JP2008059020A - Print system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide print system for performing printout to an image forming apparatus installed in a convenience store or a data output center or the like for making it unnecessary to generate print data again even when the image forming apparatus which is trying to output the print data is made unavailable, and for protecting the secrecy of print data by transmitting encrypted data to a print data server according to a print data request from the image forming apparatus. <P>SOLUTION: In this print system 101, a print data server 301 is arranged, and a user transmits print data to the print data server by using an encryption means, and an image forming apparatus which outputs the print data makes a print request to the print data server, and the print data server transmits the print data encrypted by using the public key of the image forming apparatus, and decodes and outputs the print data to the image forming apparatus. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a print system having a confidentiality holding function and suppressing printing failure in a print service.

  There is a public print system that performs printing by sending print data from a data terminal to an image forming apparatus installed in a convenience store. In this service, in order to increase the confidentiality of data to be printed, the following The method is taken.

  It has an input means for inputting data from outside, the data encrypted using its own public key is input by the input means, the input data is decrypted, and based on the decrypted data, An image forming apparatus capable of image formation, having a secret key different from other image forming apparatuses, and decrypting at least a part of the external data using the secret key There is a method of providing an image forming apparatus characterized in that an output image is formed based on decrypted data, and image formation output is performed on a sheet (see Patent Document 1).

  However, this method has a problem in that when the image forming apparatus whose output is specified cannot be used, the job must be canceled and another image forming apparatus must be specified again.

JP-A-2005-109718

  The problem to be solved is that, in a printing system having a plurality of image forming apparatuses having different public / private key pairs for each image forming apparatus, if the specified image forming apparatus cannot be used, the job is canceled. In this case, it is necessary to designate another image forming apparatus again and generate the job again.

  The print system of the present invention is a print system having one or more print data generation terminals, one or more print data servers, and a plurality of image forming apparatuses, wherein the print data generation terminal generates print data. A generation unit; an encryption unit that encrypts the print data; and a transmission unit that transmits the encrypted print data to a print data server, wherein the print data server includes a reception unit that receives the print data; In accordance with a request from the image forming apparatus, a decrypting unit that decrypts the print data, a storage unit that stores the print data, an encryption unit that encrypts the stored print data using the public key of the image forming apparatus A transmission unit configured to transmit the encrypted print data, and the image forming apparatus requests the print data server to transmit the print data. The main component includes a receiving unit that receives the print data, a decryption unit that decrypts the print data using a secret key that is paired with the public key, and a print unit that prints the decrypted print data. Features.

  The print system of the present invention is a print system having one or more print data generation terminals, one or more print data servers, and a plurality of image forming apparatuses, wherein the print data generation terminal generates print data. A generation unit; an encryption unit that encrypts the print data; and a transmission unit that transmits the encrypted print data to a print data server, wherein the print data server includes a reception unit that receives the print data; In accordance with a request from the image forming apparatus, a decrypting unit that decrypts the print data, a storage unit that stores the print data, an encryption unit that encrypts the stored print data using the public key of the image forming apparatus A transmission unit configured to transmit the encrypted print data, and the image forming apparatus requests the print data server to transmit the print data. The main component includes a receiving unit that receives the print data, a decryption unit that decrypts the print data using a secret key that is paired with the public key, and a print unit that prints the decrypted print data. Therefore, in a printing system having a plurality of image forming apparatuses having different public key and private key pairs for each image forming apparatus, even if the image forming apparatus to which print data is to be output cannot be used again, It is no longer necessary to generate print data, and since the encrypted data is transmitted to the print data server according to the print data request from the image forming apparatus, the confidentiality of the print data can be protected.

  In a print system, if print data is generated with the public key of an image forming apparatus, the print data server cannot be printed on another image forming apparatus. Thus, the user solves the problem by transmitting the print data to the print data server and by determining the image forming apparatus when the user prints.

[Print system configuration]
FIG. 1 is a block diagram of a printing system according to an embodiment of the present invention. Each block will be described below.

  The print system 101 has a configuration in which a print data generation terminal 201, a print data server 301, an image forming apparatus 1; 401, an image forming apparatus 2; 403, and an image forming apparatus 3; 405 are connected via a public network 501. Yes.

  The print data generation terminal 201 means a computer that generates data to be output on paper, such as a home PC (Personal Computer), a mobile phone, or a digital camera. In FIG. 1, one unit is representatively illustrated, but in practice, a large number of print data generation terminals exist through the public network 501 to constitute a print system.

The print data server 301 is prepared by a service provider company. The print data transmitted from the print data generation terminal 201 is stored, and the print data is transferred in response to requests from the image forming apparatuses 401, 403, and 405. Communication between the print data generation terminal 201 and the print data server 301 needs to be encrypted by some method. (Communication channel encryption, data encryption; see below)
The image forming apparatuses 401, 403, and 405 are arranged in various public places such as a convenience store and a data output shop by a service provider. The image forming apparatuses 401, 403, and 405 can communicate with the print data server 301 through the public network 501.

  Since the print data generation terminal 201 and the print data server 301 are usually connected via the public network 501, communication path encryption (SSL (Secure Socket Layer) or the like) or printing using a public key and a private key Encrypt data.

  The service use procedure using this print system is as follows.

  (1) The service user uses the print data generation terminal 201 to transmit the print data to the print data server 301 owned by the service provider company.

  (2) After transmitting the print data, the service user goes to the output image forming apparatus (for example, 401).

  (3) The service user requests the image forming apparatus (for example, 401) to output the designated print job, and performs printing on the image forming apparatus.

[Functional blocks of each device]
FIG. 2 is a functional block diagram of the print data server 301. Each functional block will be described below.

  The print data reception unit 311 (reception unit) receives the print data transmitted from the print data generation terminal 201.

  The print data storage unit 313 (decryption unit, storage unit) stores the received print data together with attribute information such as service user information and data reception date. If the print data is encrypted using the public key of the print data server, the transmission data is decrypted using the secret key of the print data server 201 before saving.

  The print data encryption unit 317 (encryption unit) receives the public key from the image forming apparatus 401 and encrypts the print data requested from the image forming apparatus 401 using the public key.

  The print data transmission unit 315 (transmission unit) transmits the print data requested by the image forming apparatus 401 and encrypted by the print data encryption unit 317 to the requesting image forming apparatus 401.

  The print data generation terminal 201 includes a print data generation unit that generates print data, an encryption unit that encrypts the print data, and a transmission unit that transmits the encrypted print data to a print data server.

  The image forming apparatuses 401, 403, and 405 request the print data server 301 to transmit print data and receive the print data, a decryption unit that decrypts the print data, and the decrypted print data And a printing unit for printing.

  Next, operations from print data generation at the print data generation terminal to printing at the image forming apparatus will be described with reference to the flowcharts of FIGS.

[Flowchart of processing when print data is received by print data server]
FIG. 3 is a flowchart of processing when print data is received in the print data server. Each step will be described below.
(S1-01) Receives print data and user identification information transmitted from the print data generation terminal.
(S1-02) Check whether the received print data is encrypted. As a confirmation method, there is a method of confirming from information added to a transmission header of transmission data.
(S1-03) If the received data is encrypted, the print data is decrypted using the secret key of the print data server (if the print data generation terminal encrypts the print data, Use the print data server's public key).
(S1-04) Print data and user identification information obtained from the print data generation terminal are stored as a set.

  The operation is completed by the series of processes described above.

[Flowchart of processing when print data transmission request is received from image forming apparatus in print data server]
FIG. 4 is a processing flowchart when a print data transmission request is received from the image forming apparatus in the print data server. Each step will be described below.
(S2-01) The print data server receives the print data transmission request message from the image forming apparatus. The print data transmission request message includes the public key of the requesting image forming apparatus (if necessary), print data identification information encrypted with the public key of the print data server, user authentication information (user ID and password), image It includes information such as identification information (such as electronic authentication) of the forming apparatus.
(S2-02) The received request message is decrypted using the secret key of the print data server.
(S2-03) It is confirmed whether the decoding is successful. If unsuccessful, proceed to (S2-04), and if successful, proceed to (S2-05).
(S2-04) A message indicating that the decoding has failed is transmitted to the requesting image forming apparatus.
(S2-05) It is confirmed whether the user authentication information is correct. If not correct (S2-06), if correct, go to (S2-07).
(S2-06) A message indicating that the user authentication information is incorrect is transmitted to the image forming apparatus.
(S2-07) The combination of the user authentication information and the print data identification information is used to check whether the corresponding print data exists from the print data storage unit. If there is no print data (S2-08), the process proceeds to (S2-09).
(S2-08) A message indicating that the corresponding print data does not exist is transmitted to the image forming apparatus.
(S2-09) The print data is encrypted using the public key of the image forming apparatus.
(S2-10) The encrypted print data is transmitted to the image forming apparatus.

  The operation is completed by the series of processes described above.

[Flowchart when receiving print data of image forming apparatus]
FIG. 5 is a flowchart of processing when the image forming apparatus receives print data. Each step will be described below.
(S3-01) The user makes a print data output request from the panel. Data necessary for the output request includes user authentication information (user ID, password, etc.), print data identification information (registered in advance in the print data server), and the like.
(S3-02) The image forming apparatus transmits a print data output request message to the print data transmission server.
(S3-03) Wait for a response from the print data server. (If there is no response after waiting for a certain period of time, the user is notified that a timeout error has occurred, and the process is terminated.)
(S3-04) When an error response is returned from the print data server, the content of the error is notified to the user. There is no limitation on the notification method such as display on the panel and output on the paper.
(S3-05) When a normal response is returned from the print data server, the encrypted print data is decrypted using the secret key of the image forming apparatus.
(S3-06) If decoding of the print data fails, the process proceeds to (S3-07), and if successful, the process proceeds to (S3-08).
(S3-07) The print data is discarded and the process is terminated.
(S3-08) The decrypted print data is output on paper. When output is complete, the print data is discarded.

  The operation is completed by the series of processes described above.

[Effect of Example]
The following effects can be obtained by the printing system of the embodiment of the present invention.
(1) A secure print service can be provided.
(2) If the printing process is interrupted due to a paper jam or the like, the job is canceled, the printing data is completely deleted from the image forming apparatus, and the printing process is performed in the same manner using another image forming apparatus. Just do it.
(3) A service user can select an output destination image forming apparatus for the convenience of the user.

[Others]
The present embodiment is not limited to a print system used by an unspecified number of users but can be used in a print system in a company, etc., and realizes a print system that enhances data confidentiality and does not impair user convenience. To do.

1 is a block diagram of a printing system (first embodiment). FIG. FIG. 3 is a functional block diagram of a print data server (first embodiment). 10 is a flowchart of processing of a print data server (first embodiment). 10 is a flowchart when a print data transmission request is received from the image forming apparatus (first embodiment). 6 is a flowchart when print data is received by the image forming apparatus (first embodiment).

Explanation of symbols

101 Print System 201 Print Data Generation Terminal (Print Data Generation Unit, Encryption Unit, Transmission Unit)
301 Print Data Server 311 Print Data Reception Unit (Reception Unit)
313 Print data storage unit (decryption unit, storage unit)
315 Print data transmission unit (transmission unit)
317 Print data encryption unit (encryption unit)
401 Image forming apparatus 1 (receiving unit, decoding unit, printing unit)
403 Image forming apparatus 2 (receiving unit, decoding unit, printing unit)
405 Image forming apparatus 3 (receiving unit, decoding unit, printing unit)

Claims (3)

In a print system having a print data generation terminal, a print data server, and a plurality of image forming apparatuses,
The print data generation terminal includes a print data generation unit that generates print data, an encryption unit that encrypts the print data, and a transmission unit that transmits the encrypted print data to a print data server,
The print data server uses a reception unit that receives the print data, a decryption unit that decrypts the print data, a storage unit that stores print data, and uses the public key of the image forming apparatus to store the stored print data And an encryption unit for encrypting and a transmission unit for transmitting the encrypted print data in accordance with a request from the image forming apparatus,
The image forming apparatus requests the print data server to transmit print data and receives the print data, and a decryption unit that decrypts the print data using a secret key paired with the public key And a printing unit for printing the decrypted print data. The printing system of claim 1,
The encryption unit of the print data generation terminal encrypts using the public key of the print data server,
The printing system, wherein the decryption unit of the print data server decrypts using a secret key that is paired with the public key of the data server. The printing system of claim 1,
An encryption unit of the print data generation terminal and a decryption unit of the print data server perform communication between the print data generation terminal and the print data server by SSL (Secure Socket Layer). .

Images