JP2011039956A - Information processor, information processing system, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processor for storing information to be processed using a nonvolatile storage medium, which prevents the contents of the information to be processed from illegally reading even if the nonvolatile storage medium is illegally taken out. <P>SOLUTION: The image processor 1 has a system memory 22 as a volatile storage medium and a HDD (hard disc drive) 24 as the nonvolatile storage medium. The image processor 1 includes: an encode processing part 37 which encodes the information to be processed; a decode processing part 38 which decodes the encoded information to be processed; a HDD control part 39 which controls to store in the HDD 24 the information to be processed, encoded by the encode processing part 37; and a memory control part 36 which controls to store in the system memory 22 a decoding key used by the decode processing part 38 when the information to be processed encoded by the encode processing part 37 is decoded. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an information processing apparatus, an information processing system, and a program.

  In Patent Document 1, a first encryption key is stored in a secure memory, a second encryption key encrypted with the first encryption key is stored in a first storage device, and encrypted with the second encryption key. For an image processing apparatus having at least one of a plotter and a scanner storing data in a second storage device, the second encryption key is decrypted using the first encryption key, and the second encryption key is provided outside the apparatus. A backup unit that backs up as a backup key, a restore unit that restores the backup key to the inside of the device when the first encryption key cannot be used, and the backup key that is restored to the inside of the device. An image processing apparatus having decoding means for decoding stored data is disclosed.

  In Patent Document 2, when the scramble mode or the descrambling mode is set, the non-volatile storage unit is not used, and only the volatile storage unit is used, and the image printing is provided with the storage control unit that stores the image data. An apparatus is disclosed.

JP 2008-236091 A JP 2006-35767 A

  The problem of the present invention is that even when a nonvolatile storage medium is illegally extracted from an information processing apparatus that stores processed information using a nonvolatile storage medium, the contents of the processed information are illegally browsed. There is no mechanism to provide.

The invention described in claim 1
An encryption means for encrypting information to be processed;
Decryption means for decrypting the processed information encrypted by the encryption means;
A volatile storage medium;
A non-volatile storage medium;
First control means for controlling the process information encrypted by the encryption means to be stored in the nonvolatile storage medium;
An information processing apparatus comprising: a second control unit configured to control a decryption key used by the decryption unit to be stored in the volatile storage medium when the process information encrypted by the encryption unit is decrypted. It is related to.

The invention described in claim 2
A power switch;
Power control means for controlling the supply of power to the nonvolatile storage medium to be stopped while maintaining the supply of power to the volatile storage medium when the power switch is turned off. This relates to the information processing apparatus according to 1.

The invention according to claim 3
The volatile storage medium is configured using a DRAM (Dynamic Random Access Memory) having a self-rewriting operation function,
The information processing apparatus according to claim 2, wherein the second control unit places the DRAM in a self-rewrite operation state when the power switch is turned off.

The invention according to claim 4
A terminal device for transmitting the processing information;
An encryption means for encrypting the processed information transmitted from the terminal device; a decrypting means for decrypting the processed information encrypted by the encryption means; a volatile storage medium; and a nonvolatile storage medium; A first control unit for controlling the processing information encrypted by the encryption unit to be stored in the non-volatile storage medium; and when the processing information encrypted by the encryption unit is decrypted An information processing system comprising: an information processing apparatus including: a second control unit configured to control a decryption key used by the decryption unit to be stored in the volatile storage medium.

The invention described in claim 5
A computer of an information processing apparatus having a volatile storage medium and a nonvolatile storage medium,
An encryption means for encrypting information to be processed;
Decryption means for decrypting the processing information encrypted by the encryption means;
First control means for controlling the process information encrypted by the encryption means to be stored in the nonvolatile storage medium;
Program for functioning as second control means for controlling to store the decryption key used by the decryption means in the volatile storage medium when decrypting the process information encrypted by the encryption means It is related to.

  According to the first aspect of the present invention, even when the nonvolatile storage medium is illegally extracted from the information processing apparatus that stores the processed information using the nonvolatile storage medium, the content of the processed information is illegal. An information processing apparatus that is not browsed can be provided.

  According to the second aspect of the present invention, even when the power switch is turned off, the state where the decryption key is stored in the volatile storage medium can be maintained.

  According to the third aspect of the present invention, even when the power switch is turned off, the data including the decryption key can be held in the DRAM simply by supplying power to the DRAM.

  According to the invention described in claim 4, even when the nonvolatile storage medium is illegally extracted from the information processing apparatus that stores the processed information using the nonvolatile storage medium, the content of the processed information is illegal. An information processing system that is never browsed can be realized.

  According to the fifth aspect of the present invention, even when the nonvolatile storage medium is illegally extracted from the information processing apparatus that stores the processed information using the nonvolatile storage medium, the content of the processed information is illegal. A program for realizing an information processing apparatus that is not browsed can be provided.

1 is a block diagram illustrating an example of the overall configuration of an image processing apparatus according to an embodiment of the present invention. It is a block diagram which shows the structural example inside a controller. 1 is a schematic configuration diagram of an image processing system according to an embodiment of the present invention. 6 is a flowchart illustrating an example of a processing procedure performed inside the image processing apparatus when a sub power switch is switched from an on state to an off state. It is a flowchart which shows the procedure of a power-off transfer process. 4 is a flowchart illustrating an example of a processing procedure performed in the image processing apparatus 1 when a sub power switch is switched from an off state to an on state. It is a block diagram which shows an example of main function structures of the image processing apparatus which concerns on embodiment of this invention. 6 is a flowchart illustrating an example of a processing procedure performed when the image processing apparatus according to the embodiment of the present invention is activated. 6 is a flowchart (part 1) illustrating an example of a processing procedure when the image processing apparatus according to the embodiment of the present invention receives image data for printing from a terminal device. 6 is a flowchart (part 2) illustrating an example of a processing procedure when the image processing apparatus according to the embodiment of the present invention receives image data for printing from the terminal device. 12 is a flowchart (No. 3) illustrating an example of a processing procedure when the image processing apparatus according to the embodiment of the present invention receives image data for printing from the terminal device. It is a flowchart which shows the user's operation procedure which concerns on the execution instruction of print output.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. It should be noted that the technical scope of the present invention is not limited to the embodiments described below, and various modifications and improvements have been made within the scope of deriving specific effects obtained by the constituent requirements of the invention and combinations thereof. Including form.

  In the embodiment of the present invention, “image information” will be described as an example of “processed information”, and “image processing apparatus” will be described as an example of “information processing apparatus”. The image processing apparatus is configured using, for example, a copying machine, a printer, a facsimile apparatus, or an image forming apparatus having at least two of these functions. In addition to this, for example, a print server is also an example of the image processing apparatus.

<Overall configuration of image processing apparatus>
FIG. 1 is a block diagram showing an overall configuration example of an image processing apparatus according to an embodiment of the present invention. The image processing apparatus 1 includes a main power switch 2, a sub power switch 3, a first power supply unit 4, a second power supply unit 5, a relay (relay) 6, a controller 7, an operation unit 8, an image reading A unit 9 and an image forming unit 10 are provided.

  The main power switch 2 performs a switching operation (ON / OFF) between the power plug 11 and the relay 6 that are inserted and removed from an AC outlet (not shown). The main power switch 2 is turned on (off) or turned off (off) by, for example, a mechanical (artificial) pressing operation with the power plug 11 inserted into the AC outlet. The main power switch 2 is a switch for turning on / off the power supplied from the AC outlet at AC 100V. For this reason, when the main power switch 2 is turned off (off), the power supply to the image processing apparatus 1 is completely stopped. The main power switch 2 is used when the image processing apparatus 1 is first installed, when the image processing apparatus 1 is moved to another place after installation, or after the image processing apparatus 1 is once moved from the installation place. It is turned on / off when returning to

  The sub power switch 3 is provided as an example of the “power switch” in the present invention. Similar to the main power switch 2, the sub power switch 3 is turned on (turned on) / off (turned off) by, for example, a mechanical (artificial) pressing operation. The sub power switch 3 leaves the power supply to the minimum functional parts including the sub power switch 3 in the image processing apparatus 1 and stops the power supply to other parts or returns from the stopped state. It is a switch to let you do. When the sub power switch 3 is pressed down mechanically, the switch may be turned on or off depending on the state of the switch itself (on / off).

  Specifically, when the sub power switch 3 is pressed while the sub power switch 3 is turned off, the sub power switch 3 is turned on by the pressing operation. When the sub power switch 3 is pressed while the sub power switch 3 is turned on, the sub power switch 3 is turned off by the pressing operation. In the following description, for each of the main power switch 2 and the sub power switch 3, a state where the power switch is turned on is also referred to as an on state, and a state where the power switch is turned off is referred to as an off state.

  When the sub power switch 3 is turned on, an ON signal is output from the sub power switch 3 to the controller 7. When the sub power switch 3 is turned off, an off signal is output from the sub power switch 3 to the controller 7.

  The sub power switch 3 always functions as a “power switch” when the main power switch 2 is in an on state with the power plug 11 inserted into an AC outlet. The sub power switch 3 is inserted from the time when the power plug 11 is inserted into the AC outlet and the main power switch 2 is turned on until the main power switch 2 is turned off (or until the power plug 11 is removed from the AC outlet). During this time, the switch is turned on or off by the mechanical pressing operation described above. When the sub power switch 3 is turned off, the image processing apparatus 1 is substantially turned off. For this reason, the user who uses the image processing apparatus 1 turns on (turns on) / off the sub power switch 3 to turn on the power of the image processing apparatus 1 and to turn off the power of the image processing apparatus 1, respectively. (Off) will be operated.

  The switch method applied to the main power switch 2 and the sub power switch 3 may be a seesaw method, a push button method, or the like. Further, different switch systems (for example, the main power switch 2 is a seesaw system and the sub power switch 3 is a push button system) may be adopted for the main power switch 2 and the sub power switch 3.

  The first power supply unit 4 supplies power to the controller 7 at a specified voltage (5 V in the example) when the main power switch 2 is in the ON state.

  When the main power switch 2 is in the on state and the relay 6 is in the on (closed) state, the second power supply unit 5 is respectively defined for the operation unit 8, the image reading unit 9, and the image forming unit 10. Power is supplied with voltage (5V and 24V in the example).

  The relay 6 is provided in the middle of a power cable (not shown) that connects the main power switch 2 and the second power supply unit 5. The relay 6 operates on / off (open / close) in accordance with a control signal output from the controller 7. When the relay 6 is turned on according to the control signal output from the controller 7 when the main power switch 2 is in the on state, the second power source is supplied to the operation unit 8, the image reading unit 9, and the image forming unit 10. Power is supplied from the unit 5. Further, when the relay 6 is turned off in accordance with the control signal output from the controller 7 when the main power switch 2 is in the on state, the operation unit 8, the image reading unit 9, and the image forming unit 10 are instructed. (2) Supply of power from the power supply unit 5 is stopped.

  The controller 7 controls the overall operation of the image processing apparatus 1 including the operation unit 8, the image reading unit 9, and the image forming unit 10. The internal configuration of the controller 7 will be described later.

  The operation unit 8 is operated by a user who uses the image processing apparatus 1. More specifically, the operation unit 8 is a user interface (hereinafter referred to as “UI”) for allowing the user using the image processing apparatus 1 to input various information and displaying various information to the user. Is also written). The operation unit 8 includes, for example, an input unit having various buttons, switches, keys, and the like, and a display unit including a liquid crystal display with a touch panel.

  The image reading unit 9 optically reads an image recorded on a document. The image reading unit 9 is configured by, for example, an image scanner using an imaging element such as a CCD (Charge Coupled Device) image sensor. The image reading unit 9 is an example of an input unit that inputs image data.

  The image forming unit 10 forms (prints out) an image on a sheet as an example of a recording medium. The image forming unit 10 is configured using, for example, a print engine that prints an image on a sheet by a printing method such as an electrophotographic method, an inkjet method, or a thermal transfer method. The image information that is the basis of the image formed on the paper by the image forming unit 10 includes not only the image information read from the original by the image reading unit 9, but also image information received from an external device via a network, a public line, etc. The image information may be read from a portable storage medium such as a USB memory. Image information is electronic information (data) and is synonymous with image data. For this reason, in the following description, image information is also referred to as image data.

<Configuration of controller>
FIG. 2 is a block diagram showing a configuration example inside the controller. The controller 7 includes a CPU (Central Processing Unit) 21, a system memory 22, a program memory 23, a hard disk drive (hereinafter abbreviated as “HDD”) 24, a power supply control circuit 25, a timer 26, and a network interface. A circuit (network IF circuit) 27, a PHY (physical layer) chip 28, a UI (user interface) control circuit 29, and a video interface circuit (video IF circuit) 30 are provided.

  A system memory 22 and a program memory 23 are connected to the CPU 21 via a memory bus 31. The CPU 21 is connected to the HDD 24 by, for example, the SATA standard. A power control circuit 25 and a network interface circuit 27 are connected to the CPU 21 via a PCI (Peripheral Components Interconnect bus) bus 32. Further, a UI control circuit 29 and a video interface circuit 30 are connected to the CPU 21 via a PCI bus 33 which is a system different from the PCI bus 32.

  The CPU 21 performs various processes by reading various programs stored in the program memory 23 into the system memory 22 and executing them. The CPU 21 has a function as a memory control unit (memory controller) that controls writing and reading of data to and from the system memory 22.

  The system memory 22 is used as a work memory for the CPU 21. The system memory 22 is provided as an example of a volatile storage medium. The system memory 22 can also be configured using, for example, a DRAM (Dynamic Random Access Memory) or an SRAM (Static Random Access Memory), which is one of semiconductor memory elements. Here, as an example, the system memory 22 is configured using a DRAM having a self-refresh (self-rewrite operation) function. A volatile storage medium refers to a storage medium whose stored contents disappear when power supply is cut off.

  The program memory 23 stores various programs for realizing the functions provided by the image processing apparatus 1. The program stored in the program memory 23 includes, for example, a control program for controlling the operation of the image processing apparatus 1, and image processing (for example, color conversion, color correction, gradation correction, enlargement) on image data handled by the image processing apparatus 1. Image processing program for performing processing such as reduction, image rotation, and screen generation) and a communication program for communicating with an external device. The program memory 23 is configured using, for example, a PROM (Programmable Read Only Memory).

  The HDD 24 is used for storing various data including image data handled by the image processing apparatus 1. The HDD 24 is provided as an example of a nonvolatile storage medium. A non-volatile storage medium refers to a storage medium that retains stored contents even when power supply is cut off. Examples include EEPROM (Electrically Erasable Programmable Read Only Memory), flash memory, and FeRAM (Ferroelectric Random Access Memory).

  The power control circuit 25 operates the relay 6 described above to control power supply to the operation unit 8, the image reading unit 9, and the image forming unit 10, and control power supply inside the controller 7. . An ON signal or an OFF signal is input to the power control circuit 25 from the sub power switch 3 described above.

  The power control circuit 25 sets or changes the power state of the image processing apparatus 1 based on a predetermined condition when the main power switch 2 is in the on state. The power supply state of the image processing apparatus 1 set by the power supply control circuit 25 includes a plurality of power supply states with different power consumption per unit time. Here, as an example, it is assumed that there are four power supply states. These four power supply states are classified into a first power supply state, a second power supply state, a third power supply state, and a fourth power supply state in descending order of power consumption per unit time. Switching of the power supply state of the image processing apparatus 1 is executed by the power supply control circuit 25.

  The first power supply state is applied, for example, when the image processing apparatus 1 is operating (for example, the image forming unit 10 is operating) or waiting for processing (hereinafter also referred to as “standby state”). Is the power state. When the image processing apparatus 1 is in the first power supply state, power is supplied to all the functional units in the controller 7 by the power supplied from the first power supply unit 4 and the second power supply unit 5 The power is supplied to all of the operation unit 8, the image reading unit 9 and the image forming unit 10 by the power supplied from.

  The second power supply state is, for example, a power supply that is applied when the time during which the image processing apparatus 1 waits for processing substantially has been suspended has exceeded a preset first time. State. The time that the image processing apparatus 1 is waiting for processing is measured using the timer 26. When the image processing apparatus 1 is in the second power supply state, for example, if the image forming unit 10 has a fixing device included in an electrophotographic printing engine, the set temperature of the heater for preheating the fixing device is lowered. Or the backlight of the liquid crystal display constituting the display unit of the operation unit 8 is turned off to reduce the power consumed by the image forming unit 10.

  In the third power supply state, for example, the time during which the image processing apparatus 1 waits for processing and has substantially stopped operating is a preset second time (the second time is the first time). It is a power supply state applied when exceeding When the image processing apparatus 1 is in the third power supply state, the relay 6 is turned off. For this reason, in the third power supply state, the supply of power to the operation unit 8, the image reading unit 9, and the image forming unit 10 is cut off.

  The fourth power supply state is, for example, a power supply state that is applied when the sub power switch 3 is pressed to switch the sub power switch 3 from the on state to the off state, that is, when the sub power switch 3 is turned off. It is. When the image processing apparatus 1 is in the fourth power supply state, the CPU 21, the program memory 23, the HDD 24, and the network interface circuit are provided inside the controller 7 in addition to the portion where the power supply is cut off in the third power supply state. 27, the supply of power to the PHY chip 28, the UI control circuit 29, and the video interface circuit 30 is cut off. Therefore, in the fourth power supply state, power is supplied only to the system memory 22, the power supply control circuit 25, and the timer 26 inside the controller 7.

  However, under the fourth power state, for example, when there is an instruction to print image data (hereinafter, “print instruction”) from the external terminal device 34, the print instruction is automatically received. Alternatively, power may be supplied to the network interface circuit 27 and the PHY chip 28 so that the first power supply state can be restored.

  The timer 26 is used for time measurement.

  The network interface circuit 27 is for communicating (transmitting or receiving data) with an external terminal device 34 via a network (not shown). The network interface circuit 27 is an example of an input unit that inputs image data. The terminal device 34 is configured by a personal computer, for example. One or a plurality of terminal devices 34 are connected on the network. The network interface circuit 27 is connected to a network such as a LAN (local area network) via the PHY chip 28.

  FIG. 3 is a schematic diagram illustrating an example of an information processing system configured using the image processing apparatus 1 and the terminal device 34. As illustrated, the image processing apparatus 1 as an example of an information processing apparatus is connected to a plurality of (three in the illustrated example) terminal devices 34 so as to be able to communicate with each other via a network NW. Each terminal device 34 transmits image data (image information) as an example of information to be processed to the image processing device 1. The image processing device 1 receives the image data transmitted from the terminal device 34 and processes it internally.

  Returning to FIG. 2 again, the UI control circuit 29 exchanges operation data with the operation unit 8. The operation data includes data sent from the UI control circuit 29 to the operation unit 8 and data sent from the operation unit 8 to the UI control circuit 29. For example, the data sent from the UI control circuit 29 to the operation unit 8 includes display data for displaying various operation screens on the display unit of the operation unit 8. The data sent from the operation unit 8 to the UI control circuit 29 includes input data input by the user through the input unit of the operation unit 8.

  The video interface circuit 30 exchanges various data (image data, control data, etc.) between the image reading unit 9 and the image forming unit 10 serving as image data input / output devices. For example, image data obtained when the image reading unit 9 optically reads a document image is sent from the image reading unit 9 to the video interface circuit 30. Further, image data to be output to the sheet by the image forming unit 10 is sent from the video interface circuit 30 to the image forming unit 10. Control data for controlling the operation of the image reading unit 9 is sent from the video interface circuit 30 to the image reading unit 9, and control data for controlling the operation of the image forming unit 10 is sent from the video interface circuit 30. It is sent to the image forming unit 10.

<Example of processing when the power switch is off>
FIG. 4 is a flowchart showing an example of a processing procedure performed inside the image processing apparatus 1 when the sub power switch 3 is switched from the on state to the off state. Here, it is assumed that at the start of processing, the sub power switch 3 is on and the power state of the image processing apparatus 1 is the first power state. The processing described below is executed by the CPU 21 reading out the control program stored in the program memory 23 or the HDD 24 to the system memory 22 and processing it.

  First, in the controller 7, the power supply control circuit 25 continuously monitors whether or not the sub power switch 3 is turned off (step S1). When the sub power switch 3 is pressed by the user in the on state, the sub power switch 3 is switched to the off state as a trigger. When the sub power switch 3 is switched from the on state to the off state, an off signal is output from the sub power switch 3 to the controller 7. Inside the controller 7, the power supply control circuit 25 receives the off signal output from the sub power switch 3. For this reason, the power supply control circuit 25 determines that the sub power switch 3 has been turned off in response to the reception of the off signal from the sub power switch 3.

  Next, in the controller 7, the power supply control circuit 25 switches the power supply state of the image processing apparatus 1 from the first power supply state to the second power supply state (step S <b> 2), and then the power supply state of the image processing apparatus 1. Is switched from the second power supply state to the third power supply state (step S3).

  Next, in the controller 7, a power-off transition process is performed (step S4). The power-off transition process is a process performed to shift the power state of the image processing apparatus 1 to the fourth power state.

  The power-off transition process is performed, for example, according to the procedure shown in FIG.

  First, the CPU 21 ends various application programs (step S4-1).

  Next, the CPU 21 writes and saves the register information of the CPU 21 in the system memory 22 (step S4-2).

  Next, the CPU 21 writes the return information of the image processing apparatus 1 in the system memory 22 and saves it (step S4-3). The restoration information of the image processing apparatus 1 described here includes information indicating the state of the image processing apparatus 1 immediately before the sub power switch 3 is turned off, and various setting information set by the user for the image processing apparatus 1. Etc. are included.

  Next, the CPU 21 sets the system memory 22 to the self-refresh mode (self-rewrite operation state) (step S4-4). The process of setting the system memory 22 in the self-refresh mode is performed by a memory control unit 36 described later. Incidentally, before the CPU 21 sets the system memory 22 in the self-refresh mode, the CPU 21 refreshes the system memory 22 at regular intervals.

  Next, the power supply control circuit 25 stops the supply of power to each unit (including the CPU 21 and the HDD 24) in the controller 7 except for the system memory 22, the power supply control circuit 25, and the timer 26 (step S4-5). .

<Example of processing when the power switch is turned on>
FIG. 6 is a flowchart showing an example of a processing procedure performed in the image processing apparatus 1 when the sub power switch 3 is switched from the off state to the on state. The processing described below is executed by the CPU 21 reading out the control program stored in the program memory 23 or the HDD 24 to the system memory 22 and processing it.

  First, when the image processing apparatus 1 is in the fourth power supply state, the power supply control circuit 25 continuously monitors whether or not the sub power switch 3 is turned on in the controller 7 (step S11). When the sub power switch 3 is pressed by the user in the off (off) state, the sub power switch 3 is switched to the on (on) state. When the sub power switch 3 is switched from the off state to the on state, an on signal is output from the sub power switch 3 to the controller 7. Inside the controller 7, the power supply control circuit 25 receives the ON signal output from the sub power switch 3. For this reason, the power supply control circuit 25 determines that the sub power switch 3 is turned on in response to the reception of the ON signal from the sub power switch 3.

  Next, in the controller 7, the power supply control circuit 25 starts supplying power to each unit including the CPU 21 and the HDD 24, which has previously stopped supplying power (step S <b> 12).

  Next, in the controller 7, the CPU 21 cancels the self-refresh mode of the system memory 22 and initializes the CPU 21 itself (step S13).

  Next, in the controller 7, the CPU 21 reads the register information of the CPU 21 stored (stored) in the system memory 22 and sets the register of the CPU 21 itself (step S14).

  Next, in the controller 7, the CPU 21 reads various application programs into the system memory 22 and starts them (step S15). As a result, the various applications are reset in the program area.

  Next, in the controller 7, the CPU 21 performs initialization processing of the operation unit 8, the image reading unit 9, and the image forming unit 10 (step S16). At this time, the power supply control circuit 25 turns on the relay 6 prior to the initialization process, thereby supplying power to the operation unit 8, the image reading unit 9, and the image forming unit 10, which have previously stopped supplying power. Start supplying power.

  With the above processing, the power state of the image processing apparatus 1 returns to the first power state, and the image processing apparatus 1 enters the standby state.

  FIG. 7 is a block diagram showing an example of a main functional configuration of the image processing apparatus 1 according to the embodiment of the present invention. In FIG. 7, the functional parts other than the system memory 22 and the HDD 24 are executed by the CPU 21 which is a hardware resource of the computer of the image processing apparatus 1 reads out the program stored in the program memory 23 or the HDD 24 to the system memory 22 and executes it. Realized. The program for this purpose may be provided by being stored in a recording medium such as a CD-ROM, or may be provided by distribution via wired or wireless communication means.

  As shown in the figure, in addition to the system memory 22 and the HDD 24, the image processing apparatus 1 includes a key generation unit 35, a memory control unit 36, an encryption processing unit 37, a decryption processing unit 38, and an HDD control unit. 39 and an encryption necessity determination unit 40.

  The key generation unit 35 includes a key used by the encryption processing unit 37 to encrypt information (hereinafter referred to as “encryption key”) and a key used by the decryption processing unit 38 to decrypt information (hereinafter referred to as “decryption key”). ) Is generated. In the embodiment of the present invention, as an example, according to the common key encryption method in which the encryption key and the decryption key are common (identical), the encryption processing unit 37 and the decryption processing unit 38 respectively use the same key. It shall be encrypted and decrypted.

  However, the present invention is not limited to this, and the encryption processing unit 37 and the decryption processing unit 38 may perform encryption and decryption using different keys according to public key cryptosystems having different encryption keys and decryption keys. Good.

  The memory control unit 36 writes / reads data to / from the system memory 22 and controls the operation mode of the system memory 22. Further, the memory control unit 36 stores the keys generated by the key generation unit 35 and used by the encryption processing unit 37 and the decryption processing unit 38 in the system memory 22 for encryption and decryption of information, respectively. To control. The memory control unit 36 is provided as an example of a second control unit.

  The encryption processing unit 37 encrypts information (plain text) using the encryption key generated by the key generation unit 35. The encryption processing unit 37 is provided as an example of an encryption unit.

  The decryption processing unit 38 decrypts information (ciphertext) using the decryption key generated by the key generation unit 35. The decryption processing unit 38 is provided as an example of decryption means.

  The HDD control unit 39 writes and reads data to and from the HDD 24. In addition, the HDD control unit 39 performs control so that the information encrypted by the encryption processing unit 37 is stored in the HDD 24. The HDD control unit 39 is provided as an example of a first control unit.

  The encryption necessity determination unit 40 analyzes the image data received by the network interface circuit 27 from the external terminal device 34 via the network, and determines whether or not the image data needs to be encrypted.

  FIG. 8 is a flowchart illustrating an example of a processing procedure performed when the image processing apparatus 1 is activated.

  Before the image processing apparatus 1 is activated, the power plug 11 is not inserted into the AC outlet, or the main power switch 2 is turned off even if the power plug 11 is inserted. When the main power switch 2 and the sub power switch 3 are sequentially turned on with the power plug 11 inserted into the AC outlet, the image processing apparatus 1 is activated.

  When the image processing apparatus 1 is activated in this way, a startup process is performed. After the startup process is completed, the image processing apparatus 1 enters a standby state waiting for processing. At that time, in the middle of the startup process or at the stage when the startup process is completed, the CPU 21 receives data input for key generation from the user via the operation unit 8 (step S21). Data received by the operation unit 8 is taken into the CPU 21 via the UI control circuit 29 and given to the key generation unit 35.

  Then, the key generation unit 35 generates a key used for information encryption and decryption using the given input data (step S22). As for the key for encryption and decryption, the data input by the user through the operation unit 8 is not generated as it is, but the key generation unit 35 determines the input data as “key seed” in advance. Generated according to the specified key generation algorithm. The key generated by the key generation unit 35 is given to the memory control unit 36.

  Then, the memory control unit 36 stores (stores) the given key in the system memory 22 (step S23).

  With the above processing, when the image processing apparatus 1 is in a standby state waiting for processing, the system memory 22 is in a state where keys for encryption and decryption are stored.

  9 to 11 are flowcharts illustrating an example of a processing procedure when the image processing apparatus 1 receives image data for printing from the terminal device 34. The processing shown in this flowchart includes the functional units of the key generation unit 35, the memory control unit 36, the encryption processing unit 37, the decryption processing unit 38, the HDD control unit 39, and the encryption necessity determination unit 40 described above. The CPU 21 is the main body.

  Here, as an example, a case where image data for printing transmitted from the terminal device 34 is processed by the image processing device 1 will be described. However, information (processed information) to be processed by the image processing device 1 is as follows. The image data is not limited to the image data transmitted from the terminal device 34. For example, image data read from a document by the image reading unit 9 of the image processing apparatus 1 and information such as images, text, graphics, and documents generated inside the image processing apparatus 1 are processed as an example of information to be processed. You may do.

(Processing flow of FIG. 9)
First, when image data for printing is transmitted together with a print command from the terminal device 34 to the image processing apparatus 1, the image data is received by the network interface circuit 27 and then taken into the CPU 21 (step S31).

  Next, the captured image data is analyzed by the encryption necessity determination unit 40 (step S32).

  Next, based on the analysis result in step S32, the encryption necessity determination unit 40 determines whether it is necessary to encrypt the captured image data (step S33). This determination is made, for example, based on whether or not the captured image data is confidential information.

  Whether or not the image data received from the terminal device 34 is confidential information may be determined by the following mechanism, for example. That is, when image data is transmitted from the terminal device 34, information indicating that it is classified information is included in the attribute information attached to the image data, and the information is included in the attribute information. If it is not included, it may be determined that the information is not classified information.

  In addition to this, for example, if the image data includes specific information determined in advance, for example, character information such as “confidential” or “confidential”, it is determined that the information is classified. However, if the specific information is not included, it may be determined that the information is not classified information.

  In addition to the attribute information of the image data, the information is classified information, such as code information such as a barcode included in the image data, or invisible information embedded in the image data using a digital watermark technique or the like. If the information is included in the code information or invisible information, it is determined that the information is classified, and if it is not included, the information is determined not to be classified. It may be a mechanism.

  In addition, information indicating that the information is classified information is included in the print instruction transmitted from the terminal device 34 to the image processing apparatus 1, and if the information is included in the print instruction, the information is classified. It may be determined to be information, and if it is not included, a mechanism for determining that the information is not classified information may be used.

  Next, the image data determined to be encrypted by the encryption necessity determination unit 40 is encrypted by the encryption processing unit 37 (step S34). Prior to this encryption, the encryption processing unit 37 encrypts the image data using a key (encryption key) read from the system memory 22 by the memory control unit 36.

  Here, as an example, the image data is encrypted by the encryption processing unit 37 only when the image data received from the terminal device 34 is confidential information. However, the present invention is not limited to this, and the terminal device 34 is not limited thereto. All the information to be processed received from the information processing unit 37 may be encrypted by the encryption processing unit 37.

  Next, the HDD control unit 39 stores the image data encrypted by the encryption processing unit 37 or the original (original) image data not encrypted in the HDD 24 (step S35). When the encryption processing unit 37 encrypts the image data in step S34, the HDD control unit 39 stores the image data (cipher text) generated by the encryption in the HDD 24. If the encryption processing unit 37 does not encrypt the image data in step S <b> 34, the HDD control unit 39 stores the unencrypted original (original) image data (plain text) in the HDD 24.

  Next, the CPU 21 determines whether or not user authentication is required when printing the image data stored in the HDD 24 by the HDD control unit 39 in step S35 (step S36). This determination is made, for example, when the content of the print instruction received from the terminal device 34 satisfies a preset condition, it is determined that the authentication is necessary. When the condition is not satisfied, the authentication is not necessary. to decide. More specifically, for example, when the content of the print instruction is the content instructing application of “confidential printing”, it is determined that the user authentication is necessary, and otherwise the authentication is determined not necessary.

  “Confidential printing” is one of print processing forms when image data is printed between the terminal device 34 and the image processing apparatus 1 using a network. When performing confidential printing, a dedicated (individual) storage area called a confidential box is allocated in advance to a part of the storage area of the HDD 24 for each user. The user needs to register authentication information in order to open a confidential box in the HDD 24.

  Within the HDD 24, a confidential box and authentication information are associated and managed. Therefore, when image data instructed to apply confidential printing is received from the terminal device 34, the image data is stored in the HDD 24 and associated with the authentication information received from the terminal device 34 together with the image data. The image data is stored (stored) in the confidential box in the HDD 24.

  User authentication includes, for example, authentication using a password, authentication using a password and a user ID, authentication using an IC card, authentication using an IC card and a password, and authentication using biometric feature information ( Biometric authentication) is used. In this embodiment, as an example, a user authentication process is performed using a password and a user ID.

  If it is determined in step S36 that user authentication is not required, the process proceeds to the processing flow shown in FIG. If it is determined in step S36 that user authentication is necessary, the process proceeds to the processing flow shown in FIG.

(Processing flow of FIG. 10)
When the processing flow shown in FIG. 10 is entered, first, the HDD control unit 39 reads the image data stored in the HDD 24 in step S35 from the HDD 24 (step S37).

  Next, the CPU 21 determines whether or not the image data read in step S37 is encrypted (step S38). If it is encrypted, the encrypted image data is decrypted by the decryption processing unit 38 (step S39). At the time of this decryption, the decryption processing unit 38 decrypts the image data using the key (decryption key) read from the system memory 22 by the memory control unit 36 prior to the decryption. Thereby, the original image data is generated.

  Next, the memory control unit 36 expands the image data read from the HDD 24 by the HDD control unit 39 in step S37 or the image data decoded by the decoding processing unit 38 in step S39 in the system memory 22 (step S39). S40).

  Next, the CPU 21 sends the image data developed in the system memory 22 in step S40 to the image forming unit 10 via the video interface circuit 30, thereby printing the image on the image forming unit 10 (the image is printed on paper). Printing (step S41).

  Next, the HDD control unit 24 deletes the image data that has been printed out of the image from the HDD 24 (step S42). In this specification, “deleting data” stored in the HDD 24 and “deleting data” stored in the HDD 24 are not synonymous.

  For example, assuming that image data is stored in the HDD 24 as one file, the process of “deleting data” is performed when the storage area in the HDD 24 storing the file (image data) is not used. This is realized by changing (renaming) the file name so that it is converted into a state of use.

  On the other hand, the process of “erasing data” is realized by overwriting meaningless data different from the original data in the storage area in the HDD 24 in which the file (image data) is stored. .

  For this reason, image data does not remain in the HDD 24 when the “deleting data” process is performed, but image data remains in the HDD 24 when only the “delete data” process is performed. become.

  Next, the CPU 21 determines whether or not it is necessary to delete the image data that has been printed out from the HDD 24 (step S43). Here, for example, in the analysis result in step S32, if the image data is classified information, it is determined that erasure is necessary. If the image data is not classified information, It may be determined that erasure is unnecessary.

  In addition to this, for example, when the user operates the terminal device 34 to transmit a print instruction to the information processing apparatus 1, as one of the instruction contents related to the print instruction, image data is output after print output. An instruction to delete from the HDD is included, and when the instruction is received, it is determined that erasure of the image data is necessary. When the instruction is not received, a mechanism is determined that erasure of the image data is unnecessary. Also good.

  If it is determined in step S43 that the image data needs to be erased, the HDD control unit 24 performs processing (overwrite erasure) for erasing the image data for which image printing has been completed from the HDD 24 (step S44).

(Processing flow of FIG. 11)
On the other hand, when the processing flow shown in FIG. 11 is entered, first, the print output information relating to the print output of the image data stored in the HDD 24 by the HDD control unit 39 in step S35 is stored (registered) in the waiting list for authentication. (Step S45). The list waiting for authentication is created by the CPU 21 on the system memory 22 or the HDD 24 in order to store and manage print output information of image data that requires user authentication processing when printing image data. Is.

  Next, the CPU 21 waits until the user operates the operation unit 8 (step S46). When it is detected that the user has operated the operation unit 8, it is determined whether authentication information has been input during the operation (step S47).

  Next, when the authentication information is input from the operation unit 8, the CPU 1 performs an authentication process using the authentication information (step S48).

  Next, the CPU 21 determines whether or not the authentication is successful as a result of the authentication process (step S49). If the authentication fails, the process waits for the instruction in step S46 again.

  On the other hand, if the authentication is successful, the CPU 21 waits for a print output execution instruction from the user regarding the print output information stored in the authentication wait list (step S50).

  An instruction to execute print output by the user is performed using the operation unit 8. When an instruction to execute print output is actually received by the operation unit 8, an affirmative determination is made in step S50. When the user uses the operation unit 8 to issue a print output execution instruction, prior to that, at least an operation for inputting authentication information and an operation for selecting image data to be printed are performed by the user. Done. A specific operation procedure will be described later.

  Next, among the image data stored in the HDD 24 corresponding to the print output information existing in the list waiting for authentication, the HDD control unit 39 reads out from the HDD 24 the image data selected by the user for the print output. (Step S51).

  Next, the CPU 21 determines whether the image data read in step S51 is encrypted (step S52). If it is encrypted, the encrypted image data is decrypted by the decryption processing unit 38 (step S53). At the time of this decryption, the decryption processing unit 38 decrypts the image data using the key (decryption key) read from the system memory 22 by the memory control unit 36 prior to the decryption. Thereby, the original image data is generated.

  Next, the memory control unit 36 stores the image data (unencrypted image data) read from the HDD 24 in step S51 or the image data decrypted by the decryption processing unit 38 in step S53. The data is expanded in the memory 22 (step S54).

  Next, the CPU 21 sends the image data developed in the system memory 22 in step S54 to the image forming unit 10 via the video interface circuit 30, thereby printing the image on the image forming unit 10 (the image is printed on paper). Printing (step S55).

  Next, the CPU 21 deletes the print output information related to the image data for which the print output of the image has been completed from the above-described list waiting for authentication (step S56).

  Next, the CPU 21 determines whether or not to delete the image data that has been printed out (step S57). In this determination, for example, when the user instructs to execute print output using the operation unit 8 as described above, it is specified whether to delete image data after print output. If the image data has been designated, it is determined to be deleted. If the image data has not been designated, the image data may be determined not to be deleted (in other words, stored in the HDD 24).

  If it is determined in step S57 that the image data is not deleted, the process returns to step S46. If it is determined in step S57 that the image data is to be deleted, the HDD control unit 24 deletes the image data that has been printed out of the image from the HDD 24 (step S58).

  Next, the CPU 21 determines whether or not it is necessary to erase the image data that has been printed out from the HDD 24 (step S59). The determination here is, for example, as described above.

  If it is determined in step S59 that the image data needs to be erased, the HDD control unit 24 performs a process (overwrite erasure) for erasing the image data for which image printing has been completed from the HDD 24 (step S60).

  In the series of processes described above, image data that is determined to be confidential information among image data received from the terminal device 34 is encrypted by the encryption processing unit 37, and then the encrypted image data is converted to the HDD control unit 39. Is stored in the HDD 24. Therefore, confidential image data exists in the HDD 24 in an encrypted state. Therefore, for example, even if the HDD 24 is extracted from the controller 7 and the data stored in the HDD 24 is read out using a device different from the image processing device 1, the confidential image data has meaningless information. Become.

  Further, the decryption key for decrypting the encrypted image data is stored in the system memory 22 by the memory control unit 36 in the above-described processing at the time of activation. For this reason, in order to decrypt the image data encrypted and stored in the HDD 24, it is necessary to read the decryption key from the system memory 22. For example, when the system memory 22 is extracted from the memory socket of the controller 7, this decryption key is lost together with other data held in the system memory 22 until then. Therefore, the decryption key stored in the system memory 22 cannot be used, and as a result, there is no way to decrypt the encrypted image data.

  In addition, the key such as the encryption key and the decryption key has a very small data amount compared to the image data to be encrypted. For this reason, compared with the storage capacity required when storing the encrypted image data in the storage medium, the storage capacity required when storing the key in the storage medium can be very small. Therefore, even in the system memory 22 having a smaller storage capacity than the HDD 24, it is easy to secure a storage capacity necessary for storing the key.

(Operation procedure related to print output execution instruction)
FIG. 12 is a flowchart showing a user operation procedure related to a print output execution instruction.

  First, the user selects “confidential printing”, which is one of the printing processing forms (step S71). This selection operation is performed by, for example, an operation of selecting the item “confidential printing” from the processing menu related to printing displayed on the display unit of the operation unit 8. Depending on the content of the process desired by the user, an item other than “confidential printing” may be selected.

  Next, the user operates the operation unit 8 to input his / her user ID (step S72). This input operation is performed by, for example, an operation of pressing a key, button, or the like provided on the operation unit 8. In addition to this, for example, the user ID may be input by the following mechanism.

  That is, the user ID is recorded in a portable recording medium (for example, an IC card for authentication) possessed by the user. Further, a reading unit corresponding to reading information from the portable recording medium is provided in the operation unit 8 or in the vicinity thereof. When the user sets the portable recording medium in the reading unit, the reading unit reads the user ID recorded on the portable recording medium.

  Next, the user operates the operation unit 8 to input a password (step S73). This input operation is performed by, for example, an operation of pressing a key, button, or the like provided on the operation unit 8.

  Next, the user operates the operation unit 8 to select image data to be printed (step S74). This selection operation is performed, for example, by an operation of selecting at least one image data from the list of image data displayed on the display unit of the operation unit 8.

Next, the user operates the operation unit 8 to display the processing mode of the image data selected earlier as “
"Print output" is designated (step S75). This designation operation is performed, for example, by an operation of selecting an item “print image data” from a processing menu related to printing displayed on the display unit of the operation unit 8. Depending on the content of the process desired by the user, an item other than the item “print image data” (for example, “delete image data”) may be selected.

  Next, the user operates the operation unit 8 to specify that the previously selected image data is deleted after printing (step S76). This designation operation is performed, for example, by an operation of selecting an item “delete image data after printing” from the processing menu related to printing displayed on the display unit of the operation unit 8. Depending on the content of the process desired by the user, the item “Do not delete image data after printing” may be selected.

  Next, the user operates the operation unit 8 to instruct the execution start of the print output of the image data selected earlier (step S77). This designation operation is performed, for example, by an operation of pressing a start button provided on the operation unit 8. An instruction to execute print output by the user is performed by an operation of pressing a start button provided on the operation unit 8. Note that depending on the content of the process desired by the user, for example, items such as “cancel the setting so far” and “correct a part of the setting” may be selected.

  The above is the operation procedure with the user as the main body. The operation of each step with the CPU 21 of the image processing apparatus 1 as the main body is as follows.

  That is, the operation in step S71 is a process for accepting designation of “confidential printing” from the user, and the operations in steps S72 and S73 are a process for accepting input of authentication information from the user.

  The operation in step S74 is a process for accepting selection of image data to be printed out from the user, and the operation in step S75 is a process for accepting designation of “print output” of image data from the user. Become.

  Further, the operation in step S76 is a process for accepting an instruction to delete image data after printing from the user, and the operation in step S77 is a process for accepting an execution instruction for printout of image data from the user.

<Application example>
The present invention is not limited to an image processing apparatus, for example, an information processing apparatus that processes various information such as text data, graphics data, document data, CAD data, map data, and program data as an example of information to be processed, It is widely applied to information processing systems using this.

  DESCRIPTION OF SYMBOLS 1 ... Image processing apparatus, 3 ... Sub power switch, 7 ... Controller, 8 ... Operation part, 9 ... Image reading part, 10 ... Image formation part, 21 ... CPU, 22 ... System memory, 24 ... Hard disk, 25 ... Power supply control Circuit, 34... Terminal device, 35. Key generation unit, 36. Memory control unit, 37. Encryption processing unit, 38. Decryption processing unit, 39. HDD control unit, 40.

Claims (5)

An encryption means for encrypting information to be processed;
Decryption means for decrypting the processed information encrypted by the encryption means;
A volatile storage medium;
A non-volatile storage medium;
First control means for controlling the process information encrypted by the encryption means to be stored in the nonvolatile storage medium;
An information processing apparatus comprising: a second control unit configured to control a decryption key used by the decryption unit to be stored in the volatile storage medium when the process information encrypted by the encryption unit is decrypted. . A power switch;
Power control means for controlling the supply of power to the nonvolatile storage medium to be stopped while maintaining the supply of power to the volatile storage medium when the power switch is turned off. 1. An information processing apparatus according to 1. The volatile storage medium is configured using a DRAM (Dynamic Random Access Memory) having a self-rewriting operation function,
The information processing apparatus according to claim 2, wherein the second control unit sets the DRAM to a self-rewrite operation state when the power switch is turned off. A terminal device for transmitting the processing information;
An encryption means for encrypting the processed information transmitted from the terminal device; a decrypting means for decrypting the processed information encrypted by the encryption means; a volatile storage medium; and a nonvolatile storage medium; A first control unit for controlling the processing information encrypted by the encryption unit to be stored in the non-volatile storage medium; and when the processing information encrypted by the encryption unit is decrypted An information processing system comprising: an information processing apparatus including: a second control unit configured to control a decryption key used by the decryption unit to be stored in the volatile storage medium. A computer of an information processing apparatus having a volatile storage medium and a nonvolatile storage medium,
An encryption means for encrypting information to be processed;
Decryption means for decrypting the processing information encrypted by the encryption means;
First control means for controlling the process information encrypted by the encryption means to be stored in the nonvolatile storage medium;
Program for functioning as second control means for controlling to store the decryption key used by the decryption means in the volatile storage medium when decrypting the process information encrypted by the encryption means .

Images