JP2005050041A - Image output apparatus and encrypted information printing system - Google Patents

Abstract

By providing a decryption unit in an image output unit without providing a decryption unit in an information processing apparatus itself, it is possible to reliably prevent a secret key from being stolen or lost and to ensure confidentiality.
When an encrypted electronic image information encrypted with a public key that is paired with a private key of a public key encryption method is input, the image output device receives the encrypted electronic image information with the private key. Decoding means for decoding, visible image printing means for printing the electronic image information decoded by the decoding means as a visible image, and public key output means for outputting the public key of the public key encryption method .
[Selection] Figure 1

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an image information output device capable of encrypting electronic image information, decrypting and printing the encrypted electronic image information, and an encrypted information printing system using the image information output device.
[0002]
[Prior art]
As this type of image information output device, for example, in order to enable reliable management of confidential information in the information processing device, when the operator instructs encryption, the document information on the work area is encrypted by the encryption means. At the same time, date and title are input as identification information relating to the document information from the identification information input means, and the encrypted document information is printed on the recording paper together with the identification information by the printer. When the document is restored, the encrypted document information and the document on which the identification information is recorded are read by the scanner, only the identification information is deleted by the identification information deleting unit, and only the encrypted document information is restored by the restoring unit. An information processing apparatus stored in an area has been proposed (see, for example, Patent Document 1).
[0003]
[Patent Document 1]
Japanese Patent Laid-Open No. 5-161022 (page 1 to page 7, FIG. 1)
[0004]
[Problems to be solved by the invention]
However, in the conventional example described in Patent Document 1, document information output from the information processing apparatus is encrypted and printed on recording paper, so that the confidentiality of the printed document information is reduced. Although the document information itself is processed in the work area and then stored in the main storage device, other users may illegally access the main storage device to tamper or intercept the document information. There is an unsolved problem that will be possible.
[0005]
Furthermore, since this secret key is usually stored and stored in the main storage device of the information processing apparatus, there is a risk that the secret key may be stolen or lost, and there is an unsolved problem that confidentiality cannot be reliably ensured. is there.
Therefore, the present invention has been made paying attention to the unsolved problems of the above conventional example, and by providing the image output means with the decryption means without providing the information processing apparatus itself with the decryption means, the secret can be obtained. It is an object of the present invention to provide an image output apparatus and an encrypted information printing system that can reliably prevent theft or loss of keys and ensure confidentiality.
[0006]
[Means for Solving the Problems]
An image output device according to a first aspect of the present invention is an image output device that outputs a visible image by inputting electronic image information, and is encrypted with a public key that is paired with a private key of a public key encryption method. Decryption means for decrypting the encrypted electronic image information with the secret key when the encrypted electronic image information is input; and visible image printing means for printing the electronic image information decrypted by the decryption means as a visible image; And public key output means for outputting a public key of the public key encryption method.
[0007]
According to the first aspect of the invention, the image output device such as a printer has the decrypting means for decrypting the encrypted electronic image information encrypted with the public key with the secret key, so that the information is encrypted from the information processing device such as the computer. When the electronic image information is output to the image output apparatus, the encrypted electronic image information is decrypted for the first time by the decrypting means, and the electronic image information is printed on the printing paper by the visible image printing means. For this reason, the image output device itself serves as a key for decrypting the encrypted information, and the secret key can be securely prevented from being stolen or lost, thereby improving confidentiality. Moreover, in the case where the secret key is stored as electronic data in the information processing apparatus, even if the secret key is illegally copied by unauthorized access to the information processing apparatus, means for determining whether or not the illegal key has been illegally copied The only way to deal with this is to perform complicated processing such as periodically changing the secret key, but the image output device itself plays the role of a key, so there is no means of unauthorized access and image output. If the device itself is stolen, the theft is obvious and the secret key may be changed at this point.
[0008]
The image output apparatus according to the second invention is an image output apparatus that outputs a visible image when electronic image information is input, and is encrypted with a public key that is paired with a private key of a public key encryption method. When the encrypted encrypted electronic image information is input, the decrypting means for decrypting the encrypted electronic image information with the secret key, and the visible image printing for printing the electronic image information decrypted by the decrypting means as a visible image Means, public key output means for outputting the public key of the public key encryption method, and when the electronic image information is input, encryption is performed by encrypting with any public key or own private key. It is characterized by comprising encryption means for forming electronic image information and encrypted information output means for outputting encrypted electronic image information encrypted by the encryption means.
[0009]
Since the second invention has a configuration in which the encryption means and the encrypted information output means are added to the first invention described above, in addition to the operational effects of the first invention, the encryption means It can be used as an encryption device that encrypts electronic image information with a public key or its own private key and outputs the encrypted electronic image information in a file format.
[0010]
Further, in the image output apparatus according to the third invention, in the first or second invention, the public key output means is constituted by a public key printing means for converting the public key into image print data and printing the image on printing paper. It is characterized by being.
In this third invention, the public key composed of binary data is converted by the public key printing means into color image print data corresponding to the specific color and arrangement and printed on the printing paper. The public key can be easily obtained by reading the printing paper on which the public key is printed by an image reading device or the like that encrypts the public key.
[0011]
Furthermore, in the image output device according to a fourth aspect of the present invention, in any one of the first to third aspects, the public key output means is composed of electronic data output means for outputting the public key as electronic data. It is characterized by that.
In the fourth invention, since the public key is output as electronic data, the public key can be easily distributed to an apparatus that performs encryption processing via a network or offline.
[0012]
Still further, an encrypted information printing system according to a fifth aspect of the present invention includes an image information reading unit that reads print image information, an image information read by the image information reading unit, an arbitrary public key of the public key encryption method, and a self Image information comprising: encryption means for encrypting with any of the private keys to form encrypted electronic image information; and encryption information output means for outputting the encrypted electronic image information encrypted by the encryption means Reading device, information storage device for storing encrypted electronic information output from image information reading device, and decryption for decrypting encrypted electronic image information stored in information storage device by public key encryption method Means, a visible image printing means for printing the electronic image information decrypted by the decryption means as a visible image, and a public key for outputting the public key of the public key encryption method to the encryption means of the image information reading device. It is characterized by comprising an image output device that includes a key output means.
[0013]
In the fifth aspect of the invention, the image information reading device encrypts the electronic image information read from the image information with the public key and outputs the encrypted electronic image information, and stores the encrypted electronic image information in the information storage device. When necessary, the encrypted electronic image information stored in the information storage device is input to the image output device so that it can be decrypted by the decrypting means and printed on the recording paper by the visible image printing means. For this reason, since only the encrypted electronic image information is stored in the information storage device, the secret key for decrypting the encrypted electronic image information is not stored, so that the secret key can be securely stolen or lost. Even if the encrypted electronic image information stored in the information storage device is copied, the electronic image output device other than the electronic image output device having the secret key cannot be decrypted, Confidentiality can be greatly improved.
[0014]
In addition, an encrypted information printing system according to a sixth aspect of the present invention is a server that transmits communication information when receiving a print information transmission request that can communicate with each other through a network, and transmits the print information transmission request. And an image output device that prints the print information when the print information is received from the server, wherein the server prints the print information based on a public key transmitted together with the print information transmission request from the image output device. The image output apparatus includes an information transmitting unit that transmits a print information transmission request and a public key that is paired with a private key of a public key encryption method of the self, When the encrypted print information is received from the server, the decryption means for decrypting the print information with the secret key, and the print information decrypted by the decryption means is printed as a visible image. It is characterized by comprising a visible image printing means that.
[0015]
The encrypted information printing system according to the sixth aspect of the present invention is an image output device that transmits print information when requesting, for example, a concert ticket, a gold certificate, a gift certificate, or the like to be issued to a server that manages them. By adding the public key that is paired with the private key of the decryption means to the request and sending it to the server that is the distribution source, the server encrypts the print information such as tickets, cash vouchers, and gift certificates with the public key. The encrypted print information is transmitted to the image output apparatus, and only the image output apparatus having the secret key that is paired with the public key that has received the encrypted print information decrypts the encrypted print information and prints it on the printing paper. And the reliability of the print information printed on the print paper can be improved, and the encrypted print information transmitted from the server is printed on the print paper without being stored in the storage device. It is possible to reliably prevent the output illegally by printing information and the private key is copied other image output device.
[0016]
Furthermore, an encrypted information printing system according to a seventh aspect of the present invention is a server that transmits the print information when receiving a print information transmission request that can communicate with each other through a network, and transmits the print information transmission request. In addition, when print information is received from the server, the image output device that prints the print information, and the print information collation device that collates the print information printed by the image output device with the print information transmitted by the server The server includes a storage unit that stores a public key transmitted together with the print information transmission request from the image output apparatus in association with the print information, and an encryption that encrypts the corresponding print information with the public key and transmits the encrypted print information. Information transmission means for transmitting a print information transmission request and a public key paired with a private key of its own public key encryption method. , When receiving the encrypted print information from the server, the decryption means for decrypting the print information with the secret key, and the visible image for printing the print information and the public key decrypted by the decryption means as a visible image A print unit, and the print information collating unit is configured to collate the print information and public key of the printed visible image with the print information and public key stored in the storage unit of the server. It is characterized by.
[0017]
In the seventh invention, a print information collating device is added to the configuration of the sixth invention. The print information collating device stores the print information and public key printed by the image output device in the server. The print information and public key can be collated to determine whether the print information is valid or invalid. By placing this print information collation device at a concert venue, store, etc. where the print information is used, Validity / invalidity can be determined instantaneously.
[0018]
Furthermore, an encrypted information printing system according to an eighth aspect of the invention is an image information reading means for reading print image information, and encrypting the image information read by the image information reading means with a public key of a public key encryption method. An image information reading device comprising: encryption means for forming encrypted electronic image information; and encrypted information output means for outputting encrypted electronic image information encrypted by the encryption means; and An encrypted information storage device for storing encrypted electronic image information output from the encrypted information output means, and a decryption for decrypting the encrypted electronic image information stored in the encrypted information storage device by a public key encryption method Generating means, visible image printing means for printing the electronic image information decrypted by the decrypting means as a visible image, and outputting the public key of the public key encryption method to the encrypting means of the image information reading device And a public key output means for outputting the will as encrypted electronic image information by the image information reading device, storing the will in the encrypted information storage device, and performing the encryption when the will is executed. The encrypted electronic image information stored in the information storage device is decrypted by the image output device and a visible image is printed.
[0019]
In the eighth aspect of the invention, the will is read by the image reading device, the encryption means encrypts the will with the public key of the image output device, and outputs the encrypted electronic image information, which is output from the image reading device. The encrypted electronic image information is stored in the encrypted image information storage device, and decrypted by inputting the encrypted electronic image information stored in the encrypted image information storage device to the image output device at the time of the will execution The will can be restored by decrypting the electronic image information by the means and printing the electronic image information as a visible image on the recording paper by the visible image printing means. Therefore, the will is stored in the encrypted image information storage device as the encrypted electronic image information, and is restored as the will for the first time by inputting the encrypted electronic image information to the image output device. It can be surely prevented from seeing and tampering with the will.
[0020]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a first embodiment of the present invention. In FIG. 1, reference numeral 1 denotes a network-compatible printer as an image output apparatus. It is connected to a client terminal 3 via a LAN 2.
[0021]
Further, the LAN 2 is connected to the Internet 5 via the router 4 so that the printer 1 and the client terminal 3 can access a plurality of content servers 6 connected to the Internet 5.
The printer 1 includes a network interface unit 11 connected to the LAN 2, a memory 12 for temporarily storing print information input via the network interface unit 11, and printing based on the print information stored in the memory 12. Controls the print control unit 13 that forms data, the print engine 14 that prints on print paper based on the stamp data formed by the print control unit 13, and access to the Internet 5 via the network interface unit 11 A printer control unit 15, an address information registration unit 16 for storing address information of the content server 6 designated via the client terminal 3 to be described later, a key input unit 17 for inputting an encryption command and a decryption command, and a memory The encryption information stored in 12 is a public key encryption method. A decoding unit 18 for decoding the secret key, and an encryption unit 18 to encrypt the public key paired with the secret key of the public key encryption scheme information stored in the memory 12.
[0022]
The network interface unit 11 includes a LAN driver for connecting to the LAN 2 and various protocol groups such as TCP / IP and HTTP. The printer 1 is connected to the client terminal 3 and the Internet 5 through the network interface unit 11. can do.
The memory 12 temporarily stores print information such as document data input from the client terminal 3 and content information such as HTML document data downloaded from the content server 6, and outputs the print information and content information stored by the printer control unit 15. The destination is decided.
[0023]
The print control unit 13 interprets the print information output from the memory 12 or the decoding unit to generate final print data, and controls the print engine 14 based on control data such as line feed and page break and print data. By doing so, the printing process is executed.
The print engine 14 includes, for example, a paper feed mechanism, a print head, and the like, and performs printing on a print recording medium such as print paper. The print engine 14 includes various engines such as a page printer that prints in units of pages such as a laser printer, a serial printer that prints in units of one character such as an inkjet printer and a thermal transfer printer, and a line printer that prints in units of lines. Can be applied.
[0024]
The printer control unit 15 accesses the content server 6 at a predetermined address stored in the address registration unit 16 to download content information such as a concert ticket, a cash voucher, and the like, and an encryption command and decryption input from the key input unit 17 The information stored in the memory 12 is output to any one of the print control unit 13, the decryption unit 18, and the encryption unit 19 in response to the encryption command.
[0025]
That is, the network control unit 15 executes the print control process shown in FIG. 2. First, in step S 1, it is determined whether or not a public key transmission request to be described later is received from the client terminal 3, and the public key transmission request is received. If so, the process proceeds to step S2, and the address information of the client terminal is paired with the secret key stored in the decrypting unit 18 of the printer 1 based on the address information of the content server 6 notified at the time of the public key transmission request. After transmitting the response information including the public key information composed of binary data and the address information of the printer 1 to the content server 6, the process proceeds to step S3.
[0026]
In this step S3, it is determined whether or not encrypted print information such as a concert ticket, a cash voucher, and a gift certificate has been received from the content server 6, and when the encrypted print information has not been received, it waits until it is received, When the encrypted print information is received, the process proceeds to step S4.
In this step S4, the encrypted print information temporarily stored in the memory 12 is output to the decrypting unit 18, and the decrypting unit 18 decrypts it with the private key of the public key encryption method, and then the process proceeds to step S5. After the decrypted print information is input to the print control unit 13, the process proceeds to step S6.
[0027]
In this step S6, it is determined whether or not the printing of the printing information is completed. When the printing is completed, the process proceeds to step S7, and a printing completion notification is transmitted to the client terminal 3 and the content server 6 before the step S1. Returning to step S8, when printing is not completed, the process proceeds to step S8.
In step S8, it is determined whether or not a printing error has occurred. If no printing error has occurred, the process returns to step S6. If a printing error has occurred, the process proceeds to step S9, where a printing error notification is sent to the client terminal. 3 and then return to step S1.
[0028]
On the other hand, when the determination result in step S1 described above does not receive the public key transmission request, the process proceeds to step S10, where it is determined whether print information is input from the client terminal 3, and the print information is input. If not, the process returns to step S1, and if print information is input, the process proceeds to step S11.
In step S11, it is determined whether or not an encryption command is input from the key input unit 17. If an encryption command is input, the process proceeds to step S12, and the print information temporarily stored in the memory 12 is stored. The data is output to the encryption unit 19 and encrypted with the public key that is paired with the private key of the public key encryption method.
[0029]
Next, the process proceeds to step S13 to determine whether or not the encryption is completed. When the encryption is not completed, the process waits until the process is completed. When the encryption is completed, the process proceeds to step S14 and the encryption is performed. After the information is transmitted to the client terminal 3, the process returns to step S1.
Further, if the result of determination in step S11 is that an encryption command has not been input, the process proceeds to step S15, where it is determined whether or not a decryption command has been input from the key input unit 17, and a decryption command has been input. If so, the process proceeds to step S16.
[0030]
In this step S16, the encrypted print information temporarily stored in the memory 12 is output to the decryption unit 18 and decrypted with the private key of the public key encryption method, and then the process proceeds to step S17 and decrypted. After printing information is input to the printing control unit 13 and printing processing is performed, the process proceeds to step S18.
In this step S18, it is determined whether or not the printing is completed. When the printing is completed, the process proceeds to step S19, a print completion notification is transmitted to the client terminal 3, and the process returns to the step S1 to complete the printing. If not, the process proceeds to step S20 to determine whether or not a print error has occurred. If no print error has occurred, the process returns to step S18. If a print error has occurred, the process proceeds to step S21. After the print error notification is transmitted to the client terminal 3, the process returns to step S1.
[0031]
Further, if the determination result in step S15 is that no decryption command has been input, the process proceeds to step S22, and print information temporarily stored in the memory 12 is input to the print control unit 13 for printing. After the processing is started, the process proceeds to step S18.
In the process of FIG. 2, the process of step S2 corresponds to the public key output means and the electronic data output means, the processes of steps S3, S4, S16, and S17 and the decryption unit 18 correspond to the decryption means, and step S5. , S17 and the print control unit 13 and the printer engine 14 correspond to visible image printing means.
[0032]
The address information registration unit 16 registers the address information of the content server 6 specified by the user at the client terminal 3 when a public key transmission request to be described later is requested.
When the encrypted electronic image information selected by the network control unit 15 is input, the decryption unit 18 uses a public key among a private key and a public key that are paired with a preset public key encryption method. As a public key printing means that implements a decoding algorithm for decoding and adds color image print data obtained by converting a public key composed of binary data corresponding to a specific color and arrangement to the decrypted electronic image information The public key print data adding unit 18a outputs the electronic image information to which the color image print data representing the public key is added by the public key print data adding unit 18a to the print control unit 13. Here, the secret key may be set by the manufacturer as a key unique to the printer, or may be set by the user who purchased the printer 1 by inputting an arbitrary predetermined number of alphanumeric characters according to the installation wizard.
[0033]
When the electronic image information selected by the network control unit 15 is input, the encryption unit 18 implements an encryption algorithm that encrypts the electronic image information using the public key stored in the key storage unit 17a. The encrypted electronic image information is transmitted to the client terminal 3.
On the other hand, the client terminal 3 includes a network interface unit 31, a printer driver 32, an application program 33 such as word processing software and drawing software, and an Internet access program 34 for accessing the content server 6 on the Internet 5.
[0034]
The network interface unit 31 is for connecting to the LAN 2 and is configured to be able to perform bidirectional data communication with the printer 1 via the network interface unit 31 and the LAN 2, and via the LAN 2 and the router 4. The content server 6 connected to the Internet 5 is configured to be accessible.
[0035]
The printer driver 32 is configured to generate print data based on a predetermined print command system by interpreting the source code input from the application program 33 with reference to a font memory or the like. The printer drive 32 includes an address information specifying unit 32a for instructing the printer 1 to address information of the content server 6 such as a URL, an interpreting unit 32b for interpreting a source code from the application program 33, and an interpreting unit 32b. And a print data generation unit 32c that generates print data according to a predetermined print command system based on the interpretation result.
[0036]
The Internet access program 34 specifies information resources located on the Internet 5 such as a URL (Uniform Resource Locator) that specifies the location of a home page stored in the content server 6 connected to the Internet 5. By setting the necessary address information, the printer 1 can be accessed after accessing the home page of the desired content server 6 and registering the necessary information, and before sending print information such as a concert ticket, cash voucher, gift certificate, receipt, etc. When the public key is requested, address information is notified to the printer 1, a public key transmission request is made, and a print completion notification indicating that printing of the print information is completed is received from the printer 1. The access process ends.
[0037]
That is, the Internet access program 34 executes the access process shown in FIG. 3 when the program is started. In this access process, first, in step S31, it is determined whether or not address information such as a URL has been input. If no address information is input, the process waits until the address information is input, and the address information is input. Sometimes, the process proceeds to step S32.
[0038]
In this step S32, a home page stored in the content server 6 on the Internet 5 is accessed according to the input address information, and then the process proceeds to step S33 to display a predetermined data while displaying the image data transmitted from the home page on the display. Enter data and select pages.
Next, the process proceeds to step S34, where it is determined whether or not the selection of the purchased product is completed. When the selection of the purchased product is not completed, the process proceeds to step S35 and whether or not the access to the home page is completed. When the access is continued, the process returns to step S34, and when the access is terminated, the access control process is terminated.
Further, when the determination result of step S34 shows that the selection of the purchased product is completed, the process proceeds to step S36, and the credit card number or the data that proves that the ticket price can be paid from the content server 6 or the ticket price is sent to the bank or the like. Determine whether or not a proof information request is received that requires proof information, including payment information that certifies payment and user information such as name, address, telephone number, and e-mail address that identifies the user If the certification information request has not been received, the process proceeds to step S38 to determine whether or not the access to the home page has been completed. If the access has not been completed, the process returns to step S37. The process ends.
[0039]
Further, when the determination result of step S37 receives the proof information transmission request, the process proceeds to step S39, and the proof information described above is sequentially input to the items displayed on the display, and when the input of necessary items is completed, The certification information is transmitted to the content server 6.
Next, the process proceeds to step S40, where it is determined whether or not the public key transmission request of the printer 1 has been received from the client terminal 3. If the public key transmission request has not been received, the process waits until the public key transmission request is received. When the key transmission request is received, the process proceeds to step S41.
[0040]
In step S41, the address information of the content server 6 and the public key transmission request are transmitted to the printer 1, and then the process proceeds to step S42 to determine whether or not a print completion notification such as a concert ticket has been received from the printer 1. If the print completion notification has not been received, the process proceeds to step S43 to determine whether print error information has been received from the printer 1. If print error information has been received, the process returns to step S41. When print error information is not received, the process waits until a print completion notice is received.
[0041]
If the determination result in step S42 is a print completion notification, the process proceeds to step S44 to determine whether or not the access to the content server 6 has been completed. If the access is continued, the process returns to step S1. When the access is terminated, the process is terminated.
On the other hand, the content server 6 is set to perform electronic transactions such as concert tickets, cash vouchers, and gift certificates, and when there is an access from the client terminal 3, transmits the product selection menu display information to the client terminal 3, When there is a purchase request from the client terminal based on the transmitted product selection menu display information, after transmitting the certification information request described above, receiving the certification information and confirming it, the printer public key information and address When the information transmission request is made and the public key information and the address information are received, the print information of the product to be sold is encrypted with the public key and then transmitted to the printer 1.
[0042]
That is, the content server 6 executes the merchandise sales process shown in FIG. 3. First, in step S 51, it is determined whether or not there is an access from the client terminal 3. If there is an access from 3, the process proceeds to step S 52, the preset product selection menu display information is transmitted to the client terminal 3, and then the process proceeds to step S 53.
[0043]
In this step S53, it is determined whether or not a product purchase request has been received from the client terminal 3. If no product purchase request has been received, the process proceeds to step S54, and whether or not the access from the client terminal 3 has been completed. If the access is not completed, the process waits until a product purchase request is received. If the access is completed, the process returns to step S51.
[0044]
When the determination result in step S53 is a product purchase request, the process proceeds to step S55, and the above-described proof information input screen display information for inputting the proof information is transmitted to the client terminal 3, and then the process proceeds to step S56. Then, it is determined whether or not certification information has been received from the client terminal 3. If the certification information has not been received, the process proceeds to step S57 to determine whether or not the access from the client terminal 3 has ended. When the access is not completed, the process waits until the certification information is received, and when the access is completed, the process returns to step S51.
[0045]
When the determination result in step S57 receives proof information, the process proceeds to step S58, where the received proof information is checked to determine whether the proof information is valid, and the proof information is valid. If not, the process proceeds to step S59, where the proof information is not valid and message information prompting the input of the proof information is transmitted to the client terminal 3 again, and then the process returns to step S55. Transition.
[0046]
In step S60, a response information transmission request for requesting response information including the public key information and address information of the printer 1 and the address information of the client terminal 3 is transmitted to the client terminal 3, and then the process proceeds to step S61. Whether or not response information has been received from the printer 1 is determined from the address information of the client terminal 3 included in the response information. If no response information has been received, it waits until it is received and receives response information. Sometimes, the process proceeds to step S62.
[0047]
In this step S62, if the product is a ticket for a concert, etc., verification information such as the venue name, date and time, seat number, etc., if it is a cash voucher, gift certificate, etc., type information, verification information such as a serial number, etc. After the verification source information associated with the public key information is registered in a predetermined database, the process proceeds to step S63.
In step S63, the print information such as a ticket, a voucher, and a gift certificate is encrypted with the received public key to form encrypted print information, and then the process proceeds to step S64 to transmit the encrypted print information to the printer 1. Then, the process proceeds to step S65.
[0048]
In step S65, it is determined whether or not a print completion notification from the printer 1 has been received. If no print completion notification has been received, the process proceeds to step S66 to determine whether or not response information has been received again. If the response information is received again, the process returns to step S62. If the response information is not received, the process waits until a print completion notification is received.
[0049]
When the result of determination in step S65 is that a print completion notification has been received from the printer 1, the process proceeds to step S67 to determine whether or not the access of the client terminal 1 has been completed, and when the access has not been completed, the process returns to step S52. When the access is completed, the process returns to step S51.
Further, a collation device 7 disposed in an event venue or a store for a concert or the like and connected to the Internet 5 optically reads a product such as a concert ticket, a cash voucher, or a gift certificate printed by the printer 1, and a concert ticket. If it is, the collation information consisting of the venue name, date / time, seat number and public key information, and the type information, serial number and collation information consisting of the public key information are sent to the content server 6 when it is a cash voucher, gift certificate, etc. It is determined whether or not it matches the collation source information registered in the database of the server 6, and if both match, the admission to the event venue is permitted or the use of the voucher and the gift certificate is permitted, If they do not match, the use of concert tickets, cash vouchers, gift certificates, etc. is prohibited.
[0050]
Next, the operation of the first embodiment will be described.
Now, when the user operating the client terminal 3 activates the Internet access program in order to purchase a concert ticket, for example, the execution of the access process of FIG. 2 is started. Then, by entering the URL of the home page stored in the content server 6 for purchasing the concert ticket, access to the corresponding home page is started. In the corresponding content server 6, when accessed from the client terminal 3, the product purchase selection menu is displayed on the display of the client terminal 3 by transmitting the product purchase selection menu display information to the client terminal 3. For this reason, the purchase request is transmitted to the content server 6 after the user selects a concert ticket desired to be purchased according to the product purchase selection menu displayed on the display.
[0051]
When the purchase request is received by the content server 6, proof information input screen display information for inputting proof information is transmitted to the client terminal 3, and settlement information and user information are obtained according to the proof information input screen displayed on the display at the client terminal 3. After the input, the certification information is transmitted to the content server 6.
The content server 6 receives the certification information from the client terminal 3 and checks whether the received certification information is valid. If the certification information is invalid, the content server 6 transmits message information prompting the user to input certification information to the client terminal 3 again. When the certification information is valid, the client terminal 3 is requested to transmit response information including the public key information and address information of the printer 1 and the address information of the client terminal.
[0052]
Upon receiving the response information transmission request, the client terminal 3 transmits a response information transmission request including the address information of the content server 6 and the address information of the client terminal 3 to the printer 1 via the LAN 2.
When the printer 1 receives the response information transmission request from the client terminal 3, the public key information of the public key paired with the private key in its own public key encryption method, its own address information, and the address information of the client terminal 3 And the response information is transmitted to the address information of the content server 6 notified from the client terminal 3.
[0053]
When the content server 6 receives the response information from the printer 1, the client terminal 3 is identified based on the address information of the client terminal included therein, and the received public key information and the concert ticket input from the client terminal 3 are identified. The venue name, date / time, and seat number are associated with each other and registered as collation information in a predetermined database. When this registration is completed, concert ticket print information is created, and the created print information is encrypted with a public key for encrypted printing. Information is formed, and this encrypted print information is transmitted to the printer 1.
[0054]
When the printer 1 receives the encrypted print information from the content server 6 via the network interface unit 11, the printer 1 temporarily stores the encrypted print information in the memory 12, and the printer control unit 15 performs the encrypted print information from the content server 6. Since it is information, the encrypted print information stored in the memory 12 is output to the decryption unit 18.
The decryption unit 18 decrypts the input encrypted print information using the public key encryption method private key, adds the public key information paired with the private key to the decrypted print information, and prints the ticket print information. And the ticket print information is output to the print control unit 13 so that the print control unit 13 interprets the ticket print information and generates final print data. Further, the concert engine printing process is executed by controlling the print engine 14 based on the print data. Here, the public key information added to the decrypted print information is printed with color information corresponding to the public key information, an array thereof, a barcode, or the like so as to be in an optically readable state.
[0055]
Then, the concert ticket printed by the printer 1 on the day of the concert is brought to the concert venue and is put into the collation device 7 disposed at the entrance. The collation device 7 optically reads the collation information including the venue name, date / time, seat number, and public key information printed on the input concert ticket, and reads the collation information via the Internet 5 to the content server. 6 to send.
[0056]
When the content server 6 receives the collation information transmitted from the collation device 7, the collation information is collated with the collation source information registered at the time of purchasing the concert ticket. Thus, when this admission permission information is received by the verification device 7, for example, the gate is opened to allow entry into the concert venue.
[0057]
However, if the collation information transmitted from the collation device 7 and the collation source information registered at the time of concert ticket purchase do not match, the admission non-permission notice is transmitted to the collation device 7. As a result, the verification device 7 keeps the gate closed, prevents entry, and verifies the concert ticket.
[0058]
Note that print information such as document data and image data created by the application program of the client terminal 3 is directly input from the client terminal 3 to the printer 1. At this time, when the key input unit 17 is not operated and the encryption command and the decryption command are not input to the printer control unit 15, the input print information is temporarily stored in the memory 12 and then directly printed. The print information is supplied to the control unit 13 and the print control unit 13 controls the print engine 14 to print the print information on a print sheet in a predetermined format.
[0059]
Further, when confidential information as electronic image information is created by the application program of the client terminal 3, when the creation of the confidential information is completed, the encryption command is input by operating the key input unit 17 of the printer 1. Then, when the confidential information is transmitted to the printer 1, the confidential information is temporarily stored in the memory 12, and then the confidential information stored in the memory 12 is supplied to the encryption unit 19 by the printer control unit 15. Encrypted confidential information is formed by encrypting with the public key that is paired with the private key of the decrypting unit 18 by the encrypting unit 19, and this encrypted confidential information is transmitted to the client terminal 3 and stored in the hard disk or the like. . The encrypted confidential information stored in the hard disk is transmitted to the printer 1 when the encrypted confidential information is completely stored in the information storage medium or after the decryption command is input through the key input unit 17 of the printer 1. Then, when the decryption unit 18 decrypts the print information and the print control unit 13 controls the print engine 14 to print and confirm the confidential information, the confidential information created by the application program of the client terminal 3 is deleted. As a result, only the encrypted confidential information is stored in the hard disk. Even if the encrypted confidential information is illegally accessed from the outside or illegally copied and taken outside, the printer 1 is not provided. Regular decryption cannot be performed, and confidentiality can be ensured.
[0060]
As described above, according to the first embodiment, the concert ticket purchaser accesses the content server 6 from the client terminal 3 via the Internet 5 and selects the purchase ticket. When information is input and transmitted to the content server 6, response information including the public key information and address information of the printer 1 and address information of the client terminal is requested from the content server 6, and when this response information is received When the print information of the concert ticket is generated and the encrypted print information encrypted with the public key that received the print information is transmitted to the printer 1, when another person illegally obtains the encrypted print information on the Internet 5. However, the print information cannot be decrypted because this other person has no private key. , It is possible to concert tickets can be reliably prevented from being printed illegally.
[0061]
In addition, the encrypted print information transmitted from the content server 6 is directly transmitted to the printer 1, decrypted as it is by the printer 1, and printed on the printing paper, so that the decrypted print information is stored. However, it is possible to reliably prevent the decrypted print information from being illegally copied by others.
Further, when the confidential information is created in the client terminal 3, the confidential information is transmitted to the printer 1, encrypted by the encryption unit 19, and the encrypted confidential information is returned to the client terminal 3 and stored in the hard disk or the like. Then, only the encrypted confidential information is stored by deleting the created confidential information. Therefore, even if illegal copying is performed, if there is no printer 1 having a secret key, normal decryption cannot be performed. , Can ensure confidentiality.
[0062]
Furthermore, since the public key data composed of binary data is converted into color image print information corresponding to a specific color and arrangement by the public key data adding unit 18a of the decrypting unit 18, it is added to the decrypted electronic image information. The public key information is also printed at the same time as the electronic image information is printed, and the public information can be easily obtained by reading the printed data with a scanner or the like.
[0063]
In addition, since the printer 1 itself as the image output device plays the role of a key, there is no means of unauthorized access, and if the printer 1 itself is stolen, the theft is obvious. At this point, the secret key is changed. That's fine. Incidentally, when the secret key is stored as electronic data in an information processing apparatus such as a client terminal as in the past, even if the secret key is illegally copied due to unauthorized access to the information processing apparatus, this illegal copy There is no means to determine whether or not it has been done, and there is only a method to deal with it by performing complicated processing such as periodically changing the secret key. However, in the first embodiment, the secret key is changed low. There is no need to perform complicated processing.
[0064]
In the first embodiment, the case where the encrypted confidential information is simply transmitted from the client terminal 3 to the printer 1 for printing is described. However, when the encrypted confidential information is printed, the printer By setting a password on one side and decrypting and printing the encrypted confidential information for the first time when this password is input, the confidentiality maintaining function can be further improved. it can.
[0065]
Next, a second embodiment of the present invention will be described with reference to FIGS.
In the second embodiment, instead of the case where electronic image information is formed by an application program, information written on a sheet like a will is encrypted and stored, and can be decrypted when necessary. It is a thing.
That is, in the second embodiment, the printer 1 and the client terminal 2 are connected to the LAN 2 in the first embodiment described above at the will preparation site such as a lawyer office, and the image information reading apparatus is also used as the image information reading device. An image scanner 9 is connected.
[0066]
The image scanner 9 includes a network interface unit 41 connected to the LAN 2, a scanner engine 43 as an image information reading unit that optically reads image information of a sheet placed on the image reading unit 42 with an image sensor, and the scanner engine. The memory 44 that temporarily stores the image data read in the memory 43, and the output of the memory 44 depending on whether or not the encryption command is input from the key input unit 45 to the image data stored in the memory 44. A scanner control unit 47 that controls whether to output to the client terminal 3 or directly to the client terminal 3 via the encryption unit 46 as an encryption unit having the same configuration as the encryption unit 19 is provided. . The client terminal 3 incorporates a scanner driver 35 that reads image data input from the image scanner 9 with application software. The encryption unit 46 requests the printer 1 to transmit public key information via the LAN 2 and acquires the public key information of the electronic data transmitted from the printer 1.
[0067]
The scanner control unit 47 starts executing the scanner control process shown in FIG. 6 when the power is turned on. First, in step S71, it is determined whether or not a reading start command is input from the client terminal 3, and the reading start command is input. If not, the process waits until a reading start command is input. If the reading start command is input, the process proceeds to step S72 to control the scanner engine 43 to be read on the paper mounting table. The image information of the paper is optically read, and the read image data is temporarily stored in the memory 44 as electronic image information.
[0068]
Next, the process proceeds to step S73, where it is determined whether or not the reading of the image data for one page has been completed. If the reading of the image data for one page has not been completed, the process waits until this is completed. When reading of the image data for the minute is completed, the process proceeds to step S74.
In step S74, it is determined whether or not an encryption command is input from the key input unit 45. If no encryption command is input, the process proceeds to step S75, and one page stored in the memory 44 is stored. The image data of the minute is transmitted to the client terminal 3 as it is, and then the process proceeds to step S76.
[0069]
In this step S76, it is determined whether there is a sheet to be read next. If there is no sheet to be read, the process returns to step S71. If there is a sheet to be read, the process returns to step S72. .
On the other hand, if the determination result in step S74 is that an encryption command is input from the key input unit 45, the process proceeds to step S77, and the image data for one page stored in the memory 44 is stored in the encryption unit 46. The image data is output and encrypted with the public key paired with the private key of the printer 1 to form encrypted image data. The encrypted image data is transmitted to the client terminal 3, and then the process proceeds to step S78. .
[0070]
In step S78, it is determined whether or not there is a sheet to be read next. If there is no sheet to be read, the process proceeds to step S79 to clear the encryption command input from the key input unit 45. Then, the process returns to step S71, and if there is a sheet to be read, the process returns to step S72.
Next, the operation of the second embodiment will be described.
[0071]
Now, for example, assuming that a will is created by hand, this will is set in the automatic paper feed mechanism of the image scanner 9 arranged at the will preparation place such as a lawyer's office, and the key input unit 45 encrypts the will. In this state or before that, a predetermined word processor application software is started on the client terminal 3 and bibliographic items of the will are entered. When the bibliographic items are entered, the image is displayed. Executes data insertion processing. By executing this image data insertion process, a reading start command is transmitted to the image scanner 9.
[0072]
When this reading start command is received by the image scanner 9, the first one of the will set in the automatic paper feeding mechanism is transferred to the reading table, and optical reading of the first page of the will is started and read. Image data is sequentially stored in the memory 44.
When the reading of the image data for one page is completed, since the encryption command is input from the key input unit 45, the image data for one page stored in the memory 44 is output to the encryption unit 46. The encryption unit 46 encrypts with the public key paired with the private key of the printer 1 to form encrypted image data, and transmits the formed encrypted image data to the client terminal 3.
[0073]
When the client terminal 3 receives the encrypted image data transmitted from the image scanner 9, the encrypted image data is inserted into a predetermined location of the file in which bibliographic items are input.
Thereafter, when the will is composed of a plurality of sheets, the above-described encryption processing is repeated, and the formed encrypted image data is transmitted to the client terminal 3 so that the transmitted encrypted image data is sequentially When the insertion of the encrypted image on the last page of the will is completed and inserted in the file being created, the will not exist in the automatic paper feed mechanism, so the encryption command entered from the key input unit 45 is cleared. And waits until the reading start command is input again.
[0074]
In this way, when all the encrypted image data of the will is inserted into the created file, the desired file name is set in the created file and then stored in the hard disk or other storage medium, and the will is registered. finish.
Thereafter, when the will is executed, the client terminal 3 searches the will file stored in the hard disk or other storage medium by specifying the file name, extracts the corresponding will file, and extracts the will By opening the file, a predetermined word processing application software is started, and bibliographic items and encrypted image data are displayed on the display.
[0075]
In this state, after inputting an encryption command from the key input unit 17 of the printer 1, the encrypted image data of the will file is transmitted to the printer 1 as a print job, whereby the encrypted image data is stored in the memory 12. Since the encryption command is input, the encrypted image data temporarily stored in the memory 12 by the printer control 15 is sequentially output to the decryption unit 1, and the decryption unit 1 decrypts the image data of the will. By being supplied to the print control unit 13, the print engine 14 is controlled to print the will on the printing paper.
[0076]
If the will is formed by document data, as in the first embodiment described above, an encryption command is input from the key input unit 17 of the printer 1 and then the will of the document data is printed by the printer. 1, it is possible to store the encrypted will information in a storage medium such as a hard disk of the client terminal 3 by encrypting with the public key in the encryption unit 19.
[0077]
As described above, according to the second embodiment, the handwritten will is read by the image scanner 9 to form the encrypted image data, which is transmitted to the client terminal 3 and stored in the will file. Since this will file is stored in a storage medium such as a hard disk, even if the will file is illegally copied or illegally accessed and stolen from outside, the secret key of the printer 1 is not required. A regular will will not be printed, and confidentiality can be ensured.
[0078]
Also in the second embodiment, as in the first embodiment, the printer 1 itself as an image output device plays the role of a key, so that there is no means of unauthorized access and the printer 1 itself is stolen. If it is rare, theft is obvious and the secret key can be changed at this point. In this case, since the already prepared will is encrypted with the public key that is paired with the stolen private key, it is separately stored in a storage medium such as a flexible disk or a flash memory when the private key of the printer 1 is set. In addition, after decrypting with the stored secret key, it is encrypted again with the public key paired with the newly set secret key and stored again.
[0079]
In the second embodiment, the case where a will is applied as confidential information has been described. However, the present invention is not limited to this, and any information described in a document can be encrypted. It can be held and decrypted by the printer 1.
In the second embodiment, the case where the image data obtained by optically reading the information described in the document by the image scanner 9 is directly encrypted has been described. However, the information described in the document is document data. In some cases, application software (OCR) that converts image data into document data is built in the image scanner 9 so that the document data is converted and then encrypted by the encryption unit 46 and transmitted to the client terminal 3. May be.
[0080]
Furthermore, in the second embodiment, the case where the encrypted image data encrypted by the image scanner 9 is once transmitted to the client terminal 3 and stored in the will file has been described. However, the present invention is not limited to this. Alternatively, the image scanner 9 may be provided with a drive for driving the storage medium, and the encrypted image data may be directly stored in the storage medium.
[0081]
Furthermore, in the first and second embodiments, the case where a network-compatible printer is applied as the printer 1 has been described. However, the present invention is not limited to this, and a printer having only a parallel interface or a USB. May be applied to connect directly to the client terminal 3.
In the first and second embodiments, the case where the encrypted electronic image information is decrypted and printed by the printer 1 has been described. However, the present invention is not limited to this. The electronic image information decrypted by the printer 1 may be once previewed on a display such as a liquid crystal display and then printed.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a first embodiment of the present invention.
FIG. 2 is a flowchart illustrating print control processing of a printer.
FIG. 3 is a flowchart showing access processing of a client terminal.
FIG. 4 is a flowchart showing merchandise sales processing of the content server.
FIG. 5 is a block diagram showing a second embodiment of the present invention.
FIG. 6 is a flowchart showing scanner control processing of the image scanner.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Printer, 2 ... Local area network (LAN), 3 ... Client terminal, 4 ... Router, 5 ... Internet, 6 ... Content server, 7 ... Collation apparatus, 9 ... Image scanner, 11 ... Network interface part, 12 ... Memory , 13 ... print control unit, 14 ... print engine, 15 ... printer control unit, 16 ... address registration unit, 17 ... key input unit, 18 ... decryption unit, 19 ... encryption unit, 31 ... network interface unit, 32 ... Printer driver 33 ... Application software 34 ... Internet search application software 41 ... Network interface unit 42 ... Image reading unit 43 ... Scanner engine 44 ... Memory 45 ... Key input unit 46 ... Encryption unit 47 ... Scanner control unit

Claims (8)

In an image output device that outputs a visible image by inputting electronic image information,
Decryption means for decrypting the encrypted electronic image information with the private key when the encrypted electronic image information encrypted with the public key paired with the private key of the public key encryption method is input; Image output comprising: visible image printing means for printing the electronic image information decrypted by the decryption means as a visible image; and public key output means for outputting the public key of the public key encryption method. apparatus. In an image output device that outputs a visible image by inputting electronic image information,
Decryption means for decrypting the encrypted electronic image information with the private key when the encrypted electronic image information encrypted with the public key paired with the private key of the public key encryption method is input; Visible image printing means for printing the electronic image information decrypted by the decryption means as a visible image, public key output means for outputting the public key of the public key encryption method, and when the electronic image information is input Encryption means for encrypting with any public key generated by the user or the other person and a secret key of the self to form encrypted electronic image information, and encrypted electronic image information encrypted by the encryption means An image output device comprising: encrypted information output means for outputting The image output apparatus according to claim 1, wherein the public key output unit includes a public key printing unit that converts a public key into image print data and prints the image on printing paper. The image output apparatus according to claim 1, wherein the public key output unit includes an electronic data output unit that outputs a public key as electronic data. Image information reading means for reading the print image information, and the image information read by the image information reading means is encrypted by either the public key encryption method self or any public key generated by others or its own private key Image information reading apparatus comprising: encryption means for forming encrypted electronic image information; and encrypted information output means for outputting encrypted electronic image information encrypted by the encryption means; and the image information reading apparatus Storage device for storing encrypted electronic information output from the device, decryption means for decrypting encrypted electronic image information stored in the information storage device by a public key encryption method, and decryption by the decryption device An image output device comprising: a visible image printing unit that prints the electronic image information as a visible image; and a public key output unit that outputs the public key of the public key encryption method to the encryption unit of the image information reading device. Encryption information printing system characterized by comprising a device. A server that can communicate with each other through a network and that transmits the corresponding print information when a print information transmission request is received, and prints when the print information transmission request is transmitted and the print information is received from the server An image output device that prints information, and the server includes an encryption unit that encrypts and transmits print information based on a public key transmitted from the image output device together with a print information transmission request. When the output device receives the print information transmission request and the public key that is paired with the private key of the public key encryption method of the self, and when the encrypted print information is received from the server, the output device The image processing apparatus includes: a decryption unit that decrypts the print information using a secret key; and a visible image print unit that prints the print information decrypted by the decryption unit as a visible image. Encrypted information printing system. A server that can communicate with each other through a network and that transmits the corresponding print information when a print information transmission request is received, and prints when the print information transmission request is transmitted and the print information is received from the server An image output device that prints information; and a print information collation device that collates print information printed by the image output device with print information transmitted by the server. The server receives print information from the image output device. A storage unit that stores a public key transmitted together with the transmission request in association with the print information; and an encryption transmission unit that encrypts the corresponding print information with the public key and transmits the print information. An information transmitting unit that transmits a transmission request and a public key that is paired with a private key of the public key encryption method of the device, and received encrypted print information from the server A decryption unit that decrypts the print information using the secret key, and a visible image print unit that prints the print information and the public key decrypted by the decryption unit as a visible image. An encrypted information printing system configured to collate the printed information and public key of a visible image with the print information and public key stored in the storage unit of the server. Image information reading means for reading print image information, encryption means for encrypting image information read by the image information reading means with a public key of a public key encryption method, and forming encrypted electronic image information, and the encryption Image information reading device comprising: encrypted information output means for outputting encrypted electronic image information encrypted by the means; and storing the encrypted electronic image information output from the encrypted information output means of the image information reading device An encrypted information storage device, decryption means for decrypting the encrypted electronic image information stored in the encryption information storage device by a public key encryption method, and visible the electronic image information decrypted by the decryption means An image output device comprising: a visible image printing unit that prints as an image; and a public key output unit that outputs a public key of the public key encryption method to an encryption unit of the image information reading device, The will information is output as encrypted electronic image information by the image information reading device and stored in the encrypted information storage device, and the encrypted electronic image information stored in the encrypted information storage device when the will is executed is output as the image. An encrypted information printing system, wherein a visible image is printed after being decrypted by an apparatus.

Images