JP2007235376A - Image processing apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image processing apparatus capable of decrypting image data even when the image processing apparatus differs from an image processing apparatus for encrypting the image data, wherein the image data are encrypted by an encryption key unique to the different apparatus. <P>SOLUTION: The image processing apparatus can select three kinds of input means for generating a decryption key. An operation key unique to the apparatus is operated and the decryption key is directly inputted to the apparatus. When the operation key of its own apparatus cannot generate the decryption key, a key code corresponding to the decryption key is directly inputted to the apparatus to produce the decryption key. Otherwise, the apparatus accesses the other image processing apparatus encrypting the image data and displays part of an operation panel of the other image processing apparatus. The displayed operation key is operated to input the decryption key. The image processing apparatus uses the decryption key entered by any input means to decrypt the encrypted image data. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an image processing apparatus that decrypts encrypted image data and executes predetermined output processing on the image data.

In the image processing apparatus, in order to prevent leakage of image data, the image data is encrypted and stored in a storage device or transmitted. A specific encryption key is used for encryption so that it cannot be easily decrypted. For example, as described in Patent Document 1, the encryption key is generated based on information related to the device itself. Further, as described in Patent Document 2, the encryption key is generated based on time information when image data is input.
Japanese Patent Laid-Open No. 2005-6177 JP 2005-31950 A

  The encrypted image data is transmitted to another image processing apparatus or an information processing apparatus such as a personal computer. Since the image data is encrypted with the device-specific encryption key, the confidentiality of the information is increased.

  By the way, when this image data is decrypted, a device-specific decryption key corresponding to the encryption key is required. Therefore, in view of the above, the present invention provides an image processing apparatus capable of generating a device-specific decryption key for image data encrypted with a device-specific encryption key and decrypting the image data. Objective.

  The present invention is an image processing apparatus for decrypting encrypted image data, and includes a decrypting means for decrypting image data with a decryption key based on input means unique to the apparatus.

  When the image data is encrypted with the device-specific encryption key, it can be decrypted with the device-specific decryption key. A decryption key corresponding to the encryption key is generated by operating the input means unique to the apparatus. That is, the decryption means generates a decryption key according to a signal generated by the input means when operated.

  When the decryption means cannot generate the decryption key by operating the input means, the decryption means decrypts the image data with the decryption key based on the second input means different from the input means. If there is no device-specific input means, a decryption key cannot be generated. Therefore, a decryption key can be generated by providing other input means.

  The second input means is means for directly inputting a key code. The decryption means generates a decryption key based on the input key code. The decryption key is created by converting a signal generated according to the operation content into a key code. Therefore, a decryption key corresponding to the encryption key can be generated by inputting a key code for the decryption key.

  The second input unit is a unit that forms a virtual input unit by communicating with another image processing apparatus. The decryption means generates a decryption key based on the operation from the formed input means.

  The virtual input unit is a unit that displays a part of an operation panel of another image processing apparatus in which image data is encrypted, and forms an input unit in the other image processing apparatus. By communicating with another image processing apparatus, information regarding the input unit unique to the apparatus is acquired from the other image processing apparatus. By displaying a part of the operation panel of the other image processing apparatus based on this information, the same input means as that of the other image processing apparatus can be formed in the own apparatus. Therefore, by operating this virtual input means, it is possible to generate a decryption key corresponding to a device-specific encryption key under the same environment as other image processing devices.

  As described above, it has a plurality of input means for inputting the decryption key. The decrypting means generates a decryption key corresponding to the encryption key based on the selected input means in order to decrypt the image data encrypted with the device-specific encryption key. Even if it is not possible to generate a device-specific decryption key corresponding to the encryption key by one input means, it is possible to generate a decryption key corresponding to the encryption key using another input means. .

  Then, output processing means for immediately outputting the decoded image data is provided. If the decrypted image data exists as it is, there is a risk of information leakage. Therefore, by immediately performing the output process, it is possible to avoid leaving dangerous image data, thereby improving security.

  According to the present invention, image data can be decrypted not only by the same model, but also by other models and external devices such as an information processing apparatus, so that a wide range of encrypted image data can be handled. In particular, decryption of image data encrypted with a device-specific encryption key requires a device-specific decryption key and cannot be easily decrypted. Therefore, the security of the image data is improved and leakage of confidential information can be prevented.

  An image processing apparatus of this embodiment is shown in FIG. The image processing apparatus is a digital multi-function peripheral having a copy mode, a printer mode, a scanner mode, and a facsimile mode, and includes an image reading unit 1 that reads a document and inputs image data, an operation unit 2 that receives user input, An image forming unit 3 that prints input image data, a hard disk device 4 that stores image data, a communication unit 5 that performs data communication with an external device, and a FAX modem 7 that communicates with a facsimile device 6 A management unit 8 that stores control information and setting information for the entire apparatus, and a device control unit 9 that includes a CPU that controls the entire apparatus are provided.

  The image reading unit 1 functions as an image input unit that inputs an image, and includes an image sensor such as a CCD 10 and a document detection sensor 11 that detects a document set on a document table or an automatic document feeder (ADF). Image data of an image read by the CCD 10 is output to the image forming unit 3.

  The operation unit 2 includes an operation panel, and includes an input unit 12 including various input keys and a display unit 13 such as a liquid crystal display. Operation of the entire apparatus and input of various settings are performed, and the input contents and the operation status of the entire apparatus are displayed. The display unit 13 is a touch panel and also functions as an input unit.

  The image forming unit 3 includes a local memory 20 that stores input image data, a printing unit 21 that includes a laser scanning unit, a paper feeding unit 22 that includes a manual feed tray and a cassette tray, and a paper discharge unit that includes a paper discharge tray. A paper unit 23, an image processing unit 24, and an encryption / decryption unit 25 are included.

  As the local memory 20, a readable / writable semiconductor memory such as an SDRAM or a flash memory is used. The local memory 20 is divided into an area for storing input image data and an area for storing image data for output. Instead of dividing and using one local memory 20, two local memories 20 may be used for input and output, respectively.

  The input image data is stored in the local memory 20. The local memory 20 stores image data by overwriting old image data with new image data. The image data is subjected to image processing such as compression, expansion, and processing by the image processing unit 24 and is stored in the local memory 20. The image processed image data is output to the printing unit 21, the hard disk device 4, or the device control unit 9. The printing unit 21 prints an image on a recording sheet supplied from the paper feeding unit 22 based on the image data stored in the local memory 20.

  The communication unit 5 is connected to a router, a switching hub, and the like via a LAN cable, and is connected to a network formed by the information processing apparatus 30 such as a personal computer or a server. The network is connected to the Internet via a communication line such as a telephone line network or an optical fiber. The communication unit 5 transmits / receives data to / from the information processing apparatus 30 in the network, and transmits / receives data and electronic mail to / from the external information processing apparatus 30 and the facsimile apparatus 31 via the Internet. The FAX modem 7 is connected to the telephone line network via a telephone line, and performs facsimile communication with the external facsimile apparatus 6.

  When there is an input from the operation unit 2 or a data input from an external device, the device control unit 9 controls each unit based on information stored in the management unit 8 and processes the input image data. That is, any one of a copy mode, a printer mode, a scanner mode, and a facsimile mode is executed on the input image data, and the input image data is output in a desired form.

  The hard disk device 4 temporarily stores image data. The encryption / decryption unit 25 performs encryption processing or decryption processing on the image data. When image data is stored in the hard disk device 4, the image data is encrypted by the encryption / decryption unit 25. When the encrypted image data is read from the hard disk device 4, the image data is decrypted.

  Further, the hard disk device 4 stores management information regarding data processing as data other than image data. The management information includes filing management information, transmission destination management information, and history management information. The filing management information is a list of files in which input image data is stored. The transmission destination management information is a list of transmission destinations in facsimile communication. The history management information is a list of executed processing contents.

  An erasing unit 32 for erasing image data of the hard disk device 4 is provided. The image data to be erased is data stored in the processing work area. The device control unit 9 controls the operation of the erasing unit 32 after processing and outputting the image data. The erasure means 32 overwrites random data or meaningless data, or erases the data to make the stored image data unreadable so that the original image cannot be reproduced. To do. Note that the erasing unit 32 may also invalidate the image data by erasing the old image data by overwriting or erasing the image data in the local memory 20. The management information stored in the hard disk device 4 is not deleted unless there is a command from the device control unit 9.

  Next, the operation when each mode is executed will be described. First, in the copy mode, image data of a document read by the image reading unit 1 is output as a copy from the image forming unit 3. Specifically, the image of the original set at the reading position is read by the CCD 10. The image data output from the CCD 10 is subjected to image processing on the local memory 20 by the image processing unit 24 and completed as an output image. Once transferred from the local memory 20 to the hard disk device 4, it is stored. When there are a plurality of documents, the reading and storing operations are repeated.

  Thereafter, based on the processing contents instructed from the operation unit 2, the image data stored in the hard disk device 4 is sequentially read out at an appropriate timing and sent to the local memory 20. The image data is transferred from the local memory 20 to the printing unit 21 in accordance with the writing timing to the printing unit 21, and the image is printed on the sheet material supplied from the paper feeding unit 22. 23 is discharged.

  Similarly, when printing a plurality of read image data, the image data is stored in the hard disk device 4 in units of pages as output images, and sent from the hard disk device 4 to the local memory 20 in accordance with the output mode. The image data in the local memory 20 is repeated for the number of output sheets, and transferred to the printing unit 21 in accordance with the writing timing to the printing unit 21.

  In the printer mode, the image data output from the information processing apparatus 30 is output. That is, the image data from the information processing apparatus 30 is received by the communication unit 5. The device control unit 9 sends the input image data to the local memory 20, develops it as image data to be output for each page, and temporarily stores it in the hard disk device 4. Then, the image data is sent from the hard disk device 4 to the local memory 20 and transferred to the printing unit 21 in the same manner as in the copy mode, and the image is printed on the sheet material.

  In the scanner mode, the image data of the document read by the image reading unit 1 is communicated to an arbitrary information processing apparatus 30 through a network. That is, the image data output from the CCD 10 is processed on the local memory 20 to be completed as an output image, and is temporarily stored in the hard disk device 4. Then, when transmitting, the image data is sent from the hard disk device 4 to the local memory 20, and the device control unit 9 establishes communication with the transmission destination in the network designated via the operation unit 2, and the communication unit 5. To send the image data to the desired destination. Similarly, the image data is transmitted to the external information processing apparatus 30 and the facsimile apparatus 31 by the communication unit 5 from the network through the Internet. Further, the device control unit 9 transmits image data from the FAX modem 7 to the facsimile apparatus 6 through a telephone line by the same operation in the facsimile mode.

  When the processing of the image input from the image input unit is completed as described above, the erasing unit 32 erases the image data stored in the hard disk device 4.

  Then, when there is an encryption instruction, the device control unit 9 controls the encryption / decryption unit 25 to encrypt the image data subjected to the image processing with the encryption key. This encryption processing is performed by a known algorithm such as AES (Advanced Encryption Standard). The encrypted image data is stored in the hard disk device 4 or the memory 20.

  When processing in the copy mode or the print mode, the device control unit 9 controls the encryption / decryption unit 25 to decrypt the stored image data with the decryption key. The decrypted image data is printed on a sheet material as an image and output. At the time of processing in the facsimile mode or the scanner mode, the device control unit 9 transmits the encrypted image data to the designated destination. Thereafter, when the predetermined processing is completed, the image data is erased.

  By encrypting the image data in this manner, even if the image processing apparatus is illegally accessed and the stored image data is stolen, the image data cannot be decrypted, so that information leakage can be prevented. Further, even if eavesdropping is performed during data transmission, the image data cannot be similarly decrypted, and information leakage can be prevented.

  In order to perform the encryption process and the decryption process, the device control unit 9 generates an encryption key based on the input unit unique to the apparatus and encrypts the image data, and the input unit specific to the apparatus And a decryption means for generating a decryption key based on the above and decrypting the encrypted image data. When the encryption unit sends the encryption key to the encryption / decryption unit 25, the encryption / decryption unit 25 executes the encryption process. Further, when the decryption means sends the decryption key to the encryption / decryption unit 25, the encryption / decryption unit 25 executes the decryption process.

  As shown in FIG. 2, the operation panel is provided with an input unit 12 and a touch panel type display unit 13, and the operation unit 11 has a large number of operation keys 14. An operation key 14 is provided on the screen for the operation menu displayed on the display unit 13. In addition, since the operation menu has a hierarchical structure, an operation key 14 exists for each operation menu.

  The image processing apparatus has different functions depending on the model. Therefore, as shown in FIG. 2, the operation panel differs depending on the model. Each operation panel has a different type and number of operation keys 14. The upper model has more operation keys 14 than the lower model.

  These operation keys 14 are unique keys that are unique to each device and have unique operation contents. That is, the operation key 14 becomes an input means. A unique signal is generated by the operation of each operation key 14. When the user operates the operation key 14, the device control unit 9 receives an output signal from the operation key 14 and recognizes which operation key 14 has been operated. The encryption unit of the device control unit 9 generates an encryption key based on the input operation content. That is, when the user operates the operation unit 2, an encryption key is created according to the operation content. Similarly, the decryption means also generates a decryption key based on the input operation content.

  In order to generate the encryption key and the decryption key based on the operation of the operation key 14 by the user, the encryption unit and the decryption unit convert the output signal from the operated operation key 14 into a corresponding key code. And means for creating an encryption key and a decryption key from the key code.

  The device control unit 9 converts it into a key code based on the output signal from the operation key 14. For example, as illustrated in FIG. 3, the user operates a specific operation key 14 for starting input, and then operates an arbitrary operation key 14. Finally, the specific operation key 14 is operated to complete the input. The specific operation key 14 outputs a signal indicating the start and end of key input. A key code corresponding to the operation key 14 is set, and a table showing a correspondence relationship with the key code as shown in FIG. 4 is stored in advance in the nonvolatile memory. Code conversion is performed with reference to this table.

  The device control unit 9 arranges the converted key codes in the order of the operated operation keys 14 and creates a key code string. Then, in order to improve security, the array is converted according to a predetermined rule, and an encryption key is created based on the converted array. In this way, the encryption key is generated based on the operation content input by the user. Therefore, since an encryption key is created using a large number of operation keys 14, a device-specific encryption key can be generated. The decryption key is created in the same manner, and a device-specific decryption key can be generated. The generated encryption key and decryption key have a one-to-one correspondence. That is, image data encrypted with the encryption key can be decrypted only with the corresponding decryption key.

  By the way, the operation key 14 is unique to the apparatus, and the operation key 14 differs depending on the model. The operation key 14 present in the higher model may not exist in the lower model. Further, in an external device such as an information processing apparatus, the operation key 14 itself of the image processing apparatus does not exist. Therefore, the decryption means of the device control unit 9 generates a decryption key based on the second input means. The second input means uses the operation key 14, but the decryption key is created by an operation different from the input operation by the operation key 14 which is the input means.

  As an operation by the second input means, the key code is directly input by the operation key 14. A decryption key is created based on the input key code. Further, as another operation by the second input means, it communicates with another image processing device, obtains the screen of the operation panel from the other image processing device, and puts a part of the operation panel on the display unit 13. indicate. Thereby, a virtual operation key 14 is formed. Even the virtual operation key 14 is formed on the display unit 13 of the touch panel. Therefore, when the operation key 14 on the display unit 13 is operated, a signal is output in the same manner as the normal operation key 14. The decrypting means generates an encryption key based on the operation content input through the operation key 14. Therefore, in the decoding process, the above three types of input means can be selected. A decryption key is generated using the selected one type of input means.

  Here, the operation of the decoding process will be described with reference to FIG. When encrypted image data is input from another image processing apparatus or an external device, or the encrypted image data is stored in the hard disk device 4, and the device control unit 9 reads out this image data. The decryption process is executed. First, when the “user setting” key is operated on the operation panel shown in FIG. 6, a setting screen shown in FIG. 7 is displayed. When the “decoding process” key is operated, an input means selection screen is displayed. When “decrypt alone” is selected, a decryption key is created based on the operation content of the operation key 14. When “Web access” is selected, a decryption key is created based on the operation content of the virtual operation key 14. When “key code input” is selected, a decryption key is created based on the input key code.

  When the user selects “decode alone”, an input guidance screen is displayed as shown in FIG. When a specific operation key 14 is operated, an input request screen is displayed as shown in FIG. By operating the operation key 14 on the operation panel, key input is performed as shown in FIG. The decryption means of the device control unit 9 generates a decryption key based on the input operation content.

  Then, the device control unit 9 determines whether the input decryption key is a decryption key corresponding to the encryption key. In the encryption process and the decryption process, when the common key method is adopted, the encryption key and the decryption key are the same key. In this case, it is determined whether the input decryption key is the same as the encryption key. When a public key method in which the decryption key and the encryption key are different is adopted, it is determined whether the input decryption key is a decryption key determined corresponding to the encryption key. Here, when the device control unit 9 itself generates an encryption key, the encryption key is stored in a memory or the like. When another image processing apparatus generates the encryption key, a decryption key corresponding to the encryption key is registered and stored in advance in a memory or the like. Then, the input decryption key and the registered decryption key are collated and confirmed.

  When it is confirmed that the input decryption key is a decryption key corresponding to the encryption key, the device control unit 9 sends the decryption key to the encryption / decryption unit 25. The encryption / decryption unit 25 decrypts the image data based on the decryption key.

  When the image data is decoded, the device control unit 9 immediately performs output processing according to the designated mode. Thereafter, the image data is erased by the erasing means 32. Therefore, important image data is not left in an unencrypted state, and leakage of confidential information can be prevented.

  When it cannot be confirmed, it is requested to input the decryption key again. In this case, it may be encrypted by a different model. Therefore, the input operation by the second input means is selected. When “key code input” is selected, an input screen is displayed as shown in FIG. The user directly inputs a key code for the decryption key. The device control unit 9 similarly creates a decryption key from the input key code and confirms the decryption key. Therefore, even if the model is different, a decryption key corresponding to the encryption key can be generated.

  When “Web access” is selected, an access destination input screen is displayed as shown in FIG. When the “input key” is operated, the character key is displayed. When an address such as a machine name or an IP address of another image processing apparatus (a partner machine) that is an access destination is input, the device control unit 9 communicates with the partner machine through the communication unit 5. When the partner device can be accessed and the link is established, the device control unit 9 acquires information from the partner device. As shown in FIG. 12, a screen related to the information of the counterpart device is displayed. When the “decryption management” key is operated, a part of the operation panel of the partner machine is displayed as shown in FIG. Thereby, the operation key 14 which does not exist in the own apparatus is virtually formed. When the virtual operation key 14 is operated, the device control unit 9 recognizes the same operation content as when the operation key 14 is operated on the counterpart machine. And the apparatus control part 9 produces | generates a decryption key based on the input operation content, and confirms a decryption key. Therefore, the decryption key corresponding to the encryption key can be generated by forming the operation key 14 that does not exist in the own apparatus.

  When encrypted image data is transmitted to an external device such as an information processing apparatus, the external device stores the encrypted image data. However, the operation key 14 of the image processing apparatus does not exist in the external device. In this case, the external device uses the browser to access the encrypted image processing apparatus. Then, as shown in FIG. 14, the browser displays the menu screen of the image processing apparatus on the display. When “Decryption Management” on the screen is operated, a key code input screen is displayed. When the key code is input, a decryption key is created. With this decryption key, the encrypted image data is decrypted. Therefore, even an external device different from the image processing apparatus can generate a decryption key and decrypt encrypted image data. That is, an external device that can communicate with the image processing apparatus is one of the image processing apparatuses according to the present invention.

  In addition, this invention is not limited to the said embodiment, Of course, many corrections and changes can be added to the said embodiment within the scope of the present invention. The image processing apparatus may be a multifunction machine having a copy mode and a facsimile mode, or may be a dedicated machine having only a single mode, such as a copy machine or a facsimile machine.

  The image processing apparatus is provided with a detection element that detects a mechanical change of the apparatus. For example, a switch for detecting opening / closing of a door, a switch for detecting opening / closing of a document cover, a switch for detecting presence / absence of a document, a switch for detecting presence / absence of a cassette tray, a sensor for detecting a document size, and a sheet material A sensor for detecting the size. When any operation is performed on the image processing apparatus and a change in the state of a door, a cover, or the like is detected, these switches and sensors output signals to the device control unit.

  When the user performs an operation such as opening / closing a door to generate the encryption key and the decryption key, the detection element generates a signal. The device control unit converts to a key code by the output signal from the detection element, and creates an encryption key or a decryption key as described above. Note that the encryption key or the decryption key may be generated by combining the operation of the operation key and the operation on the apparatus. Thus, the encryption key can be generated also based on the operation content performed on the apparatus. Therefore, more complicated encryption key and decryption key can be generated, and security is improved.

  In the decoding process, three types of input means can be selected. This selection may be made automatically by the device control unit. When the image data is encrypted, the device control unit creates encryption information related to the encrypted device and adds it to the image data. The device control unit that performs decryption refers to the encryption information, determines whether it can be handled by the operation key of its own device, and selects an appropriate input unit. Therefore, the user only has to operate the instructed input means.

The figure which shows schematic structure of the image processing apparatus of this invention Diagram showing different operation panels for each model The figure which shows the example of input of the operation key for encryption key generation The figure which shows the table which shows the correspondence of an operation key and a key code. Flow chart of decryption process The figure which shows a part of operation panel when starting a decoding process The figure which shows the selection screen of the input means for decoding key generation The figure which shows the guidance screen of decryption key input Figure showing a part of the operation panel on which the decryption key input request screen is displayed Figure showing the key code input request screen Figure showing the access destination input screen for web access The figure which shows the display screen of the information regarding the other party The figure which shows the screen which displayed a part of the other party's operation panel The figure which shows the menu screen of the image processing apparatus displayed in the information processing apparatus

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Image reading part 2 Operation part 3 Image formation part 4 Hard disk apparatus 5 Communication part 9 Device control part 12 Input part 13 Display part 14 Operation key 20 Local memory 21 Printing part 25 Encryption / decryption part 30 Information processing apparatus

Claims (8)

An image processing apparatus for decrypting encrypted image data, comprising: decrypting means for decrypting image data with a decryption key based on input means unique to the apparatus. The image processing apparatus according to claim 1, wherein the decryption unit generates a decryption key in accordance with a signal generated by the input unit when operated. The decryption means decrypts the image data with a decryption key based on a second input means different from the input means when the decryption key cannot be generated by operating the input means. 2. The image processing apparatus according to 2. 4. The image processing apparatus according to claim 3, wherein the second input means is means for directly inputting a key code, and the decryption means generates a decryption key based on the inputted key code. The second input means is a means for forming a virtual input means by communicating with another image processing apparatus, and the decryption means generates a decryption key based on an operation from the formed input means. The image processing apparatus according to claim 3, wherein: 6. The image processing apparatus according to claim 5, wherein the second input means displays a part of an operation panel of the image processing apparatus in which the image data is encrypted, and serves as a virtual input means. An image processing device for decrypting image data encrypted with a device-specific encryption key, having a plurality of input means for inputting the decryption key, and encrypting based on the selected input means An image processing apparatus comprising: a decoding unit that generates a decoding key corresponding to a key and decodes image data. 8. The image processing apparatus according to claim 1, further comprising an output processing unit that immediately outputs the decoded image data.

Images