JP2004362385A - Image processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image processing system capable of precisely performing security management of image data and making the image data operable only according to a person concerned. <P>SOLUTION: This image processing system comprises at least an image reading device having an image reading means for reading an image from a document, a first information processor as a delivery server, and a second information processor for performing operations to image data by a user, which are mutually connected through a network. The first information processor comprises an image data delivery means for delivering, when delivering image data, the image data with an attachment program for operating the image data, and the image data are operable only with the attachment program attached to the image data. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an image processing system, and more particularly, to an image processing system for exchanging image data between devices constituting the image processing system.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, an image reading device such as a scanner or a digital copying machine having an image reading means for reading an image of an original and outputting the image data as image data, and a personal computer having an image processing means for performing various image processing on the image data An image processing apparatus such as a digital copier, an image processing apparatus such as a digital copier, and an image forming apparatus such as a printer or a digital copier equipped with image forming means for forming an image on paper based on image data are connected via a network. 2. Description of the Related Art There is known an image processing system configured by using a computer.
[0003]
In such an image processing system, image data is distributed to each device connected to the network as necessary. However, there are various people who operate the devices connected to such an image processing system. In some cases, the qualifications for handling each image data may be different, and there is also a security problem for a third party.
[0004]
For example, one person may be given full rights to edit, view, print, etc. the image data, another person may only be allowed to view the image data, and another person may have the image data It may be necessary to prohibit all operations on.
[0005]
According to the invention described in Patent Document 1, by adding a digital watermark image to the image data, the image data is prevented from being tampered with illegally, and the number of times the user has added the digital watermark image to the image data A system is disclosed in which the number of times that tampering prevention by a digital watermark image is used is checked by counting the number of times, and the user can be charged based on the number of times.
[0006]
Also, in the invention described in Patent Document 1, by encrypting and storing the number of times a user has added a digital watermark image to image data, the number of times the user has used the falsification prevention by the digital watermark image to prevent tampering, It states that the system is safe and reliable.
[0007]
[Patent Document 1]
JP 2002-158850 A [Problems to be Solved by the Invention]
However, the above-described related art has the following problems.
[0008]
That is, the invention described in Patent Literature 1 only describes that an electronic watermark image is added to image data in order to prevent the image data from being tampered with. The management of the image data itself was not managed.
[0009]
For this reason, in the invention described in Patent Literature 1, it is managed how the image data to which the digital watermark image is added is handled thereafter, for example, who is to be viewed or printed. In other words, it merely proves the copyright of the image data, which is insufficient for security management.
[0010]
The present invention has been made in view of the above points, and provides an image processing system that appropriately performs security management of image data and that allows only operations corresponding to a person to be performed on image data. The purpose is to do.
[0011]
[Means for Solving the Problems]
In order to achieve the above object, the present invention provides at least an image reading apparatus having an image reading means for reading an image from a document, a first information processing apparatus as a distribution server, and a user who operates an image data. In the image processing system configured by connecting the second information processing device via a network, the first information processing device attaches an attached program for performing an operation on the image data when distributing the image data. And image data distributing means for distributing the image data, wherein the image data can be operated only by an attached program attached to the image data.
[0012]
The present invention according to claim 1, wherein a third information processing device as an authentication server is configured to be connected to the network, and the attached program is executed by the second information processing device. Connecting to the third information processing apparatus via the network, receiving authentication, and performing an operation on the image data only when an operation on the image data is permitted as a result of the authentication. I do.
[0013]
The present invention according to claim 1, wherein a third information processing apparatus as an authentication server is configured to be connected to the network, and the third information processing apparatus is configured to execute the attached program. When it is not possible to connect to the image data, the operation on the image data is not permitted.
[0014]
Also, in the present invention according to claim 2, the third information processing device executes the attached program on the second information processing device and transmits the attached program to the third information processing device via the network. It is characterized by having storage means for storing a history of connection.
[0015]
According to the present invention, the first information processing device and the third information processing device are the same device.
[0016]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0017]
FIG. 1 is a block diagram showing a configuration of an embodiment of an image processing system according to the present invention.
[0018]
As shown in FIG. 1, the image processing system according to the present embodiment is configured by connecting a digital copying machine 1, a server 2, and personal computers 3 to 5 via a network 6.
[0019]
In the embodiment shown in FIG. 1, a digital copying machine 1 is used as an example of an image reading apparatus, and a job ticket for issuing an operation instruction to the image reading apparatus is issued, and an image is read from a document by the image reading apparatus. The server 2 is shown as an example of an information processing apparatus that adds an attached program to image data obtained by reading an image, and remotely controls the image reading apparatus via a network, or reads an image of a document using the image reading apparatus. The personal computers 3 to 5 are used as an example of an information processing device that receives data.
[0020]
In this embodiment, when an instruction for scanning (image reading) is sent from any of the personal computers 3 to 5 to the server 2, setting data called a job ticket is issued from the server 2 to the digital copying machine 1. You. In this job ticket, settings used in image reading processing such as resolution, size, and density at the time of image reading are described. In the digital copying machine 1, document image reading processing is performed based on the received job ticket. The image data thus obtained is transferred to the server 2.
[0021]
The image reading apparatus may be provided with, for example, an image forming means for forming an image on a sheet by an electrophotographic method or the like, in addition to an image reading means for reading an image from a document, such as a digital copying machine. However, basically, an image reading means for reading an image from a document like a scanner may be provided.
[0022]
Further, each information processing apparatus is not limited to a desktop personal computer or a workstation, and may be a larger or smaller apparatus. In the case of an information processing device that remotely controls an image reading device via a network or receives image data obtained by reading an original with the image reading device, a personal computer or a computer that is smaller and can be carried by a user. It may be a PDA or the like, or a mobile phone or the like.
[0023]
Further, in the present embodiment, the respective devices are connected by the network 6, but the configuration of the network 6 may be, for example, a LAN, or may be what is generally called an intranet or the Internet. Also, it may be configured by wire or wireless.
[0024]
FIG. 2 is a block diagram showing a configuration of the digital copying machine 1 shown in FIG.
[0025]
As shown in FIG. 2, the digital copying machine 1 includes a network connection unit 11 serving as an interface with the network 6 shown in FIG. 1, a control unit 12 for controlling the operation of the entire digital copying machine 1, and an image from an original. Image reading means 13 for reading and outputting as image data; image forming means 14 for forming an image on paper such as paper or film based on the image data; image data read by image reading means 13 or digital copying Storage means 15 for storing parameters, software programs, and the like necessary for the operation of the machine 1, input means 16 for the user to input operations and instructions for the digital copying machine 1, and a display for displaying various information to the user And means 17. Note that the input unit 16 and the display unit 17 may be configured as an integrated operation screen such as a touch panel.
[0026]
FIG. 3 is a block diagram showing a configuration of the server 2 shown in FIG.
[0027]
The server 2 includes a network connection unit 21 which is an interface with the network 6 shown in FIG. 1, a control unit 22 for controlling the operation of the entire server 2, a parameter and a software program required for the operation of the server 2, and Storage means 23 for storing an attached program or the like attached to the image data to be input, input means (for example, a keyboard or a mouse) 24 for the operator of the server 2 to input operations, instructions, etc. on the server 2, Display means (for example, a CRT device) 25 for displaying various information.
[0028]
The server 2 is a job ticket issuing server that issues a job ticket as described above, and the image data (data obtained by scanning) received from the digital copier 1 to which the job ticket is issued as a result of the job ticket. , Which may be luminance data or density data, or data of any other format) in the form of an e-mail attachment or the like to a preset personal computer.
[0029]
As described above, in the present embodiment, the job ticket server and the distribution server are configured by the same server, but the present invention is not limited to this, and the job ticket server and the distribution server are configured by different servers. It doesn't matter.
[0030]
FIG. 4 is a block diagram showing a configuration of the personal computer 3 shown in FIG.
[0031]
Since the basic configuration of each personal computer according to the present embodiment is the same, the personal computer 3 will be described as a representative of the personal computers 3 to 5 here.
[0032]
The personal computer 3 stores network connection means 31 serving as an interface with the network 6 shown in FIG. 1, control means 32 for controlling the operation of the entire personal computer 3, and parameters and software programs required for the operation of the personal computer 3. Storage means 33, input means (for example, a keyboard or a mouse) 34 by which the operator of the personal computer 3 inputs operations, instructions, and the like to the personal computer 3, and display means (for example, for displaying various information to the operator of the personal computer 3) (CRT device) 35.
[0033]
Next, the operation of the present embodiment will be described.
[0034]
FIG. 5 is a diagram showing units when transferring image data in the image processing system according to the present embodiment.
[0035]
As shown in FIG. 5, the image data transfer unit 40 includes image data 41 and an attached program 42 attached to the image data 41. When the server 2 operates as a distribution server, the image data transfer unit 40 is distributed in one unit, that is, the image data 41 is not distributed alone without the attached program 42 attached.
[0036]
The attached program 42 is a program that can be executed on the personal computer of the distribution destination. By executing the attached program 42, browsing, printing, editing, and all other operations of the image data 41 become possible. The format of the image data 41 is not a publicly available image format, and browsing, printing, editing, and all other operations cannot be performed by programs other than the attached program 42. This may be realized by converting the image data 41 into a special format, or may be structured such that the image data 41 is encrypted and can be decrypted only by the attached program 42.
[0037]
That is, the user who has received the distribution of the image data transfer unit 40 has to use the attached program 42 attached to the image data transfer unit 40 to perform an operation such as browsing of the image data 41.
[0038]
The image data 41 and the attached program 42 may not be separated by the user who has received the distribution, or may be separated.
[0039]
FIG. 6 is a diagram showing a flowchart of a process until image data is distributed in the image processing system shown in FIG.
[0040]
First, the user uses the personal computer 3, for example, to input setting data described in a job ticket issued by the server 2 (A-1). When the user sets on the personal computer 3, for example, it is desirable that a browser is operated on the personal computer 3 to thereby refer to a page stored in the storage unit 23 of the server 2 and perform setting at a so-called web level. .
[0041]
The setting data input by the user in step (A-1) is transmitted to the server 2 via the network 6, and the server 2 creates a job ticket based on the received setting data and issues the job ticket, that is, digitally copies the job ticket. It is transmitted to the device 1 (A-2).
[0042]
The digital copying machine 1 that has received the job ticket reads the image using the image reading means 13 in accordance with the setting data described in the job ticket (A-3). The image data thus obtained is transmitted from the digital copying machine 1 to the server 2 via the network 6 (A-4).
[0043]
The server 2 receives the image data transmitted in step (A-4), converts the image data into image data 41 that can be operated only by the attached program 42, and further attaches the attached program 42 to transfer the image data. The unit is 40 (A-5).
[0044]
The process of converting the image data obtained in step (A-3) into image data 41 that can be operated only by the attached program 42 may be performed by the digital copying machine 1.
[0045]
Thereafter, the server 2 uses a predetermined method (for example, a method of transmitting by attaching to an e-mail, a method of transmitting by FTP, or a method of transmitting by various protocols) in a predetermined destination (registered in the storage unit 23 in advance). The destination may be a destination, a destination input by the user in step (A-1), or a destination such as a mail address, an IP address, or a MAC address. Is executed (A-5).
[0046]
FIG. 7 is a diagram illustrating a flowchart of a process when a user who has received the distribution of the image data transfer unit 40 performs an operation on the image data included therein.
[0047]
In the present embodiment, the server 2 functions as an authentication server to permit and manage the operation of image data, and the user uses the attached program 42 included in the image data transfer unit 40 to execute image data operation. When performing an operation such as browsing of the image data 41 included in the transfer unit 40, the personal computer on which the attached program 42 operates communicates with the server 2 as an authentication server via the network 6, and execution of the operation is permitted. It is necessary to confirm that
[0048]
That is, when performing an operation such as browsing of the image data 41 included in the image data transfer unit 40, it is necessary to perform the operation at least on a personal computer capable of communicating with the server 2, otherwise, for example, the operation is disabled. Is displayed on the display means of the personal computer. By doing so, it is possible to limit the operation permission area of the image data, invalidate the image data taken out of the company, and the like.
[0049]
As described above, in the present embodiment, the job ticket server, the distribution server, and the authentication server are configured by the same server, but the present invention is not limited to this, and the job ticket server, the distribution server, the authentication server, May be configured on another server.
[0050]
Here, a case where the user operates the image data 41 using the personal computer 3 will be described.
[0051]
First, the user starts the attached program 42 using the input means 34 of the personal computer 3 and instructs the operation of the image data 41 (B-1). The control means 32 (attached program 42) receiving this input communicates with the server 2 via the network 6, and performs authentication processing in the server 2 (B-2).
[0052]
In this authentication processing, a predetermined ID (for example, a MAC address or an IP address of the side to be authenticated, or a user ID or the like input by the user with the input means 24 of the personal computer 2) may be used. Received from the personal computer 3, which is the personal computer, to check whether the ID is registered in the storage means 23 in advance. If the ID is not registered, all operations are rejected. Only operations registered in advance as permitted operations are permitted.
[0053]
If the result of the authentication processing in step (B-2) is that the operation that the user intends to perform on the image data 41 is not permitted on the personal computer 3 this time (B-3), the server 2 notifies the personal computer 3 to that effect. 3 and the fact that the operation is not possible is displayed on the display means 35 of the personal computer 3 (B-4).
[0054]
As a result of the authentication processing in step (B-2), if the operation that the user intends to perform on the image data 41 is permitted by the personal computer 3 this time (B-3), the server 2 notifies that fact. The data is transmitted to the personal computer 3, and the attached program 42 executes the operation in the personal computer 3 (B-4).
[0055]
Further, as described above, in the present embodiment, when operating image data, the attached program is started, and the server 2 is inquired about whether or not the operation is possible. The information can be stored and used, for example, for billing, for market research to search for user requests, and for criminal investigation when fraudulent operations such as counterfeiting of securities are attempted.
[0056]
【The invention's effect】
As described above, according to the present invention, it is possible to provide an image processing system capable of appropriately performing security management of image data and performing only an operation corresponding to a person on the image data. Can be.
[0057]
Further, according to the present invention, the risk that image data is viewed by an unintended third party can be largely eliminated (permission setting only for designated IP addresses, prohibition of taking outside the company, setting of expiration date, etc.). .
[0058]
According to the present invention, since application software for operating image data is attached to the image data as an attached program, there is no need to separately prepare application software for operating image data and install it on a personal computer. . Further, even if each function for operating the image data in the attached program, for example, the browsing function is upgraded, it is easy to simply rewrite the attached program for attaching to the image data in the distribution server, which is easy.
[0059]
Further, according to the present invention, permission and non-permission of operations such as browsing and printing can be set for each user.
[0060]
Further, according to the present invention, the operation status and the history of the image data by the user can be grasped by the server 2, and for example, it can be confirmed whether or not a predetermined person has viewed the image data.
[0061]
Further, according to the present invention, permission and non-permission for operations such as browsing and printing can be set with the intention of the distributor of the image data, thereby preventing data leakage to a third party.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of an embodiment of an image processing system according to the present invention.
FIG. 2 is a block diagram showing a configuration of the digital copying machine 1 shown in FIG.
FIG. 3 is a block diagram showing a configuration of a server 2 shown in FIG.
FIG. 4 is a block diagram showing a configuration of a personal computer 3 shown in FIG.
FIG. 5 is a diagram showing units when transferring image data in the image processing system according to the present embodiment.
6 is a diagram illustrating a flowchart of a process until image data is distributed in the image processing system illustrated in FIG. 1;
FIG. 7 is a diagram showing a flowchart of processing when a user who has received distribution of the image data transfer unit 40 performs an operation on image data included therein.
[Explanation of symbols]
1 Digital copier 2 Server 3, 4, 5 Personal computer 6 Network 11 Network connection means 12 Control means 13 Image reading means 14 Image formation means 15 Storage means 16 Input means 17 Display means 21 Network connection means 22 Control means 23 Storage means 24 Input Means 25 Display means 31 Network connection means 32 Control means 33 Storage means 34 Input means 35 Display means 40 Image data transfer unit 41 Image data 42 Attached program

Claims (5)

At least an image reading device having an image reading means for reading an image from a document, a first information processing device as a distribution server, and a second information processing device for performing an operation on image data by a user are connected via a network. In the configured image processing system,
When the first information processing apparatus distributes image data, the first information processing apparatus includes image data distribution means for attaching and distributing an attached program for performing an operation on the image data, wherein the image data is transmitted to the image data. The image processing system according to claim 1, wherein the image processing system can be operated only by an attached program. A third information processing device as an authentication server is configured to be connected to the network,
When the attached program is executed on the second information processing apparatus, the third information processing apparatus is connected to the third information processing apparatus via the network to be authenticated, and as a result of the authentication, the operation on the image data is permitted. 2. The image processing system according to claim 1, wherein an operation on the image data is performed only when the operation is performed. A third information processing device as an authentication server is configured to be connected to the network,
The image processing system according to claim 1, wherein when the attached program is executed, if the connection to the third information processing apparatus cannot be established, the operation on the image data is not permitted. The third information processing apparatus includes a storage unit that stores a history when the attached program is executed by the second information processing apparatus and the third information processing apparatus is connected to the third information processing apparatus via the network. The image processing system according to claim 2, wherein: The image processing system according to claim 2, wherein the first information processing device and the third information processing device are the same device.

Images