JP2007259354A - Access management device, encryption and decoding device, storage medium, access management method and access management program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an access management device, an encryption and decoding device, a storage medium, an access management method and an access management program for easily securing the confidentiality of information. <P>SOLUTION: An R/W 13-1 in an electronic document preparation device 10-1 reads user ID stored in an external memory 50-1 and encrypted ID obtained by encrypting the user ID by using a public key, and acquires decoded ID obtained by decoding the encrypted ID from a document server 30 by using a secret key, and when the decoded ID is matched with the user ID, access to the document server 30 is permitted, and after access is permitted, new encrypted ID is acquired by encrypting the user ID by using a new cryptographic key, and the encrypted ID stored in the external memory 50-1 is updated to new encrypted ID. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an access management apparatus that manages access to information, an access management method, an access management program, an encryption and decryption apparatus that is communicably connected to the access management apparatus, and stores information to be accessed Related to the storage medium.

FIG. 21 is a diagram illustrating a hardware configuration of a conventional printing system using an electronic document. In FIG. 21, an electronic document creation apparatus 510 creates an electronic document, issues a command, and prints the electronic document or electronic document as an electronic document processing apparatus to a document database (DB) 530 via a network. The data converted into a format suitable for the apparatus 520 is transmitted, and the document DB 530 stores it. Further, the printing apparatus 520 that is an electronic document processing apparatus performs user authentication by the user authentication apparatus 522 in response to the operation of the operation panel 521 by the user. Print. The management of electronic documents requires confidentiality. In response to such a requirement, there are techniques described in Patent Document 1 and Patent Document 2.
JP 2003-158603 A JP 2004-185352 A

  However, the techniques described in Patent Document 1 and Patent Document 2 described above have the following problems. That is, in the technique described in Patent Document 1, the user saves the electronic document in the document server after creating the electronic document, transmits access right information by e-mail, user authentication and document selection on the operation panel of the printing apparatus It is necessary to do the operation. Although the confidentiality of the electronic document is maintained until printing, the operation is complicated and an excessive load is generated on the user. Since some electronic documents are edited by one or more users, the need for these operations when changes occur in the electronic document impairs the user's willingness to use and decreases the frequency of use. .

  On the other hand, in the technique described in Patent Document 2, since an electronic document is stored in an individual host device on the user side or a storage medium thereof, a complicated operation as in Patent Document 1 is not necessary for storing the electronic document. Absent. However, since electronic documents are stored in a distributed manner, a user needs to specify a host device on the user side that stores a desired electronic document in an operation on a printing apparatus that is an electronic document processing apparatus. Furthermore, since a plurality of host devices may be used depending on the user, it is necessary to store which electronic document is stored in which host device, which is complicated.

  The present invention has been made in view of the above problems, and an object thereof is to provide an access management apparatus, an access management method, and an access management program capable of easily ensuring the confidentiality of information.

  The access management apparatus of the present invention comprises: a first reading unit that reads user identification information stored in a storage medium; encrypted identification information obtained by encrypting the identification information with an encryption key; and the encrypted identification information. A first acquisition means for acquiring decryption identification information decrypted by a decryption key; an authorization means for permitting access to an information source when the decryption identification information and the identification information match; and A second obtaining unit for obtaining new encrypted identification information obtained by encrypting the identification information with a new encryption key different from the encryption key after being permitted; and the encrypted identification stored in a storage medium. And a first updating means for updating information to the new encrypted identification information.

  According to this configuration, when the decrypted identification information obtained by decrypting the encrypted identification information obtained by encrypting the identification information read from the storage medium matches the identification information stored in the storage medium, the user Assuming that authentication was successful, access to the information source is permitted. Furthermore, every time user authentication is successful, new encrypted information obtained by encrypting the identification information with a new encryption key is stored in the storage medium. Therefore, in subsequent user authentication, decryption obtained by decrypting the encrypted identification information before update read from the storage medium other than the regular storage medium with a new decryption key corresponding to the new encryption key Since the identification information does not match the identification information and access to the information source is not permitted, the confidentiality of the information is ensured.

  In the access management apparatus of the present invention, the encrypted identification information is obtained by encrypting the identification information with a public key in a public key cryptosystem, and the decryption identification information is the encrypted identification information. It may be decrypted with a private key corresponding to the public key, and the new encryption identification information may be encrypted with a new public key different from the public key.

  The access management apparatus according to the present invention includes a monitoring unit that monitors processing for an electronic document, and processing for the electronic document is detected by the monitoring unit, and access to the information source that holds the electronic document is permitted. In this case, the storage medium may include writing means for writing history information representing a history of processing for the electronic document.

  According to this configuration, when a process is performed on an electronic document, only history information corresponding to the process is written in the storage medium, and the electronic document is not written. Therefore, confidentiality of the electronic document is ensured. In addition, it is possible to specify an electronic document based on history information stored in the storage medium, perform various processing on the electronic document, and easily recognize the state of the electronic document. Here, the processing for the electronic document includes new creation, storage, movement, copy, deletion, access right change, document name change, browsing, printing, and the like of the electronic document.

  The access management apparatus of the present invention may further include a second reading unit that reads from the information source the electronic document specified by the history information stored in the storage medium.

  According to this configuration, it is possible to specify an electronic document from history information and read the electronic document.

  The access management apparatus according to the present invention may further include a matching unit that matches the history information stored in the storage medium with reference history information stored in the information source.

  With this configuration, the latest history information is stored in the storage medium.

  In the access management apparatus of the present invention, the history information may include at least one of information on a location of the electronic document and identification information of the access management apparatus that has performed the processing.

  With this configuration, it is possible to grasp the electronic document and various types of information related to processing on the electronic document in more detail.

  The present invention is an encryption and decryption device that is communicably connected to the above-described access management device, the holding means that holds the identification information and the encryption key and the decryption key in association with each other, and the first Receiving means for receiving the identification information and the encrypted identification information read by the reading means, and a decryption key held in the holding means in association with the received identification information. A decoding means for decoding the encrypted identification information; and a first transmission means for transmitting the decoded identification information obtained by the decoding to the access management apparatus.

  The encryption / decryption device according to the present invention includes a second update unit that updates an encryption key and a decryption key held in the holding unit when access is permitted by the permission unit, and the update An encryption unit that encrypts the identification information using the new encryption key, and a second transmission unit that transmits the new encryption identification information obtained by the encryption to the access management apparatus. It may be.

  The access management method of the present invention includes a reading step of reading user identification information stored in a storage medium and encrypted identification information obtained by encrypting the identification information with an encryption key, and the encrypted identification information using a decryption key. A first obtaining step for obtaining decrypted decryption identification information, and a permission step for permitting access to information stored in the storage medium when the decryption identification information and the identification information match. A second acquisition step of acquiring new encrypted identification information obtained by encrypting the identification information with a new encryption key different from the encryption key after the access is permitted; and An update step of updating encrypted identification information to the new encrypted identification information.

The present invention also provides an access management program executed in the access management apparatus, which reads out user identification information stored in a storage medium and encrypted identification information obtained by encrypting the identification information with an encryption key. Stored in the storage medium when the step, a first acquisition step of acquiring decryption identification information obtained by decrypting the encryption identification information with a decryption key, and the decryption identification information and the identification information match. A permission step of permitting access to the information, and a second encryption identification information obtained by encrypting the identification information with a new encryption key different from the encryption key after the access is permitted. The acquisition step of
An update step of updating the encrypted identification information stored in the storage medium with the new encrypted identification information.

  According to the present invention, since user authentication based on encrypted identification information read from a storage medium other than a regular storage medium is not successful, access to the information source is not permitted and the confidentiality of the information is ensured. .

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing a hardware configuration of an electronic document utilization system to which an access management apparatus according to the present invention is applied. The electronic document utilization system shown in FIG. 1 includes electronic document creation apparatuses 10-1, 10-2, and 10-3 (hereinafter referred to as electronic document creation apparatus 10 as appropriate), a printing apparatus 20 having an operation panel 22, and electronic Document server 30 that backs up documents and document history information, projector 40 connected to electronic document creation apparatus 10-3, and an external storage medium that can be randomly accessed, such as an IC card or flash memory owned by the user The memory 50-1, 50-2, 50-3, 50-4 (hereinafter referred to as the external memory 50 as appropriate).

  Among these, the electronic document creation apparatuses 10-1, 10-2, and 10-3, the printing apparatus 20, and the document server 30 are connected to each other via a network so that they can communicate with each other. Also, the external memory 50-1 is in the electronic document creation apparatus 10-1, the external memory 50-2 is in the electronic document creation apparatus 10-2, the external memory 50-3 is in the electronic document creation apparatus 10-3, and the external memory 50. -4 is coupled to the printing apparatus 20 so that they can communicate with each other.

  FIG. 2 is a diagram for explaining a first example of information exchange in the electronic document utilization system. 2, the electronic document creation device 10-1 creates an electronic document α, the electronic document creation device 10-2 edits the electronic document α, the printing device 20 prints the electronic document α, and the electronic document creation device 10 3 is an example in which the electronic document α is presented using the projector 40.

  2, the electronic document creation device 10-1 is used by the user A, the electronic document creation device 10-2 is used by the user B, the printing device 20 is used by the user C, and the electronic document creation device 10-3 is used by the user D. Is done. The electronic document creation apparatuses 10-1, 10-2, 10-3, and the printing apparatus 20 enter a logon state when authentication (user authentication) based on a user ID input by a user operation is successful. In the following, it is assumed that all of the users A to D have access rights to the electronic document α.

  The event processing unit 12-1 in the electronic document creation apparatus 10-1 monitors event processing for the electronic document α in the own apparatus, the electronic document creation apparatuses 10-2 and 10-2, and the printing apparatus 20. Here, the event process is various processes performed on an electronic document such as new creation, storage, movement, copy, deletion, access right change, document name change, browsing, and printing. The event processing unit 12-1 includes an event processing unit (not shown) in the electronic document creation apparatuses 10-2 and 10-3, an event processing unit 12-4 in the printing apparatus 20, and the document server 30. Exchanges electronic document α and event processing information for the electronic document α. Further, the event processing unit 12-1 represents the history of event processing performed on the electronic document α with the external memory 50-1 disposed in the R / W 13-1, and can identify the electronic document. Document history information and event processing information that are important information are exchanged. The storage unit 14 stores electronic document α and event processing information for the electronic document α.

  The event processing unit 12-4 in the printing apparatus 20 monitors event processing for the electronic document α in the self apparatus. Here, the event processing is various processing such as copying, printing, scanning, and electronic document downloading. The event processing unit 12-4 exchanges document history information and event processing information corresponding to the electronic document α with the external memory 50-4 disposed in the reader / writer (R / W) 13-4. To do.

  FIG. 3 is a diagram for explaining a second example of information exchange in the electronic document utilization system. FIG. 3 shows a case where the electronic document creation apparatus 10-1 that created the electronic document α is turned off. In this case, the electronic document creation apparatuses 10-2 and 10-3 and the printing apparatus 20 communicate with the electronic document α and the document server 30 that backs up the document history information corresponding to the electronic document α. And exchanges event processing information for the electronic document α.

  Hereinafter, the first operation of the document creation device 10-1, the printing device 20, and the document server 30 will be described. FIG. 4 is an example of document history information in the first operation. As shown in FIG. 4, the document history information is given a number for identification, and is composed of information on document event, date and time, and related event. The document event corresponds to event processing information generated during event processing for creating a corresponding electronic document.

  FIG. 5 is a diagram illustrating an example of a document event. As shown in FIG. 5, the document name, the document storage destination, the backup document storage destination, the creator ID, the creation device ID, the device owner, the device manager, the location information, the access right, and the execution event are configured. . In the example of FIG. 2, the document name is the electronic document α, the document storage destination is the electronic document creation apparatus 10-1, the backup document storage destination is the document server 30, the creator ID is the user ID of user A, and the creation apparatus ID is the electronic document. The ID and position information of the creation device 10-1 are the latitude and longitude of the installation location of the electronic document creation device 10-1, and the access rights are users A, B, C, and D.

  FIG. 6 is an example of the access right. In FIG. 6, the access right can be set in units of users, groups, positions, and networks. Types of access rights include reading, writing, and changing access rights.

  Again, referring back to FIG. The date and time in FIG. 4 indicates the date and time when the document event was created. The related event corresponds to event processing information generated when event processing is performed on the electronic document after the corresponding electronic document is created. This related event is composed of the ID of the device that performed the corresponding event process and the event name.

  FIG. 7 is a flowchart showing a first operation of the electronic document creation apparatus 10-1. The electronic document creation apparatus 10-1 performs user authentication input by a user operation (S101).

  FIG. 8 is a diagram showing the exchange of information between the reader / writer (R / W) 13-1, the document server 30, and the external memory 50-1 in the electronic document creation apparatus 10-1 in user authentication. FIG. 9 is a flowchart showing the operation of the R / W 13-1 in user authentication, and FIG. 10 is a flowchart showing the operation of the document server 30 in user authentication.

  A user ID area is provided in the readable area 51 of the external memory 50, and a user ID is stored in the user ID area. The readable / writable area 51 of the external memory 50 is provided with an encryption ID area together with a document history information area. The encryption ID area includes a user ID (encryption) encrypted with a public key in the public key cryptosystem. Stored).

  As shown in FIG. 9, the R / W 13-1 in the electronic document creation apparatus 10 or the printing apparatus 20 inquires of the external memory 50-1 about the ID (S151), and reads out the user ID and the encryption ID ( S152). Next, the R / W 13-1 transmits the read user ID and encryption ID to the document server 30 (S153).

  The document server 30 holds a list (key association list) in which accessible user IDs are associated with public keys and private keys used for encryption and decryption of the user IDs. The contents of this key association list can be set by the user. As illustrated in FIG. 10, when the document server 30 receives the user ID and the encryption ID from the R / W 13-1 (S <b> 171), the document server 30 displays the secret key associated with the received user ID in the key association list. The encryption ID is decrypted with the specified private key (S172). Further, the document server 30 transmits the decryption ID obtained by the decryption to the R / W 13-1 (S173).

  Again, returning to FIG. When the R / W 13-1 receives the decryption ID from the document server 30 (S154), the R / W 13-1 compares the decryption ID with the user ID read from the external memory 50-1 in S152, and determines whether or not they match. Is determined (S155). When the decryption ID and the user ID match, the user authentication is successful, and the user ID is normal, in other words, the external memory 50-1 is normal. In this case, the R / W 13-1 enables access to the event processing information in the document history information held in the document server 30 (S156). On the other hand, if the decryption ID and the user ID do not match, access to the event processing information in the document history information held in the document server 30 is disabled (S157).

  After the access to the event processing information is permitted, the R / W 13-1 requests the document server 30 to re-encrypt (S156).

  As illustrated in FIG. 10, when the document server 30 receives the re-encryption request from the R / W 13-1 (S <b> 174), the disclosure associated with the user ID received in S <b> 171 in the key association list. The combination of the key and the secret key is updated to a new one (S175). Further, the document server 30 encrypts the user ID received in S171 with the new public key (S176), and transmits the new encrypted ID obtained by the encryption to the R / W 13-1 (S177).

  Again, returning to FIG. When receiving the new encryption ID from the document server 30 (S159), the R / W 13-1 updates the encryption ID stored in the readable / writable area 51 of the external memory 50 to the received new encryption ID ( S160).

  Again, returning to FIG. When the user authentication in S101 succeeds and the user enters the logon state, the event processing unit 12-1 reads the document history information from the external memory 50-1 disposed via the R / W 13-1 (S102). Next, the event processing unit 12-1 matches the document history information stored in the external memory 50-1 with the document history information stored in the document server 30 (synchronization processing) (S103). Specifically, the event processing unit 12-1 reads event processing information corresponding to the electronic document α in the document server 30. Next, the event processing unit 12-1 updates the document history information corresponding to the electronic document α read from the external memory 50-1 with the event processing information read from the document server 30, and writes it in the external memory 50-1. . Thereby, the document history information corresponding to the electronic document α stored in the external memory 50-1 is matched with the document history information corresponding to the electronic document α stored in the document server 30. The event processing unit 12-1 may match the document history information stored in the external memory 50-1 with the document history information stored in the storage unit 14.

  Next, the event processing unit 12-1 detects event processing for the electronic document (S104). When event processing is detected, if the event processing is in the own device (internal event), the event processing unit 12-1 determines whether or not the own device has been logged off (S105). When logged off, the event processing unit 12-1 matches the document history information stored in the external memory 50-1 with the document history information stored in the document server 30 by the same procedure as in S103. (Synchronization processing) (S106).

  On the other hand, when the own apparatus is not logged off, the event processing unit 12-1 determines whether or not the detected event process is an event process for an electronic document created in another document creation apparatus 10 (S107). . When the detected event process is an event process for an electronic document created in another electronic document creation apparatus 10, the event processing unit 12-1 generates corresponding event processing information and sends it to the other electronic document creation apparatus 10. Notification is made (S108). Thereafter, the operation after the event processing detection (S104) is repeated.

  If the detected event process is not an event process for an electronic document created by another electronic document creation apparatus 10, the event processing unit 12-1 determines whether the event process is a creation of a new electronic document. Is determined (S109). In the case of creating a new electronic document, the event processing unit 12-1 generates corresponding event processing information and adds it to the document history information in the external memory 50-1 as a document event (S110). Further, the event processing unit 12-1 outputs the created electronic document and event processing information to the document server 30, and instructs backup. In response to this instruction, the document server 30 saves the input electronic document and also saves the document history information corresponding to the electronic document corresponding to the input event processing information to make a backup (S111). Thereafter, the operation after the event processing detection (S104) is repeated. When the document history information is stored in the storage unit 14, the event processing unit 12-1 saves the electronic document in the storage unit 14 together with the backup in the document server 30 described above, and responds to the event processing information. Also, the document history information corresponding to the electronic document is saved and backed up.

  If the event processing is not the creation of a new electronic document, the event processing unit 12-1 generates corresponding event processing information, and the electronic document to be subject to event processing in the external memory 50-1 as a related event. Is added to the document history information corresponding to (S112). Further, the event processing unit 12-1 outputs the electronic document on which the event processing has been performed and the event processing information to the document server 30 to instruct backup. In response to this instruction, the document server 30 saves the input electronic document, and saves the document history information corresponding to the electronic document corresponding to the input event processing information to make a backup (S113). Thereafter, the operation after the event processing detection (S104) is repeated.

  On the other hand, if the event processing detected in S104 is in another device (external event), the event processing unit 12-1 acquires event processing information from the other device and uses the external memory as a related event. Additional information is added to the document history information corresponding to the electronic document to be subjected to event processing in 50-1 (S114). Further, the event processing unit 12-1 outputs the electronic document on which the event processing has been performed and the event processing information to the document server 30 to instruct backup. In response to this instruction, the document server 30 saves the input electronic document, and saves the document history information corresponding to the electronic document corresponding to the input event processing information to make a backup (S113). Thereafter, the operation after the event processing detection (S104) is repeated.

  FIG. 11 is a flowchart showing a first operation of the printing apparatus 20. The printing apparatus 20 performs user authentication input by a user operation (S201). The exchange of information in the R / W 13-4, the document server 30, and the external memory 50-4 in the printing apparatus 20 and the operations of the R / W 13-4 and the document server 30 in user authentication are shown in FIGS. It is the same. When the user authentication is successful and the logon state is established, the event processing unit 12-4 reads the document history information from the arranged external memory 50-4 (S202). Next, the event processing unit 12-4 reads the event processing information in the document server 30 via the event processing unit 12-1 in the electronic document creation apparatus 10-1, and uses the event processing information to read the external memory 50. -4 is matched with the document history information stored in the document server 30 (synchronization processing) (S203).

  Next, the operation panel 22 displays a list of electronic documents to be printed on a built-in display unit (not shown) based on the document history information (S204), and responds to the user's operation viewing the list. The electronic document to be printed is selected (S205). Further, the event processing unit 12-4 confirms the access right included in the document event of the document history information corresponding to the selected electronic document to be printed among the document history information (S206).

  Next, the event processing unit 12-4 determines whether the user has the access right based on the confirmed access right (S207). If the user does not have access rights, the series of operations ends. On the other hand, when the user has access right, the event processing unit 12-4 is based on the document storage destination or backup document storage destination information included in the document event of the document history information corresponding to the electronic document to be printed. The storage location of the electronic document to be printed (the electronic document creation apparatus 10 or the document server 30) is grasped, and the electronic document to be printed is downloaded from the storage location (S208).

  Next, the printing apparatus 20 prints the downloaded electronic document (S209). Furthermore, the printing apparatus 20 performs event processing for the printing on the apparatus that created the electronic document to be printed, which is specified by the creating apparatus ID included in the document event of the document history information corresponding to the electronic document to be printed. (S210).

  FIG. 12 is a flowchart showing the operation of the document server 30. When receiving an instruction from the outside (S301), the document server 30 determines whether or not the instruction is an end instruction (S302). If it is an end instruction, the series of operations is ended. On the other hand, if it is not an end instruction, the document server 30 performs various processes such as backup, synchronization process, electronic document download, and the like according to the instruction (S303). Thereafter, the operations after receiving an instruction from the outside (S301) are repeated.

  Next, the second operation of the document creation device 10-1 and the printing device 20 will be described. FIG. 13 is an example of document history information in the second operation. When the document history information shown in FIG. 13 is compared with the document history information shown in FIG. 4, the document event has a document name, creator ID, creation device ID, device owner, device administrator, as shown in FIG. 14. It consists of items of location information, access right, and execution event. In addition, the related event includes an ID (parent device ID) of a device on which an event process for creating a corresponding electronic document has been performed, and an ID (child device ID) of a device on which an event process after the created event processing has been performed. It consists of. With this related event, as shown in FIG. 15, the devices that performed event processing on the electronic document are associated with each other by a tree structure.

  FIG. 16 is a flowchart showing a second operation of the electronic document creation apparatus 10-1. The electronic document creation apparatus 10-1 performs user authentication input by a user operation (S401). The exchange of information in the R / W 13-1, the document server 30, and the external memory 50-1, and the operations of the R / W 13-1 and the document server 30 in the electronic document creation apparatus 10-1 in user authentication are shown in FIGS. This is the same as that shown in FIG. When the user authentication is successful and the logon state is established, the event processing unit 12-1 reads out the document history information from the arranged external memory 50-1 (S402).

  Next, the event processing unit 12-1 detects event processing for the electronic document (S403). If event processing is detected and the event processing is an internal event), the event processing unit 12-1 determines whether or not the own device has been logged off (S404). When logged off, a series of operations are completed.

  On the other hand, when the own device is not logged off, the event processing unit 12-1 determines whether or not the detected event processing is event processing for an electronic document created in another document creation device 10 (S405). . When the detected event process is an event process for an electronic document created by another electronic document creation apparatus 10, the event processing unit 12-1 generates event processing information including the ID of the own apparatus, and the other electronic document The creation device 10 is notified (S406). Thereafter, the operations after the event processing detection (S403) are repeated.

  If the detected event process is not an event process for an electronic document created by another electronic document creation apparatus 10, the event processing unit 12-1 determines whether the event process is a creation of a new electronic document. Is determined (S407). In the case of creating a new electronic document, the event processing unit 12-1 generates corresponding event processing information and adds it to the document history information in the external memory 50-1 as a document event (S408). Thereafter, the operations after the event processing detection (S403) are repeated.

  In addition, when it is not the creation of a new electronic document, the event processing unit 12-1 generates corresponding event processing information, and document history information corresponding to the electronic document to be subjected to event processing in the external memory 50-1. Is added to the related event as a child device ID (S409). Thereafter, the operations after the event processing detection (S403) are repeated.

  On the other hand, when the event processing detected in S403 is an external event, the event processing unit 12-1 acquires event processing information from the other device and becomes an event processing target in the external memory 50-1. The ID of the other device is added as a child device ID to the related event of the document history information corresponding to the electronic document (S410). Thereafter, the operation after the event processing detection (S104) is repeated.

  FIG. 17 is a flowchart showing the second operation of the printing apparatus 20. Compared with the flowchart shown in FIG. 11, the flowchart shown in FIG. 17 synchronizes the document history information stored in the external memory 50-4 and the document history information stored in the document server 30 (S203 in FIG. 11). ) Is the same except that it is not performed.

  Next, the document history information synchronization operation will be described. FIG. 18 is a flowchart showing the document history synchronization operation.

  The electronic document creation apparatus 10-1 performs user authentication input by a user operation (S600). The exchange of information in the R / W 13-1, the document server 30, and the external memory 50-1, and the operations of the R / W 13-1 and the document server 30 in the electronic document creation apparatus 10-1 in user authentication are shown in FIGS. This is the same as that shown in FIG. When the user authentication is successful and the logon state is established, the event processing unit 12-1 reads the document history information from the external memory 50-1 via the reader / writer 13-1 (S601). Further, the event processing unit 12-1 extracts each information of the document storage destination, the backup document storage destination, and the creation device ID in the document event of the read document history information (S602). Next, the event processing unit 12-1 accesses the extracted document storage destination (S603), and determines whether there is a response from the document storage destination (S604).

  When there is a response from the document storage destination within a predetermined time, the event processing unit 12-1 acquires the event processing information from the document storage destination, the related event corresponding to the acquired event information, and the external memory The related event of the document history information read from 50-1 is compared. If the related event corresponding to the event processing information from the document storage destination does not exist in the related event of the document history information, the event processing unit 12-1 adds the related event to the related event of the document history information. (S605).

  On the other hand, when there is no response from the electronic document creation apparatus 10 within a predetermined time, the event processing unit 12-1 accesses the document server 30 specified by the extracted backup document storage destination (S606). Then, the event processing unit 12-1 acquires the event processing information from the document server 30, the related event corresponding to the acquired event information, and the related event of the document history information read from the external memory 50-1. If the related event corresponding to the event processing information from the document server 30 does not exist in the related event of the document history information, the related event is added to the related event of the document history information (S607).

  After S605 or S607, the event processing unit 12-1 determines whether the external memory 13-1 has been removed or the printing apparatus 20 has been shut down (S608). When these measures are not taken, after waiting for a predetermined time, the operations after reading the document history information from the external memory 50-1 (S601) are repeated.

  Next, an operation when reading an electronic document will be described. FIG. 19 is a flowchart showing an operation when reading an electronic document. The electronic document creation apparatus 10-1 performs user authentication input by a user operation (S700). The exchange of information in the R / W 13-1, the document server 30, and the external memory 50-1, and the operations of the R / W 13-1 and the document server 30 in the electronic document creation apparatus 10-1 in user authentication are shown in FIGS. This is the same as that shown in FIG. After the user authentication is successful and the log-on state is established, the event processing unit 12-1 determines whether or not the event processing is the creation of a new electronic document when the event processing occurs in its own device (S701). Determination is made (S702). In the case of creating a new electronic document, the event processing unit 12-1 generates corresponding event processing information and adds it to the document history information in the external memory 50-1 as a document event (S703). Furthermore, the event processing unit 12-1 accesses the document server 30 (S704), and adds the corresponding event processing information as document events to the document history information in the document server 30 (S705).

  If the event processing is not the creation of a new electronic document, the event processing unit 12-1 generates corresponding event processing information, and generates the related event as an electronic document to be subject to event processing in the external memory 50-1. Append to the corresponding document history information (S706). Further, the event processing unit 12-1 accesses the document server 30 (S707), and converts the corresponding event processing information as related events into the document history information corresponding to the electronic document that is the target of the event processing in the document server 30. An additional note is made (S708).

  In addition, the electronic document creation apparatus 10-1 performs user authentication input by a user operation (S709). The exchange of information in the R / W 13-1, the document server 30, and the external memory 50-1, and the operations of the R / W 13-1 and the document server 30 in the electronic document creation apparatus 10-1 in user authentication are shown in FIGS. This is the same as that shown in FIG. After the user authentication is successful and the logon state is established, the event processing unit 12-1 receives document history information corresponding to the electronic document to be subjected to the event processing when the event processing occurs in another device (S710). Is read from the memory 50-1 (S711). Further, the event processing unit 12-1 acquires the corresponding event processing information from another device, and adds it as a related event to the document history information read from the memory 50-1 (S712).

  Next, the event processing unit 12-1 extracts each information of the document storage destination, the backup document storage destination, and the creation device ID in the document event of the read document history information (S713). Further, the event processing unit 12-1 accesses the extracted document storage destination (S714), and determines whether there is a response from the document storage destination (S715). If there is a response from the document storage destination within a predetermined time, the operations after S706 are performed. On the other hand, when there is no response from the document storage destination within a predetermined time, the operations after S707 are performed.

  As described above, in the electronic document utilization system according to the present embodiment, the electronic document creation apparatus 10 and the printing apparatus 20 authenticate the user based on the encryption ID stored in the external memory 50 and obtained by encrypting the user ID with the public key. When the user authentication is successful, access to the information stored in the document server 30 is permitted, and each time the user authentication is successful, the public key and the private key corresponding to the user ID are updated, An encrypted ID obtained by encrypting the user ID with a new public key is stored in the external memory 50. As a result, the encryption ID is updated only for the regular external memory 50-1, and even if there is another external memory in which information in the external memory 50-1 is copied, the encryption ID in the external memory is Since it has not been updated, the decryption ID does not match the user ID even if user authentication is performed thereafter, access to the event processing information is not permitted, and the confidentiality of the electronic document is ensured. In addition, the electronic document creation apparatus 10 and the printing apparatus 20 monitor event processing for an electronic document, and when event processing is detected, document history information corresponding to the event processing is stored in the external memory 50 that can communicate with the own apparatus. Since writing is performed and the electronic document is not written, the confidentiality of the electronic document is ensured. Further, the document history information stored in the external memory 50 makes it possible to specify an electronic document and easily perform various event processing on the electronic document, and to easily recognize the state of the electronic document. .

  The present invention can be modified in various ways. For example, when the access management apparatus spans a plurality of networks, the electronic document creation apparatuses 10-1, 10-2 in the intranet 70 as shown in FIG. The present invention is also applicable to a configuration in which the document server 30 exists, the electronic document creation apparatus 10-3 and the printing apparatus 20 exist in the external network, and the router 60 that connects the intranet 70 and the external network exists. Can be applied. In the above-described embodiment, the document server 30 encrypts and decrypts the user ID. However, the encryption and decryption may be performed by a dedicated server.

  As described above, the access management device, the storage medium, the access management method, and the access management program according to the present invention can easily secure the confidentiality of an electronic document, and are useful as an access management device or the like. is there.

It is a figure which shows the hardware constitutions of an electronic document utilization system. It is a figure explaining the 1st example of the exchange of information in an electronic document utilization system. It is a figure explaining the 1st example of the exchange of information in an electronic document utilization system. It is an example of document history information. It is a figure which shows an example of a document event. It is an example of an access right. It is a flowchart which shows the 1st operation | movement of an electronic document production apparatus. It is a figure which shows exchange of information of R / W in an electronic document production apparatus, a document server, and an external memory in user authentication. It is a flowchart which shows operation | movement of R / W in user authentication. It is a flowchart which shows operation | movement of the document server in user authentication. 3 is a flowchart illustrating a first operation of the printing apparatus. It is a flowchart which shows operation | movement of a document server. It is a figure which shows the other example of document log | history information. It is a figure which shows the other example of a document event. It is a figure which shows the tree structure showing the relationship between each apparatus which performed the event process with respect to an electronic document. It is a flowchart which shows the 2nd operation | movement of an electronic document production apparatus. 6 is a flowchart illustrating a second operation of the printing apparatus. It is a flowchart which shows the synchronous operation | movement of a document history. It is a flowchart which shows read-out operation | movement of an electronic document. It is a figure which shows the other hardware structure of an electronic document utilization system. It is a figure which shows the hardware constitutions of the conventional printing system.

Explanation of symbols

10-1, 10-2, 10-3 Electronic document creation device 12-1, 12-4 Event processing unit 13-1, 13-2 Reader / writer 40 Storage unit 20 Printing device 22 Operation panel 30 Document server 40 Projector 50- 1, 50-2, 50-3, 50-4 External memory

Claims (11)

First reading means for reading user identification information stored in the storage medium and encrypted identification information obtained by encrypting the identification information with an encryption key;
First obtaining means for obtaining decrypted identification information obtained by decrypting the encrypted identification information with a decryption key;
Permission means for permitting access to an information source when the decrypted identification information and the identification information match;
Second acquisition means for acquiring new encrypted identification information obtained by encrypting the identification information with a new encryption key different from the encryption key after the access is permitted;
An access management apparatus comprising: a first updating unit configured to update the encrypted identification information stored in a storage medium to the new encrypted identification information. The encrypted identification information is obtained by encrypting the identification information with a public key in a public key cryptosystem,
The decryption identification information is obtained by decrypting the encryption identification information with a secret key corresponding to the public key,
The access management apparatus according to claim 1, wherein the new encrypted identification information is encrypted with a new public key different from the public key. Monitoring means for monitoring processing of electronic documents;
History information representing a history of processing for the electronic document in the storage medium when processing for the electronic document is detected by the monitoring unit and access to the information source holding the electronic document is permitted The access management apparatus according to claim 1, further comprising: a writing unit that writes data.   The access management apparatus according to claim 3, further comprising a second reading unit that reads an electronic document specified by the history information stored in the storage medium from the information source.   5. The access management apparatus according to claim 3, further comprising a matching unit configured to match the history information stored in the storage medium with reference history information stored in the information source.   6. The access management according to claim 3, wherein the history information includes at least one of information on a location of the electronic document and identification information of an access management apparatus that has performed the processing. apparatus. An encryption and decryption device communicably connected to the access management device according to any one of claims 1 to 6,
Holding means for holding the identification information in association with the encryption key and the decryption key;
Receiving means for receiving the identification information and the encrypted identification information read by the first reading means;
Decryption means for decrypting the received encrypted identification information with a decryption key held in the holding means in association with the received identification information;
An encryption / decryption device comprising: first transmission means for transmitting decryption identification information obtained by the decryption to the access management device. A second updating unit that updates an encryption key and a decryption key held in the holding unit when access is permitted by the permission unit;
An encryption means for encrypting the identification information with the updated new encryption key;
The encryption / decryption device according to claim 7, further comprising: a second transmission unit that transmits new encryption identification information obtained by the encryption to the access management device.   A storage medium for storing user identification information and encrypted identification information obtained by encrypting the identification information with an encryption key. A step of reading out the user identification information stored in the storage medium and the encrypted identification information obtained by encrypting the identification information with an encryption key;
A first acquisition step of acquiring decryption identification information obtained by decrypting the encryption identification information with a decryption key;
A permission step of permitting access to information stored in the storage medium when the decrypted identification information matches the identification information;
A second obtaining step of obtaining new encrypted identification information obtained by encrypting the identification information with a new encryption key different from the encryption key after the access is permitted;
An access management method comprising: an updating step of updating the encrypted identification information stored in a storage medium to the new encrypted identification information. An access management program executed in the access management device,
A step of reading out the user identification information stored in the storage medium and the encrypted identification information obtained by encrypting the identification information with an encryption key;
A first acquisition step of acquiring decryption identification information obtained by decrypting the encryption identification information with a decryption key;
A permission step of permitting access to information stored in the storage medium when the decrypted identification information matches the identification information;
A second obtaining step of obtaining new encrypted identification information obtained by encrypting the identification information with a new encryption key different from the encryption key after the access is permitted;
An access management program comprising: an updating step of updating the encrypted identification information stored in a storage medium to the new encrypted identification information.

Images