JP2009017074A - Data storage device and data distribution device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a technology to eliminate the possibility that received data of one of sharers is easily tapped by the other sharer when a facsimile apparatus is shared among the sharers. <P>SOLUTION: When the facsimile apparatus stores received data in a storage location based on the storage information on the corresponding relationship between receiving conditions and a storage location, it encodes the received data using an encryption key corresponding to the storage location. When authentication required for decoding the received data is successful, the facsimile machine decodes the received data using a decryption key corresponding to the storage location. Even if the data received by the facsimile apparatus is not encoded, the possibility that the received data of one of the sharers is easily tapped by the other sharer can be eliminated. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a technique for eliminating a risk that received data of one sharer can be easily wiretapped by another sharer when a fax machine is shared.

  Fax machines are shared and used as office equipment. When the sender transmits data to one sharer of the fax machine, the sender may designate the fax machine as the destination instead of designating the one sharer as the destination. When the fax machine receives data from the sender, the fax machine stores the received data in one sharer's box.

When the fax machine is designated as the destination, the fax machine registers the stored information in the fax machine in order to store the received data in one sharer's box. For example, when the fax machine receives data from a sender registered in the stored information, the fax machine stores the received data in a box of one sharer associated with the sender in the stored information. This is effective when one sharer and the sender frequently exchange data.
JP 2002-77638 A

  However, even after the fax machine stores received data in one sharer's box, other sharers may easily access the one sharer's box. That is, the received data of one sharer may be easily wiretapped by another sharer.

  As a method of solving the above problems, there is a method of using confidential reception as disclosed in Patent Document 1. First, one sharer and sender negotiate a password in advance. When the sender sends data with a password, the one sharer inputs the password and confirms the data. However, it is impossible to eliminate the fear that another sharer may enter a password and wiretap the data.

  Therefore, in view of the above-described problems, the present invention provides a technique for eliminating the possibility that data received by one sharer can be easily wiretapped by another sharer when the fax machine is shared. Objective.

  In order to solve the above-mentioned problem, the invention according to claim 1 is a data storage device, wherein a storage destination for determining a storage destination where received data is stored is based on storage information that associates a reception condition with a storage destination. A determination unit and an encryption unit for encrypting the reception data stored in the one storage destination using an encryption key associated with the one storage destination when the reception data is stored in the one storage destination; And when the authentication necessary for decrypting the received data stored in the one storage location is made, the decryption key related to the one storage location is used to store the received data in the one storage location. And a decoding unit for decoding the received data.

  A second aspect of the present invention is the data storage device according to the first aspect, wherein the received data stored in the one storage destination is stored in the one storage destination. A deletion unit that deletes received data from the one storage destination.

  The invention according to claim 3 is a data distribution apparatus, wherein a distribution destination determination unit that determines a distribution destination to which received data is distributed based on distribution information that associates a reception condition with a distribution destination; An encryption unit that encrypts received data distributed to the one distribution destination by using an encryption key related to the one distribution destination when distributed to the one distribution destination. And

  The fax machine according to the present invention registers the encryption key and decryption key of each sharer in its own device. The fax machine encrypts the received data using the encryption key of the one sharer when storing the received data in the box of the one sharer based on the storage information registered in the own apparatus. When authentication by one sharer is performed, the fax machine decrypts the received data using the decryption key of the one sharer. After the fax machine prints the received data, the fax machine deletes the received data from one sharer's box.

  When the fax machine receives data confidentially, the received data is protected from eavesdropping by another sharer by the password for confidential reception and the encryption key of one sharer. When the fax machine receives data normally, the received data is protected from wiretapping by another sharer by the encryption key of one sharer. Therefore, even if the sender does not perform confidential transmission or encryption of the transmission data, it is possible to eliminate the possibility that the received data of one sharer can be easily wiretapped by another sharer.

{Configuration of fax transmission / reception system}
Hereinafter, embodiments of the present invention will be described with reference to the drawings. First, the configuration of the fax transmission / reception system will be described with reference to FIGS. FIG. 1 is a diagram showing an overall configuration of a fax transmission / reception system. The fax transmission / reception system includes fax machines 1 and 21, Internet 2, LAN 3, client terminals 31 and 32, and the like.

  The user of the fax machine 21 transmits data such as image data to the users of the client terminals 31 and 32. At this time, the user of the fax machine 21 does not address the users of the client terminals 31 and 32 but the fax machine 1 as the destination. Examples of the fax machines 1 and 21 include a digital multi-function peripheral (MFP) that has not only a data transmission / reception function but also a scanning function.

  The fax machine 21 transmits data to the fax machine 1 via the Internet 2. When the fax machines 1 and 21 handle not only Internet faxes but also normal faxes, the fax transmission / reception system may include not only the Internet 2 but also a normal telephone line network.

  The fax machine 1 receives data from the fax machine 21 via the Internet 2. Then, the fax machine 1 stores the received data in the user box based on the storage information registered in the own machine. The stored information will be described in detail with reference to FIGS. Further, the fax machine 1 encrypts the received data by using the encryption key registered in the own machine.

  The users of the client terminals 31 and 32 receive data such as image data from the user of the fax machine 21. At this time, the users of the client terminals 31 and 32 access the fax machine 1 via the LAN 3 using a web browser. Alternatively, the users of the client terminals 31 and 32 may use a fax driver for operating the fax machine 1. Then, the users of the client terminals 31 and 32 use the decryption key registered in the fax machine 1 to decrypt the received data. Examples of the client terminals 31 and 32 include personal computers.

  In FIG. 1, the fax machine 1 exchanges data with one fax machine 21 and is connected to two client terminals 31 and 32 via a LAN 3. However, the number of fax machines that exchange data with the fax machine 1 and the number of client terminals connected to the fax machine 1 in the LAN 3 are arbitrary.

  FIG. 2 is a block diagram showing components of the fax machine 1. The fax machine 1 includes a reception unit 11, a storage location determination unit 12, an encryption unit 131, a user box 14, a connection unit 15, a web server 16, an authentication unit 17, a decryption unit 132, a printing unit 18, a deletion unit 19, and the like. It is configured.

  The reception unit 11 receives data such as image data from the fax machine 21 via the Internet 2 and outputs the received data to the storage destination determination unit 12.

  The storage location determination unit 12 inputs reception data from the reception unit 11. Then, the storage location determination unit 12 determines the storage location of the received data by referring to the sender and title of the received data. Further, the storage location determination unit 12 outputs the received data to the encryption unit 131.

  Here, when determining the storage destination of the received data, the storage destination determination unit 12 refers to the storage information 121 that associates the sender and title of the reception data with the storage destination of the reception data. The storage information 121 will be described in detail with reference to FIG.

  The encryption unit 131 receives the received data from the storage location determination unit 12. Then, the encryption unit 131 encrypts the received data using the encryption key registered in the fax machine 1. Further, the encryption unit 131 outputs the received data to the user box 14. As a method for generating an encryption key, a public key method for generating a public key and a secret key can be used.

  The user box 14 receives the received data from the encryption unit 131 and stores it. In FIG. 2, the user box 14 includes a user 311 box 141 and a user 321 box 142. A user 311 and a user 321 are users of the client terminals 31 and 32, respectively. However, the number of user boxes included in the user box 14 is arbitrary.

  The connection unit 15 is an interface for exchanging data such as image data between the fax machine 1 and the client terminals 31 and 32.

  The web server 16 provides contents for the user 311 and the user 321 to operate the fax machine 1 to the client terminals 31 and 32, respectively. Further, the web server 16 causes the client terminals 31 and 32 to display the reception data stored in the user 311 box 141 and the user 321 box 142, respectively.

  The authentication unit 17 receives an input of a password from the client terminals 31 and 32 when the web server 16 displays the received data on the client terminals 31 and 32. Then, the authentication unit 17 compares the passwords accepted from the client terminals 31 and 32 with the passwords registered by the user 311 and the user 321 in the fax machine 1, respectively.

  Here, when the authentication unit 17 confirms that both passwords match, the authentication unit 17 instructs the decryption unit 132 to decrypt the received data stored in the user 311 box 141 and the user 321 box 142, respectively. Make a request.

  The decryption unit 132 receives a request to decrypt received data from the authentication unit 17. Then, the decryption unit 132 decrypts the received data using the decryption key registered in the fax machine 1. The web server 16 displays the received data on the client terminals 31 and 32. As a method for generating a decryption key, a public key method for generating a public key and a secret key can be used.

  The printing unit 18 receives a request to print received data from the client terminals 31 and 32. Then, after printing the reception data, the printing unit 18 requests the deletion unit 19 to delete the reception data.

  The deletion unit 19 receives a request to delete received data from the printing unit 18. Then, the deletion unit 19 deletes the received data from the user box 14.

  FIG. 3 is a diagram showing the contents of the storage information 121. The “reception condition” indicates from which sender the received data is received or when the received data has what title to apply the storage information 121. Alternatively, source information (TSI), SUB address, etc. can be used as the “reception condition”.

  “Storage location” indicates in which storage location the reception data from a specific sender or the reception data of a specific title should be stored. “Key” indicates which encryption key is used to encrypt received data, or which decryption key is used to decrypt received data. “Output format” indicates in which output format the received data should be stored.

  For example, when the title of the received data is “Report 161”, the storage location determining unit 12 determines that the received data should be stored in the user 311 box 141. The encryption unit 131 encrypts the received data using the encryption key 151 and determines that the received data should be converted into the PDF format. The decryption unit 132 determines that the received data should be decrypted using the decryption key 152.

  In FIG. 3, one storage destination is described for one reception condition. However, a plurality of storage destinations may be described for one reception condition. When received data is stored in a plurality of storage destinations, the keys for encrypting and decrypting the received data may be the same or different for each storage destination.

{Processing flow of fax transmission / reception system}
Next, the processing flow of the fax transmission / reception system will be described with reference to FIGS. In the following description, the flow of processing in which the user 311 uses the client terminal 31 to print the received data stored in the user 311 box 141 is shown. The flow of processing in which the user 321 uses the client terminal 32 to print the received data stored in the user 321 box 142 is performed in the same manner as the processing flow described below.

  FIG. 4 is a diagram showing a web screen for the user 311 to log in. The user 311 activates a web browser on the client terminal 31. The web server 16 of the fax machine 1 provides content for the user 311 to log in to the web browser of the client terminal 31. The web browser of the client terminal 31 displays the web screen 4 for the user 311 to log in.

  The user 311 inputs his / her user ID in the user ID input box 41. Then, the user 311 inputs his password in the password input box 42. Further, the user 311 clicks the confirmation button 43. The fax machine 1 checks whether the user ID input by the user 311 matches the user ID registered in the own machine. Also, the fax machine 1 checks whether the password entered by the user 311 matches the password registered in the own machine. A case where both user IDs match and a case where both passwords match will be described below.

  FIG. 5 is a diagram showing a web screen for the user 311 to manage user information. The web server 16 provides content for the user 311 to manage user information to the web browser of the client terminal 31. The web browser of the client terminal 31 displays a web screen 5 for the user 311 to manage user information.

  The reception information acquisition button 51 is a button for acquiring the reception information shown in FIG. The reception information is information in which a title, a sender, and the like are described for the reception data stored in the user box 14.

  The storage information registration button 52 is a button for registering the storage information 121 shown in FIG. For example, the user 311 uses the storage information registration button 52 to register the storage information whose storage destination is the “user 311 box 141”. Then, the user 311 associates the title “report 161” and the sender “sender 211” with the storage destination “box 3 for user 311”. Further, the user 321 uses the storage information registration button 52 to register the storage information whose storage destination is the “user 321 box 142”. Then, the user 321 associates the title “Report 162” and the sender “Sender 212” with the storage location “User 321 box 142”.

  The key registration button 53 is a button for registering the encryption key and the decryption key described with reference to FIGS. For example, the user 311 uses the key registration button 53 to register the encryption key 151 and the decryption key 152 shown in FIG. The user 321 registers the encryption key 153 and the decryption key 154 shown in FIG. 3 by using the key registration button 53.

  The password registration button 54 is a button for registering the password shown in FIG. The password shown in FIG. 7 is a password for decrypting the received data stored in the user box 14. The password shown in FIG. 4 is a password for managing user information. These passwords may be the same or different.

  The user 311 has already registered the storage information, the key, and the password by using the storage information registration button 52, the key registration button 53, and the password registration button 54, respectively. Then, the user 311 clicks the reception information acquisition button 51 to acquire the reception information shown in FIG.

  FIG. 6 is a diagram showing a web screen for the user 311 to refer to received information. The web server 16 provides content for the user 311 to refer to the received information to the web browser of the client terminal 31. The web server 16 provides the web browser of the client terminal 31 with reception information in which the title, the sender, and the like are described for the reception data stored in the user 311 box 141. The web browser of the client terminal 31 displays the web screen 6 for the user 311 to refer to the received information. The received data list 61 describes information such as the title and sender of the received data.

  The user 311 box 141 stores the reception data 111 whose title is “Report 161” and whose sender is “Sender 213”. Since the title of the reception data 111 is “report 161”, the storage location determination unit 12 refers to the storage information 121 to determine that the reception data 111 should be stored in the user 311 box 141. Further, the encryption unit 131 refers to the stored information 121 to encrypt the reception data 111 using the encryption key 151 and convert the reception data 111 into the PDF format.

  The user 311 box 141 stores reception data 112 whose title is “Report 163” and whose sender is “Sender 211”. Since the sender of the reception data 112 is “sender 211”, the storage location determination unit 12 refers to the storage information 121 to determine that the reception data 112 should be stored in the user 311 box 141. Further, the encryption unit 131 refers to the storage information 121 to encrypt the reception data 112 using the encryption key 151 and converts the reception data 112 into the TIFF format.

  The user 311 checks the reception data selection check box 62 for the reception data 111 in the reception data selection check box 62. Then, the user 311 displays the contents of the received data 111 on the client terminal 31 by clicking the data display button 63. The user 311 can print the received data 111 by clicking the data print button 64. The user 311 can delete the received data 111 by clicking the data deletion button 65. However, the user 311 needs to perform user authentication when displaying, printing, or deleting the received data 111.

  FIG. 7 is a diagram showing a web screen for user 311 to perform user authentication. The web server 16 provides content for the user 311 to perform user authentication to the web browser of the client terminal 31. The web browser of the client terminal 31 displays a web screen 7 for the user 311 to perform user authentication.

  The user 311 inputs his password in the password input box 71. Then, the user 311 clicks the confirmation button 72. The authentication unit 17 confirms whether the password that the user 311 has entered in FIG. 7 at this time matches the password that the user 311 previously registered in FIG. 5. The case where both passwords match will be described below.

  The authentication unit 17 requests the decryption unit 132 to decrypt the received data 111. The decryption unit 132 receives the request from the authentication unit 17 and refers to the stored information 121 to decrypt the received data 111 using the decryption key 152. Therefore, the web server 16 can provide the reception data 111 to the web browser of the client terminal 31.

  FIG. 8 is a diagram showing a web screen for the user 311 to refer to the received data 111. The web server 16 provides content for the user 311 to refer to the received data 111 to the web browser of the client terminal 31. The web server 16 provides the web browser of the client terminal 31 with the reception data 111 stored in the user 311 box 141. The web browser of the client terminal 31 displays the web screen 8 for the user 311 to refer to the received data 111. The received data display section 81 describes the contents of the received data 111.

  When the user 311 clicks the data print button 82, the printing unit 18 prints the received data 111. When the user 311 clicks the data deletion button 83, the deletion unit 19 deletes the received data 111. Here, after the printing unit 18 prints the reception data 111, the deletion unit 19 deletes the reception data 111 by requesting the deletion unit 19 to delete the reception data 111. However, the received data 111 may not be deleted in order to back up the received data 111.

  Summarize what has been described above. Even when the present invention is not implemented, if the fax machine 21 transmits encrypted data to the fax machine 1, it is difficult for another sharer other than the user 311 to eavesdrop on the received data. However, if the fax machine 21 transmits unencrypted data to the fax machine 1, even if the user 311 receives the data confidentially, it is easy for another sharer other than the user 311 to eavesdrop on the received data. It is.

  However, in the present invention, the received data allocated to the user 311 by the stored information 121 is encrypted with the encryption key 151 of the user 311 registered in the fax machine 1. Then, when the authentication by the user 311 is performed, the decryption key 152 of the user 311 registered in the fax machine 1 is decrypted. Further, the received data is deleted after being printed.

  Thus, even when the fax machine 21 transmits unencrypted data to the fax machine 1, it becomes difficult for another sharer other than the user 311 to eavesdrop on the received data. Even if another sharer other than the user 311 eavesdrops on the received data, the user 311 can confirm the falsification of the received data.

{Modifications}
In the embodiment described above, the fax machine 1 stores received data in the user box 14 based on the storage information 121. The fax machine 1 prints the received data when receiving web access from the user.

  Here, the fax machine 1 can also distribute the received data to the users 311 and 321 without storing the received data in the user box 14. At this time, the fax machine 1 registers not the storage information 121 in which “storage destination” is described but the distribution information 121 in which “distribution destination” is described in its own apparatus. The fax machine 1 includes a delivery destination determination unit 12 instead of the storage destination determination unit 12. Then, the users 311 and 321 register the mail addresses of the users 311 and 321 as “distribution destination” in the distribution information 121.

  For example, consider the case where the fax machine 1 receives data from the fax machine 21 whose title is “Report 161”. The distribution destination determination unit 12 refers to the distribution information 121 and determines that the received data should be distributed to the mail address of the user 311. The encryption unit 131 refers to the distribution information 121 and determines that the received data should be encrypted using the encryption key 151.

  The encrypted received data is distributed to the mail address of the user 311. The user 311 decrypts the received data using the decryption key 152 at the client terminal 31. At this time, authentication by the user 311 may be required.

  The fax machine 1 can also distribute the received data to the shared folders of the users 311 and 321 without storing the received data in the user box 14. Also at this time, the fax machine 1 has registered the delivery information 121 in its own device and includes the delivery destination determination unit 12. The users 311 and 321 register the shared folders of the users 311 and 321 as “distribution destination” in the distribution information 121.

  For example, consider the case where the fax machine 1 receives data from the fax machine 21 whose title is “Report 161”. The distribution destination determination unit 12 refers to the distribution information 121 and determines that the received data should be distributed to the shared folders of the users 311 and 321. The encryption unit 131 refers to the distribution information 121 and determines that the received data should be encrypted using the encryption key 151.

  The encrypted received data is distributed to the shared folders of the users 311 and 321. The user 311 accesses the shared folder of the users 311 and 321 at the client terminal 31 and decrypts the received data using the decryption key 152. At this time, since the shared folder relates to the sharing of the users 311 and 321, authentication by the user 311 may be required.

It is a figure which shows the whole structure of a fax transmission / reception system. It is a block diagram which shows the component of a fax machine. It is a figure which shows the content of stored information. It is a figure which shows the web screen for a user to log in. It is a figure which shows the web screen for a user to manage user information. It is a figure which shows the web screen for a user to refer reception information. It is a figure which shows the web screen for a user to perform user authentication. It is a figure which shows the web screen for a user to refer to received data.

Explanation of symbols

1 Fax machine 2 Internet 3 LAN
DESCRIPTION OF SYMBOLS 11 Receiving part 12 Storage destination judgment part 14 User box 15 Connection part 16 Web server 17 Authentication part 18 Printing part 19 Deletion part 21 Fax machine 31, 32 Client terminal 121 Storage information 131 Encryption part 132 Decryption part

Claims (3)

A storage location determination unit that determines a storage location in which received data is stored based on storage information that associates a reception condition with a storage location;
An encryption unit that encrypts the reception data stored in the one storage destination using the encryption key associated with the one storage destination when the reception data is stored in the one storage destination;
When the authentication necessary for decrypting the received data stored in the one storage destination is made, the reception stored in the one storage destination using the decryption key related to the one storage destination A decryption unit for decrypting data;
A data storage device comprising: The data storage device according to claim 1, further comprising:
A deletion unit that deletes the reception data stored in the one storage destination from the one storage destination when the reception data stored in the one storage destination is printed;
A data storage device comprising: A distribution destination determination unit that determines a distribution destination to which received data is distributed based on distribution information that associates a reception condition with a distribution destination;
An encryption unit that encrypts the reception data distributed to the one distribution destination using the encryption key associated with the one distribution destination when the reception data is distributed to the one distribution destination;
A data distribution apparatus comprising:

Images