KR20130140926A - System and method for processing scanned images - Google Patents

Abstract

A system and method for processing a scanned image is disclosed. The method comprises the steps of: generating a scanned image from an object; receiving an encryption key generated by a scanning server or a pre-stored security application module; encrypting the scanned image using the encryption key to generate encrypted scan data; and transmitting the encrypted scan data to the scanning server through a client device, wherein the encrypted scan data is decrypted only by the scanning server. According to the present invention, a scanning device for generating a scanned image and the client device can improve the security of the scanned image by not decrypting and storing the scanned image. [Reference numerals] (20) Scanning device;(30) Client devie;(40) Scanning server

Description

Scan image processing system and scan image processing method {System and method for processing scanned images}

The present invention relates to a scan image processing system and a scan image processing method, and more particularly, to a scan image processing system and a scan image processing method that can increase the security of the scanned image.

In general, a scanning device such as a scanner or a multifunction device obtains an image by scanning a scanning object on which an image such as a picture or text is formed, and monitors an image file generated by performing a predetermined image processing on the obtained scanned image. Output through

Recently, due to the increase in electronic commerce, the use of image files that have scanned various important documents such as ID cards and contracts is increasing. However, if the management of the image files is neglected, forgery and forgery through copying information contained in the image files Can be easily generated. In short, a problem may occur that anyone can access the scanned image file without restriction, a solution for this situation is required.

As a solution for this problem, although Patent Document 10-2010-0018364 proposes a method of increasing the security of a scanned image by encrypting the scanned image, a host device communicating with a scanning device may encrypt an encrypted key. And the decryption authority for the encrypted image. When performing a business of handling and using an actual scanned image only at a central server, security of the scanned image may be very low by the host device.

SUMMARY OF THE INVENTION An object of the present invention is to provide a scan image processing system and a scan image processing method having enhanced security of a scanned image.

The object is, according to the present invention, generating a scan image from a scan target object; Receiving an encryption key generated at a scanning server or a previously stored security application module; Performing encryption on the scan image using the encryption key and generating encrypted scan data; And transmitting the encrypted scan data to the scanning server through the client device, wherein decryption of the encrypted scan data may be accomplished by performing only at the scanning server.

The encryption key generated from the scanning server may be transmitted through the client device, and when the transmission of the encryption key is completed, the client device may completely delete the encryption key so that it cannot be recovered.

The client device may not perform decryption of the encrypted scan data.

The client device may display a scan image corresponding to the decoded scan data received from the scanning server, and the client device may perform only a viewer function of the scan image.

The above object is, according to the present invention, the scanning unit for generating a scan image from the scan target object; An encryption unit which encrypts the scan image using an encryption key and generates encrypted scan data; And a communication module for transmitting the encrypted scan data to a client device, wherein the encryption key is generated from a scanning server or a security application module, and wherein the encryption key is generated from the scanning server. The decryption of the encrypted scan data may be achieved by performing only the scanning server.

The encryption unit may completely delete the encrypted scan data so that the encrypted scan data cannot be recovered when transmission of the encrypted scan data is completed through the communication module.

The object is, according to the present invention, a scanner interface to interface with the scanning device; And a control unit for transmitting an encryption key generated from a scanning server to the scanning device through the scanner interface, and controlling the encrypted scan data generated using the encryption key transmitted by the scanning device to be transmitted to the scanning server. The control unit may completely delete the encryption key so that the encryption key cannot be recovered when the transmission of the encryption key is completed.

The client device may further include a display unit configured to display a scan image corresponding to the decoded scan data received from the scanning server, and the controller may control the scan image to not be editable by a user.

The object is, according to the present invention, a key generation unit for generating an encryption key; And a control unit for receiving the encrypted scan data generated by the scanning device through a client device and decrypting the received encrypted scan data using the encryption key, wherein the decryption of the encrypted scan data is performed only through the control unit. Can be.

The controller may transmit a dedicated viewer to the client device to display the scanned image corresponding to the decoded scan data in the client device, and the dedicated viewer may deactivate the scan image editing function of the client device. .

The encryption key may be generated using a random value.

The object is, according to the present invention, a scanning server for performing the decryption of the encrypted scan data; A scanning device generating a scan image from a scan target object, performing encryption on the scan image using an encryption key, and generating the encrypted scan data; And a client device that receives the encrypted scan data from the scanning device and transmits the received encrypted scan data to the scanning server, wherein decryption of the encrypted scan data may be performed only at the scanning server.

The encryption key may be generated from the scanning server or by a security application module pre-stored in the scanning device.

When the encryption key is generated from the scanning server, the client device may completely delete the encryption key so that the encryption key cannot be recovered when transmission of the encryption key is completed.

The client device may display a scan image corresponding to the decoded scan data received from the scanning server, and the client device may perform only a viewer function of the scan image.

In the scan image processing system and the scan image processing method according to an embodiment of the present invention, the scanning device and the client device generating the scanned image do not decode the scanned image or store the scanned image, thereby increasing the security of the scanned image. There is.

1 is a schematic structural diagram of a scanning image processing system according to an embodiment of the present invention.
FIG. 2 is a schematic diagram illustrating a scanning apparatus of the scanning image processing system of FIG. 1.
FIG. 3 is a schematic configuration diagram illustrating the client device of FIG. 1.
FIG. 4 is a schematic diagram illustrating the scanning server of FIG. 1.
5 is a flowchart illustrating a scanning image processing method according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features, and advantages of the present invention will become more readily apparent from the following description of preferred embodiments with reference to the accompanying drawings. However, the present invention is not limited to the embodiments described herein but may be embodied in other forms. Rather, the embodiments disclosed herein are provided so that the disclosure can be thorough and complete, and will fully convey the scope of the invention to those skilled in the art.

In this specification, when an element is referred to as being on another element, it may be directly formed on another element, or a third element may be interposed therebetween.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification. The terms "comprises" and / or "comprising" used in the specification do not exclude the presence or addition of one or more other elements.

Hereinafter, the present invention will be described in detail with reference to the drawings. In describing the specific embodiments below, various specific details are set forth in order to explain and understand the invention in more detail. However, a person of ordinary skill in the art can understand that the present invention can be used without these various specific contents. In some cases, it is mentioned in advance that parts of the invention which are commonly known in the description of the invention and which are not highly related to the invention are not described in order to prevent confusion in explaining the invention without cause.

1 is a schematic configuration diagram of a scanning image processing system according to an exemplary embodiment of the present invention, and FIG. 2 is a schematic configuration diagram for explaining the scanning apparatus of FIG. 1.

FIG. 3 is a schematic diagram illustrating the client device of FIG. 1, and FIG. 4 is a schematic diagram illustrating the scanning server of FIG. 1. 1 to 4, the scanning image processing system 10 may include a scanning device 20, a client device 30, and a scanning server 40.

The scanning device (or multifunction apparatus) 20 may generate a scan image from a scan target object, perform encryption on the scan image using an encryption key, and generate the encrypted scan data. The scanning device 20 is a device that reads an image from a scan target object (eg, a contract, an ID card, a photograph, a poster, a magazine, and other materials) on a computer, and may be in a manual and flatbed form according to its type. It may be a color or monochrome scanning device depending on the color that can be read.

The scanning device 20 may include a scanning unit 200, an encryption unit 201, a communication module 203, a security application module (SAM) 205, a display unit 207, and a storage unit 209. . The scanning unit 200 may generate a scan image from the scan target object. The encryption unit 201 may encrypt the scan image using an encryption key and generate encrypted scan data.

The encryption key may be generated by the scanning server 40 or a secure application module (SAM) 205. When the encryption key is generated from the scanning server 40, the encryption key may be a client device ( 30).

For example, the scanning server 40 may generate a public key and a secret key as encryption keys. The public key and the secret key are paired asymmetric keys and may be, for example, a public key and a secret key used in an RSA algorithm.

The scanning server 40 may transmit the public key to the client device 30 in response to a request of the client device 30, and the encryption unit 201 may use the public key received through the client device 30. By using the public key and the asymmetric key encryption algorithm (for example, RSA algorithm) received from the scanning server 40 to encrypt the scan image and can generate encrypted scan data.

Here, the asymmetric key encryption algorithm refers to the RSA cipher as an encryption algorithm previously promised with the scanning server 40, but other encryption techniques such as a Rabin cipher, an ElGamal cipher, or an elliptic curve cipher are also described herein. It can also be used in the invention. In addition, other encryption techniques such as AES-128 and / or DES encryption may be used as the symmetric key encryption technique.

Alternatively, the encryption unit 201 may encrypt the scan image using the encryption key stored in the security application module 205 and generate encrypted scan data.

In addition, when the transmission of the encrypted scan data through the communication module 203 is completed, the encryption unit 201 may be complete to recover the encrypted scan data. For example, the encryption unit 201 may completely remove the encryption key stored in the storage area by using a method of overwriting an arbitrary file or a character in the area where the encrypted scan data is stored.

On the other hand, the encryption unit 201 is an application that allows the client device 20 to access the scanning server 40 from a commercial app store (for example, Apple App Store or Android Market App Store) through the communication module 203. You can download it.

More specifically, the client device 20 may be provided with a predetermined application designed to transmit encrypted scanning data to the scanning server 40. In this case, the client device 20 may transmit the encryption key generated by the scanning server 40 to the scanning device 20 through the application.

Here, the commercial app store may be, for example, an application server of an app store when the client device 20 is an iPhone or an iPad of Apple, and an application of Google's Android Market when the client device 20 is an Android phone. It can be a server.

However, in the present invention, the application server is not limited to the application providing scanning server of a specific company such as the application of the above-described app store, and may vary according to the type of the client device 20. Furthermore, the user of the client device 20 may download the application directly from the scanning server 40 according to the present invention rather than a separate application server.

The communication module 203 may transmit the encrypted scan data to the client device 30. When the encryption key is generated from the scanning server 40, the communication module 203 receives the encryption key from the client device 30 and receives an encryption unit ( 201).

The communication module 203 is a module capable of wired or short-range wireless communication with the client device 203. The short-range wireless communication method is Bluetooth, Zigbee, infrared, UWB (Ultra WideBand), It may be one of Near Field Communication (NFC) and Ruby.

That is, the communication module 203 may perform near field communication with the client device 203 including the near field communication unit (for example, the scanner interface 305 of FIG. 3) according to a standard according to the corresponding near field communication method. In addition, the paired client device 203 located at a short distance may be periodically searched for connection.

The secure application module (SAM) 205 may generate and store an encryption key for performing encryption on a scanned image, and may store the encryption key in the scanning device 20 through a separate slot (SLOT, not shown). When connected, authentication of the scanning device 20, the client device 30, and the scanning server 40 may be authenticated, and communication data may be encrypted to prevent exposure of information and authentication and verification of a communication message.

The security application module 205 may exist in hardware and / or software form.

The display unit 207 may display information stored in the storage unit 17 including various function menus executed in the scanning device 20. For example, the display unit 207 may display a scan image generation progress state, a viewer function of the scanned image, and information about the paired client device 203 located at a short distance in the form of text or an icon.

In addition, the display unit 207 may use a liquid crystal display (LCD) or a touch screen, and the touch screen may simultaneously serve as a display device and an input device.

The storage unit 209 stores a program necessary for controlling the operation of the scanning apparatus 20 and data generated during the execution of the program, and may include one or more volatile memory devices and nonvolatile memory devices. The storage unit 209 may store an encryption key for performing encryption on the scanned image and / or information on the paired client device 203.

The client device 30 may transmit the encryption key generated from the scanning server 40 to the scanning device 20, and the encrypted scan data generated by the scanning device 20 may be transmitted to the scanning server 40. . In this case, when the transmission of the encryption key is completed, the client device 30 may completely delete the encryption key so that it cannot be recovered. Therefore, the client device 30 does not decrypt the encrypted scan data.

The client device 30 may be a smartphone, tablet PC, portable terminal, MP4, portable multimedia player (PMP), notebook computer, or personal computer (PC), cellular phone, or personal digital assistants (PDA). It may be a variety of electronic devices such as, and the like, preferably an electronic device that can be connected to the Internet and a mobile communication network (eg, CDMA, WCDAM, WiBro, LTE, etc.) to communicate with the scanning server 40. In the embodiment of the present invention, the device communicating with the scanning device 20 and the scanning server 40 is referred to as the client device 30, but may be referred to as a host device.

The client device 30 may include a controller 301, a communication module 303, a scanner interface 305, and a display unit 307. The controller 301 transmits the encryption key generated from the scanning server 40 to the scanning device 20 through the scanner interface 305 and encrypts the generated encryption key using the encryption key transmitted by the scanning device 20. The scanned data may be transmitted to the scanning server 40.

In this case, the controller 301 may completely delete the encryption key so that the encryption key cannot be recovered when transmission of the encryption key is completed. For example, the controller 301 may completely remove the encryption key stored in the storage area by using a method of overwriting an arbitrary file or character in the area where the encryption key is stored.

In addition, the controller 301 may control the scan image to not be editable by the user. In more detail, the control unit 301 may execute a dedicated viewer transmitted from the scanning server 40 to control the display of the scanned image corresponding to the decoded scan data. Can be inactive.

For example, the controller 301 may prevent the scanned image from being printed or screen captured, and may provide only a view function through a dedicated viewer. The dedicated viewer may prevent a user from inputting a predetermined keyboard key button so that the user cannot capture the scanned image by using another program while the scanned image is displayed through the display unit 307.

Generally, capture programs require the input of a specific key when the screen is displayed in order to capture the screen of the user's computer. Therefore, in the embodiment of the present invention, it is possible to prevent capturing the scanned image by invalidating a key input of the keyboard while the dedicated viewer displays the scanned image.

In addition, in order to prevent the capture of the scanned image through the client device 30, the controller 301 may control the 'Print Screen' key of the keyboard, and the screen capture utility may capture a screen from Windows, Android, iPhone, or the like. Controlled at the iPad O / S level, you can control the storage of scanned images as images, even if you use a screen capture utility.

The communication module 303 may receive an encryption key from the scanning server 40 and transmit the encrypted scan data received from the scanning device 30 to the scanning server 40. The communication module 303 may be connected to the Internet and a mobile communication network (eg, CDMA, WCDAM, WiBro, or LTE) to perform wired / wireless communication with the scanning server 40.

The scanner interface 305 may be connected to the communication module 203 of the scanning device 30 to transmit an encryption key to the scanning device 30, and receive encrypted scan data received from the scanning device 30. have.

The scanner interface 305 is a module capable of wired or short-range wireless communication with the communication module 203. The short-range wireless communication method is Bluetooth, Zigbee, infrared, UWB (Ultra WideBand), It may be one of Near Field Communication (NFC) and Ruby.

That is, the scanner interface 305 may perform short-range wireless communication with the scanning device 30 including the communication module 203 according to a standard according to the corresponding short-range wireless communication method, and the paired scanning device located at a short distance. 30 may be periodically searched for connection.

The display unit 307 may display various function menus executed in the client device 30 and provide a viewer function of the scanned image received from the scanning server 40. For example, the display unit 307 may display a scan image corresponding to the decoded scan data received from the scanning server 40. In this case, the user may not edit, copy, and use the scanned image as described above.

In addition, the display unit 307 may display information about the paired scanning device 30 located at a short distance in the form of a text or an icon.

In addition, the display unit 207 may use a liquid crystal display (LCD) or a touch screen, and the touch screen may simultaneously serve as a display device and an input device.

The scanning server 30 may generate an encryption key and decrypt the encrypted scan data generated from the scanning device 20 and transmitted through the client device 30.

The scanning server 30 may include a key generation unit 401, a control unit 403, a communication unit 405, an image processing unit 407, and a storage unit 409. The key generator 401 may generate an encryption key, and may include a separate random number generator. The controller 403 may decrypt the encrypted scan data generated by the scanning device 20 using the encryption key.

Decryption of the encrypted scan data may be performed only through the controller 403. Therefore, according to an embodiment of the present invention, since the decryption of the scan data is not performed in the scanning device 20 and the client device 30, the security of the scanned image is very high.

For example, if the user of the client device 30 is a salesperson (eg, an insurance company employee) in charge of insurance contract with the customer, the user uses the client device 30 to scan and scan the identification card of the customer. The image may be encrypted and transmitted to a scanning server (eg, insurance company server 40), and the client device 30 may not store any information received by the scanning device 20.

That is, according to the exemplary embodiment of the present invention, various scanning image documents which are directly processed by a customer may not be edited, copied, and used by the user of the client device 30, thereby increasing the security of the scanned image.

The decryption scheme of the controller 403 may be used in the present invention as well as an asymmetric key decryption algorithm (eg, an RSA scheme), as well as other decryption techniques such as a line (Rabin), an ElGamal, or an elliptic curve scheme. . In addition, other decryption techniques such as AES-128 and / or DES encryption may also be used as symmetric key encryption techniques.

The controller 403 may transmit a dedicated viewer for displaying the scanned image corresponding to the scanned data decoded by the client device 30, and the dedicated viewer deactivates the scan image editing function of the client device so that the user It is possible to prevent editing, copying, and using the scanned image as an image file through the client device 30.

The communication unit 405 may be connected to the communication module 303 of the client device 30 via the Internet and a mobile communication network (eg, CDMA, WCDAM, WiBro, or LTE) to perform wired / wireless communication. For example, the communication unit 405 may transmit an encryption key to the communication module 303, and receive encrypted scan data generated by the scanning device 20 through the communication module 303.

The image processor 407 may convert a scan image corresponding to the decoded scan data. For example, the image processor 407 may convert at least one of a file format, a file size, and a resolution so that the scanned image may be displayed on a specific display device.

The storage unit 409 may store at least one of an encryption key generated by the key generation unit 401, encrypted scan data, and scanned image corresponding to the decrypted scan data.

Meanwhile, in the present specification, the scanning image processing system 10 and the scanning device 20, the client device 30, and the scanning server 40 configuring the same are required hardware resources to implement the technical idea of the present invention. And / or logical configuration with software, and not necessarily one physical component or one device.

That is, the scanning image processing system 10 and the scanning device 20, the client device 30, and the scanning server 40 constituting the same are logical to hardware and / or software provided to implement the technical idea of the present invention. Phosphorus coupling may be referred to, and if necessary, may be installed in devices spaced apart from each other, and may be implemented as a set of logical configurations for implementing the technical idea of the present invention by performing respective functions.

In addition, the scanning image processing system 10 and the scanning device 20, the client device 30, and the scanning server 40 constituting the scanning image processing system 10 may be separately implemented for each function or role for implementing the technical idea of the present invention. It can also mean a set of configurations. In addition, the term "module" and "unit" may mean a functional and structural combination of hardware for performing the technical idea of the present invention and software for driving the hardware. For example, the module may mean a logical unit of a predetermined code and a hardware resource for executing the code, and it does not necessarily mean a physically connected code or a kind of hardware. Can be easily deduced to the average expert in the field of technology.

5 is a flowchart illustrating a scanning image processing method according to an embodiment of the present invention. 1 to 5, the scanning device 20 generates a scan image from the scan target object (S10), and requests an encryption key from the scanning server 40 through the client device 30 (S12). The scanning server 40 generates an encryption key (S14), and transmits the generated encryption key to the scanning device 20 through the client device 30 (S16). In this case, the scanning device 20 may receive the encryption key from the security application module 205 stored in advance as described above.

The client device 30 completely deletes the encryption key received from the scanning server 40 (S18), and the scanning device 20 performs encryption on the scanned image using the received encryption key and encrypts the scanned data. To generate (S20).

The scanning device 20 transmits the encrypted data to the scanning server 40 through the client device 30 (S22), and completely deletes the encrypted data when the transmission is completed (S24). The client device 30 also receives the encrypted data and completely deletes the encrypted data when the transmission of the received encrypted data to the scanning server 40 is completed (S26).

The scanning server 40 receives encrypted scan data through the client device 30 and stores decrypted and decrypted image data of the received encrypted scan data (S28). In response to a request of the client device 30, the scanning server 40 transmits a dedicated image viewer of the scanning image to the client device 30 (S30), and the client device scans through the dedicated image viewer. The image may be displayed (S32).

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit and scope of the invention. Accordingly, such modifications or variations are intended to fall within the scope of the appended claims.

10: scanning image processing system
20: scanning device
30: client device
40: scanning server

Claims (16)

Generating a scan image from the scan target object;
Receiving an encryption key generated at a scanning server or a previously stored security application module;
Performing encryption on the scan image using the encryption key and generating encrypted scan data;
And transmitting the encrypted scan data to the scanning server through the client device, wherein decryption of the encrypted scan data is performed only at the scanning server.
The method of claim 1, wherein the encryption key generated from the scanning server,
Scan image processing method characterized in that the transmission through the client device.
The method of claim 2, wherein the client device,
And when the transmission of the encryption key is completed, completely deleting the encryption key so that it cannot be recovered.
2. The client device according to claim 1,
And not decrypting the encrypted scan data.
2. The client device according to claim 1,
And displaying a scanned image corresponding to the decoded scan data received from the scanning server, wherein the client device performs only a viewer function of the scanned image.
A scanning unit generating a scan image from a scan target object;
An encryption unit which encrypts the scan image using an encryption key and generates encrypted scan data; And
And a communication module for transmitting the encrypted scan data to a client device, wherein the encryption key is generated from a scanning server or a security application module, and wherein the encryption key is generated from the scanning server. And the decryption of the encrypted scan data is performed only at the scanning server.
The method of claim 6, wherein the encryption unit,
And when the transmission of the encrypted scan data is completed through the communication module, completely deleting the encrypted scan data such that the encrypted scan data cannot be recovered.
A scanner interface to interface with the scanning device; And
A control unit for transmitting an encryption key generated from a scanning server to the scanning device through the scanner interface, and controlling the encrypted scan data generated using the encryption key transmitted by the scanning device to be transmitted to the scanning server, The control unit,
And when the transmission of the encryption key is completed, completely deleting the encryption key so that it cannot be recovered.
The method of claim 8, wherein the client device,
And a display unit for displaying a scanned image corresponding to the decoded scan data received from the scanning server, wherein the controller controls the scanned image to be non-editable by a user.
A key generation unit generating an encryption key; And
And a control unit for receiving the encrypted scan data generated by the scanning device through a client device and decrypting the received encrypted scan data using the encryption key, wherein the decryption of the encrypted scan data is performed only through the control unit. Scanning server, characterized in that.
11. The apparatus according to claim 10,
The client device transmits a dedicated viewer for displaying the scanned image corresponding to the decrypted scan data to the client device, and the dedicated viewer deactivates the scan image editing function of the client device. .
The method of claim 10, wherein the encryption key,
Scanning server, characterized in that generated using a random value.
A scanning server for decrypting the encrypted scan data;
A scanning device generating a scan image from a scan target object, performing encryption on the scan image using an encryption key, and generating the encrypted scan data; And
And a client device that receives the encrypted scan data from the scanning device and transmits the received encrypted scan data to the scanning server, wherein the decryption of the encrypted scan data is performed only at the scanning server. Image processing system.
The scan image processing system of claim 13, wherein the encryption key is generated from the scanning server or by a security application module pre-stored in the scanning device.
The method of claim 14, wherein the client device,
When the encryption key is generated from the scanning server of the encryption key
And completely delete the encryption key so that it cannot be recovered when the transmission is completed.
The method of claim 13, wherein the client device,
And a scan image corresponding to the decoded scan data received from the scanning server, wherein the client device performs only a viewer function of the scan image.

Images