JP4232510B2 - Printer and printing system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a printer and a printing system, and more particularly, to a printer with a limited printing place and a printing system including such a printer.
[0002]
[Prior art]
In recent years, as a business model using a printer, a form in which a printer maker rents a printer free of charge to a user and the user pays the printer maker for the number of copies printed using the printer has been attracting attention. . In such a business model, in addition to charging according to the number of printed sheets, charging according to the usage period, charging according to the amount of ink used, and the like are conceivable.
[0003]
[Patent Document 1]
JP-A-11-331144
[0004]
[Problems to be solved by the invention]
However, in such a business model, if a user rents out a printer lent by a printer maker without permission, or rents it out to another person, the printer maker can charge for the use of the printer. It will disappear. For this reason, the printer manufacturer wants to limit the place where the lent printer can be used, that is, the place where normal printing can be performed to the rented user's place.
[0005]
Accordingly, the present invention has been made in view of the above problems, and an object thereof is to provide a printer capable of printing only at a location registered in advance and a printing system including such a printer.
[0006]
[Means for Solving the Problems]
In order to solve the above-described problems, a printer according to the present invention acquires printer position information for specifying a place where the printer is installed, printer position information acquisition means, and printer position information from the printer position information acquisition means. A first key is generated using a first printer position information acquisition unit that acquires information and uses this as first printer position information, and a passphrase including at least the first printer position information; When receiving print data, a key generation unit, a first key holding unit that holds the first key generated by the first key generation unit, and printer position information from the printer position information acquisition unit when the print data is received. A second printer position information acquisition unit that acquires the second printer position information and uses a passphrase that includes at least the second printer position information; A second key generation unit that generates the encryption information, and encrypts the encryption target information using one of the first key or the second key, and generates the encryption information; The encryption information is decrypted using the other of the first key and the second key, and if it can be decrypted, printing based on the print data is executed, but if it cannot be decrypted, based on the print data And a selective printing execution unit that does not execute printing.
[0007]
In this case, the first key is a public key, the second key is a secret key, and the encryption information generation unit encrypts the encryption target information using the first key, and The selective printing execution unit may decrypt the encryption information using the second key.
[0008]
Alternatively, the first key is a secret key, the second key is a public key, and the encryption information generation unit encrypts the encryption target information using the second key, and the selection The print execution unit may decrypt the encryption information using the first key.
[0009]
Further, the encryption target information may be the received print data or a fixed text prepared in advance.
[0010]
Further, even when the second key is generated when the first key generation unit generates the first key, the second key may be discarded.
[0011]
Furthermore, an authentication information requesting unit that requests input of authentication information of the operator, and an authentication information determination unit that determines whether or not the input authentication information matches pre-registered authentication information, When the authentication information determination unit determines that the input authentication information matches the authentication information registered in advance, the first key generation unit may generate the first key.
[0012]
A printing system according to the present invention is a printing system having a printer and a print client connected to the printer, and the printer acquires printer position information for specifying a place where the printer is installed. Printer position information acquisition means, printer position information is acquired from the printer position information acquisition means, and this is used as first printer position information, and at least the first printer position information is A first key generating means for generating a first key using a passphrase including the first key holding means for holding the first key generated by the first key generating means; When print data is received from a print client, printer position information is acquired from the printer position information acquisition means, and this is used as second printer position information. , Second printer position information acquisition means, second key generation means for generating a second key using a passphrase including at least the second printer position information, and the first key or the second key. The encryption information is encrypted by using one of the keys of the encryption to generate encryption information and the encryption information is decrypted by using the other of the first key and the second key. And a selective print execution unit that executes printing based on the print data when the data can be decoded but does not execute printing based on the print data when the data cannot be decoded.
[0013]
The printer according to the present invention includes a printer position information acquisition unit that acquires printer position information for specifying a location where the printer is installed from a printer position information detection unit provided outside the printer; The printer position information is acquired from the printer position information acquisition means, and this is used as the first printer position information, and the first printer position information acquisition means and a passphrase including at least the first printer position information are used. A first key generating means for generating a key, a first key holding means for holding the first key generated by the first key generating means, and the printer position when print data is received. The printer position information is acquired from the information acquisition means, and this is used as the second printer position information. A second key is generated using a passphrase including the second key generation means, and the encryption target information is encrypted using one of the first key and the second key. Using the encryption information generation means for generating information and the other of the first key and the second key, the encryption information is decrypted, and if it can be decrypted, printing based on the print data is executed. However, it includes a selective print execution unit that does not execute printing based on the print data when it cannot be decoded.
[0014]
A printing system according to the present invention is a printing system having a printer and a print client connected to the printer, and the printer receives a printer position information detecting unit provided outside the printer from the printer. Printer position information acquisition means for acquiring printer position information for specifying an installed location; printer position information is acquired from the printer position information acquisition means; and this is used as first printer position information. A first key generation unit that generates a first key using a printer position information acquisition unit, a passphrase that includes at least the first printer position information, and a first key generated by the first key generation unit. A first key holding unit that holds the key of the printer, and the printer position information acquisition unit upon receiving print data from the print client A second key is generated using a second printer position information acquisition unit that acquires the printer position information and uses this as second printer position information, and a passphrase including at least the second printer position information. Encryption information generating means for generating encryption information by encrypting information to be encrypted using second key generation means, one of the first key or the second key, and the first key Alternatively, the encryption information is decrypted using the other of the second keys, and if it can be decrypted, printing based on the print data is executed, but if it cannot be decrypted, printing based on the print data is not performed. And a selective printing execution means.
[0015]
The present invention can also be realized as a control method for controlling a printer and a control method for controlling a printing system. Furthermore, it can also be realized as a program for controlling the printer or the printing system and a recording medium recording the program.
[0016]
DETAILED DESCRIPTION OF THE INVENTION
[First Embodiment]
When a printer is installed, the printing system according to the first embodiment of the present invention generates a public key using at least printer position information indicating a position where the printer is installed, and the printer stores the public key. Hold it. When print data is received, the print data is encrypted using this public key to generate encrypted print data, and at the same time, a secret key is generated using at least the printer position information at that time. Decrypt the encrypted print data using the key. If the encrypted print data can be decrypted, printing based on the print data is executed. If the encrypted print data cannot be decrypted, printing is not performed. More details will be described below.
[0017]
First, the configuration of a printing system according to the present embodiment will be described with reference to FIG. FIG. 1 is a block diagram illustrating a hardware configuration of a printing system according to the present embodiment.
[0018]
As shown in FIG. 1, the printing system according to the present embodiment includes a print client 20 connected to a network 10 and a printer 30 connected to the network 10. In the present embodiment, the network 10 is configured by the Internet using TCP / IP (transmission control protocol / internet protocol). However, the form of the network 10 is not limited to the Internet, and may be configured by, for example, a LAN such as an Ethernet, or a mixture of the Internet and a LAN.
[0019]
The print client 20 is composed of various computers called a host computer and a personal computer, for example. In the present embodiment, in particular, the print client 20 generates print data and transmits the print data to the printer 30 via the network 10. The number of print clients connected to the network 10 is arbitrary, and may be one or plural. The print client 20 is not limited to a computer, and may be, for example, a digital camera that needs to print a captured image, a content server that stores print image data as content, or the like.
[0020]
In the present embodiment, the printer 30 is a so-called network printer. In the present embodiment, in particular, the printer 30 receives print data from the print client 20 and encrypts the print data using the public key registered when the printer 30 is installed. The printer 30 generates a secret key using a passphrase including at least the printer position information at that time, and decrypts the print data encrypted with the secret key. If the print data can be decrypted, printing based on the print data is performed. If the print data cannot be decrypted, printing based on the print data is not performed.
[0021]
In the present embodiment, the printer 30 is directly connected to the network 10, and each printer 30 has a unique network address. Therefore, the print client 20 can transmit the encrypted print data to the printer 30 by designating this network address.
[0022]
However, in FIG. 1, the printer 30 is directly connected to the network 10, but it may be connected via a printer server. The number of printers connected to the network 10 is arbitrary, and may be one or a plurality. Furthermore, the printer 30 and the print client 20 may be connected locally instead of connected to the network.
[0023]
FIG. 2 is a block diagram for explaining the internal configuration of the printer 30. As shown in FIG. 2, the printer 30 includes a central processing unit (CPU) 40, a random access memory (RAM) 42, and a read only memory (ROM) 44. Connected through. In addition, a communication interface 48 is connected to the internal bus 46, and the printer 30 is connected to the network 10 through the communication interface 48. Further, an interface 50 is connected to the internal bus 46, and a print engine 52 is connected to the interface 50.
[0024]
In addition, a position detector 54 is connected to the internal bus 46. The position detection unit 54 has a function of specifying the position where the printer 30 is installed. In the present embodiment, for example, a GPS (global positioning system) is used, and the latitude, longitude, and altitude of the position where the printer 30 is installed can be specified. It is said that the current GPS accuracy is about ± 10 m in each of latitude, longitude, and altitude.
[0025]
However, the position detection unit 54 is not limited to the configuration using the GPS. For example, when the printer 30 is connected to the network 10 by a wireless LAN, the position detection unit 54 is connected to the wireless base station in which the printer 30 is accommodated. Based on this, the position of the printer 30 may be specified. Alternatively, the position of the printer 30 may be specified using mobile communication technology such as PHS (Personal Handyphone System). Further, when GPS and PHS are used together and GPS radio waves cannot be received normally indoors, the position may be specified based on PHS radio waves.
[0026]
Further, a hard disk 58 is connected to the internal bus 46 via an interface 56. In the present embodiment, the hard disk 58 functions as a rewritable nonvolatile storage device.
[0027]
FIG. 3 is a block diagram for explaining the internal configuration of the print client 20. As shown in FIG. 3, the print client 20 according to the present embodiment includes a computer main body 60 and a display 62.
[0028]
The computer main body 60 includes a CPU 64, a RAM 66, and a ROM 68, which are connected to each other via an internal bus 70. In addition, a communication interface 72 is connected to the internal bus 70, and the print client 20 is connected to the network 10 via the communication interface 72.
[0029]
Further, an interface 74 is connected to the internal bus 70, and a hard disk 76 that is a mass storage device is connected to the interface 74. In the present embodiment, the hard disk 76 functions as a rewritable nonvolatile storage device. In addition, an interface 78 is connected to the internal bus 70, and the above-described display 62 is connected via a cable 80 extending from the interface 78.
[0030]
Next, in the printing system according to the present embodiment, processing when the printer 30 receives print data from the print client 20 will be schematically described with reference to FIG.
[0031]
In the printer 30, when the printer 30 is installed in this place, a public key is generated by public key cryptography using a passphrase including at least the printer position information at that time, and registered in the printer 30. deep. At this time, even if a secret key is generated, the secret key is discarded.
[0032]
When the printer 30 receives the print data D05, the received print data D05 is encrypted using the registered public key to generate encrypted print data D10. Subsequently, the printer 30 acquires printer position information at that time, and generates a secret key by public key cryptography using a passphrase including at least the printer position information. At this time, even if the public key is generated, the public key is discarded. When the encrypted print data D10 is decrypted using the secret key and the encrypted print data D10 can be decrypted, printing is performed based on the received print data D05, and the decrypted data cannot be decrypted. Does not perform printing based on the received print data D05.
[0033]
Next, the contents of the above-described processing will be described in detail using a flowchart. FIG. 5 is a flowchart for explaining a first key generation process executed by the printer 30. This first key generation process is a process realized by the CPU 40 reading and executing the first key generation program stored in the ROM 44 or the hard disk 58 of the printer 30. In the present embodiment, the first key generation process is activated and executed when an operator such as a printer manufacturer inputs an instruction to activate the process for generating a public key to the printer 30. It is processing. Normally, this first key generation process is started when the printer 30 is installed at the user's place of use.
[0034]
As shown in FIG. 5, in the first key generation process, first, the printer 30 requests the operator to input authentication information (step S100). In this embodiment, a combination of an ID for specifying an operator and a password is used as the authentication information. Therefore, the operator inputs the ID and password from the control panel of the printer 30 or the like.
[0035]
Next, the printer 30 determines whether authentication information has been input (step S102). If this authentication information has not been input (step S102: No), the process of step S102 is repeated and waits.
[0036]
On the other hand, when the authentication information is input (step S102: Yes), the printer 30 determines whether the input authentication information matches the authentication information registered in advance in the printer 30 (step S102: Yes). S104). Specifically, in this embodiment, an ID and a password are registered as authentication information in the ROM 44 or the hard disk 58 of the printer 30. Therefore, the printer 30 determines whether the input ID and password match the registered ID and password.
[0037]
If the two match (step S104: Yes), the printer 30 acquires device specific information of the printer 30 (step S106). Here, the device unique information is identification information uniquely assigned to the printer 30 and includes, for example, a manufacturing serial number and a MAC address of the printer 30.
[0038]
Next, the printer 30 acquires the printer position information of the printer 30 at that time from the position detection unit 54 (step S108). Thereby, the position where the printer 30 is installed can be specified.
[0039]
Next, the printer 30 creates a passphrase using the device specific information and the printer position information (step S110). Various methods for creating the passphrase can be considered. In this embodiment, the passphrase is created by simply connecting the printer position information to the device specific information. The passphrase may include data other than the device specific information and the printer position information.
[0040]
Next, the printer 30 generates a public key and a secret key by public key cryptography using the pass phrase created in step S110 (step S112). Public key cryptography has the property that if the same passphrase is used, the same key is generated even if the public key and the private key are generated again. Subsequently, the printer 30 stores only the public key among the generated public key and secret key in the public key storage unit TB10 (step S114). Even if the secret key is generated, it is discarded without being saved.
[0041]
FIG. 6 is a diagram illustrating a configuration of the public key storage unit TB10 according to the present embodiment. The public key storage unit TB10 shown in FIG. For this reason, in step S114, the generated public key is stored in the hard disk 58. The reason for storing the public key in the hard disk 58 is to keep the public key even when the printer 30 is turned off.
[0042]
Referring again to FIG. 5, when it is determined in step S104 described above that the input authentication information does not match the pre-registered authentication information (step S104: No), the printer 30 The operator is informed of the authentication mismatch (step S120). In the present embodiment, an authentication mismatch is displayed on a liquid crystal screen provided on the control panel.
[0043]
The first key generation processing according to the present embodiment is completed by the processing in step S114 or step S120.
[0044]
7 and 8 are flowcharts for explaining the print execution process executed by the printer 30. FIG. This print execution process is a process realized by the CPU 40 reading and executing a print execution program stored in the ROM 44 or the hard disk 58 of the printer 30. In the present embodiment, this print execution process is a process that is regularly executed.
[0045]
As shown in FIG. 7, the printer 30 is waiting for a connection from the print client 20. When the connection is requested from the print client 20, the printer 30 connects to the print client 20 via the network 10. Establish (step S150). After the connection with the print client 20 is established, the printer 30 determines whether the print data D05 is received from the network 10 (step S152). If no print data D05 has been received (step S152: No), the process of step S152 is repeated and waits.
[0046]
On the other hand, when the print data D05 is received (step S152: Yes), the printer 30 acquires the stored public key from the public key storage unit TB10 (step S154). Subsequently, the printer 30 encrypts the received print data using this public key, and generates encrypted print data D10 (step S156).
[0047]
Next, the printer 30 acquires its own device specific information (step S158). Subsequently, the printer 30 acquires the printer position information of the printer 30 at that time from the position detection unit 54 (step S160). In this way, the printer position information is acquired from the position detection unit 54 each time when the printer 30 is moved to another location, the printer 30 is installed at a location not intended by the user. This is to prevent the printer 30 from performing printing in such a case.
[0048]
Next, the printer 30 creates a passphrase based on the device specific information and the printer position information (step S162). This passphrase creation method needs to be the same as step S110 in the first key generation process described above. This is because if the passphrase is different, the encrypted print data D10 encrypted with the public key stored in the public key storage unit TB10 cannot be decrypted with the secret key.
[0049]
Next, as shown in FIG. 8, the printer 30 generates a public key and a secret key by public key cryptography using the generated passphrase (step S180). The passphrase used in step S180 is the same as the passphrase used in step S112 in the first key generation process described above unless the installation position of the printer 30 is moved. For this reason, the same public key and secret key as those generated in step S112 are generated. Subsequently, the printer 30 decrypts the encrypted print data D10 using the generated secret key, and acquires the print data D05 (step S182).
[0050]
Next, the printer 30 determines whether or not the encrypted print data D10 has been decrypted using the secret key (step S184). If the decryption has been completed (step S184: Yes), printing that drives the print engine 52 is executed based on the obtained print data D05 (step S186). Specifically, the print data D05 is interpreted in language, and print request data suitable for the print engine 52 is generated. Then, by transmitting this print request data to the print engine 52, the print engine 52 performs printing on a print sheet or the like.
[0051]
When the printing is normally completed, the printer 30 transmits a print completion notification indicating that the printing has been normally completed to the print client 20 as print result information (step S188).
[0052]
On the other hand, if it is determined in step S184 that the encrypted print data D10 could not be decrypted (step S184: No), an undecipherable notification is transmitted as print result information to the print client 20 (step S190). ). That is, printing based on the received print data D05 is not executed.
[0053]
After step S188 or step S190, the printer 30 ends the connection with the print client 20 (step S192). And it returns to the process of step S150 mentioned above.
[0054]
As described above, according to the printing system according to the present embodiment, the position where an authorized operator registers the public key in the printer 30 is different from the position when the printer 30 receives print data. In this case, the printer 30 does not execute printing of print data. For this reason, when the printer 30 is illegally moved or diverted, the printer 30 does not function normally as a printer. Therefore, unauthorized movement or diversion of the printer 30 can be prevented.
[0055]
[Second Embodiment]
In the first embodiment described above, the printer 30 holds the “public key” generated when the printer 30 is installed. However, in the second embodiment of the present invention, the “secret key” generated when the printer 30 is installed. "Is held by the printer 30. More details will be described below.
[0056]
The configuration of the printing system according to the present embodiment is the same as that in FIG. 1 in the first embodiment described above, the configuration of the printer 30 is the same as that in FIG. 2 described above, and the configuration of the print client 20 is the same as that described above. This is the same as FIG.
[0057]
FIG. 9 is a flowchart illustrating the first key generation process executed by the printer 30 according to the present embodiment, and corresponds to FIG. 5 in the first embodiment described above.
[0058]
As shown in FIG. 9, the first key generation process according to the present embodiment is the same as the process of the first embodiment described above until step S112, but the following process is different. That is, after generating a public key and a secret key by public key cryptography (step S112), the printer 30 according to the present embodiment stores the generated secret key in a secret key storage unit (step S200). That is, in the first embodiment described above, the generated public key is stored, but in the present embodiment, the secret key is stored. FIG. 10 is a diagram illustrating a configuration of the secret key storage unit TB20 according to the present embodiment. The secret key storage unit TB20 is also formed on the hard disk 58. For this reason, in step S200, the private key is stored in the hard disk 58.
[0059]
FIG. 11 and FIG. 12 are flowcharts for explaining print execution processing executed by the printer 30. 11 and 12 correspond to FIGS. 7 and 8 in the first embodiment described above.
[0060]
As shown in FIG. 11, the printer 30 waits for a connection from the print client 20, and when the connection is requested from the print client 20, the printer 30 connects to the print client 20 via the network 10. Establish (step S250). After the connection with the print client 20 is established, the printer 30 determines whether the print data D05 has been received from the network 10 (step S252). If no print data D05 has been received (step S252: No), the process of step S252 is repeated and waits.
[0061]
On the other hand, when the print data D05 is received (step S252: Yes), the printer 30 acquires its own device unique information (step S254). Subsequently, the printer 30 acquires the printer position information of the printer 30 at that time from the position detection unit 54 (step S256). In this way, the printer position information is acquired from the position detection unit 54 each time when the printer 30 is moved to another location, the printer 30 is installed at a location not intended by the user. This is to prevent the printer 30 from performing printing in such a case.
[0062]
Next, the printer 30 creates a passphrase based on the device specific information and the printer position information (step S258). This passphrase creation method needs to be the same as step S110 in the first key generation process in FIG. This is because if the passphrase is different, the encrypted print data D10 cannot be decrypted using the secret key stored in the secret key storage unit TB20.
[0063]
Next, the printer 30 generates a public key and a secret key by public key cryptography using the generated passphrase (step S260). The passphrase used in step S260 is the same as the passphrase used in step S112 in the first key generation process of FIG. 9 unless the installation position of the printer 30 is moved. For this reason, the same public key and secret key as those generated in step S112 are generated. Subsequently, the printer 30 encrypts the print data D05 using the generated public key, and generates encrypted print data D10 (step S262).
[0064]
Next, as shown in FIG. 12, the printer 30 acquires the stored secret key from the secret key storage unit TB20 (step S280). Subsequently, the printer 30 decrypts the encrypted print data D10 using this secret key, and obtains the print data D05 (step S282).
[0065]
Next, the printer 30 determines whether or not the encrypted print data D10 has been decrypted using the secret key (step S284). If decryption is possible (step S284: Yes), printing is performed by driving the print engine 52 based on the obtained print data D05 (step S286). Specifically, the print data D05 is interpreted in language, and print request data suitable for the print engine 52 is generated. Then, by transmitting this print request data to the print engine 52, the print engine 52 performs printing on a print sheet or the like.
[0066]
When this printing is normally completed, the printer 30 transmits a print completion notification indicating that the printing has been normally completed to the print client 20 as print result information (step S288).
[0067]
On the other hand, if it is determined in step S284 that the encrypted print data D10 cannot be decrypted (step S284: No), an undecipherable notification is transmitted as print result information to the print client 20 (step S290). ). That is, printing based on the received print data D05 is not executed.
[0068]
After step S288 or step S290, the printer 30 ends the connection with the print client 20 (step S292). And it returns to the process of step S250 mentioned above.
[0069]
As described above, according to the printing system according to the present embodiment, the position where an operator with a valid authority registers the secret key in the printer 30 is different from the position when the printer 30 receives the print data. In this case, the printer 30 does not execute printing of print data. For this reason, when the printer 30 is illegally moved or diverted, the printer 30 does not function normally as a printer. Therefore, unauthorized movement or diversion of the printer 30 can be prevented.
[0070]
[Third Embodiment]
In the third embodiment of the present invention, the position detection unit 54 of the printer 30 is not built in the printer 30 in the first and second embodiments described above, but is externally attached.
[0071]
FIG. 13 is a block diagram illustrating a configuration of the printer 30 according to the present embodiment. In the printer 30 shown in FIG. 13, the position detection unit 54 is provided outside the printer 30 and is connected to the printer 30 via the interface 200. For example, the position detection unit 54 is configured by a GPS device or a PHS terminal, and the GPS device or PHS terminal is inserted into the printer 30 via a card slot, whereby the printer 30 having the configuration shown in FIG. 13 is realized. The In the example of FIG. 13, the printer 30 and the position detection unit 54 are connected by a short-distance wired cable such as USB.
[0072]
The printer 30 is normally used as a printer that does not include the position detection unit 54. However, in the first embodiment described above, when the position detection unit 54 is necessary, the user attaches the position detection unit 54 to the printer 30. Thus, the printer 30 is used as a printer with the position detection unit 54. That is, in the present embodiment, the position detector 54 is detachable.
[0073]
Other points in the printer 30 are the same as those in the first and second embodiments described above.
[0074]
FIG. 14 is a diagram illustrating a modification of the third embodiment. In the example of FIG. 14, a wireless receiving unit 202 is connected to the interface 56 of the printer 30. For example, the position detection unit 54 is configured by a GPS-equipped mobile terminal, and the position detection unit 54 and the reception unit 202 are connected by a short-distance wireless method such as Bluetooth. Then, the position information acquired by the position detection unit 54 is transmitted to the printer 30 by a short-range wireless method.
[0075]
If the printer 30 is configured as in the present embodiment, the user may attach the position detection unit 54 to the printer 30 when necessary, without including the expensive position detection unit 54 in every printer. For this reason, the cost of the printer 30 can be reduced. Further, since the printer 30 and the position detection unit 54 are connected by a wired cable with limited connection distance, Bluetooth, or the like, the distance between the printer 30 and the position detection unit 54 is set within a predetermined range. Can be limited to.
[0076]
The present invention is not limited to the above embodiment and can be variously modified. For example, in the above-described embodiment, the printer 30 confirms that the printer 30 is not moved by encrypting and decrypting the received print data D05. However, the encryption target information to be encrypted and decrypted is: It is not limited to the received print data. For example, the standard text “ABCDEFG” may be used as the encryption target information, the standard text “ABCDEFG” may be encrypted, and if it can be decrypted, it may be determined that the printer 30 has not been moved. .
[0077]
In the above-described embodiment, when printing is performed, printing is performed using the print data D05 obtained by decrypting the encrypted print data D10, but the received print data D05 is retained. In addition, printing may be performed based on the held print data D05.
[0078]
Further, for example, in each of the above-described embodiments, the authentication information indicating whether or not the operator has a legitimate authority is configured by a combination of ID and password. However, the authentication information is limited to a combination of ID and password. is not. For example, a fingerprint of a person having a legitimate authority is registered in the printer 30, and when the printer 30 reads the fingerprint of the operator and the fingerprints match, it is determined that the person has a legitimate authority. May be.
[0079]
Further, although the printer has been described as an example of the data receiving device that restricts the usable position, the present invention is not limited to the printer. Further, the data transmission apparatus is not limited to the print client.
[0080]
For example, the data transmission device in the data transmission / reception system may be a digital camera for photographing an image, and the data reception device may be a data server that stores image data captured by the digital camera. In this case, a public key is registered in advance in the data server, a secret key is generated again when data is received from the digital camera, and the encryption target information is encrypted with the registered public key. If decryption is possible with the private key, the received data is stored. If decryption is impossible, the received data is not stored. Alternatively, a secret key is registered in advance in the data server, and when data is received from the digital camera, a public key is generated again, information to be encrypted is encrypted with this public key, and the secret that has been registered If the key can be decrypted, the received data is stored. If the key cannot be decrypted, the received data is not stored.
[0081]
Further, the data transmission device in the data transmission / reception system may be a personal computer, and the data reception device may be a projector that projects image data transmitted from the personal computer. In this case, a public key is registered in the projector in advance, and when data is received from the personal computer, a secret key is generated again, and the information to be encrypted is encrypted with the registered public key. When decryption is possible with the key, the received data is projected, and when decryption is impossible, the received data is not projected. Alternatively, a secret key is registered in the projector in advance, and when data is received from the personal computer, a public key is generated again, the information to be encrypted is encrypted with this public key, and the secret key that has been registered If the decoding is successful, the received data is projected. If the decoding is impossible, the received data is not projected.
[0082]
Furthermore, the data transmission device in the data transmission / reception system may be a content server such as music, and the data reception device may be a playback device for content data such as music transmitted from the content server. In this case, a public key is pre-registered in the playback device, a secret key is generated again when data is received from the content server, and the encryption target information is encrypted with the registered public key, If decryption is possible with the private key, the received data is reproduced. If decryption is impossible, the received data is not reproduced. Alternatively, a secret key is registered in the playback device in advance, and when data is received from the content server, a public key is generated again, information to be encrypted is encrypted with this public key, and the secret that has been registered If decryption is possible with the key, the received data is reproduced. If decryption is impossible, the received data is not reproduced.
[0083]
In the above-described embodiment, the case where the print medium of the printer 30 is a print sheet has been described as an example. However, the print medium is not limited to this, and may be another print medium such as an OHP sheet. The present invention can be applied.
[0084]
Further, for each process described in the above embodiment, a program for executing each process is recorded on a recording medium such as a flexible disk, a CD-ROM (Compact Disc-Read Only Memory), a ROM, or a memory card. Thus, it can be distributed in the form of a recording medium. In this case, the above-described embodiment can be realized by causing the print client 20 and / or the printer 30 to read and execute the recording medium on which the program is recorded.
[0085]
The print client 20 and / or the printer 30 may include other programs such as an operating system and another application program. In this case, another program included in the print client 20 and / or the printer 30 is used to call a program that realizes processing equivalent to the above-described embodiment from among the programs included in the print client 20 and / or the printer 30. May be recorded.
[0086]
Furthermore, such a program can be distributed not as a recording medium but as a carrier wave through a network. The program transmitted in the form of a carrier wave on the network is taken into the print client 20 and / or the printer 30, and the above-described embodiment can be realized by executing this program.
[0087]
Also, when a program is recorded on a recording medium or transmitted as a carrier wave on a network, the program may be encrypted or compressed. In this case, the print client 20 and / or the printer 30 that read the program from the recording medium or the carrier wave needs to execute the program after decoding or decompressing the program.
[0088]
【The invention's effect】
As described above, according to the printer and the printing system according to the present invention, when the printer is installed, the first key is generated using the printer position information of the printer, and the printer receives the print data. In this case, the second key corresponding to the first key is generated using the printer position information at that time. Then, the information to be encrypted is encrypted using one of the first key and the second key, and is decrypted using the other. If the decryption is successful, the received print data is printed. When the data cannot be decrypted, the received print data is not printed. For this reason, the position where the printer performs printing can be limited.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an example of a configuration of a printing system according to a first embodiment of the invention.
FIG. 2 is a diagram illustrating an example of a hardware configuration of the printer according to the first embodiment of the invention.
FIG. 3 is a diagram showing an example of the configuration of a print client according to the first embodiment of the present invention.
FIG. 4 is a conceptual diagram for explaining encryption and decryption of print data using a public key and a secret key in the first embodiment of the present invention.
FIG. 5 is a flowchart illustrating first key generation processing executed by the printer according to the first embodiment of the present invention.
FIG. 6 is a diagram illustrating an example of a configuration of a public key storage unit included in the printer according to the first embodiment of the present invention.
FIG. 7 illustrates a part of a flowchart for explaining a print execution process executed by the printer according to the first embodiment of the present invention (part 1);
FIG. 8 illustrates a part of a flowchart for explaining a print execution process executed by the printer according to the first embodiment of the present invention (part 2);
FIG. 9 is a flowchart illustrating first key generation processing executed by a printer according to a second embodiment of the invention.
FIG. 10 is a diagram illustrating an example of a configuration of a secret key storage unit included in a printer according to a second embodiment of the invention.
FIG. 11 illustrates a part of a flowchart for explaining a print execution process executed by a printer according to a second embodiment of the present invention (part 1);
FIG. 12 is a diagram illustrating a part of a flowchart for explaining a print execution process executed by a printer according to a second embodiment of the present invention (part 2);
FIG. 13 is a diagram illustrating an example of the configuration of a printer according to a third embodiment of the invention.
FIG. 14 is a diagram illustrating an example of the configuration of another printer according to the third embodiment of the invention.
[Explanation of symbols]
10 network
20 Print client
30 Printer
40 CPU
42 RAM
44 ROM
46 Internal bus
48, 50, 56 interface
52 Print Engine
54 Position detector
58 hard disk
60 computer body
62 display
64 CPU
66 RAM
68 ROM
70 Internal bus
72, 74, 78 interface
76 hard disk

Claims (10)

Printer position information acquisition means for acquiring printer position information for specifying the location where the printer is installed;
First printer position information acquisition means for acquiring printer position information from the printer position information acquisition means and using the printer position information as first printer position information;
First key generation means for generating a first key using a passphrase including at least the first printer position information;
First key holding means for holding the first key generated by the first key generation means;
Second printer position information acquisition means for acquiring printer position information from the printer position information acquisition means when receiving print data, and using this as second printer position information;
Second key generation means for generating a second key using a passphrase including at least the second printer position information;
Encryption information generating means for generating encryption information by encrypting encryption target information using one of the first key and the second key;
Using the other of the first key and the second key, the encryption information is decrypted, and if it can be decrypted, printing based on the print data is executed. A selective print execution unit that does not execute the print based on;
A printer comprising: The first key is a public key, the second key is a secret key;
The encryption information generation means encrypts the encryption target information using the first key,
The selective print execution means decrypts the encryption information using the second key;
The printer according to claim 1. The first key is a secret key and the second key is a public key;
The encryption information generation means encrypts the encryption target information using the second key,
The selective print execution means decrypts the encryption information using the first key;
The printer according to claim 1. The printer according to any one of claims 1 to 3, wherein the encryption target information is the received print data. The printer according to claim 1, wherein the encryption target information is a fixed sentence prepared in advance. The first key generation unit generates the first key, and even if the second key is generated, the second key is discarded. Item 6. The printer according to Item 5. An authentication information requesting means for requesting input of authentication information of an operator;
Authentication information determination means for determining whether the input authentication information matches the authentication information registered in advance;
And further comprising
The first key generation unit generates the first key when the authentication information determination unit determines that the input authentication information matches the authentication information registered in advance. The printer according to any one of claims 1 to 6. A printing system having a printer and a print client connected to the printer,
The printer is
Printer position information acquisition means for acquiring printer position information for specifying a place where the printer is installed;
First printer position information acquisition means for acquiring printer position information from the printer position information acquisition means and using the printer position information as first printer position information;
First key generation means for generating a first key using a passphrase including at least the first printer position information;
First key holding means for holding the first key generated by the first key generation means;
A second printer position information acquisition unit that acquires printer position information from the printer position information acquisition unit when the print data is received from the print client, and uses the printer position information as second printer position information;
Second key generation means for generating a second key using a passphrase including at least the second printer position information;
Encryption information generating means for generating encryption information by encrypting encryption target information using one of the first key and the second key;
Using the other of the first key and the second key, the encryption information is decrypted, and if it can be decrypted, printing based on the print data is executed. A selective print execution unit that does not execute the print based on;
A printing system comprising: Printer position information acquisition means for acquiring printer position information for specifying a location where the printer is installed from a printer position information detection means provided outside the printer;
First printer position information acquisition means for acquiring printer position information from the printer position information acquisition means and using the printer position information as first printer position information;
First key generation means for generating a first key using a passphrase including at least the first printer position information;
First key holding means for holding the first key generated by the first key generation means;
Second printer position information acquisition means for acquiring printer position information from the printer position information acquisition means when receiving print data, and using this as second printer position information;
Second key generation means for generating a second key using a passphrase including at least the second printer position information;
Encryption information generating means for generating encryption information by encrypting encryption target information using one of the first key and the second key;
Using the other of the first key and the second key, the encryption information is decrypted, and if it can be decrypted, printing based on the print data is executed. A selective print execution unit that does not execute the print based on;
A printer comprising: A printing system having a printer and a print client connected to the printer,
The printer is
Printer position information acquisition means for acquiring printer position information for specifying a place where the printer is installed from printer position information detection means provided outside the printer;
First printer position information acquisition means for acquiring printer position information from the printer position information acquisition means and using the printer position information as first printer position information;
First key generation means for generating a first key using a passphrase including at least the first printer position information;
First key holding means for holding the first key generated by the first key generation means;
A second printer position information acquisition unit that acquires printer position information from the printer position information acquisition unit when the print data is received from the print client, and uses the printer position information as second printer position information;
Second key generation means for generating a second key using a passphrase including at least the second printer position information;
Encryption information generating means for generating encryption information by encrypting encryption target information using one of the first key and the second key;
Using the other of the first key and the second key, the encryption information is decrypted, and if it can be decrypted, printing based on the print data is executed. A selective print execution unit that does not execute the print based on;
A printing system comprising:

Images