JP2007317118A - Print system, information processor, and printer - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent leakage of secret from a printed matter left behind as much as possible while assuring security on a transmission path. <P>SOLUTION: This information processor is provided with a user ID transmission means transmitting an inputted user ID to a printer and a print data storage means encrypting print data by a common key and storing them in a portable storage medium. The printer is provided with a user authentication means authenticating a user, a common key transmission means generating the common key and transmitting it to the information processor, and a print means decrypting the print data stored in the storage medium by the common key and performing printing based on the print data. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an information processing apparatus, a printing apparatus, and a printing system, and more particularly, to an information processing apparatus, a printing apparatus, and a printing system that increase security and can be easily printed.

  In the conventional printing system, when the print data is encrypted and transmitted from the information processing apparatus to the printing apparatus, the secret key information is not acquired, and even if the data is wiretapped on the transmission path, the confidential information is substantially not obtained. A technique for preventing leakage is disclosed in Patent Document 1.

  Further, in the conventional printing system, the print data is encrypted and transmitted from the information processing apparatus to the printing apparatus, and the print data is temporarily stored in a storage device attached to the printing apparatus, and the operation of the printing apparatus is performed. There is a type in which print data stored in a storage device is output in front of a user by inputting a password on a panel.

Japanese Patent Laid-Open No. 2005-216029

  However, in the above-described conventional printing system, the print data is transferred to the printing apparatus via the transmission path, so that it is difficult to completely ensure the security on the transmission path when printing.

  Even if security on the transmission path is maintained, there is a risk that important information is leaked to a third party after printing due to the printed matter being left in the printing apparatus.

  Further, in the above-described conventional printing system, it is necessary to mount a storage device such as an operation panel or an expensive HDD for storing secure print data in the printing apparatus.

  Furthermore, in the conventional printing system described above, an operation such as inputting a password is required on the operation panel of the printing apparatus, which is not easy.

  SUMMARY OF THE INVENTION The present invention has been made in view of such circumstances, and while ensuring security on the transmission path, avoids confidential leakage due to leaving the printed material as much as possible, and is a low-cost and simple printing system and information processing apparatus. An object of the present invention is to provide a printing apparatus.

  In order to solve the above-described problem, a printing system according to the present invention is a printing system in which a printing apparatus and an information processing apparatus can communicate bidirectionally, and the information processing apparatus receives an input user ID. A user ID transmission unit that registers, encrypts, and transmits to the printing apparatus via the first hardware network interface, and an encrypted common key via the first hardware network interface. Received from the printing apparatus, decrypted, registered in the first storage unit, encrypted the print data with the registered common key, encrypted the print data and the authenticated user ID, Print data storage means for storing the data in a portable recording medium via a removable memory interface, and the printing apparatus includes the encrypted user I User authentication means for receiving the user ID from the information processing apparatus via the second hardware network interface, decrypting the user ID, and authenticating the user based on the user ID and the user ID registered in the second storage unit in advance, When the user can be authenticated, a common key corresponding to the registered user ID is generated, registered in the second storage unit, encrypted, and the information processing is performed via the second hardware network interface. When the second removable memory interface having the common key transmission means for transmitting to the apparatus and the means for detecting that the recording medium is attached detects the attachment of the recording medium storing the encrypted print data, The print data stored in the recording medium and the user ID are decrypted, and the print data is registered with the registered common key corresponding to the user ID. It decodes, characterized in that it comprises a printing means for printing based on the print data.

  In order to solve the above-described problem, an information processing apparatus according to the present invention is an information processing apparatus capable of bidirectional communication with a printing apparatus, and registers an input user ID in a storage unit and encrypts it. , A user ID transmission means for transmitting to the printing apparatus via a hardware network interface, and an encrypted common key received from the printing apparatus via the hardware network interface, decrypted, and registered in the storage unit Print data storage means for encrypting the print data with a registered common key, encrypting the print data and the authenticated user ID, and storing the encrypted print data in a portable recording medium via a removable memory interface; It is characterized by providing.

  Furthermore, in order to solve the above-described problem, a printing apparatus according to the present invention is a printing apparatus capable of bidirectionally communicating with an information processing apparatus, and the encrypted user ID is transmitted via a hardware network interface. User authentication means for authenticating the user based on the user ID and the user ID registered in advance in the storage unit, received from the information processing apparatus, decrypted, and when the user is authenticated, the registered user ID A common key corresponding to, and registered in the storage unit, encrypted, and transmitted to the information processing apparatus via the hardware network interface, and detects that the recording medium is attached If the removable memory interface having the means detects attachment of a recording medium storing the encrypted print data, the recording Printing means for decrypting the print data and the user ID stored in the body, decrypting the print data with the registered common key corresponding to the user ID, and printing based on the print data. Features.

  The terminology used to describe the present invention will be described below.

  "Encryption": When digital data such as documents and images is exchanged over a network such as the Internet, this means that the data is converted according to a set rule so that it cannot be stolen or altered by a third party during the communication. . For encryption and decryption, a “key” corresponding to the encryption table is used, but there are public key encryption using two pairs of keys and common key encryption using the same key for both.

  “Decryption”: Returning encrypted digital data or the like to the original data.

  “Common key”: A key of a common key cryptosystem that uses the same key for encryption and decryption. Since it is necessary to share the same key between the sender and receiver of the ciphertext, it is necessary to share a secret key in advance using a secure path before sending and receiving the ciphertext.

  “Public Key”: A key that is generally made public among a pair of keys used in a public key cryptosystem. Since data encrypted with the public key can only be decrypted with the private key, the security level does not decrease even if the public key is known to others. Conversely, data encrypted with the private key can be decrypted with the public key. When decrypting data encrypted with a private key with a public key, if it can be proved that the public key is the original one, it can be confirmed that the encrypted data is definitely the original one.

  “Secret key”: A key that is not disclosed to the public among a pair of keys used in a public key cryptosystem. Since the key of the secret key encryption method must not be disclosed, it may be called a “secret key”. When the secret key is known to others, all data is decrypted in the secret key cryptography, and there is a possibility that a person who misrepresents himself / herself appears in addition to decrypting the data in the public key cryptography. Since it is dangerous to distribute the private key as it is on the Internet, a method of encrypting and sending the private key using a public key cryptosystem is adopted.

  “Printing apparatus”: A typical example is a printer having a server function.

  “Information processing apparatus”: A typical example is a client personal computer.

  “Network interface”: A communication path through which data is transmitted and received.

  “Hardware network interface”: A hardware device corresponding to a network interface such as Ethernet or Token Ring.

  According to the present invention, since the user saves the print data in the removable memory and carries it to the printing apparatus, security on the transmission path is ensured during printing. In addition, since the user prints in front of the printing apparatus, it is possible to avoid confidential leakage after printing as much as possible without exposing the printed matter to the eyes of a third party. In addition, the printing apparatus does not require a storage device such as an expensive HDD for storing a secure job, and can be supported by an inexpensive removable memory such as a USB memory. Further, since no panel operation is required for printing, printing can be started easily.

  Hereinafter, the best mode for carrying out the present invention will be described in detail with reference to the drawings.

  The present invention is applied to, for example, a printing system 300 configured as shown in FIG.

  The printing system 300 includes a client ID transmission unit that transmits an input user ID to a printing apparatus, and a print data storage unit that encrypts print data with a common key and stores it in a portable recording medium. 100, a user authentication unit for authenticating a user, a common key transmission unit that generates a common key and transmits it to the information processing apparatus, and decrypts the print data stored in the recording medium with the common key, based on the print data A printer 150 having a printing unit for printing, and the client 100 and the printer 150 are connected to each other via a wired or wireless network interface 200 so as to be able to communicate bidirectionally. In FIG. 1, the printing system 300 is configured with one client 100 and one printer 150, but the number of units is not limited to this, and neither the client 100 nor the printer 150 has anything. You may be comprised with the stand.

  Next, the configuration of the client 100 will be described with reference to FIG.

  An input / output interface (not shown) and an encryption unit 103 are connected to the print data generation unit 101. An input / output interface (not shown) is connected to an input unit (not shown) including a keyboard and a mouse, and a display unit (not shown) including a display. The print data generation unit 101 executes various processes in response to commands input from an input unit (not shown). The print data generation unit 101 converts the image data obtained as a result of the processing into print data that can be analyzed by the printer 150, and outputs the print data to the encryption unit 103.

  A storage unit 102, a hardware network interface 104, and a removable memory interface 106 are connected to the encryption unit 103. The encryption unit 103 encrypts the user ID acquired from the storage unit 102 using the public key A acquired from the storage unit 102 and outputs the encrypted user ID to the hardware network interface 104. The encryption unit 103 encrypts the print data acquired from the print data generation unit 101 using the common key A acquired from the storage unit 102, and further uses the public key A acquired from the storage unit 102, The user ID acquired from the storage unit 102 and the encrypted print data are combined, encrypted, and output to the removable memory interface 106.

  The removable memory interface 106 has a configuration in which the removable memory 107 is detachable. The removable memory interface 106 stores the encrypted print data acquired from the encryption unit 103 in the removable memory 107. The removable memory 107 may be a portable recording medium such as a USB memory, a Memory Stick (registered trademark), an SD memory card (registered trademark), a compact flash (registered trademark), or a smart media (registered trademark). The above is a specific example of the semiconductor memory, but it may be constituted by a magnetic disk, an optical disk, a magneto-optical disk, a magnetic card, an IC card, a non-contact radio wave communication type card, or the like. However, the removable memory interface 106, the removable memory interface 157, which will be described later, and the removable memory 107 need to be standardized.

  The storage unit 102 is configured by a storage medium such as a hard disk, for example, and can store various data. The storage unit 102 stores a public key A and a secret key B corresponding to the public key B of the printer 150 in advance. Yes. An encryption unit 103 and a decryption unit 105 are connected to the storage unit 102. The storage unit 102 stores the user ID input by the user and outputs it to the encryption unit 103. The storage unit 102 also stores the common key A decrypted by the decryption unit 105 and outputs it to the encryption unit 103. Further, the storage unit 102 receives the instruction from the decryption unit 105 and outputs the secret key B to the decryption unit 105.

  A storage unit 102 and a hardware network interface 104 are connected to the decryption unit 105. The decryption unit 105 decrypts the encrypted common key A acquired from the hardware network interface 104 using the secret key B acquired from the storage unit 102, and outputs the decrypted common key A to the storage unit 102.

  An encryption unit 103 and a decryption unit 105 are connected to the hardware network interface 104. The hardware network interface 104 transmits the user ID acquired from the encryption unit 103 to the hardware network interface 151 of the printer 150 via the network interface 200. Further, the hardware network interface 104 receives the encrypted common key A from the hardware network interface 151 of the printer 150 via the network interface 200. The hardware network interface 104 is a USB (Universal Serial Bus) or IEEE1394 local interface, a wired LAN interface such as Ethernet (registered trademark) or Token-Ring, or IEEE802.11b or Bluetooth (registered trademark). Any device that supports the standard of the network interface 200 such as a wireless LAN interface may be used.

  Next, the configuration of the printer 150 will be described with reference to FIG.

  The removable memory interface 157 includes a detection unit (not shown) that detects the attachment of the removable memory 107, and a decoding unit 153 is connected to the removable memory interface 157. When the detection unit (not shown) detects that the removable memory 107 is attached, the removable memory interface 157 outputs the encrypted print data and the like stored in the removable memory 107 to the decryption unit 153. Since the removable memory 107 has already been described, the description thereof is omitted here.

  The decryption unit 153 is connected to a removable memory interface 157, a printing unit 158, a hardware network interface 151, a storage unit 152, and a user authentication unit 154. The decryption unit 153 decrypts the encrypted print data or the like acquired from the removable memory interface 157 using the secret key A acquired from the storage unit 152, and obtains the common key A corresponding to the user ID from the storage unit 152. The acquired print data is further decrypted using the common key A, and the obtained print data is output to the printing unit 158. Also, the decryption unit 153 decrypts the encrypted user ID acquired from the hardware network interface 151 using the secret key A acquired from the storage unit 152 and outputs the decrypted user ID to the user authentication unit 154.

  A decryption unit 153 is connected to the printing unit 158. The printing unit 158 analyzes based on the print data acquired from the decryption unit 153, restores image data and the like, and prints on a predetermined sheet. The printing method of the printing unit 158 may be any method, for example, a thermal transfer method or an ink jet method.

  A decryption unit 153, a common key generation unit 155, and a storage unit 152 are connected to the user authentication unit 154. The user authentication unit 154 collates the user ID acquired from the decryption unit 153 with the user ID acquired from the storage unit 152, and outputs a signal indicating that the authentication has been performed to the common key generation unit 155 when the verification is successful. To do.

  A user authentication unit 154 and a storage unit 152 are connected to the common key generation unit 155. The common key generation unit 155 generates the common key A and outputs it to the storage unit 152 when detecting the authenticated signal from the decryption unit 153.

  A decryption unit 153, a user authentication unit 154, a common key generation unit 155, and an encryption unit 156 are connected to the storage unit 152. The storage unit 152 is configured by, for example, a hard disk and can store various data and the like, and stores a user ID, a public key B, and a secret key A corresponding to the public key A of the client 100 in advance. is doing. The storage unit 152 receives a command from the user authentication unit 154 and outputs a user ID stored in advance to the user authentication unit 154. In addition, the storage unit 152 stores the common key A acquired from the common key generation unit 155 and outputs it to the encryption unit 156. Further, in response to a command from the decryption unit 153, the secret key A stored in advance is output to the decryption unit 153.

  A storage unit 152 and a hardware network interface 151 are connected to the encryption unit 156. The encryption unit 156 encrypts the common key A acquired from the storage unit 152 using the public key B acquired from the storage unit 152, and outputs it to the hardware network interface 151.

  An encryption unit 156 and a decryption unit 153 are connected to the hardware network interface 151. The hardware network interface 151 transmits the encrypted common key A acquired from the encryption unit 156 to the hardware network interface 104 of the client 100 via the network interface 200. The hardware network interface 151 receives the encrypted user ID from the hardware network interface 104 of the client 100 via the network interface 200. The hardware network interface 151 is a USB (Universal Serial Bus) or IEEE1394-compliant local interface, a wired LAN interface such as Ethernet (registered trademark) or Token-Ring, or IEEE802.11b or Bluetooth (registered trademark). Any device that supports the standard of the network interface 200 such as a wireless LAN interface may be used.

  Next, the configuration of the network interface 200 will be described with reference to FIG.

  The network interface 200 is a communication path capable of bidirectional communication between the client 100 and the printer 150. The network interface 200 is a USB (Universal Serial Bus) or IEEE1394 compliant local interface, a wired LAN interface such as Ethernet (registered trademark) or Token-Ring, or IEEE802.11b or Bluetooth (registered trademark). It may be a simple wireless LAN interface, or may be routed via a router, a switching hub, or the Internet. However, the hardware network interface 104, the hardware network interface 151, and the network interface 200 need to be standardized.

  Here, the correspondence between the constituent features described in the claims and the specific example in the best mode for carrying out the invention is illustrated as follows. This description is intended to confirm that specific examples supporting the invention described in the claims are described in the best mode for carrying out the invention. Further, this description does not mean that all the inventions corresponding to the specific examples described in the best mode for carrying out the invention are described in the claims.

  That is, the information processing apparatus according to the present invention registers the input user ID in the first storage unit, encrypts it, and transmits it to the printing apparatus via the first hardware network interface ( For example, in the client 100 of FIG. 1, the storage unit 102 that registers the input user ID, the encryption unit 103 that encrypts the registered user ID with the public key A registered in the storage unit 102, and the encryption And a hardware network interface 104 for transmitting the received user ID to the printer 150.) and an encrypted common key from the printing apparatus via the first hardware network interface. Receiving, decrypting, registering in the first storage unit, encrypting the print data with the registered common key, Print data storage means for encrypting the print data and the authenticated user ID and storing them in a portable recording medium via the first removable memory interface (for example, the encrypted common data in the client 100 of FIG. 1) A hardware network interface 104 for receiving the key A from the printer 150; a decryption unit 105 for decrypting the received encrypted common key A with the private key B registered in the storage unit 102; The storage unit 102 for registering the common key A and the print data generated by the print data generation unit 101 are encrypted with the common key A registered in the storage unit 102, and the encrypted print data and the storage unit 102 are registered. An encryption unit 103 for further encrypting the received user ID with the public key A registered in the storage unit 102, and encrypted print data A removable memory interface 106 is an interface for storing, a removable memory 107 is a storage destination of the encrypted print data, and is to have.) Which consists, characterized in that it comprises a.

  The printing apparatus according to the present invention receives the encrypted user ID from the information processing apparatus via a hardware network interface, decrypts the user ID, and uses the user ID and the user ID registered in the storage unit in advance. User authentication means for authenticating a user based on the hardware network interface 151 for receiving the encrypted user ID from the client 100 in the printer 150 of FIG. 1 and the received encrypted user ID are stored. And a user authentication unit 154 for authenticating the user from the decrypted user ID.), And the user is authenticated. If it can, a common key corresponding to the registered user ID is generated and registered in the storage unit. Common key transmitting means (for example, the common key generation unit 155 for generating the common key A in the printer 150 of FIG. 1 and the generated common key). A storage unit 152 for storing the key A, an encryption unit 156 for encrypting the stored common key A with the public key B, and a hardware network for transmitting the encrypted common key A to the client 100 Interface 151), and when the removable memory interface having means for detecting that the recording medium is loaded detects the loading of the recording medium storing the encrypted print data, The print data and user ID stored in the recording medium are decrypted, and the registered common key corresponding to the user ID Printing means for decoding the print data and printing based on the print data (for example, a removable memory interface 157 provided with a detection unit (not shown) for detecting the attachment of the removable memory 107 in the printer 150 of FIG. 1, and a removable memory) The decryption unit 153 decrypts the encrypted print data and the user ID stored in the user ID 107 with the secret key A registered in the storage unit 152, and decrypts the print data with the common key A registered in the storage unit 152. And a decrypting unit 153 that analyzes the decrypted print data and performs printing, and a printing unit 158 that performs printing.

  Furthermore, the printing system 300 according to the present invention includes a client 100 and a printer 150, each having the same correspondence as described above.

  Next, the operation of the printing system 300 including the client 100 and the printer 150 will be described with reference to FIG.

  FIG. 2 is a diagram for explaining the operation of the printing system 300 to which the present invention is applied.

  The printing system 300 operates in the order of a user ID transmission process, a user authentication process, a common key transmission process, a print data storage process, and a printing process. Hereinafter, the operation of the printing system 300 will be described for each process.

<User ID transmission process>
The user ID transmitting step includes a step S1 for inputting a user ID, a step S2 for encrypting the user ID, and a step S3 for transmitting the encrypted user ID.

  In step S1, the storage unit 102 registers the user ID input by the user.

  In step S <b> 2, the encryption unit 103 encrypts the user ID with the public key A of the printer 150 registered in the storage unit 102.

  In step S <b> 3, the hardware network interface 104 transmits the encrypted user ID to the printer 150 via the network interface 200.

<User authentication process>
The user authentication step includes step S4 for decrypting the encrypted user ID and step S5 for authenticating the user.

  In step S4, the hardware network interface 151 receives the encrypted user ID transmitted via the network interface 200. The decryption unit 153 decrypts the encrypted user ID with the private key A of the printer 150 registered in the storage unit 152.

  In step S <b> 5, the user authentication unit 154 compares the decrypted user ID with the user ID registered in the storage unit 152, and authenticates that the user is authorized to use the printing system 300.

<Common key transmission process>
The common key transmission step includes step S6 for generating the common key A, step S7 for encrypting the common key A, and step S8 for transmitting the encrypted common key A.

  In step S6, the common key generation unit 155 generates the common key A when the user can be authenticated. The storage unit 152 registers the generated common key A.

  In step S 7, the encryption unit 156 encrypts the registered common key A with the public key B of the client 100 registered in the storage unit 152.

  In step S 8, the hardware network interface 151 transmits the encrypted common key A to the client 100 via the network interface 200.

<Print data storage process>
The print data storing step includes step S9 for decrypting the encrypted common key A with the private key B of the client 100, step S10 for encrypting the print data with the common key A, the encrypted print data and the user. Step S11 for further encrypting the ID with the public key A of the printer 150 and Step S12 for storing the ID in the removable memory are provided.

  In step S9, the hardware network interface 104 receives the encrypted common key A transmitted through the network interface 200. The decryption unit 105 decrypts the encrypted common key A with the secret key B of the client 100 registered in the storage unit 102. The storage unit 102 registers the decrypted common key A.

  In step S <b> 10, the encryption unit 103 encrypts the print data generated by the print data generation unit 101 with the common key A registered in the storage unit 102.

  In step S11, the encryption unit 103 combines the encrypted print data and the user ID, and encrypts the combined print data and user ID with the public key A of the printer 150 registered in the storage unit 102. Turn into.

  In step S <b> 12, the removable memory interface 106 stores the encrypted print data and user ID in the removable memory 107.

<Printing process>
The printing process includes a step S13 for detecting that the removable memory 107 carried by the user is attached, a step S14 for decrypting the encrypted print data and the user ID, the encrypted print data, Step S15 for dividing the user ID, Step S16 for obtaining the common key A from the user ID, Step S17 for decrypting the encrypted print data, and Step S18 for starting printing are provided.

  In step S <b> 13, the detection unit (not shown) of the removable memory interface 157 detects that the removable memory 107 is attached when the removable memory 107 is attached to the removable memory interface 157.

  In step S14, when a detection unit (not shown) of the removable memory interface 157 detects that the removable memory 107 has been installed, the decryption unit 153 uses the private key A of the printer 150 registered in the storage unit 152 to remove the removable memory 107. The encrypted print data and user ID stored in 107 are decrypted.

  In step S15, the decryption unit 153 decrypts the print data encrypted by the common key A and the user ID decrypted by the decryption unit 153 and encrypted by the common key A and the user ID. Divided into print data.

  In step S16, the decryption unit 153 searches the storage unit 152 for a common key A that is a key for encrypting print data from the divided user IDs, and acquires the common key A.

  In step S17, the decryption unit 153 decrypts the print data with the common key A acquired in step S16.

  In step S18, the printing unit 158 processes the decrypted print data, actually prints it, and discharges the paper.

  As described above, according to the present invention, since the user saves the print data in the removable memory and carries it to the printing apparatus, security on the transmission path is ensured during printing. In addition, since the user prints in front of the printing apparatus, it is possible to avoid confidential leakage after printing as much as possible without exposing the printed matter to the eyes of a third party. In addition, the printing apparatus does not require a storage device such as an expensive HDD for storing a secure job, and can be supported by an inexpensive removable memory such as a USB memory. Further, since no panel operation is required for printing, printing can be started easily.

2 is a block diagram illustrating a configuration of a printing system 300 including a client 100 and a printer 150. FIG. 4 is a diagram for explaining an operation of a printing system 300 including a client 100 and a printer 150. FIG.

Explanation of symbols

  100 Client, 101 Print Data Generation Unit, 102 Storage Unit, 103 Encryption Unit, 104 Hardware Network Interface, 105 Decryption Unit, 106 Removable Memory Interface, 107 Removable Memory, 150 Printer, 151 Hardware Network Interface, 152 Storage Unit 153, decryption unit, 154 user authentication unit, 155 common key generation unit, 156 encryption unit, 157 removable memory interface, 158 printing unit, 200 network interface, 300 printing system

Claims (7)

A printing system in which a printing apparatus and an information processing apparatus can communicate bidirectionally,
The information processing apparatus
User ID transmission means for registering the input user ID in the first storage unit, encrypting it, and transmitting it to the printing apparatus via the first hardware network interface;
An encrypted common key is received from the printing apparatus via the first hardware network interface, decrypted, registered in the first storage unit, and print data is encrypted with the registered common key; Print data storage means for encrypting the print data and the authenticated user ID, and storing the encrypted print data in a portable recording medium via the first removable memory interface;
With
The printing apparatus is
The encrypted user ID is received from the information processing apparatus via the second hardware network interface, decrypted, and the user is identified based on the user ID and the user ID registered in the second storage unit in advance. User authentication means for authenticating;
When the user can be authenticated, a common key corresponding to the registered user ID is generated, registered in the second storage unit, encrypted, and the information processing is performed via the second hardware network interface. A common key transmitting means for transmitting to the device;
When the second removable memory interface having a means for detecting that the recording medium is loaded detects the loading of the recording medium in which the encrypted print data is stored, the print data stored in the recording medium Printing means for decrypting a user ID, decrypting the print data with the registered common key corresponding to the user ID, and printing based on the print data;
A printing system comprising:   Performing encryption of the user ID in the user ID transmission unit, encryption of the print data and the user ID in the print data storage unit, with a public key registered in the first storage unit; and The decryption of the user ID in the user authentication means and the decryption of the print data and the user ID in the printing means are performed using a secret key registered in the second storage unit corresponding to the public key. The printing system according to claim 1, wherein the printing system is performed.   Encryption of the common key in the common key transmission unit is performed with the public key registered in the second storage unit, and decryption of the common key in the print data storage unit corresponds to the public key The printing system according to claim 1, wherein the printing is performed using a secret key registered in the first storage unit. An information processing apparatus capable of bidirectional communication with a printing apparatus,
A user ID transmitting means for registering the input user ID in the storage unit, encrypting it, and transmitting it to the printing apparatus via a hardware network interface;
The encrypted common key is received from the printing apparatus via the hardware network interface, decrypted, registered in the storage unit, the print data is encrypted with the registered common key, and the print data is authenticated. Print data storage means for encrypting the user ID and storing it on a portable recording medium via a removable memory interface;
An information processing apparatus comprising:   Performing encryption of the user ID in the user ID transmission unit, encryption of the print data and the user ID in the print data storage unit with a public key registered in the storage unit, and the printing 5. The information processing apparatus according to claim 4, wherein the decryption of the common key in the data storage unit is performed with a secret key registered in the storage unit corresponding to the public key registered in the storage unit of the printing apparatus. A printing device capable of bidirectional communication with an information processing device,
User authentication means for receiving the encrypted user ID from the information processing apparatus via a hardware network interface, decrypting the user ID, and authenticating the user based on the user ID and a user ID registered in advance in a storage unit; ,
If the user can be authenticated, a common key corresponding to the registered user ID is generated, registered in the storage unit, encrypted, and transmitted to the information processing apparatus via the hardware network interface A transmission means;
When the removable memory interface having a means for detecting that the recording medium is loaded detects the loading of the recording medium in which the encrypted print data is stored, the print data and user ID stored in the recording medium are displayed. Printing means for decrypting, decrypting the print data with the registered common key corresponding to the user ID, and printing based on the print data;
A printing apparatus comprising: Encryption of the common key in the common key transmission unit is performed using a public key registered in the storage unit, decryption of the user ID in the user authentication unit, print data in the printing unit, and 7. The printing apparatus according to claim 6, wherein the decryption of the user ID is performed with a secret key registered in the storage unit corresponding to the public key registered in the storage unit of the information processing apparatus.

Images