JP2941759B2 - Printing system and print processing method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a printing system and a print processing method for designating a data file and printing the data file, and more particularly to ensuring security of the printing system.

[0002]

2. Description of the Related Art In a printing system for designating a data file and printing the data file, printing is possible by designating a file name. Therefore,
If the file name is known, the data recorded in the data file may leak. To prevent this, in Japanese Laid-2-214887, JP-described as an encryption only can decrypt the file names in a particular utility, it is protecting file data.

[0003]

In a system having a plurality of terminals such as a LAN (local area network), a plurality of users can share data, so that anyone can obtain the data of the file if only the file name is known. However, there is a problem that data security cannot be ensured. Further, according to the technology described in the above publication, it is necessary to encrypt a file name, and there is a problem that the file name cannot be directly applied to an existing system.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems, and an object of the present invention is to provide a printing system and a printing processing method capable of preventing data leakage without modifying the system or changing a data file. The purpose is to provide.

[0005]

According to the present invention, there is provided a printing system, comprising: a first input unit for inputting a file name of a data file to be printed and a predetermined password; In some cases, a key file creation unit that creates a key file in which only the file name of the data file is written, a display unit that displays the file name of the key file, a file name of the displayed key file, A second input unit for inputting a file name of a data file to be printed, a file name of the data file written in the key file, and a file name of the data file input from the second input unit If it is determined that they match, the file name of the data file is transmitted, and a determination is made to instruct a print process. If, based on the instruction of the judgment unit,
A print processing unit that reads a data file to be printed and prints the data file.

Further, the key file creation section has an encryption creation section for encrypting the file name of the data file, the created encryption is written as the file name of the data file, and the determination section includes It may have a decryption unit that decrypts the file name of the encrypted data file.

[0007] Further, the determination unit has an alarm instruction unit for issuing an alarm instruction when a mismatch is determined as a result of the comparison, and further includes an alarm unit for issuing an alarm based on the instruction from the alarm instruction unit. Things.

[0008] The determination unit may include a print prohibition instruction unit that issues a print prohibition instruction when a mismatch is determined as a result of the comparison. Then, the printing process may not be performed until a predetermined prohibition release instruction is received.

The determination unit may include a mismatched log information storage unit that stores the log information when it is determined as a result of the comparison that there is a mismatch.

[0010] Further, it is possible to have a history information storage unit for recording log information relating to a print instruction of the printing system.

[0011]

A print processing method according to another aspect of the present invention is a print processing method for reading a specified data file and printing the read data file, wherein a file name of a data file to be printed is determined in advance. And a step of creating a key file in which only the file name of the data file is written when the password is an authorized one, and a step of notifying the file name of the key file. Inputting the file name of the notified key file and the file name of the data file to be printed; the file name of the data file written in the key file; and the data file input together with the key file. File names are compared, and if a match is found, the data Sends the file name of the file, and performing the printing instruction based on the instruction of the printing process, reads the data file to be printed, and printing it, and has a.

[0013]

Preferred embodiments of the present invention will be described below with reference to the drawings.

Embodiment 1 FIG.
Is shown in a block diagram showing a schematic configuration. The first memory 10 stores predetermined data for each file. When the user accesses the file, the access is performed for each file, and printing is performed by designating this file name. When a user performs printing, first, a file name of data to be printed and a user's own password are input from the first input unit 12. The password is registered in advance for each user so that others do not know it. The input data file name and password are sent to the key file creation unit 14. When determining that the password has been registered in advance, the key file creating unit 14 stores an arbitrary print permission key file (hereinafter referred to as a key file) from the second memory 16 in which the print permission key file is stored.
Create Then, the data file name input from the first input unit is written into this key file and stored in the second memory 16.

The key file creating section 14 sends back the file name of the created key file and causes the display section 18 to display it. The user inputs the key file name displayed on the display unit 18 and the file name of the data to be printed from the second input unit 20. The input key file name and data file name are sent to the determination unit 22. Judgment unit 22
Reads the key file having the file name input from the second input unit from the second memory 16, and the content written in this key file, that is, the data file name is
It is determined whether the data file name matches the data file name input from the second input unit 20. If we determine that this matches,
The determination unit 22 sends the name of the data file to be printed,
Instructs printing. The print processing unit 24 receives this instruction,
The data file stored in the first memory 10 is read, and a printing process is performed.

According to this embodiment, only a person who knows the registered password can create a print permission key file, and therefore only this person can print data. In other words, even if only the file name of the data is obtained, the data cannot be printed without knowing the password. Furthermore, according to this embodiment, the security of the system can be improved without changing the format of the data file. Therefore, it can be applied immediately to an existing data file.

Embodiment 2 FIG. FIG.
Is shown in a block diagram showing a schematic configuration. In this embodiment, the first embodiment. The same components as those described above are denoted by the same reference numerals and description thereof will be omitted. The feature of this embodiment is that the key file creation unit 30
When the key file is created, the encryption creating unit 30
The point is that the data file name written to the file is encrypted by a. Embodiment 1 FIG. Similarly to the above, when the name of the data file to be printed and the password of the user are input from the first input unit 12, the key file creation unit 14
Determines that the password is registered in advance, and calls an arbitrary print permission key file from the second memory 16 in which the print permission key file is stored. Then, the data file name input from the first input unit and encrypted by the encryption creating unit 30a is written into this key file and stored in the second memory 16. Therefore, the key file data stored in the second memory 16 has an encrypted data file name.

The determining unit 32 stores the key file having the key file name input from the second input unit 20 in the second memory 1.
6 and the data of this file is decrypted by the decryption unit 32a. Thereby, the data file name input from the first input unit 12 is obtained. Then, it is determined whether the decrypted data file name matches the data file name input from the second input unit 20.

According to this embodiment, even if the print permission key file is opened, it is possible to prevent the user from knowing the data file name corresponding to the key file. Therefore, security can be improved.

Embodiment 3 FIG.
Is shown in a block diagram showing a schematic configuration. In this embodiment, the first embodiment. The same components as those described above are denoted by the same reference numerals and description thereof will be omitted. What is characteristic in this embodiment is that the determination unit 40 has an alarm instruction unit 40a and an alarm unit 42 is further provided. The determination unit 40 reads the key file having the key file name input from the second input unit 20 from the second memory 16, and inputs the data file name written in this key file and the data file input from the second input unit 20. Compare the data file names. As a result of the comparison, when a match is determined, the determination unit 40 sends the name of the data file to be printed and instructs printing. On the other hand, when it is determined that the two data file names do not match, the alarm instruction unit 40a instructs the alarm unit 42 to issue an alarm. Alarm unit 42
Follows this instruction and issues an alarm that can be recognized by others and the system administrator.

According to this embodiment, a person who has attempted to illegally take out data can be notified to the surroundings.

Embodiment 4 FIG.
Is shown in a block diagram showing a schematic configuration. In this embodiment, the first embodiment. The same components as those described above are denoted by the same reference numerals and description thereof will be omitted. A characteristic of this embodiment is that the determination unit 50 includes a print prohibition instruction unit 50a. The determination unit 50 determines the second
The key file having the key file name input from the input unit 20 is read out from the second memory 16 and the data file name written in this key file and the second input unit 20 are read.
Compares the data file name input from. As a result of the comparison, when a match is determined, the determination unit 50 sends the name of the data file to be printed and instructs printing. On the other hand, if it is determined that the two data file names do not match, the print prohibition instruction unit 50a
An instruction is given not to perform the subsequent print processing until there is an instruction to release the prohibition.

According to this embodiment, when there is a person who tries to take data illegally, printing can be prohibited to prevent data leakage.

Embodiment 5 FIG.
Is shown in a block diagram showing a schematic configuration. In this embodiment, the first embodiment. The same components as those described above are denoted by the same reference numerals and description thereof will be omitted. What is characteristic in this embodiment is that the data file name written in the key file read from the second memory 16 by the determination unit 60 does not match the data file name input from the second input unit 20. Is determined, the log information relating to the mismatch is stored in the mismatch log information storage unit 62. The log information may be a name of a user who has logged in to perform the operation, a specified data file name, information on a print instruction time, and the like.

An output section 64 for outputting information stored in the mismatch log information storage section 62 can be provided.
As a result, for example, the system administrator can monitor the log information regarding the mismatch.

Embodiment 6 FIG. FIG.
Is shown in a block diagram showing a schematic configuration. In this embodiment, the first embodiment. The same components as those described above are denoted by the same reference numerals and description thereof will be omitted. What is characteristic in this embodiment is that the determination unit 70 records log information relating to the printing operation of the system of this embodiment as a history in the history information storage unit 72. The log information may be a name of a user who has logged in to perform the operation, a specified data file name, information on a print instruction time, and the like.

Further, an output section 74 for outputting information stored in the history information storage section 72 can be provided. As a result, for example, the system administrator can monitor the log information indicating the history.

Embodiment 7 FIG.
Is shown in a block diagram showing a schematic configuration. In this embodiment, the first embodiment. The same components as those described above are denoted by the same reference numerals and description thereof will be omitted. What is characteristic in this embodiment is that the determination unit 80 has an alarm instruction unit 80a and a counting unit 80b that counts the number of times of mismatch determination.
And an alarm unit 82 is provided.
The determination unit 80 reads the key file having the key file name input from the second input unit 20 from the second memory 16, and inputs the data file name written in this key file and the data file input from the second input unit 20. Compare the data file names. As a result of the comparison, when a match is determined, the determination unit 80 sends the name of the data file to be printed and instructs printing. On the other hand, if the two data file names do not match, an instruction to display an error message on the display unit 18 is issued. Then, the counting unit 80b stores the number of errors as 1. When the user again inputs the data file name and the key file name from the second input unit 20, the same comparison is performed. If they do not match, the number of errors is set to 1
The value is added to the number of times. If they match, the number of errors is returned to the initial value (0). Then, when the number of errors exceeds a predetermined number, the alarm instruction unit 80a instructs the alarm unit 82 to issue an alarm. In accordance with the instruction, the alarm unit 82 issues an alarm that can be recognized by the surrounding persons and the system administrator.

According to this embodiment, if two data file names do not match due to a simple input error,
It is possible to prevent an alarm from being issued.

It is to be noted that the limitation on the discrepancy determination based on the number of errors, that is, when the number of errors is equal to or less than a predetermined number, is performed so as not to make a final determination that the two data file names do not match. The present invention is not limited to this embodiment. For example, Embodiment 4. Printing is prohibited, or in the fifth embodiment. The present invention can also be applied to the case of storing log information at the time of a mismatch such as.

[0031]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of the present invention will be described below with reference to the drawings. FIG. 8 shows the configuration of an embodiment in which the present invention is applied to a LAN (local area network). The network of this embodiment has one server 10
0 and a terminal 2 connected thereto via a network
00 and a printer 300 as an output device. The server 100 includes a memory 110 as a storage unit for storing predetermined data, and a CPU (Central Processing Unit) 120 as an arithmetic unit for performing arithmetic processing.

Data file storage unit 11 of memory 110
2 stores predetermined data for each file. When the user accesses the file, the access is performed for each file, and printing is performed by designating this file name. When the user performs printing, first, the first input unit, and in this embodiment, the terminal 2
From 00, the user inputs the file name of the data to be printed and the user's own password using the keyboard 202. For example, the data file name “kaikei.xls” and the password “passwd” are stored in C: \> createkey Kaikei.xls. xls
Enter passwd. Note that the password is registered in advance for each user so as not to be known to others.
The input data file name and password are sent to the server 100 via the LAN. The CPU 120 as the key file creation unit 122 of the server 100 determines whether the sent password is registered in advance. If it is determined that the password is not valid, the server 100 creates an error message,
Or read it out and send it to the terminal 200,
Give instructions to display. The error message is, for example,
For example, "The password is incorrect."

When the CPU 120 determines that the password is legitimate, the CPU 120 stores an arbitrary print permission key file (hereinafter, referred to as a print permission key file) from the key file storage unit 114 of the memory 110 as the second memory in which the print permission key file is stored. Key file), for example, “12345.k
ey ". The extension of the key file is “key” as in the above-described example, and in this embodiment, it is determined whether or not the file is a key file based on the extension. Then, the data file name “kaike” input from the terminal 200 is stored in this key file.
i. .xls "and the file name is" 12345.
key, and the written data content is “kaike”.
i. xls "key file is created. That is,
Only one data file name is written in one key file.

The CPU 120 sends back the file name of the created key file to the terminal device 200, and the monitor 204 of the terminal device 200 as a display unit displays this. The user obtains a key for permitting printing from this display.
In this embodiment, the user inputs the key file name “12345.key” and the data file name “kaikei.xls” from the terminal device 200 via the keyboard 202 in this embodiment. For example, C: ￥> lp 12345. key Kaikei. x
ls or C: ￥> lp 12345. key C: ￥> lp Kaikei. xls or the like. Note that “lp” indicates a normal print input command. The input print command, key file name and data file name are LA
The determination unit 124 is sent to the CPU 120 of the server 100 via the N in this embodiment. CPU 120
Determines whether the file name sent from the terminal 200 is that of the key file. This determination is made based on whether the extension of the key file is “key”. If it is determined that the transmitted file is a key file, the key file is read from the key file storage unit 114 of the memory 110. Then, it is determined whether or not the content written in the key file, that is, the data file name matches the data file name input from the terminal 200. If we determine that this matches,
The print processing unit 126, in this embodiment, C
The PU 120 reads the data file stored in the data file storage unit 112 and drives the printer 300 to perform a printing process. At this time, the printer 300 prints only the data file name “kaikei.xls” on the paper and does not print the key file name “12345.key”. As a result, only the authorized user can obtain the printed matter on which the data file name is printed.

On the other hand, when an incorrect key file name, for example, “123.key” is input from terminal 200,
The CPU 120 as the determination unit 124 has the extension “ke
The key file name is determined based on “y”, and this file is read from the key file storage unit 114. And C
The PU 120 compares the data file name stored in the key file “123.key” with the data file name sent from the terminal 200. At this time, the data file names usually do not match because the key file is incorrect. The CPU 120 creates or reads out an error message, sends it to the terminal device 200, instructs the terminal device 200 to display the error message, and requests input of the key file name and the data file name again. The error message is, for example, "The key file name is incorrect."

If only the data file name is sent from the terminal 200, the C
The PU 120 creates or reads out the error message, sends it to the terminal 200, gives an instruction to display it, and requests the input of the key file name and the data file name again. The error message is, for example, "The key file name has not been specified."

Further, in this embodiment, the counting section 124a of the judging section 124, in this embodiment, the CPU 120 writes the number of times the error judgment has been made continuously, that is The number of times that the data file name and the data file name sent from the terminal device 200 do not match continuously is counted. If the number of consecutive mismatches exceeds a predetermined number, which is two in this embodiment, the alarm instruction unit 124b of the determination unit 124 is used.
Is an alarm unit, and in this embodiment, issues an instruction to issue an alarm to the lamp 400 and the buzzer 500. The lamp 400 or the buzzer 500 issues an alarm that can be recognized by a surrounding person or a system administrator by this instruction.

The CPU 12 as the counting section 124a
If 0 is determined as the number of times that the error determination has been continuously performed exceeds a predetermined number (two times), the print inhibition instructing unit 124c of the determination unit 124 is determined. Is prohibited until the instruction is issued.

Further, the CPU 12 as the determination unit 124
0 stores the history of the past determination in the history information storage unit 116 of the memory 110. The history information is, for example, information such as the user name of the person who logged in, the specified data file name, and the time at that time. This history information is output to the output unit 12
6, the printer 300 can be driven to perform printing.

FIG. 9 shows the flow of processing related to key file creation. The key file creation unit 122
The password designated by the user is read (S100),
It is determined whether this is correct (S102). If the password is correct, the data file name is read (S10
4) A unique key file is created in the system, and only the data file name is stored therein (S106). Then, the file name of the key file is displayed on the monitor to notify the user (S108), and the process ends. On the other hand, if it is determined in step S102 that the password is not correct, an error message is displayed on the monitor (S110), and the process ends.

FIG. 10 shows the flow of processing relating to print permission. First, it is determined whether the specified file is a key file (S200). Whether the file is a key file can be determined based on whether the extension of the file name is “key”. If it is a key file, the data file name which is the content of the key file is read and memorized (S202). It is determined whether the learned data file name matches the data file name input from the terminal (S204). If they match, the process is passed to the print processing unit (S206), the learned data file name is cleared (S208), and the process ends. On the other hand, in step S200,
If it is determined that the specified file is not a key file, an error notification is sent to the user (S210), and the process ends. Also, when it is determined that the remembered data file name, which is the content of the key file, does not match the file name input from the terminal, an error notification is made (S210).
finish.

In this embodiment, the present invention is applied to a LAN. However, by providing a printer connected to a server remotely via a public line or the like, a printer can be designated and specified at a remote location. It is also possible to provide printed data to a person at the same location.

[0043]

Since the present invention is configured as described above, it has the following effects.

That is, since only a person who knows the registered password can create the print permission key file, only this person can print data. In other words, even if only the file name of the data is obtained, the data cannot be printed without knowing the password. Further, according to this embodiment,
The security of the system can be improved without changing the format of the data file. Therefore, it can be applied immediately to an existing data file.

Further, by encrypting the data file name, even if the print permission key file is opened, the data file name corresponding to the key file cannot be known. Therefore, security can be improved.

Further, by providing an alarm unit, it is possible to notify the surroundings that there is a person who is going to take data illegally.

Further, by providing a print prohibition instructing section, if a person attempts to illegally take out data,
Printing can be prohibited to prevent data leakage.

Further, if the data file name written in the key file and the data file name input from the terminal do not match, the log information at this time is stored so that the log information relating to the mismatch can be stored by the system administrator. Etc. can be monitored.

Further, by storing the history of log information relating to print instructions, the history of print processing can be monitored by a system administrator or the like.

[0050]

[Brief description of the drawings]

FIG. 1 shows a first embodiment of the present invention. FIG. 3 is a block diagram showing the configuration of FIG.

FIG. 2 shows a second embodiment of the present invention. FIG. 3 is a block diagram showing the configuration of FIG.

FIG. 3 shows a third embodiment of the present invention. FIG. 3 is a block diagram showing the configuration of FIG.

FIG. 4 shows a fourth embodiment of the present invention. FIG. 3 is a block diagram showing the configuration of FIG.

FIG. 5 shows a fifth embodiment of the present invention. FIG. 3 is a block diagram showing the configuration of FIG.

FIG. 6 shows a sixth embodiment of the present invention. FIG. 3 is a block diagram showing the configuration of FIG.

FIG. 7 shows a seventh embodiment of the present invention. FIG. 3 is a block diagram showing the configuration of FIG.

FIG. 8 is a block diagram showing a configuration of an embodiment of the present invention.

FIG. 9 is a flowchart illustrating a flow of key file creation according to the present embodiment.

FIG. 10 is a flowchart illustrating a flow relating to print processing according to the present exemplary embodiment.

[Explanation of symbols]

10 first memory, 12 first input unit, 14, 30
Key file creation unit, 16 second memory, 20 second input unit, 22, 32, 40, 50, 60, 70, 8
0 determination unit, 24 print processing unit, 30a encryption creation unit,
32a decryption unit, 40a alarm instruction unit, 42, 82
Alarm unit, 50a Print prohibition instruction unit, 62 mismatch log information storage unit, 64, 74 output unit, 72 history information storage unit, 80a alarm instruction unit, 80b counting unit, 100 server, 110 memory (key file storage unit, data file Storage unit, history information storage unit), 120 CPUs (key file creation unit, determination unit, counting unit, alarm instruction unit, print prohibition instruction unit, print processing unit), 200 terminals (first input unit, second input unit) Input unit), 300 printer, 400 lamp (alarm unit), 500 buzzer (alarm unit).

────────────────────────────────────────────────── ─── Continuation of the front page (56) References JP-A-9-6662 (JP, A) JP-A-9-244828 (JP, A) JP-A-7-44464 (JP, A) (58) Field (Int.Cl. ⁶ , DB name) G06F 12/14 320 B41J 5/30 B41J 29/38 G06F 3/12 G06F 12/00 537 G06F 15/00 330

Claims (8)

(57) [Claims] Reading a specified data file,
A printing system for printing the data file, wherein a first input unit for inputting a file name of a data file to be printed and a predetermined password; and A key file creation unit that creates a key file in which only the file name of the key file is written; a display unit that displays the file name of the key file; a file name of the displayed key file and a file of the data file to be printed A second input unit for inputting a name, a file name of the data file written in the key file, and a file name of the data file input from the second input unit; If the file name of the data file is sent,
A printing system comprising: a determination unit that issues a print processing instruction; and a print processing unit that reads a data file to be printed based on an instruction from the determination unit and prints the data file. 2. The key file creation unit according to
One key file from multiple stored key files
Arbitrarily select a file and enter the data file
2. The printing according to claim 1, wherein the file name is written.
system. 3. The key file creation unit has an encryption creation unit that encrypts a file name of the data file,
The printing system according to claim 1, wherein the created encryption is written as a file name of the data file, and the determination unit includes a decryption unit that decrypts a file name of the encrypted data file. . 4. The determination unit has an alarm instruction unit that issues an alarm instruction when a mismatch is determined as a result of the comparison.
The printing system according to claim 1, further comprising an alarm unit that issues an alarm based on an instruction from the alarm instruction unit. 5. The printing device according to claim 1, wherein the determination unit includes a print prohibition instruction unit that issues a print prohibition instruction when the comparison result indicates a mismatch. 2. The printing system according to claim 1, wherein the printing process is not performed until a prohibition release instruction is received. 6. The printing system according to claim 1, further comprising a mismatch log information storage unit that stores the log information when it is determined that there is a mismatch as a result of the comparison by the determination unit. 7. The printing system according to claim 1, further comprising a history information storage unit that records log information related to a print instruction of the printing system. 8. Reading a designated data file,
A print processing method for printing the data file, comprising the steps of: inputting a file name of a data file to be printed and a predetermined password; and, when the password is an authorized password, a file name of the data file. Creating a key file in which only the written key file is written, notifying the file name of the key file, and inputting the file name of the notified key file and the file name of the data file to be printed. The file name of the data file written in the key file is compared with the file name of the data file input together with the key file, and when a match is determined, the file name of the data file is transmitted. Issuing a print processing instruction; and Reads the data file to be printed, the print processing method characterized by comprising the steps of: printing the same.