JP2021092917A - Printing system, printing device, and printing control method - Google Patents

Abstract

To perform a decryption process on the printing device side without disclosing specifications of an encryption process that is performed by a printer driver.SOLUTION: A system comprises an information processing device (PC) with a printer driver that prepares encrypted print data and a printing device (a multifunction device) that receives and prints the print data. The printing device comprises a decryption module for storing an encryption module that performs an encryption process in a downloadable manner and storing a decryption module that performs a decryption process corresponding to the encryption process, a decryption processing unit for performing the decryption process by using the decryption module, and a print unit for printing the print data decrypted by the decryption processing unit. The printer driver comprises a download processing unit for downloading the encryption module from the printing device, an encryption processing unit for encrypting data by using the downloaded encryption module, and a print data providing unit for preparing the print data that includes the encrypted data at least partly.SELECTED DRAWING: Figure 1

Description

The present invention relates to a printing system, a printing apparatus, and a printing control method, and more particularly to a technique of generating, decrypting, and printing print data at least partially encrypted.

A technique is known in which a printer driver accepts a login name and password set by a user, performs encryption processing, includes the encrypted data in print data, and sends the encrypted data from the printer driver to a printing device for printing. .. This is to prevent printing by an unauthorized third party. The encryption process for the login name and password is to prevent the third party from knowing the login name and password even if the print data is leaked to a third party.
The following techniques are known for a system in which at least a part of print data is encrypted on the printer driver side and transmitted to a printing apparatus to perform printing.

This is a method of changing the encryption key used in the encryption process. When the master printer receives a new encryption key from the user, it generates new encryption key information that is encrypted with the default encryption key. To do. Then, the new encryption key information is transmitted to the printer of the same model as the own device found by searching the network. It also notifies the printer driver on the server of the device information that identifies the printer of the same model as the own device and the new encryption key. The printer of the same model that received the new encryption key information decrypts this with the default encryption key and updates the encryption key of its own device. The printer driver on the server obtains a new encryption key and changes the encryption key used to encrypt the print job sent to the printer indicated by the received device information to the new encryption key (for example,). See Patent Document 1).

Japanese Unexamined Patent Publication No. 2018-1468

For example, suppose that company A develops a printer driver and another company B develops a printing device. In order for the printing device to be able to print the print data generated by the printer driver, it is necessary for the printing device to perform decryption processing on the encrypted print data before printing. In order to perform the decryption process on the printing device side, the specifications of the encryption process used by the printer driver of the company A must be disclosed to the company B. However, from a confidentiality standpoint, Company A will want to minimize disclosure.

Further, even when one company develops both a printer driver and a printing device, for example, a situation may occur in which the contents of the encryption process and the decryption process differ depending on the model of the printing device. Further, even if the models are the same, the specifications of the encryption process and the decryption process may be changed and the compatibility may be lost. For example, such a situation occurs when the method or specification of the encryption process and the decryption process is changed in order to enhance security.
The present invention has been made in consideration of the above circumstances, and the decryption process can be performed on the printing device side without disclosing the specifications of the encryption process performed by the printer driver, and different encryption can be performed. This is intended to enable a common printer driver to be applied to a plurality of printing devices that use processing.

The present invention is a system including an information processing device having a printer driver that prepares print data that is at least partially encrypted, and a printing device that receives and prints the print data. , A module storage unit that stores an encryption module that performs encryption processing in a downloadable manner and stores a decryption module that performs decryption processing corresponding to the encryption processing, and a decryption process using the decryption module. The printer driver includes a decryption processing unit to perform the decryption processing unit and a printing unit for printing the print data decrypted by the decoding processing unit, and the printer driver has a download processing unit for downloading the encryption module from the printing device and a download processing unit. Provided is a printing system including an encryption processing unit that encrypts data using an encrypted encryption module and a print data providing unit that prepares print data including at least a part of the encrypted data.

Further, from a different point of view, the present invention stores an encryption module that performs encryption processing so that it can be downloaded by a printer driver of an external information processing device, and stores a decryption module that performs decryption processing corresponding to the encryption processing. A module storage unit, a communication interface circuit that receives print data including at least a part of the encrypted data from the printer driver, and a decryption process using the decryption module for the received print data. Provided is a printing apparatus including a decoding processing unit to perform the decoding processing unit and a printing unit for printing the print data decoded by the decoding processing unit.

Further, from a different point of view, the present invention includes a step in which a control unit of a printing device provides a downloadable stored encryption module to a printer driver of a communicably connected information processing device, and the encryption module. A step of receiving print data including at least a part of the data encrypted using the printer driver from the printer driver, and a decryption process corresponding to the encryption process using a decryption module for the received print data. A print control method for executing the step of printing the print data decoded by the decoding process and the step of printing the print data decoded by the decoding process are provided.

In the printing system according to the present invention, the printing apparatus includes a module storage unit that stores the encryption module that performs the encryption process in a downloadable manner and stores the decryption module that performs the decryption process corresponding to the encryption process. A decryption processing unit that performs decryption processing using a decryption module is provided, and the printer driver encrypts data using a download processing unit that downloads an encryption module from a printing device and a downloaded encryption module. Since it includes an encryption processing unit and a print data providing unit that prepares print data containing at least a part of the encrypted data, it can be downloaded without disclosing the specifications of the encryption processing executed by the printer driver. By providing and storing possible encryption modules and decryption modules as data on the printing device side, it becomes possible to perform encryption / decryption processing of print data. In addition, a common printer driver can be applied to a plurality of printing devices that use different encryption / decryption processes.
The printing apparatus and the printing control method according to the present invention also have similar effects.

It is a block diagram which shows the structural example of the printing system by this Embodiment. It is explanatory drawing which shows an example of the print setting dialog provided by the printer driver which concerns on embodiment. It is explanatory drawing which shows the case where the login name and the password are selected as the authentication method in the print setting dialog similar to FIG. It is explanatory drawing which shows the case where the user number is selected as the authentication method in the print setting dialog similar to FIG. As an example of the print setting dialog different from FIG. 2, it is explanatory drawing which shows the state which the main tab is selected. In this embodiment, it is a flowchart which shows the flow of the process executed by the PC processing unit and the multifunction device control unit as a printer driver.

Hereinafter, the present invention will be described in more detail with reference to the drawings. It should be noted that the following description is exemplary in all respects and should not be construed as limiting the invention.
(Embodiment 1)
≪Printing system configuration example≫
First, a configuration example of the printing system and the printing apparatus according to the present invention will be described.
FIG. 1 is a block diagram showing a configuration of a printing system according to this embodiment as an example. In the printing system shown in FIG. 1, PCs 100 and 200 and multifunction devices 300, 400 and 500 are connected via a network. Further, the server 600 may be connected to the network. The network form and communication method do not matter.
The PCs 100 and 200 are personal computers as an aspect of an information processing device. The multifunction devices 300, 400 and 500 are one aspect of the printing apparatus. The server 600 is an aspect of a data storage device.

The PC 100 includes a PC processing unit 110, a PC memory 120, a PC input / output interface circuit 130, and a PC communication interface circuit 170.
The PC processing unit 110 is composed of a circuit (circuit element) centered on a CPU (Central Processing Unit) as a hardware resource. The function of the PC processing unit 110 is realized when the CPU executes a program stored in a memory (PC memory 120) which is a hardware resource.

The PC processing unit 110 includes a printer driver 112, a BIOS 114, an operating system 116, and an application 118.
That is, the function of the printer driver 112 is realized by the CPU executing the program of the printer driver stored in the PC memory 120. Further, the function of the BIOS 114 is realized by the CPU executing the BIOS program stored in the PC memory 120. The same is true for operating systems and applications.

The printer driver 112 includes the functions of a download processing unit 112d, an encryption processing unit 112e, and a print data providing unit 112i. Further, it may have the functions of the user name receiving unit 112n and the password receiving unit 112w.
The download processing unit 112d performs a process of downloading the encryption module 322 stored in the multifunction device for printing and storing it in the PC memory 120.
The encryption processing unit 112e uses the encryption module 122 that has been downloaded and stored in the PC memory 120 to perform encryption processing on at least a part of the print data.

The PC memory 120 is a memory included in the PC 100 as a hardware resource. The PC memory 120 is composed of a ROM, a RAM, and a rewritable non-volatile memory (flash memory, HDD, etc.).
The PC input / output interface circuit 130 is an interface circuit for connecting an external device (for example, a keyboard, a display, an external storage device, etc.) as an input / output means to the PC 100 to function.
The PC communication interface circuit 170 is an interface circuit for the PC 100 to communicate with an external device via a network.
Although details are not shown in FIG. 1, the PC200 has the same configuration as the PC100.

The multifunction device 300 includes a multifunction device control unit 310, a multifunction device memory 320, an operation unit 330, a data processing circuit 340, a scanner unit 350, a printing unit 360, and a multifunction device communication interface circuit 370.
The multifunction device control unit 310 is composed of a circuit (circuit element) centered on a CPU (Central Processing Unit) as a hardware resource. The function of the multifunction device control unit 310 that controls the multifunction device 300 is realized by the CPU executing the control program stored in the memory (multifunction device memory 320) which is a hardware resource.

The multifunction device memory 320 is a memory included in the PC 100 as a hardware resource. The multifunction device memory 320 is composed of a ROM, a RAM, and a rewritable non-volatile memory (flash memory, HDD, etc.). The multifunction device memory 320 stores an encryption module 322 that is downloaded to the PC 100 and stored in the PC memory 120. Further, the decryption module 323 corresponding to the encryption module 322 is stored.
The multifunction device control unit 310 includes a decoding processing unit 312. The decoding processing unit 312 executes the decoding module 323 stored in advance in the multifunction device memory 320 to perform the decoding process.

The operation unit 330 has a display with a touch panel and operation keys, accepts user operations, and notifies the user of the status of the multifunction device 300, job settings, progress, and the like.
The data processing circuit 340 is a circuit that processes the image data read by the scanner unit 350, which will be described later, and the print data received from the PC 100 or the like.
The scanner unit 350 reads an image of a document using an image sensor.
The print unit 360 prints based on the image data or print data processed by the data processing circuit 340. In this embodiment, an electrophotographic print engine is used.
The multifunction device communication interface circuit 370 is an interface circuit for the multifunction device 300 to communicate with an external device via a network.
Although details are not shown in FIG. 1, the multifunction devices 400 and 500 have the same configuration as the multifunction device 300.

≪Printing process≫
Subsequently, the printing process according to the present invention will be described.
In this embodiment, it is assumed that the PC processing unit 110 executes the application 118 on the PC 100 and receives an instruction from the user to print the data related to the application on the multifunction device 300. In response to the printing instruction, the PC processing unit 110 performs processing as the printer driver 112. The processing as the printer driver 112 is as follows.

Prior to the preparation of the print data, the printer driver 112 as the download processing unit 112d downloads the encryption module 322 stored in the multifunction device memory 320 of the multifunction device 300. Then, the downloaded encryption module 322 is stored in the PC memory 120 (the encrypted module downloaded and stored in the PC memory 120 is shown by the encryption module 122 in FIG. 1).
The printer driver 112 executes the encryption module 122 as the encryption processing unit 112e, and performs encryption processing on the data to be included in the print data. Here, the encryption module 122 is stored in the PC memory 120 in a format that can be executed by the CPU.

As the print data providing unit 112i, the printer driver 112 prepares print data including encrypted data. Then, the prepared print data is transmitted to the multifunction device 300 connected via the network.
The print data is transmitted via the PC communication interface circuit 170 and reaches the multifunction device 300 via the network. In the multifunction device 300, print data is received via the multifunction device communication interface circuit 370.

In the multifunction device 300, the multifunction device control unit 310 receives print data and temporarily stores it in the multifunction device memory 320.
As the decoding processing unit 312, the multifunction device control unit 310 performs decryption processing on the encrypted data among the print data stored in the multifunction device memory 320.
Further, the multifunction device control unit 310 causes the data processing circuit 340 to process the decrypted print data to make the data printable by the print unit 360, and then causes the print unit 360 to print.

≪Data to be encrypted≫
In this embodiment, the data to be encrypted among the print data will be described.
Encryption is intended to prevent the contents of print data from being known even if it is leaked to a third party. The entire print data may be the target of encryption, but only the highly confidential information of the print data may be the target of encryption.
As an example of highly confidential information, information related to user authentication (in this embodiment, a login name, a pair of a login name and a password, a user number, etc., which will be described later) can be mentioned.

In this embodiment, the user authentication is a function of registering a person who has the authority to use the multifunction device, that is, a user of the multifunction device, so that only the registered user can use the multifunction device. Further, among the printing functions of the multifunction device, the available functions may be set for each user. Then, the authority to use various printing functions can be set according to the user.
If the administrator of the multifunction device or the network administrator sets to authenticate the user of the multifunction device, each user will be required to log in when using the set multifunction device.

Here, only the administrator of the multifunction device having administrator authority can make the settings related to user authentication. Settings related to user authentication include setting whether or not to perform user authentication of the multifunction device, setting the method of performing user authentication, and registering each user.
In this embodiment, the user authentication method is one of the following three. The first is a method that uses only the login name. The second is a method that uses a login name and a password. The third is a method using a user number. You can also select a setting that does not perform user authentication. The user registration and management functions may be performed by a network management server instead of the multifunction device. For example, the server 600 shown in FIG. 1 may register and manage users.
If the administrator sets the multifunction device 300 to perform user authentication, the user needs to log in when using the multifunction device 300. For example, when printing data is generated by the PC 100 and printing is performed by the multifunction device 300, a print setting dialog (a screen that displays the printing status and settings and accepts a user's operation for the settings) provided by the printer driver 112. ), Enter the login name, login name and password or user number unique to the registered user.

FIG. 2 is an explanatory diagram showing an example of a print setting dialog provided by the printer driver according to this embodiment. As shown in FIG. 2, in the print setting dialog 11, the setting items are classified by category according to the main tab 12m, the paper feed tab 12p, the finishing tab 12f, the user authentication tab 12u, and the tabs not shown in FIG. 2 displayed at the top. Has been done. The tabs (not shown) are displayed in the print setting dialog 11 by the user operating the tab scroll buttons 13L or 13R. When the user selects any tab, the setting items of the selected tab are displayed in the center of the print setting dialog 11.
Frequently used setting items are collected on the main tab 12m. The paper feed tab 12p includes settings related to the paper size / type used for printing and the paper feed tray. The finishing tab 12f includes finishing functions such as stapling, punching, and paper folding, and settings related to the output tray. The user authentication tab 12u includes settings related to user authentication.
FIG. 2 shows a state in which the user authentication tab 12u is selected.

At the bottom of the print setting dialog 11, an OK button 14k, a cancel button 14c, an apply button 14a, and a help button 14h are arranged. The OK button 14k is operated when the content of the print setting is reflected in the print process and the print setting dialog 11 is closed. The cancel button 14c is operated when canceling the contents of the print setting and closing the print setting dialog 11. The apply button 14a is operated when the contents of the print setting are reflected in the print process and the print setting dialog 11 is kept displayed. The help button 14h is operated when displaying the help screen related to the print setting dialog 11.

In the print setting dialog 11 of FIG. 2 in which the user authentication tab 12u is selected, the authentication method drop-down list 15 is displayed in the center. FIG. 2 shows a state in which a login name is selected as the authentication method. When a login name is selected, the login name input box 17 is displayed on the right side.
Here, when the user inputs the login name into the login name input box 17 and operates the OK button 14k, the printer driver 112 acquires the login name input as the user name receiving unit 112n. The login name is used as a user name to distinguish the user from other users and non-users.
The printer driver 112 transmits the print data including the acquired login name to the multifunction device 300. The login name is encrypted before being sent.

The multifunction device 300 that has received the print data collates the login name included in the print data with the login name registered in the multifunction device 300, and if it matches any of the registered login names, the user specified by the login name. Print print data as a job related to. If none of the registered login names match, a message to that effect is displayed on the PC100 side. The received print data is not printed.
As a matter of course, it is necessary that the setting related to the user authentication method on the multifunction device 300 side and the selection of the authentication method drop-down list 15 correspond to each other. That is, when the setting related to the user authentication method on the multifunction device 300 side is set to use the login name, the user shall select "login name" in the authentication method drop-down list 15 to print. ..

Returning to the description of FIG. Below the authentication method drop-down list 15, a user name check box 18, a user name input box 19, a job name check box 20, and a job name input box 21 are displayed.
When the user checks the user name check box 18 and enters the user name in the user name input box 19, the user name entered in the user name input box 19 is the operation of the multifunction device 300 as the user name related to the print job. Displayed on unit 330. Otherwise, the login name will be displayed as the user name.

Further, when the user checks the job name check box 20 and inputs the job name in the job name input box 21, the job name input in the job name input box 21 is used as the job name related to the print job in the multifunction device 300. Is displayed on the operation unit 330 of. Otherwise, the file name set by application 118 will be displayed as the job name.
The above is the description of the print setting dialog 11 shown in FIG.

In this embodiment, a login name and a password can be selected as the authentication method instead of the above-mentioned login name. The differences when a login name and password are selected are described below.
FIG. 3 shows a case where a login name and a password are selected as the authentication method in the print setting dialog 11 similar to FIG.
As shown in FIG. 3, the selection of the authentication method drop-down list 15 is a login name / password.

When the login name / password is selected in the authentication method drop-down list 15, the login name input box 23 and the password input box 25 are displayed instead of the login name input box 17 in FIG.
When the user inputs the login name in the login name input box 23 and the password in the password input box 25 and operates the OK button 14k, the printer driver 112 acquires the login name input as the user name receiving unit 112n. .. In addition, the password input as the password receiving unit 112w is acquired. Here, the login name is used as a user name that distinguishes the user from other users and non-users.

The printer driver 112 transmits the print data including the entered login name and password to the multifunction device 300. The login name and password are encrypted before transmission. Upon receiving the print data, the multifunction device 300 collates the pair of the login name and the password included in the print data with the pair of the login name and the password registered in the multifunction device 300.
If the pair of login name and password included in the print data matches any of the pair of registered login name and password, the print data is printed as a job related to the user specified by the pair of login name and password. .. If neither of the registered login name and password pairs match, a message to that effect is displayed on the PC100 side. The received print data is not printed.
Other parts of the print setting dialog 11 of FIG. 3 are the same as those of FIG.
When the setting related to the user authentication method on the multifunction machine 300 side is set to use the login name and password, the user selects "login name / password" in the authentication method drop-down list 15 to print. And.

You can also select a user number as the authentication method. The user number assigns a unique number to the user. The case where the user number is selected instead of the login name or the login name and password is described below.
FIG. 4 shows a case where a login name and a password are selected as the authentication method in the print setting dialog 11 similar to FIG.
As shown in FIG. 4, the selection of the authentication method drop-down list 15 is the user number.

When the user number is selected in the authentication method drop-down list 15, the user number input box 27 is displayed instead of the login name input box 17 in FIG.
When the user inputs the user number into the user number input box 27 and operates the OK button 14k, the printer driver 112 acquires the user number input as the user name receiving unit 112n. Here, the user number is used as a user name that distinguishes the user from other users and non-users.
The printer driver 112 transmits the print data including the input user number to the multifunction device 300. The user number is encrypted before transmission.

The multifunction device 300 that has received the print data collates the user number included in the print data with the user number registered in the multifunction device 300, and if it matches any of the registered user numbers, the user specified by the user number. Print print data as a job related to. If none of the registered user numbers match, a message to that effect is displayed on the PC100 side. The received print data is not printed.
Other parts of the print setting dialog 11 of FIG. 4 are the same as those of FIG.
If the setting related to the user authentication method on the multifunction device 300 side is set to use the user number, the user shall select "user number" in the authentication method drop-down list 15 to print. ..
Further, although not shown, "None" can be selected in the authentication method drop-down list 15. When the multifunction device 300 is set to print without performing user authentication, the user selects "None" in the authentication method drop-down list 15 to print.

The setting items of the main tab 12m are described below. At the same time, a password related to document filing, which is different from the above-mentioned login name, password and user number, will be described. Passwords related to document filing are also subject to encryption processing.
FIG. 5 is an explanatory diagram showing a state in which the main tab 12m is selected as an example of a print setting dialog different from that of FIG.
As shown in FIG. 5, various items related to the print setting are displayed in the central portion of the print setting dialog 11. Specifically, the settings related to the number of copies, the original size, the output paper size, the original orientation, the zoom, the double-sided printing, the page aggregation, the staple, the document filing, and the color mode are displayed.
The number of copies input box 31 is for setting the number of copies to be printed, and by inputting a numerical value in the range of 1 to 9999 or clicking the [+] [-] button on the right side to increase or decrease the number of copies. The number of copies to print is set.

The document size drop-down list 32 is for selecting the document size related to the print data. If the application specifies the original size, that setting takes precedence, but if the application does not specify the original size or it is not valid, the original size is selected.
The output paper size drop-down list 33 is for selecting the size of the printing paper.
The original orientation drop-down list 34 is for selecting one of the orientations of the original image.
The zoom check box 35 allows the user to check the check box so that the size of the print output can be set on the setting screen displayed by the zoom setting button 36.

The double-sided printing drop-down list 37 is for selecting whether to print on one side or both sides of the printing paper, and when printing on both sides, select whether to use long-side binding or short-side binding. Is.
The page aggregation drop-down list 38 is for selecting whether or not to allocate a plurality of pages on one page of printing paper for reduced printing, and for further reducing printing, select how many pages are allocated.
The staple drop-down list 39 is for selecting whether or not to perform staples in units of copies, and when performing staples, select where to staple.

The document filing drop-down list 40 is for selecting whether or not to use the function related to the document filing. This is a function of storing print data in the multifunction device memory 320 and operating the operation unit 330 of the multifunction device 300 to print out when necessary. You can select "None", "Hold without printing", or "Hold after printing".
Here, when either "Hold without printing" or "Hold after printing" is selected, the document filing password check box 41 and the document filing password input box 42 are displayed on the right side (FIG. 5). reference).

When the user checks the document filing password check box 41 and enters the password in the document filing password input box 42, the printer driver 112 acquires the document filing password entered as the password receiving unit 112w.
The printer driver 112 transmits the print data including the input document filing password to the multifunction device 300. The document filing password is encrypted before being sent.

The document filing password is the password when "login name / password" is selected as the authentication method on the user authentication tab 12u, or is independent of the setting of the login name and user number. The document filing password can be set even if it is set not to authenticate the user, and vice versa.
On the other hand, if user authentication is set, the document filing password can be set or not set.
When "None" is selected in the document filing drop-down list 40, the document filing password check box 41 and the document filing password input box 42 are not displayed.

The multifunction device 300 that has received the print data holds the received print data in the multifunction device memory 320. More specifically, when "Hold after printing" is selected, printing is performed and the print data is retained. When "Hold without printing" is selected, the print data is retained without printing.
The user can operate the operation unit 330 of the multifunction device 300 to output the print data stored in the multifunction device memory 320. If the document filing password is set, the user needs to enter the document filing password in the operation unit 330 when executing the print output.
If the entered document filing password and the document filing password included in the retained print data match, print output is performed. If they do not match, a message to that effect is displayed on the operation unit 330, and no print output is performed.

The color mode drop-down list 43 is for selecting a color mode for printing. When "automatic" is selected, it is determined for each print page whether the print data includes color or only black and white, and printing is performed.
The above is the description of the print setting dialog 11 when the main tab 12m is selected.

≪Flowchart≫
The flow of processing executed by the PC processing unit 110 and the multifunction device control unit 310 for printing will be described below with reference to the flowchart.
FIG. 6 is a flowchart showing a flow of processing executed by the PC processing unit 110 and the multifunction device control unit 310 as the printer driver 112 in this embodiment.
As shown in FIG. 6, the printer driver 112 starts the printing process in response to the instruction from the user to print the data related to the application 118, for example (step S11). Yes).

In order to prepare the print data, first, as the download processing unit 112d, the printer driver 112 sends a download request for the encryption module 322 to the multifunction device (here, the multifunction device 300) to be printed (step S13). ).
Upon receiving the download request, the multifunction device 300 together with the printer driver 112 of the PC 100 so that the encryption module 322 stored in the multifunction device memory 320 is downloaded in response to the download request (Yes in step S31). Exchange (step S33).

As the download processing unit 112d, the printer driver 112 stores the encryption module 322 downloaded to the PC 100 in the PC memory 120 (Yes in step S15, step S17).
As the encryption processing unit 112e, the printer driver 112 executes the downloaded encryption module 122 to perform data encryption processing (step S19).
An example of the data to be encrypted is the login name entered in the login name input box 17 shown in FIG. A different example is the login name entered in the login name input box 23 and the password entered in the password input box 25 shown in FIG. A further different example is the user number entered in the user number input box 27 shown in FIG.

Alternatively, the document filing password entered in the document filing password input box 42 shown in FIG. 5 may be encrypted separately from any of the data.
Alternatively, the entire print data may be encrypted.
The printer driver 112 prepares at least encrypted data as the print data providing unit 112i (step S21). Then, the prepared print data is transmitted to the multifunction device 300 (step S23).

When the printer driver 112 receives the print data prepared (Yes in step S35), the multifunction device control unit 310 as the decryption processing unit 312 executes the decryption module 323 to execute the encryption data included in the received print data. Decryption processing is performed (step S37). If the entire print data is encrypted, the entire print data is decrypted.
Then, the multifunction device control unit 310 causes the data processing circuit 340 and the printing unit 360 to execute printing based on the decrypted print data (step S39). In the case of document filing, the print data is retained, and when the user gives a print instruction using the operation unit 330, printing is executed in response to the instruction.
The above is the flow of the printing process executed by the PC processing unit 110 and the multifunction device control unit 310 as the printer driver 112.

(Embodiment 2)
In the first embodiment, it is assumed that the downloadable encryption module 322 is stored in the multifunction device memory 320 of the multifunction device 300 for printing.
In this embodiment, the downloadable encryption module 322 is stored in an external data storage device in place of the multifunction device for printing or together with the multifunction device for printing.
Explaining with reference to FIG. 1, the downloadable encryption module (corresponding to the encryption module 322 shown in FIG. 1) is stored in a memory (not shown) of the server 600 in place of or together with the multifunction device memory 320. ing.

The server 600 may, for example, be a print server, but may not. As a preferred embodiment, the server 600 stores the printer driver 112 related to the printing process of the multifunction device 300 in a downloadable manner. That is, the server 600 stores not only the encryption module for the multifunction device 300 (corresponding to the encryption module 322 shown in FIG. 1) but also the printer driver for the multifunction device 300. The PC100 and PC200 download and install them from the server 600. However, it should not be limited to this aspect. If the download processing unit 112d can identify the location of the encryption module to be downloaded and the encryption module can be downloaded from the location, the function and mode of the device that stores the encryption module are not limited.

(Embodiment 3)
In the first embodiment, the download processing unit 112d constantly downloads the encryption module 322 from the multifunction device memory 320, and the encryption processing unit 112e performs data encryption processing using the downloaded encryption module 122. It is supposed to be done.
However, it cannot be said that the download of the encryption module 322 may end in failure.
In this embodiment, when the printer driver 112 fails to download the encryption module 322, the printer driver 112 prepares print data without encrypting the data. An attribute indicating that the data is not encrypted is added to the prepared print data, and the data is sent to the multifunction device 300.
The multifunction device 300 that has received the print data performs the printing process so that the decoding processing unit 312 recognizes the attribute and does not perform the decoding.
As a result, printing can be performed even when the encryption module 322 is not downloaded.

(Embodiment 4)
In this embodiment, the printer driver 112 is assumed to be a universal driver common to different types of multifunction devices 300, 400, and 500. Here, it is assumed that the multifunction device 400 has a function of performing an encryption process (second encryption process) based on a predetermined encryption logic by the printer driver, and a downloadable encryption module (FIG. 1). (Corresponding to the encryption module 322 shown in) is not stored. The decryption module corresponding to the encryption module 322 shown in FIG. 1 (corresponding to the decryption module 323 shown in FIG. 1) is also not stored.
The printer driver 112 according to this embodiment has a function of performing encryption processing based on the predetermined encryption logic in the encryption processing unit 112e. Further, it is provided with a download processing unit 112d, and has a function of downloading an encryption module.

As described in the first embodiment, when printing is performed using the multifunction device 300, the printer driver 112 downloads the encryption module 322 from the multifunction device 300 as the download processing unit 112d and performs data encryption processing. , Prepare print data including encrypted data. The print data is sent to the multifunction device 300 for printing.
On the other hand, when printing is performed using the multifunction machine 400, the encryption processing unit 112e performs data encryption processing using the second encryption processing based on the predetermined encryption logic, and the encrypted data. Prepare print data including. The encryption module is not downloaded. Then, the prepared print data is sent to the multifunction device 400 for printing. The decryption processing unit of the multifunction device 400 executes a decryption process (second decryption process) based on the predetermined encryption logic to perform a data decryption process, and prints based on the decrypted print data. I do.
The determination as to whether or not to download the encryption module according to the multifunction device for printing may be performed as follows. That is, it is defined in advance so that the specifications related to the encryption process can be confirmed by communicating with each multifunction device. Decide whether to download the encryption module based on the confirmed specifications of each multifunction device.

As mentioned above
(I) The printing system according to the present invention is a system including an information processing device having a printer driver that prepares print data that is at least partially encrypted, and a printing device that receives and prints the print data. The printing device includes a module storage unit that stores the encryption module that performs the encryption process in a downloadable manner and stores the decryption module that performs the decryption process corresponding to the encryption process, and the decryption module. The printer driver includes a decoding processing unit that performs decoding processing using the decryption processing unit and a printing unit that prints print data decrypted by the decoding processing unit, and the printer driver downloads the encryption module from the printing device. It is provided with a download processing unit, an encryption processing unit that encrypts data using a downloaded encryption module, and a print data providing unit that prepares print data that includes at least a part of the encrypted data. It is characterized by.

In the present invention, the printer driver performs a process in which the information processing apparatus prepares print data for the printing apparatus connected communicably to execute printing. In a specific embodiment, for example, a hardware resource such as a CPU included in an information processing device and a software resource which is a program for the CPU to perform the above-mentioned processing are organically combined to realize a function. Is.
Further, the information processing device may be any device that can communicate with the printing device and has a function of downloading an encryption module from the printing device and generating print data, for example, a personal computer, a smartphone, a tablet terminal, or the like. However, it is not limited to them.
Furthermore, the print data is data that the printing apparatus prints based on the received print data, and the format and contents of the data are not particularly limited. An example of a specific embodiment thereof is, but is not limited to, a page description language including various information regarding settings, user authentication, and the like in an application for generating print data and an information processing device.

The module storage unit stores the encryption module and the decryption module as data. Specific embodiments thereof include, but are not limited to, flash memory, HDD (Hard Disk Drive), and SSD (Solid State Drive). The encryption module is data in a format in which an information processing device that has downloaded the data can store the data in a memory and execute processing, and an example of a specific embodiment thereof is an execution format file such as an EXE file or a DLL (DLL). Dynamic Link Library) files, but not limited to them.
In addition, the method and type of encryption and decryption processing are not limited.
Furthermore, the printing unit may be any method and type as long as it prints based on the print data. Specific embodiments thereof include, but are not limited to, an electrophotographic method and an inkjet method.

Further, preferred embodiments of the present invention will be described.
(Ii) The printer driver further includes a user name receiving unit that accepts an input of a login name, the encryption processing unit at least encrypts the received login name, and the print data providing unit is encrypted. Print data including the login name may be prepared.
In this way, even if the print data is leaked to a third party, it is not easy for the third party to know the login name from the print data, and the security of the confidential information is ensured.

(Iii) The printer driver further includes a password receiving unit that accepts a password input, the encryption processing unit at least encrypts the received password, and the print data providing unit includes the encrypted password. Print data may be prepared.
In this way, even if the print data is leaked to a third party, it is not easy for the third party to know the password from the print data, and the security of the confidential information is ensured.
Of course, data other than the login name and password may be encrypted, and not only a part of the print data such as the login name and password may be encrypted but also the entire data may be encrypted.

(Iv) The module storage unit is provided in a data storage device for storing data, which is another device communicably connected to the information processing device in place of or together with the printing device. The download processing unit may download the encryption module from the data storage device instead of the printing device.
In this way, the encryption module can be stored in place of the printing device, or not only in the printing device but also in another device such as a print server that stores data.

(V) The encryption processing unit does not encrypt data when the encryption module is not downloaded, and the decryption processing unit does not perform decryption processing on unencrypted data. May be good.
In this way, for example, printing is possible even when the download processing unit fails to download.
Further, for example, when a plurality of printing devices are communicably connected to a certain information processing device, and one printing device among them has a module storage unit but another printing device does not have a module storage unit, another printing device has a module storage unit. It is possible to print on another printing device without downloading the encryption module from the printing device. That is, printing is possible even when the print data is not encrypted and therefore the encryption module does not need to be downloaded.

(Vi) The printer driver further includes a second encryption processing unit that performs a second encryption processing different from the encryption processing performed by the encryption module, and the encryption processing unit does not download the encryption module. In that case, the data is encrypted using the second encryption processing unit, and the decryption processing unit performs a decryption process corresponding to the second encryption process on the data encrypted by the second encryption process. You may do it.
In this way, for example, even if the download processing unit fails to download, printing using the second encryption process is possible.
Further, for example, a plurality of printing devices are communicably connected to a certain information processing device, and one of the printing devices has a module storage unit, but another printing device does not have a module storage unit and a second encryption process is performed. It is assumed that is set to use. In that case, even if the encryption module is not downloaded from the other printing device, it is possible to print on the other printing device by using the second encryption process. That is, printing is possible even when the encryption module does not need to be downloaded.

(Vii) Further, a preferred embodiment of the present invention is a decryption in which an encryption module for performing an encryption process is stored so as to be downloadable by a printer driver of an external information processing device and a decryption process corresponding to the encryption process is performed. A module storage unit that stores a module, a communication interface circuit that receives print data including at least a part of the encrypted data from the printer driver, and decoding of the received print data using the decryption module. A printing apparatus including a decoding processing unit that performs a conversion process and a printing unit that prints print data decoded by the decoding processing unit is included.

(Viii) Furthermore, a preferred embodiment of the present invention includes a step in which the control unit of the printing apparatus provides the encryption module stored in a downloadable manner to the printer driver of the information processing apparatus connected communicably. The step of receiving print data including at least a part of the data encrypted by using the encryption module from the printer driver, and the received print data can be subjected to the encryption process by using the decryption module. The printing control method includes a step of performing the decoding process and a step of printing the print data decoded by the decoding process.

Preferred embodiments of the present invention include a combination of any of the plurality of embodiments described above.
In addition to the embodiments described above, there may be various variations of the present invention. These variations should not be construed as not belonging to the scope of the present invention. The present invention should include the meaning equivalent to the claims and all modifications within the said scope.

11: Print setting dialog, 12f: Finishing tab, 12m: Main tab, 12p: Feeding tab, 12u: User authentication tab, 13L, 13R: Tab scroll button, 14a: Apply button, 14c: Cancel button, 14h: Help button , 14k: OK button, 15: Authentication method drop-down list, 17: Login name input box, 18: User name check box, 19: User name input box, 20: Job name check box, 21: Job name input box, 23 : Login name input box, 25: Password input box, 27: User number input box, 31: Number of copies input box, 32: Original size drop-down list, 33: Output paper size drop-down list, 34: Original orientation drop-down list , 35: Zoom check box, 36: Zoom setting button, 37: Double-sided print drop-down list, 38: Page aggregation drop-down list, 39: Staple drop-down list, 40: Document filing drop-down list, 41: Document filing drop-down list Password check box, 42: Document filing password input box, 43: Color mode drop-down list 100, 200: PC, 110: PC processing unit, 112: Printer driver, 112d: Download processing unit, 112e: Encryption processing unit , 112i: Print data provider, 112n: User name receiver, 112w: Password receiver, 114: BIOS, 116: Operating system, 118: Application 120: PC memory, 122: Encryption module, 130: PC input / output interface Circuit, 170: PC communication interface circuit 300, 400, 500: Combined machine, 310: Combined machine control unit, 312: Decryption processing unit, 320: Combined machine memory, 322: Encryption module, 323: Decryption module, 330 : Operation unit, 340: Data processing circuit, 350: Scanner unit, 360: Printing unit, 370: Multi-function communication interface circuit 600: Server

Claims (8)

An information processing device that has a printer driver that prepares at least partially encrypted print data,
A system including a printing device that receives and prints the print data.
The printing device is
A module storage unit that stores the encryption module that performs the encryption process in a downloadable manner and stores the decryption module that performs the decryption process corresponding to the encryption process.
A decoding processing unit that executes a decoding process using the decoding module, and
A printing unit for printing the print data decoded by the decoding processing unit is provided.
The printer driver
A download processing unit that downloads the encryption module from the printing device, and
An encryption processing unit that encrypts data using the downloaded encryption module,
A printing system including a print data providing unit that prepares print data including at least a part of encrypted data. The printer driver further includes a user name receiving unit that accepts input of a login name.
The encryption processing unit at least encrypts the received login name.
The printing system according to claim 1, wherein the print data providing unit prepares print data including an encrypted login name. The printer driver further includes a password receiving unit that accepts password input.
The encryption processing unit at least encrypts the received password.
The printing system according to claim 1, wherein the print data providing unit prepares print data including an encrypted password. The module storage unit is provided in a data storage device that stores data in place of the printing device or together with the printing device, which is another device communicably connected to the information processing device.
The printing system according to claim 1, wherein the download processing unit downloads the encryption module from the data storage device instead of the printing device. The encryption processing unit does not encrypt the data when the encryption module is not downloaded.
The printing system according to claim 1, wherein the decryption processing unit does not perform decryption processing on unencrypted data. The printer driver further includes a second encryption processing unit that performs a second encryption process different from the encryption process performed by the encryption module.
If the encryption module is not downloaded, the encryption processing unit encrypts the data using the second encryption processing unit.
The printing system according to claim 1, wherein the decryption processing unit performs a decryption process corresponding to the second encryption process on the data encrypted by the second encryption process. A module storage unit that stores an encryption module that performs encryption processing so that it can be downloaded by the printer driver of an external information processing device, and stores a decryption module that performs decryption processing corresponding to the encryption processing.
A communication interface circuit that receives print data including at least a part of the encrypted data from the printer driver, and
A decoding processing unit that performs decoding processing on the received print data using the decoding module, and
A printing unit that prints the print data decoded by the decoding processing unit, and
A printing device equipped with. The control unit of the printing device
The step of providing the encryption module stored in a downloadable manner to the printer driver of the information processing device connected so as to be communicable.
A step of receiving print data from the printer driver that includes at least a part of data encrypted by using the encryption module.
A step of performing a decryption process corresponding to the encryption process using a decryption module on the received print data, and a step of performing the decryption process.
The step of printing the print data decoded by the decoding process and
Print control method to execute.

Images