JP2005074772A - Printing device and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent leakage of data in the middle of printing data transmission between printers 3 connected to a computer 1 via a communication line 2. <P>SOLUTION: The printer 3 receives via the communication line 2, enciphered printing data 103 which has printing data 101 enciphered by the computer 1 with the use of a predetermined password 104; receives via the communication line 2, an enciphered password which has the password 104 enciphered 1 by a printer driver at the computer 1; obtains a password 104a by decoding the received enciphered password; obtains printing data 101a by decoding enciphered printing data 103a with the use of the password 104a; and prints the printing data 101a to a predetermined printing medium. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a printing apparatus and printing method suitable for printing print information sent from a computer via a communication line.

  Connect a printer or a multifunction device with multiple functions such as printer, fax, and copy to a computer via a communication network such as a LAN (local area network) or the Internet or a communication line (hereinafter referred to as a communication line). However, there is a system that transmits print data via a communication line or the like. In addition, there is a system in which a storage device such as a hard disk is provided in a printer or a multi-function peripheral so that data transmitted from a computer is temporarily stored in the storage device and can be repeatedly printed or printed over time.

  In such a system, data leakage in a communication line or the like may be a problem. Therefore, a technique for encrypting data transmitted over a communication line or the like has been proposed (see, for example, Patent Document 1). In the system described in Patent Document 1, print data is divided into an image and a text and transmitted after being encrypted, and is decrypted by a receiving computer and then printed by a printer.

In addition, when a printer or the like is shared by a plurality of users, a technique for preventing data stored in a storage device from being printed by an unauthorized user has been proposed (for example, Patent Documents). 2). In the system described in Patent Document 2, security information such as a password is transmitted together with print data from a computer to a printer. Then, the security information is received by the printer, and the security information is confirmed by the printer at the time of printing.
JP 2002-318535 A (page 9-11, FIG. 1) Japanese Patent Laid-Open No. 11-301058 (page 4, FIG. 4)

  In the system described in Patent Document 1, print data is encrypted in a communication line or the like. However, decryption processing of encrypted print data has been performed by a computer. Further, it is not intended for a system in which a printer is shared by a plurality of users.

  On the other hand, the system described in Patent Document 2 manages access rights when printing or deleting print data stored on the printer side using security information. For this reason, no consideration has been given to data leakage or the like when transmitting print data or security information via a communication line or the like.

  The present invention has been made in view of the above circumstances, and provides a printing apparatus and method capable of preventing data leakage during print data transmission in a printing apparatus connected to a computer via a communication line. For the purpose. Another object of the present invention is to provide a printing apparatus and method capable of preventing leakage of security information of print data together with print data. Another object of the present invention is to provide a printing apparatus and method that can enhance security when printing data received by the printing apparatus is output.

  In order to solve the above-mentioned problem, the invention described in claim 1 is a printing apparatus for printing print information sent from a computer via a communication line, and the computer encrypts the print information using a predetermined password. Print information reception means for receiving encrypted print information via a communication line, password reception means for receiving an encrypted password obtained by encrypting the password by the computer via a communication line, and password reception means received by the password reception means Password decrypting means for decrypting an encrypted password to obtain a password; print information decrypting means for decrypting encrypted print information received by the print information receiving means to obtain print information using the password; and Printing means for printing the printing information obtained by the printing information decoding means on a predetermined printing medium. Features.

  According to this configuration, the computer encrypts the print information (print data) using the password, and decrypts it in the printing apparatus. Therefore, it is possible to prevent the print information from leaking on the communication line. Further, since the password is transmitted after being encrypted, it is possible to prevent the password information from leaking in the communication line.

  According to a second aspect of the present invention, in a printing apparatus that prints print information sent from a computer via a communication line, the encrypted print information obtained by encrypting the print information using a predetermined password by the computer is used for the communication line. Print information receiving means for receiving the print information, print information storage means for storing the encrypted print information received by the print information receiving means, password input means for inputting a password, and the print information using the password. Print information decrypting means for decrypting the encrypted print information stored in the storage means to obtain print information, and printing means for printing the print information obtained by the print information decryption means on a predetermined print medium. It is characterized by that.

  According to this configuration, the computer encrypts the print information using the password, temporarily stores it in the storage device of the printing apparatus, decrypts the stored print information, and then prints. When decryption is performed by the printing apparatus, a password is input by the printing apparatus. Therefore, it is possible to prevent the print information from leaking on the communication line. Further, it is possible to enhance security when printing data received by the printing apparatus is output.

  The invention according to claim 3 is characterized in that security levels in encryption of the password or the print information can be selected in a plurality of different ranks. Accordingly, for example, password setting processing and processing time can be appropriately adjusted according to the importance of print information.

  According to a fourth aspect of the present invention, the password is one of a plurality of passwords registered in advance divided into a plurality of groups, and the print information decrypting means encrypts with one password. The print information can be decrypted with the same or another predetermined group password. According to this, for example, printing can be performed using another password belonging to the same group, or the information belonging to the upper group, such as defining a hierarchy for each group, and printing information based on the password of the lower group Various settings such as enabling printing of all of the above are possible.

According to a fifth aspect of the present invention, the password is preset so as to be selectable by a predetermined operation on the computer or automatically, and the preset password is set for the print information decoding means. The same password is preset so as to be selectable by a predetermined operation or automatically. This makes it easy to set a password.

  According to a sixth aspect of the present invention, the password is associated with identification information of a specific user, and the password input means inputs the identification information of the user when inputting the password, and the password And the identification information of the user are associated with each other, the input password is received. According to this, it is possible to further enhance the security when outputting the print data received by the printing apparatus.

  The invention described in claim 7 is characterized in that a key used for encrypting the password or decrypting the encrypted password is recorded in an encrypted state. According to this, security at the time of communication or printing can be further strengthened.

  The invention according to claim 8 is characterized in that the password is automatically generated and changes according to time or time. According to this, the security at the time of communication can be strengthened more. Further, the operation can be performed more easily.

  The invention according to claim 9 is characterized in that the print information is compressed or converted in a predetermined format. According to this, it can be expected to reduce the communication amount, and according to the compression or conversion method, it becomes difficult to decipher and the safety during communication can be further increased.

  The invention described in claim 10 is characterized in that the password is generated using biometric authentication for an operator. According to this, password input operation and management can be simplified, safety can be further improved, and problems due to password leakage can be prevented.

  The invention according to claim 11 is a printing method for printing print information sent from a computer via a communication line, and the encrypted print information obtained by encrypting the print information with a predetermined password by the computer is used for the communication line. Receiving the print information received via the password, receiving the encrypted password encrypted by the computer via the communication line, decrypting the encrypted password received in the password receiving process A password decryption process for obtaining a password, a print information decryption process for decrypting the encrypted print information received in the print information reception process using the password to obtain print information, and a request for the print information decryption process. And a printing process for printing the printed information on a predetermined printing medium.

  According to a twelfth aspect of the present invention, in a printing method for printing print information sent from a computer via a communication line, the encrypted print information obtained by encrypting the print information using a predetermined password by the computer is used for the communication line. A print information receiving process for receiving the print information, a print information storing process for storing the encrypted print information received in the print information receiving process, a password input process for inputting a password, and the print information using the password. A print information decryption process for decrypting the encrypted print information stored in the storage process to obtain print information; and a print process for printing the print information obtained in the print information decryption process on a predetermined print medium. It is characterized by.

  According to the present invention, it is possible to prevent leakage of data during transmission of print data in a printing apparatus connected to a computer via a communication line, and further prevent leakage of security information of the print data together with the print data. Or the security at the time of outputting the print data received by the printing apparatus can be enhanced.

  The best mode for carrying out the present invention will be described below with reference to the drawings. FIG. 1 is a system diagram showing a configuration of a printing system including a printer 3 as an embodiment of the present invention and a data flow in the system. In FIG. 1, a computer 1 is connected to a printer 3 via a LAN 2. The computer 1 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a storage device such as a hard disk, a display, a keyboard, a mouse, a communication device, and the like. The computer 1 can execute an application program for document creation and graphic creation under the management of a general OS (operating system). In addition, printer driver software for controlling the printer 3 under the management of the OS is installed in the computer 1.

  The printer 3 performs data communication with the OS of the computer 1 via the LAN 2 using a predetermined protocol, and prints the print data 101a on a predetermined print medium. For example, it is configured as a color or monochrome page printer or an inkjet printer. In this case, the printer 3 corresponds to various types of PDL (page description language) as a control language, and can print the print data 101 described in PDL. The printer 3 can also print print data 101 expressed in a file format such as PDF (Portable Document Format), GIF (Graphics Interchange Format), or TIFF (Tag Image File Format). Further, it is assumed that a compression format can also be used in a format such as TIFF.

  The process for printing the print data 101 using the printer 3 is as follows. For example, the user operates an application program for document creation and graphic creation on the computer 1 and outputs the created data as a file in the above-described file format that can be printed by the printer 3. In this case, it is assumed that the print data 101 is output by PDF or TIFF. The print data 101 is temporarily stored in the storage device of the computer 1.

  Next, the user executes a general-purpose encryption program, and the user sets an arbitrary password 104 and performs encryption, encryption, and compression processing on the print data 101 (processing 102). As a result, it is assumed that the encrypted print data 103 is created. Next, it is assumed that the user designates the encrypted print data 103 and instructs the printer driver to print by dragging and dropping the file icon of the encrypted print data 103 onto the icon (or shortcut) of the printer driver. . Then, a predetermined input screen is displayed by the printer driver, and the password 104 used for the encryption process of the encrypted print data 103 is requested. When the user inputs the password 104 (process 105), an encryption process by a common key encryption method (or secret key encryption method) using the common key 106 as a key is executed on the password 104 input by the printer driver (step 105). Process 107). Then, the encrypted print data 103 and the encrypted password data are transmitted to the printer 3 via the LAN 2 by the printer driver.

  The printer 3 receives the encrypted print data 103 via the LAN 2 (the received data is referred to as encrypted print data 103a), and receives the encrypted password data. The printer 3 decrypts the encrypted password data by using the same common key 106a as the common key 106 used by the printer driver of the computer 1 (process 108). Then, the same password 104a as the password 104 is stored in the printer 3 (process 109). The printer 3 further decrypts the encrypted print data 103a using the password 104a, and creates decrypted print data 101a (same as the print data 101) (process 110). Then, the printer 3 prints the print data 101a on a predetermined print medium.

  The above is an example of the data flow according to this embodiment. Next, the configuration of the printer 3 will be described with reference to FIG.

  FIG. 2 is a block diagram showing an example of the configuration of the printer 3 of FIG. The printer 3 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), an EEPROM (Electrically Erasable Programmable Read-Only Memory), a storage device such as a hard disk, an input operator, a display device, a communication device, a print engine unit, and the like. It is configured. A program stored in a non-volatile storage device such as EEPROM is executed by the CPU, data received from the computer 1 is processed, and a paper feed mechanism and a print engine unit are controlled to put on a predetermined print medium such as paper. Print the data.

  The print information receiving unit 31 receives the encrypted print data 103 obtained by encrypting the print data 101 using the predetermined password 104 by the computer 1 via the communication line (LAN 2). The encrypted print data 103a received by the print information receiving means 31 is stored in the print information storage means 32 constituted by a hard disk or the like.

  On the other hand, the password receiving means 33 receives the encrypted password obtained by encrypting the password 104 by the printer driver in the computer 1 via the communication line (LAN 2). Then, the password decrypting means 34 decrypts the encrypted password received by the password receiving means 33 to obtain the password 104a. In the decryption, the same common key 106a (FIG. 1) as the common key 106 used by the printer driver is used.

  The print information decryption means 35 uses the password 104a to decrypt the encrypted print data 103a received by the print information reception means 31 and stored in the print information storage means 32 to obtain the print data 101a. The print data 101a obtained by the print information decoding unit 35 is printed on a predetermined print medium by the printing unit 36 including a print engine unit or the like.

  In addition, when the encrypted print data 103a stored in the print information storage unit 32 is printed on another occasion, the user prints using the password input unit 37 including an operator such as a 10 key and a display. Select the data you want to enter and enter the password for that data. In this case, the print information decryption unit 35 decrypts the encrypted print data 103a using the password 104b (same as the password 104a) input by the password input unit 37. Then, the print data 101 a obtained by the print information decoding unit 35 is printed by the printing unit 36.

  In the configuration of FIG. 1, the encrypted print data 103 is created in the computer 1 using a general-purpose encryption program. However, for example, a configuration in which processing is collectively performed by a printer driver is used. Is also possible. In other words, for example, when the printer 3 is selected as a printing destination printer from a document creation application and printing is performed, the printer driver prompts the user to input a password. Then, under the control of the printer driver, the print data 101 is encrypted using the password to create the encrypted print data 103, and the encrypted password is also created.

  Further, the means for encrypting the password in the computer 1 is not limited to the printer driver, and may be other printer control software or hardware other than the printer driver. For example, printer control software includes (1) printer driver, (2) application software that handles GUI (Graphical User Interface), (3) printer control language (PCL) (for example, page description language (PDL), printing Control language (PJL), etc.) and (4) other password generation programs can be used. As the hardware, for example, (5) an application specific integrated circuit (ASIC) or another integrated circuit can be used. At that time, in the case of (1) and (2), the user can arbitrarily set a password on the GUI and encrypt the password. In the case of (3), (4), and (5), the password can be encrypted in accordance with a command or algorithm incorporated in advance. At this time, the password used by those means is preliminarily incorporated (for example, incorporated in the program or circuit of (3), (4), (5), or incorporated in other memory), It is possible to use one that is automatically set under predetermined conditions, or one set by the user in (1) and (2).

  Further, the security level in encryption of password or print data (process 102 or process 107) can be selected from a plurality of different ranks. For example, it is possible to select the number of encryption bits in the same encryption algorithm, select different encryption algorithms, and select different encryption methods for users based on the security level. It can be classified and presented. And let the user choose.

  Further, a plurality of passwords 104, 104,... Can be registered in the printer driver or the printer 3 in advance by dividing them into a plurality of groups with different access rights. For example, if multiple passwords are registered as A group and B group and one password of A group is used, one password of A group used and any password of B group Thus, the decryption process can be performed. In this case, in the encryption process, the set password itself is not used, but converted into another password set for each group and used.

  Further, the password is set in advance so as to be selectable by a predetermined operation on the printer driver or automatically, and is set in advance in the printer driver with respect to the print information decoding means 35 (process 108). The same password as the password can be set in advance so as to be selectable by a predetermined operation or automatically. That is, it is possible to preset a plurality of passwords in the printer driver so that the preset information can be used at the time of encryption processing or decryption processing. Specifically, for example, when a printer driver is started and a password presentation is instructed, one or a plurality of passwords are displayed so as to be selectable, and when selected, the password is transferred to an encryption program. It is possible to prepare. Alternatively, one password is automatically generated by the printer driver and transferred to the encryption program.

  Further, identification information (ID) of a specific user may be used in association with the password. In this case, the password input means 37 of FIG. 2 also inputs the user identification information when inputting the password, and accepts the input password only when the password and the user identification information are associated with each other. Like that.

  Further, the keys 106 and 106a used when encrypting the password or decrypting the encrypted password are further encrypted by another encryption process, and the computer 1 (or a data area managed by the printer driver) is used. In the storage information storage means 32 of the printer 3 or the like.

  When the password 104 is automatically generated in the computer 1, the password may be changed by a predetermined algorithm according to time or time.

  Further, the password may be generated by using biometric authentication for the operator, and the biometric information may be input and used in the computer 1 or the printer 3.

  The embodiment of the present invention is not limited to a single printer, but can be configured as a multifunction machine having a facsimile or a copy function. Further, the communication line is not limited to a wired line but may be wireless. In FIG. 1, the system is configured by one computer, a communication network, and one printer, but there may be a plurality of configurations. The computer is not limited to a desktop or notebook personal computer, but may be another terminal such as a portable information terminal or a mobile phone.

1 is a system diagram showing a configuration example of a printing system including a printer 3 of the present invention. FIG. 2 is a block diagram illustrating a configuration example of a printer 3 in FIG. 1.

Explanation of symbols

1 Computer 2 LAN
3 Printer

Claims (12)

In a printing apparatus that prints print information sent from a computer via a communication line,
Print information receiving means for receiving, via a communication line, encrypted print information obtained by encrypting print information using a predetermined password in the computer;
Password receiving means for receiving an encrypted password obtained by encrypting the password by the computer via a communication line;
Password decrypting means for decrypting the encrypted password received by the password receiving means to obtain a password;
Print information decrypting means for decrypting the encrypted print information received by the print information receiving means using the password to obtain print information;
A printing apparatus comprising: printing means for printing the print information obtained by the print information decoding means on a predetermined print medium. In a printing apparatus that prints print information sent from a computer via a communication line,
Print information receiving means for receiving, via a communication line, encrypted print information obtained by encrypting print information using a predetermined password in the computer;
Print information storage means for storing encrypted print information received by the print information receiving means;
A password input means for entering a password;
Print information decryption means for decrypting the encrypted print information stored in the print information storage means to obtain print information using the password;
A printing apparatus comprising: printing means for printing the print information obtained by the print information decoding means on a predetermined print medium.   3. The printing apparatus according to claim 1, wherein security levels for encryption of the password or the print information can be selected from a plurality of different ranks. The password is one of a plurality of passwords registered in advance divided into a plurality of groups,
The printing apparatus according to claim 2, wherein the print information decrypting unit is capable of decrypting the encrypted print information encrypted with one password with a password of the same or another predetermined group. . The password is set in advance to be selectable by a predetermined operation on the computer or automatically,
The password same as the preset password for the print information decrypting means is preset in a selectable manner or automatically so as to be selectable. 5. The printing apparatus according to claim 1. The password is associated with identification information of a specific user,
The password input means inputs user identification information when inputting the password, and accepts the input password when the password and the user identification information are associated with each other. Item 3. A printing apparatus according to item 2. The printing apparatus according to any one of claims 1 to 6, wherein a key used when encrypting the password or decrypting the encrypted password is recorded in an encrypted state. . The printing apparatus according to claim 1, wherein the password is automatically generated and changes according to time or time.   The printing apparatus according to claim 1, wherein the print information is compressed or converted in a predetermined format.   The printing apparatus according to claim 1, wherein the password is generated using biometric authentication for an operator. In a printing method for printing print information sent from a computer via a communication line,
A print information receiving process for receiving, via a communication line, encrypted print information obtained by encrypting print information using a predetermined password in the computer;
A password receiving process for receiving an encrypted password obtained by encrypting the password by the computer via a communication line;
A password decryption process for decrypting the encrypted password received in the password reception process to obtain a password;
A print information decryption process for decrypting the encrypted print information received in the print information reception process to obtain print information using the password;
And a printing process for printing the printing information obtained in the printing information decoding process on a predetermined printing medium. In a printing method for printing print information sent from a computer via a communication line,
A print information receiving process for receiving, via a communication line, encrypted print information obtained by encrypting print information using a predetermined password in the computer;
A print information storage process for storing the encrypted print information received in the print information reception process;
A password input process for entering a password;
A print information decryption process for obtaining print information by decrypting the encrypted print information stored in the print information storage process using the password;
And a printing process for printing the printing information obtained in the printing information decoding process on a predetermined printing medium.

Images