JP4716674B2 - Image processing device - Google Patents

Description

  The present invention relates to an image processing apparatus that encrypts information to be referred to when executing image processing.

  In recent years, as copying machines have been digitized, they have been put on the market as multifunction machines having various processing capabilities utilizing digital functions such as storage and transmission of image data. The basic configuration of the digital multi-function peripheral includes an image reading unit that reads an image of a document as electronic data, an image processing unit that performs specific processing on digitized image data, an output unit that outputs image data, and the like. It is composed of Here, the output unit includes an image transmission unit that transmits image data to an external device, an image formation unit that forms an image on a sheet, and the like. A storage unit such as an HDD (Hard Disk Drive) that temporarily stores image data is also installed.

  The functions installed in such a multifunction machine include a copy function, a print function, a scanner function, a facsimile function, an electronic mail transmission function, an electronic filing function, and the like. Below, the flow of image data in each function will be briefly described. In the copy function, the image processing unit performs predetermined image processing on the image of the document read by the image reading unit, and then temporarily stores it as a final image in the storage unit. Form. In the print function, when a print job is received from a client device connected via a network, the image processing unit develops the data into data that can be processed by the image processing unit, and then temporarily stores it as a final image in the storage unit The image forming unit forms an image on the paper. The scanner function is a method in which an image of a document read by an image reading unit is subjected to predetermined image processing by an image processing unit, and then temporarily stored as a final image in a storage unit, which is connected via a network. To the client device. In the facsimile function, the image of the document read by the image reading unit is processed in the image processing unit so that it can be processed by the destination facsimile machine, and then temporarily stored as a transmission image in the storage unit. Then, the data is transmitted to a facsimile apparatus of an arbitrary destination connected via the facsimile communication network. In the e-mail transmission function, an e-mail draft and a destination e-mail address are received through the operation panel of the multifunction peripheral, and the e-mail is transmitted to an external communication device through a communication line such as the Internet network. In the electronic filing function, image data is stored in the storage unit installed in the multifunction device, and output when an image data selection or processing instruction is issued by an operation from the operation panel of the multifunction device or a client device. The image data is output from the unit.

  As described above, in the multi-function peripheral, an image of a document can be transmitted by electronic data to be printed, and the electronic data can be stored and managed in a storage unit such as an HDD (Hard Disk Drive). However, since it is possible to easily copy, falsify, transfer, etc., information on electronic text, it is desired to enhance the protection of confidentiality in data management.

Therefore, conventionally, an image forming apparatus that encrypts electronic data to be stored in the HDD device and protects the data has been proposed (see, for example, Patent Documents 1 and 2). In such an image forming apparatus, when a print job is received from the outside, the image data obtained by developing the print job is encrypted, and then the image data is stored in the HDD device. Then, the image data is decoded at the stage of actually forming the image, and the image data is formed by transferring it to the printing unit of the image forming apparatus. Therefore, even if a malicious third party takes out the HDD device mounted on the image forming apparatus or illegally accesses it via the communication network, it is stored inside. It is difficult to decipher existing data, and data leakage can be effectively prevented.
JP-A-1-256068 JP-A-2-256343 Japanese Patent Laid-Open No. 2-75255 JP 2002-91744 A

  However, the data to be protected by the above-described image forming apparatus is for image data necessary for image formation, a facsimile number necessary for transmitting facsimile data, and an e-mail address necessary for transmitting e-mail. Since such information is not subject to protection, there is a possibility that personal information may be leaked by leaking such information. In particular, recent multifunction peripherals are positioned on the communication network as server devices that efficiently process various data, so that a facsimile number and electronic mail can be efficiently executed so that a plurality of received processing requests can be executed efficiently. Addresses are centrally managed by the multifunction device, and in order to facilitate the input of such data, a device that enables input of destination data using a recording medium such as an IC card or a memory card has been proposed. (For example, refer to Patent Documents 3 and 4). However, none of the devices described in Patent Document 3 or Patent Document 4 considers the protection of data captured in the multifunction peripheral, and personal information is leaked by leaking such information. There still remains the problem of fear.

  The present invention has been made in view of such circumstances, and when receiving the information to be referred to when processing the image data, the image data, An object of the present invention is to provide an image processing apparatus capable of protecting information relating to a transmission destination referred to when transmitting facsimile data.

An image processing apparatus according to the present invention includes means for receiving image data and non-volatile storage means for storing information to be referred to when the received image data is processed. In the image processing apparatus to be processed, a reading unit that reads the information from an external recording medium that records information relating to a transmission destination of image data as information to be stored in the storage unit, and the information read by the reading unit is encrypted First judging means for judging whether or not the information is encrypted, and judging whether or not the information judged to be encrypted by the first judging means is encrypted by a predetermined encryption method When it is determined by the second determination means that the encryption method is not encrypted by the second determination means, the information is encrypted by the decryption means for decrypting the information and the first determination means. The Determination information not, and encryption means for encrypting the record units of information decoded by said decoding means in said encryption method, means for storing the encrypted information in the record unit to the storage means, Necessary for transmitting the received image data and means for notifying the progress of the process when executing the process of encrypting information by the encryption means and the process of storing the encrypted information in the storage means And a transmission means for transmitting the image data by decoding only the record to be used as information relating to the transmission destination.

  In the present invention, when information to be referred to when processing image data is received, the information is encrypted and stored in the storage means. Therefore, for example, it is referred to when transmitting the image data. Information on the transmission destination is not stored in the storage means in an unencrypted state, and information leakage is prevented.

  In the present invention, when receiving the information to be referred to when processing the image data, it is determined whether or not the information is encrypted, and the information determined not to be encrypted is encrypted. Therefore, the encryption processing can be omitted for the encrypted information, and the time required for the processing can be shortened.

  In the present invention, when receiving information to be referred to when processing image data, if it is determined that the data is not encrypted by a predetermined encryption method, the predetermined encryption method is once decrypted Therefore, the information encryption method managed by the storage means is unified.

  In the present invention, since the information related to the transmission destination of the image data is received and encrypted, leakage of personal information such as a facsimile number, a communication address of the apparatus, and an e-mail address is prevented. .

  In the present invention, since information necessary for processing image data is recorded on a recording medium and the information is read from the recording medium, information can be shared between different apparatuses. It becomes possible.

  According to the present invention, when information to be referred to when image data is processed is received, it is encrypted and stored in a storage means. Therefore, for example, information on a destination to be referred to when transmitting image data is not stored in the storage means in an unencrypted state, and an individual such as a facsimile number, a communication address of an apparatus, an e-mail address, etc. Information can be prevented from leaking.

  According to the present invention, when information to be referred to when processing image data is received, it is determined whether or not the information is encrypted, and the information determined to be unencrypted is encrypted. Therefore, the encryption process can be omitted for the encrypted information, and the time required for the encryption process can be shortened.

  In the case of the present invention, when receiving the information to be referred to when processing the image data, if it is determined that the image data is not encrypted by the predetermined encryption method, it is once decrypted and then the predetermined encryption method. Since encryption is performed, the encryption method of information managed by the storage unit can be unified.

  According to the present invention, since the information related to the transmission destination of the image data is received and encrypted, it is possible to prevent leakage of personal information such as a facsimile number, a communication address of the apparatus, and an e-mail address. it can.

  According to the present invention, information necessary for processing image data is recorded on a recording medium, and the information is read from the recording medium, so that information can be easily shared between different apparatuses. Can be achieved.

Hereinafter, an embodiment in which an image processing apparatus according to the present invention is applied to a multifunction machine having a print function and a data transmission function will be specifically described with reference to the drawings.
FIG. 1 is a perspective view showing a multifunction machine according to the present embodiment. In the figure, reference numeral 100 denotes a multifunction peripheral according to the present embodiment. The multifunction peripheral 100 includes a printing unit, an image reading unit, and a communication unit (see FIG. 2) as will be described later, and print processing for forming an image on a sheet. A copy process for reading an image of a document and copying it on a sheet, a data transmission process for transmitting facsimile data and electronic mail to the outside, and the like are executed. In addition to the communication means, a means for receiving data includes an operation panel 105 provided on the front surface of the multifunction peripheral 100 and a memory card slot 106 provided on the side surface. The operation panel 105 is provided with various input keys for accepting user operation instructions, and accepts data input by direct operation by the user himself / herself. In addition, the memory card slot 106 can be loaded with a memory card M, and accepts data input through the memory card M.

  In the present embodiment, when data is transplanted from the conventionally used multi-function device 200 at the time of replacement of a machine or the like, data can be transplanted using the memory card M. The data to be transplanted includes facsimile data and data related to the destination of the e-mail. For the purpose of preventing such personal information from leaking to the outside, the MFP 100 stores the data. When importing, data is saved after encryption.

  FIG. 2 is a block diagram illustrating the internal configuration of the multifunction peripheral 100. The MFP 100 includes a control unit 101. The control unit 101 includes a RAM 102, a communication IF 103, a facsimile communication IF 104, an operation panel 105, a memory card slot 106, a data management unit 107, an image memory 111, a printing unit 112, and an image reading. Hardware such as the unit 113 is connected. The control unit 101 is composed of a CPU for controlling these hardware and a ROM storing a control program executed by the CPU. The CPU loads and executes a program stored in the ROM, thereby executing a composite. The machine 100 functions as an image processing apparatus according to the present invention.

  The RAM 102 is composed of, for example, a volatile semiconductor memory, and temporarily stores data generated during execution of the control program, data generated during execution of print processing and data transmission processing, and the like.

  The communication IF 103 is an interface for connecting to an external communication network N1, receives a print job from the information processing apparatuses 300, 300,..., 300 such as a personal computer connected to the communication network N1, and performs information processing. Information to be notified is transmitted to the devices 300, 300,. In addition, the multifunction peripheral 100 has an electronic mail transmission function so that the electronic mail created by the multifunction peripheral 100 can be transmitted to the information processing apparatuses 300, 300,. . The communication IF 103 controls transmission / reception of such various data.

  The facsimile communication IF 104 includes a line termination circuit for connection to the public telephone line network N2, and can send and receive facsimile data to and from the external facsimile apparatus 400 connected to the public telephone line network N2. Therefore, the facsimile communication IF 104 includes an encoding circuit that encodes facsimile data to be transmitted, a decoding circuit that decodes received facsimile data, and the like.

  The operation panel 105 includes an operation unit 105a that receives an operation instruction from the user and a display unit 105b that displays information to be notified to the user. The operation unit 105a includes various operation keys for accepting operation instructions from the user, and accepts a function switching operation, setting value input for each function, processing execution start instruction, and the like. The display unit 105b includes a liquid crystal display, and displays the operation status of the multifunction peripheral 100, various setting values input through the operation unit 105a, information to be notified to the user, and the like. Further, a part of the display unit 105b includes a touch panel type software button configured to accept various selection operations. Such software buttons include, in addition to a selection button that accepts a user's selection operation, an alphanumeric button for inputting an email draft and a destination address.

  The memory card slot 106 is configured so that a memory card M, which is a portable recording medium, can be mounted, and a memory card IF 106a for reading data recorded on the memory card M and writing data to be recorded is provided. I have. The memory card M includes a connector corresponding to the standard of the memory card IF 106a, a built-in controller, a non-volatile semiconductor memory such as a flash memory, and the like in accordance with an instruction from the control unit 101 input through the memory card IF 106a. The built-in controller controls data input / output, and performs data read processing and data write processing.

  In the present embodiment, the destination address of the e-mail transmitted through the communication IF 103 and the facsimile number of the other party of the facsimile data transmitted through the facsimile communication IF 104 can be registered using the operation panel 105. These data recorded on the memory card M can be read. Data input through the operation panel 105 and data read through the memory card slot 106 are stored in the data storage unit 110 via the data management unit 107. The data storage unit 110 includes a nonvolatile memory such as a flash memory or an HDD (Hard Disk Drive) having a magnetic recording medium.

  The data management unit 107 monitors the encryption status of the data stored in the data storage unit 110. When data not encrypted is received, it is encrypted and stored in the data storage unit 110. Even if it is encrypted, if it is not encrypted by a predetermined encryption method, it is once decrypted and then re-encrypted by a predetermined encryption method, and then the data storage unit 110 To remember. Therefore, an encryption processing unit 108 and a decryption processing unit 109 are connected to the data management unit 107.

  The encryption processing unit 108 includes an input buffer for inputting data for performing encryption processing, an arithmetic unit for performing arithmetic processing including a predetermined encryption algorithm on the data set in the input buffer, and an arithmetic unit. It is composed of an output buffer or the like that holds the calculation result. For example, AES (Advanced Encryption Standard) can be used as the encryption algorithm. The data to be encrypted is input to the input buffer, the input data set in the input buffer is extracted, the arithmetic unit performs arithmetic processing, and when the arithmetic processing is completed, the arithmetic result is written to the output buffer. The data management unit 107 acquires the data encrypted by the encryption processing unit 108 by taking out the data for which the calculation has been completed from the output buffer.

  The configuration of the decryption processing unit 109 is basically the same as that of the encryption processing unit 108, and an input buffer for inputting data for performing the decryption process, and a predetermined value for the data set in the input buffer. An arithmetic unit that performs arithmetic processing including a decoding algorithm, an output buffer that holds an arithmetic result of the arithmetic unit, and the like are provided. The data to be decoded is input to the input buffer, the input data set in the input buffer is taken out, the arithmetic unit performs arithmetic processing, and the arithmetic result is written in the output buffer when the arithmetic processing is completed. The data management unit 107 acquires the data decoded by the decoding processing unit 109 by taking out the data for which the calculation has been completed from the output buffer.

  The image memory 111 is constituted by a semiconductor memory, and image data developed from a print job received through the communication IF 103, image data developed from facsimile data received through the facsimile communication IF 104, and an original image by the image reading unit 113. Is temporarily stored. The image data temporarily stored in the image memory 111 is transferred to a transfer destination according to the purpose of use according to an instruction from the control unit 101. In other words, when an image is formed on paper, it is transferred to the printing unit 112, when it is transmitted as facsimile data, it is transferred to the facsimile communication IF 104, and when it is transmitted as attachment data of an e-mail, it is transmitted to the communication IF 103. The

The printing unit 112 includes, for example, a charger that charges the photosensitive drum to a predetermined potential, and a laser writing device that generates an electrostatic latent image on the photosensitive drum by emitting laser light according to image data received from the outside. , A developing device that supplies toner to the electrostatic latent image formed on the surface of the photoconductive drum to make it visible, and a transfer device that transfers the toner image formed on the surface of the photoconductive drum onto a sheet such as paper or an OHP film Etc. (not shown), and an image desired by the user is formed on a sheet by electrophotography.
In this embodiment, the image formation is performed by the electrophotographic method using the laser writing device. However, the image formation may be performed by the ink jet method, the thermal transfer method, and the sublimation method. It is.

  The image reading unit 113 includes a light source that irradiates light to a reading document, an image sensor such as a CCD (Charge Coupled Device), an AD converter, and the like (not shown), and is set at a predetermined reading position. An image of the original is imaged on the image sensor and converted into an analog electric signal, and the obtained analog electric signal is AD converted by an AD converter. Then, digital image data is generated by correcting the light distribution characteristics of the light source at the time of document reading, sensitivity variations of the image sensor, and the like on the digital signal obtained by AD conversion. The image data generated by the image reading unit 113 is sent to the image memory 111, and is used, for example, as document data for facsimile data to be transmitted.

  Hereinafter, processing executed by the multifunction machine 100 will be described. FIG. 3 is a flowchart showing a procedure of processing executed when data related to the destination of the e-mail and facsimile data is read. FIGS. 4 and 5 are screens displayed on the display unit 105b in the data reading processing. It is a schematic diagram which shows an example. When reading the data relating to the destination of the e-mail and facsimile data, the control unit 101 of the multi-function device 100 determines whether or not the memory card M is inserted in the memory card slot 106 (step S11). If it is determined that the memory card M is not installed (S11: NO), the process waits until the memory card M is installed.

  When it is determined that the memory card M is inserted into the memory card slot 106 (S11: YES), an initial screen when the memory card is installed as shown in FIG. 4A is displayed on the display unit 105b of the operation panel 105. On this initial screen, there are arranged a data read button 11, a data save button 12, a cancel button 13, and an execute button 14 constituted by touch panel type software buttons. When the data reading button 11 is pressed by the user and then the execution button 14 is pressed, a screen for reading data recorded on the memory card M is displayed. In addition, when the data save button 12 is pressed by the user and the execution button 14 is subsequently pressed, a screen for writing data to the memory card M is displayed. When the cancel button 13 is pressed, any processing is not executed and the processing according to this routine is terminated.

  When the execution button 14 is pressed following the pressing operation of the data reading button 11, the control unit 101 confirms the format of the data recorded on the memory card M (step S12) and can read the data. It is determined whether or not there is (step S13). In this embodiment, data described in a predetermined format such as CSV (Comma Separated Value) is read, and one record can be inspected and read from data recorded in the memory card M. Determine whether or not. Note that it is not necessary to limit the number of formats that can be read to one, and data in a plurality of compatible formats may be read and saved in a predetermined format when saved.

  When it is determined that the data cannot be read due to a difference in data format or due to a defect in the memory card M itself (S13: NO), an error message is displayed on the display unit 105b of the operation panel 105 (step S14). The user is prompted to confirm the data format or the memory card M.

  When it is determined that the data can be read (S13: YES), the reading start screen shown in FIG. 4B is displayed on the display unit 105b of the operation panel 105 (step S15). On the reading start screen, a list 21 of readable data is displayed, and page switching buttons 22u and 22d, a cancel button 23, and an execution button 24 for switching the display range are arranged. The list 21 displays readable data in units of records. When a large number of records are recorded in the data, the pages outside the display range can be displayed using the page switching buttons 22u and 22d. Further, when the cancel button 23 is pressed, the data reading process is canceled, and when the execution button 24 is pressed, the data reading process is started.

  The control unit 101 of the MFP 100 determines whether or not there is an instruction to start reading data by determining whether or not the execution button 24 is pressed on the reading start screen (step S16). When it is determined that there is no data reading start instruction (S16: NO), it is determined whether or not the data reading process is canceled by determining whether or not the cancel button 23 is pressed on the reading start screen. (Step S17). If it is determined not to cancel the data reading process (S17: NO), the process returns to step S16. If it is determined to cancel the data reading process (S17: YES), the process according to this routine is terminated.

  If it is determined in step S16 that there is an instruction to start reading data (S16: YES), data is read from the memory card M inserted in the memory card slot 106 (step S18). Data read from the memory card M is sent to the data management unit 107.

  The data management unit 107 determines whether the data read from the memory card M is encrypted data (step S19). If it is determined that the data is already encrypted (S19: YES), it is determined whether the data is encrypted by a predetermined encryption method (step S20). If it is determined that the data is encrypted by a predetermined encryption method (S20: YES), the data is stored in the data storage unit 110 in units of records (step S21).

  If it is determined in step S19 that the read data is not encrypted (S19: NO), the data is encrypted by a predetermined encryption method in units of records (step S23). At this time, a screen as shown in FIG. 5A is displayed on the display unit 105b of the operation panel 105 to notify the user of the progress of the data reading process. The encrypted data is stored in the data storage unit 110 in record units (S21).

  Furthermore, when it is determined that the read data is encrypted but not encrypted with a predetermined encryption method (S20: NO), the data is once decrypted (step S22), and then the data Is encrypted in a record unit by a predetermined encryption method (S23). The encrypted data is stored in the data storage unit 110 in record units (S21).

  Next, the control unit 101 determines whether or not the data reading process has been completed (step S24). If it is determined that the reading process has not been completed (S24: NO), the process returns to step S18. If it is determined that the reading process has been completed (S24: YES), a reading completion screen as shown in FIG. 5B is displayed on the display unit 105b of the operation panel 105 (step S25).

  As described above, in the present embodiment, when data related to a transmission destination such as an e-mail address and a facsimile number is read from the memory card M, each record is encrypted in a predetermined encryption format and encrypted. Since the data is stored in the data storage unit 110, it is difficult to decipher even if the data is illegally taken out by a malicious third party, and information leakage is prevented. Note that transmission destination data input from the operation unit 105 a of the operation panel 105 is also encrypted in record units and stored in the data storage unit 110.

  Further, in the present embodiment, since the data related to the transmission destination is encrypted in units of records, it is possible to decrypt and use only the necessary records when sending e-mail or facsimile data. . In this case, since the encrypted record unit data is read from the data storage unit 110 and the read data is decrypted by the decryption processing unit 109, the data stored in the data storage unit 110 is always related. The encrypted state can be maintained, and information leakage is prevented.

  In the present embodiment, the memory card M having a built-in semiconductor memory is used as a recording medium for recording data related to the transmission destination. However, a magnetic recording medium such as a flexible disk or a CD-ROM is used. A configuration using a simple optical disk may be used. Further, a configuration in which data is taken in through the communication IF 103 may be used.

1 is a perspective view showing a multifunction machine according to the present embodiment. 2 is a block diagram illustrating an internal configuration of the multifunction machine. FIG. It is a flowchart which shows the procedure of the process performed when reading the data which concern on the transmission destination of an email and facsimile data. It is a schematic diagram which shows an example of the screen displayed on a display part in the reading process of data. It is a schematic diagram which shows an example of the screen displayed on a display part in the reading process of data.

Explanation of symbols

100 MFP 101 Control Unit 102 RAM
103 Communication IF
104 Facsimile communication IF
105 Operation Panel 106 Memory Card Slot 107 Data Management Unit 108 Encryption Processing Unit 109 Decryption Processing Unit 110 Data Storage Unit 111 Image Memory 112 Printing Unit 113 Image Reading Unit M Memory Card

Claims (1)

In an image processing apparatus comprising: means for receiving image data; and nonvolatile storage means for storing information to be referred to when processing the received image data, and processing the image data with reference to the information.
Reading means for reading the information from an external recording medium in which information relating to the transmission destination of image data is recorded as information to be stored in the storage means;
First determination means for determining whether information read by the reading means is encrypted;
Second determination means for determining whether the information determined to be encrypted by the first determination means is encrypted by a predetermined encryption method;
Decryption means for decrypting the information when the second determination means determines that the information is not encrypted by the encryption method;
Encryption means for encrypting information determined by the first determination means and information decrypted by the decryption means in units of records by the encryption method;
Means for storing information encrypted in record units in the storage means;
Means for informing the progress of the process when executing the process of encrypting the information by the encryption means and the process of storing the encrypted information in the storage means;
An image processing apparatus comprising: a transmission unit configured to decode only a record necessary for transmission of received image data and transmit the image data by using the record as information relating to a transmission destination.

Images