer that has received the user vein data compares the stored registered vein data with the user vein data, and sends the output data to the designated output device when the two vein data match. A data output system that outputs output data from the output device.

The invention according to claim 2 is a data output program of a data output system for outputting output data using an output device connected to a client computer via a communication network,
The data output system is connected to a client computer that stores output data, a first vein reader that is connected to the client computer and reads a user's vein as registered vein data, and the client computer via the communication network. A user authentication device, a second vein reader connected to the user authentication device and reading the user's veins as user vein data, and an output device for outputting the output data of the client computer via the communication network Prepared,
When the registered vein data of the user is stored in the client computer and an output instruction to the output device is input,
A function in which the user authentication device transmits user vein data of a user read using a second vein reader to a client computer;
The client computer that has received the user vein data compares the stored registered vein data with the user vein data, and sends the output data to the designated output device when the two vein data match. And a function for outputting output data from the output device.

The invention according to claim 3 is a data output method of a data output system for outputting output data using an output device connected to a client computer via a communication network,
The data output system is connected to a client computer that stores output data, a first vein reader that is connected to the client computer and reads a user's vein as registered vein data, and the client computer via the communication network. A user authentication device, a second vein reader connected to the user authentication device and reading the user's veins as user vein data, and an output device for outputting the output data of the client computer via the communication network Prepared,
When the registered vein data of the user is stored in the client computer and an output instruction to the output device is input,
The user authentication device transmits the user vein data of the user read using the second vein reader to the client computer;
The client computer that has received the user vein data compares the stored registered vein data with the user vein data, and sends the output data to the designated output device when the two vein data match. And outputting the output data from the output device.

  According to the highly secure data output system, data output method, and data output program of the present invention, the data output system is connected to the client computer for storing the output data, and the vein of the user is registered. A first vein reader that reads as vein data; a user authentication device that connects to a client computer via the communication network; and a second device that is connected to the user authentication device and reads user veins as user vein data. A vein reader and an output device that outputs the output data of the client computer via the communication network, the registered vein data of the user is stored in the client computer, and an output instruction is input to the output device When The user authentication device transmits the user vein data of the user read by using the second vein reader to the client computer, and the client computer that has received the user vein data stores the stored registration. The vein data is compared with the user vein data, and when both vein data match, the output data is transmitted to the designated output device and the output data is output from the output device. Since data is not output before it is moved to the output device after an output instruction is issued to the client computer, information is leaked when the output medium is stolen or seen by a third party. Output data remains on the network until output when authentication fails DOO without further registered vein data user authentication apparatus never comes into external client computer for it will not be sent to, an excellent effect that confidentiality of the registered vein data is maintained.

  Hereinafter, exemplary embodiments of a highly secure data output system, data output method, and data output program of the present invention will be described with reference to the accompanying drawings. Needless to say, the embodiment is not limited thereto.

<Figure Description>
FIG. 1 is a diagram schematically showing a system for carrying out the present invention.
FIG. 3 is a flowchart showing the processing procedure of the vein data registration unit in the client computer.
FIG. 4 is a flowchart showing the processing procedure of the authentication processing unit in the client computer.
FIG. 5 is a flowchart showing the processing procedure of the authentication request to the client computer and the transmission of vein data in the user authentication apparatus.
FIG. 6 is a flowchart showing a procedure for outputting output data to the output medium.
FIG. 7 is a diagram schematically showing data exchange between elements constituting the system of the present invention.

<Explanation of terms>
The output medium is a medium for recording data output from various output devices. For example, the output medium is paper, and the magnetic tape device is magnetic tape.

  The vein refers to, for example, the shape of a vein that runs in the hand. You can use fingers, ears, or legs, not just hands.

  The authentication processing unit is a program that determines whether or not the vein data of the user 10 registered in advance in the client computer 1 matches the vein data transmitted from the user authentication device 3.

  The registered vein data refers to veins that are read by the first vein reader 2a connected to the client computer and registered in advance in the client computer.

  The user vein data refers to a vein read by the second vein reader 3a connected to the user authentication device 3 after inputting an output instruction to the client computer. This user vein data is transmitted to the client computer for comparison with the registered vein data.

<Description of configuration>
A system in which the present invention is implemented will be described with reference to FIG. The system in which the present invention is implemented includes a client computer 1, a network line 330, a user authentication device 3, and various output devices.

  The client computer 1 includes an authentication processing unit 1a that performs personal authentication, registered vein data 1b that is vein data registered in advance in the client computer, and output data 1c that is output from an output device. It connects with the 1st vein reader 2a which has a function to do.

  The user authentication device 3 includes a second vein reader 3a having a function of inputting a vein.

  Examples of the output device include a printer 5, a magnetic tape device 6, and a CD-ROM device 7. However, all of these may not be provided, or an output device other than this may be used.

<Description of operation>
An outline of operations of the data output system, data output method, and data output program with high security of the present invention will be described with reference to FIGS.

  First, in this data output system, a user 10 registers his / her vein in advance by the vein reader 2a of the client computer 1.

Next, as shown in FIG. 1 and FIG. 7, in this system, when the user 10 gives an output instruction (reference numeral 300) to the client computer 1, the user authentication apparatus 3 in which the client computer 1 is in the vicinity of the output device. The data output instruction (reference numeral 301) is performed. In response to this output instruction, the user authentication device 3 enters an input standby state for user vein data.

  Next, in the present system, when the user 10 moves to the user authentication device 3 near the output device and inputs the own vein (reference numeral 320) using the vein reader 3a of the user authentication device 3, The user authentication device 3 operates to send an authentication request and user vein data (reference numeral 321) to the client computer 1 through the network line 330.

  In this system, when the client computer receives the authentication request and the user vein data, the authentication processing unit 1a is activated to perform the authentication process (reference numeral 705). This authentication process (symbol 705) is performed by comparing the registered vein data of the user 10 registered in advance with the user vein data transmitted from the user authentication device 3, and the two data match. It is assumed that the authentication is successful.

  Next, when the authentication is successful, the client computer 1 transmits the output data to the output device designated by the user 10 (reference numeral 322), and starts outputting to the output medium (reference numeral 907). With this configuration, this system can prevent output data from remaining on the network when authentication fails.

Finally, the system ends the process when the user receives the output medium from the output device (reference numeral 323).
By operating as described above, in this system, the client computer 1 authenticates that the user 10 arrives at the output device and the user vein data input by the user authentication device 3 matches the registered vein data registered in advance. Then, by starting the output, it becomes impossible for a third party to take or steal the output medium, and the user 10 can obtain the output medium safely.

<Description of program>
A processing procedure of a program for registering vein data in the client computer will be described with reference to FIG.
In this program, when the client computer 1 connects the first vein reader 2a and starts communication [step 361], the vein reader 2a reads the vein of the user 10 [step 362], and the vein is set in the client computer. 1 is registered [Step 363].

The processing procedure of the authentication processing unit 1a in the client computer 1 will be described with reference to FIG.
When the client computer 1 receives an output instruction from the user 10, the program transmits a data output instruction to the user authentication apparatus 3 [Step 401]. Human vein data is received [step 402].

  Next, this program determines whether or not the user vein data of the user 10 received from the user authentication device 3 matches the registered vein data of the user 10 [Step 403]. If both vein data match, the output data is transmitted to the output device [step 405], and if both vein data do not match, a warning message is displayed on the client computer 1 [step 406] and the process is terminated.

The processing procedure of the authentication request to the client computer 1 and the user vein data transmission program in the user authentication apparatus 3 will be described with reference to FIG.
In this program, when the user authentication device 3 receives a data output instruction from the client computer 1 [Step 501], the user authentication device 3 waits for the vein input of the user 10 [Step 502], and the user authentication device 3 inputs the vein of the user 10 by the vein reader 3a [Step 503], the client computer 1 transmits the authentication request and the user vein data input in Step 503 [Step 504].

The output procedure of the output data program to the output medium will be described with reference to FIG.
In this program, the user authentication device 3 instructs the client computer 1 to output the output data [Step 601], and the user authentication device 3 inputs the vein of the user 10 by the vein reader 3a [Step 602]. When the computer 1 is successfully authenticated, the output device outputs the output data to the output medium [Step 603], so that the user 10 can obtain the output medium immediately after the output.

  An output system, a data output method, and a data output program according to the present invention, after a client computer receives an output instruction, transmits user vein data input by a user authentication device in the vicinity of the output device to the client computer. Since the output device outputs the output data only after the computer authenticates, it has the effect that the user can obtain it before the third party steals or steals the output medium, and the authentication has failed. In some cases, the client computer does not send output data to the output device, so there is no output data on the network, and the registered vein data is not sent to the user authentication device. Output data and registered vein data Effect so that Yuriti is maintained.

It is the figure which represented typically the system for implementing this invention. It is the figure which represented the data output method of the prior art example typically. It is a flowchart showing the processing procedure of the vein data registration part in a client computer. It is a flowchart showing the process sequence of the authentication process part in a client computer. It is a flowchart showing a processing procedure of an authentication request to a client computer and transmission of vein data in a user authentication device. It is a flowchart showing the output procedure of the output data to an output medium. It is the figure which represented typically transfer of the data between the elements which comprise the system of this invention.

Explanation of symbols

1: client computer, 3: user authentication device, 5: printer, 6: magnetic tape device, 7: CD-ROM device, 10: user, 330: network line, 323: output medium

Claims (3)

A data output system for outputting output data using an output device connected to a client computer via a communication network,
A client computer for storing output data; a first vein reader connected to the client computer for reading user veins as registered vein data; and a user authentication device connected to the client computer via the communication network; A second vein reader connected to the user authentication device and reading the user's veins as user vein data; and an output device for outputting output data of the client computer via the communication network;
When the registered vein data of the user is stored in the client computer and an output instruction to the output device is input,
The user authentication device transmits the user vein data of the user read using the second vein reader to the client computer;
The client computer that has received the user vein data compares the stored registered vein data with the user vein data, and sends the output data to the designated output device when the two vein data match. And outputting output data from the output device. A data output program of a data output system for outputting output data using an output device connected to a client computer via a communication network,
The data output system is connected to a client computer that stores output data, a first vein reader that is connected to the client computer and reads a user's vein as registered vein data, and the client computer via the communication network. A user authentication device, a second vein reader connected to the user authentication device and reading the user's veins as user vein data, and an output device for outputting the output data of the client computer via the communication network Prepared,
When the registered vein data of the user is stored in the client computer and an output instruction to the output device is input,
In the data output system,
A function in which the user authentication device transmits user vein data of a user read using a second vein reader to a client computer;
The client computer that has received the user vein data compares the stored registered vein data with the user vein data, and sends the output data to the designated output device when the two vein data match. And a function of outputting output data from the output device. A client computer for storing output data; a first vein reader connected to the client computer for reading user veins as registered vein data; and a user authentication device connected to the client computer via the communication network; A communication network provided with a second vein reader connected to the user authentication apparatus and reading a user's vein as user vein data and an output device for outputting output data of a client computer via the communication network A data output method of a data output system for outputting output data using an output device connected to a client computer via
When the registered vein data of the user is stored in the client computer and an output instruction to the output device is input,
The user authentication device transmits the user vein data of the user read using the second vein reader to the client computer;
The client computer that has received the user vein data compares the stored registered vein data with the user vein data, and sends the output data to the designated output device when the two vein data match. And outputting output data from the output device.

Images