JP2005303861A - Optical reading apparatus and image processing apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an optical reading apparatus and image processing apparatus in which convenience in the authentication of an electronic document can be improved. <P>SOLUTION: An optical reading apparatus 1 of the present invention includes a means 11 for optically reading an image formed on a medium; a means 13 for producing source specification information containing information specifying the optical reading apparatus 1; and an image data generating means 12 for outputting the source specification information acquired from the source specification information producing means 13 while relating the information to image data when generating the image data by reading the image. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an image processing apparatus that performs predetermined processing on image data, and an optical reading apparatus such as a scanner.

  Electronic document data is excellent in terms of its reusability and is widely used. For example, when character information formed on a recording medium such as paper is digitized and read by processing such as OCR (Optical Character Read), the document can be processed and modified using the character information.

  However, on the other hand, for example, it is not preferable to modify a document used as documentary evidence. In this case, authentication is required to prove that the document has not been tampered with. In addition, when a scanned electronic document or a PDF (Portable Document Format) PDF document for viewing is acquired, the source is identified and whether or not the electronic document is reliable. There is also a demand for certification.

Therefore, conventionally, for example, a method has been considered in which the origin can be authenticated by a third-party service organization using signature data (Patent Document 1).
JP 2002-230202 A

  However, the above-described conventional method is not convenient because authentication cannot be performed unless a third-party service organization is accessed.

  SUMMARY An advantage of some aspects of the invention is that it provides an optical reading apparatus and an image processing apparatus capable of improving the convenience of authentication of an electronic document.

  In order to solve the above problems, an optical reading device according to an embodiment of the present invention is an optical reading device that optically reads an image formed on a medium and generates image data. Storage means for storing source specifying information including information for specifying the reading device, and image data for outputting the source specifying information acquired from the storage means in association with the image data when the image is read to generate image data Generating means.

  Further, the image data generation means may associate the image data with the origin specifying information by generating a data file in which the origin specifying information acquired from the storage means is added to the image data.

  The origin specifying information stored in the storage unit may include information specifying at least one of a user of the optical reading device or a time when the image data is generated.

  An image processing apparatus according to another embodiment of the present invention is an image processing apparatus that receives an input of an image formation instruction and generates an electronic document based on the input image formation instruction. Means for acquiring source specifying information for specifying at least one of the apparatus or the user of the image processing apparatus, and means for outputting the acquired source specifying information in association with the generated electronic document; It is characterized by including.

  A program according to an embodiment of the present invention causes a computer to store source specifying information including information specifying the computer, and to optically read an image formed on the medium and generate image data. The stored origin specifying information is output in association with the image data.

  The computer control method according to one embodiment of the present invention stores source identification information including information for identifying the computer, optically reads an image formed on the medium, and stores image data. When generating, the stored origin specifying information is output in association with the image data.

  Hereinafter, an optical reading apparatus according to a first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a main configuration of an optical reading apparatus 1 according to this embodiment. As shown in FIG. 1, the optical reading device 1 includes a control unit 10, a storage unit 20, a scanner unit 30, an operation unit 40, and an output unit 50.

  The control unit 10 operates according to a program stored in the storage unit 20. Specifically, the control unit 10 generates source specifying information including information for specifying the optical reading device 1, and outputs the image data received from the scanner unit 30 and the source specifying information in association with each other. And do. Specific contents of the processing performed by these control units 10 will be described in detail later.

  The storage unit 20 stores a program executed by the control unit 10. The storage unit 20 also operates as a work memory that holds various data generated by the control unit 10 during the process. Specifically, the storage unit 20 can be realized as a storage medium such as a hard disk, a semiconductor memory, or a combination thereof.

  The scanner unit 30 is an image scanner device that optically reads and digitizes character information and graphic information on a paper document, and outputs the read image data to the control unit 10. The scanner unit 30 may be a film scanner device that optically reads and digitizes information formed on a medium such as a photographic film.

  The operation unit 40 is a keyboard, a mouse, or the like, and receives an instruction from a user who instructs the optical reading device 1 to digitize a paper document, and outputs the instruction to the control unit 10.

  The output unit 50 is an output device such as a display device, a printer device, or a CD-ROM (Compact Disc Read Only Memory) drive, and presents data input from the control unit 10.

  Next, the operation of the control unit 10 will be described in detail. FIG. 2 is a functional block diagram illustrating an example of main processing performed by the control unit 10. As shown in FIG. 2, the control unit 10 includes an image data acquisition unit 11, an information addition file generation unit 12, and a source identification information generation unit 13.

  The image data acquisition unit 11 receives the image data read by the scanner unit 30 and outputs the received image data to the information addition file generation unit 12.

  The source specifying information generating unit 13 generates source specifying information including identification information for specifying the optical reading device 1. Specifically, for example, when the optical reading device 1 is specified by the serial number of the scanner unit 30, the origin specifying information generation unit 13 determines the serial number of the dongle connected to the optical reading device 1. When the optical reading device 1 is specified by the identification number, the identification number is specified when the optical reading device 1 is specified by the identification number for specifying the dongle information or the department in the company where the device is installed. Are acquired from the storage unit 20.

  In addition, when the optical reading device 1 includes a time measuring unit (not shown) that generates information representing date and time, the source specifying information generating unit 13 receives the image data acquiring unit 11 from the time measuring unit. Information (date / time information) for specifying the time when the image data was generated, such as the date / time when the image data was acquired, may be acquired. The origin specifying information generating unit 13 may acquire user information such as an identification symbol for specifying the employee B from the operation unit 40 or a user card reading device (not shown).

  The source specifying information generating unit 13 generates source specifying information including at least one of the identification information, date / time information, and user information of the optical reading device 1 and outputs the source specifying information to the information addition file generating unit 12.

  The information addition file generation unit 12 receives the image data from the image data acquisition unit 11 and generates an information addition data file in which the source identification information received from the source identification information generation unit 13 is added to the received image data. In addition, for example, when the information included in the image data is only character information, the information addition file generation unit 12 converts the image data into text data, and adds the source specifying information to the text data. An additional data file may be generated.

  Specifically, for example, the information addition file generation unit 12 generates an information addition data file in which the source specifying information is embedded as a digital watermark in each pixel of image data or a pixel block including a plurality of pixels. In this case, if at least a part of the image data is modified, the digital watermark is also changed. Therefore, if the digital watermark is not correctly extracted, it can be determined that the reliability of the information-added data file is low.

  In addition, the information addition file generation unit 12 generates a hash value from image data using a hash function such as SHA-1 (Secure Hash Algorithm 1), and generates source specifying information including the generated hash value. An information addition data file added to the image data may be generated. In this case, if at least a part of the image data is modified, the hash value generated from the modified image data does not match the hash value included in the source identification information, so these hash values do not match. In this case, it can be determined that the information additional data file has been falsified.

  The information addition file generation unit 12 encrypts the source specifying information using, for example, an encryption key (secret key), and adds the source specifying information after encryption and the source specifying information before encryption. An information addition data file may be generated. In this case, the information obtained by decrypting the encrypted source identification information using the decryption key (secret key or public key) corresponding to the encryption key is added to the source identification information before encryption. If it does not match, it can be confirmed that the added origin specifying information is forged.

  Further, the information addition file generation unit 12 divides the source specifying information into partial data having a predetermined data length, and the divided partial data is determined from a predetermined data position of the text data (from the first data of the text data). Information additional data file added to (specified by the data length etc.). In this case, if at least a part of the text data is modified, the data position of each partial data is also changed. Therefore, by detecting the data position, it is possible to confirm whether the text data has been tampered with.

  The information addition file generation unit 12 outputs the generated information addition data file to the output unit 50. Further, the information addition file generation unit 12 outputs the generated information addition data file to a drive device of a storage medium such as a CD-ROM (not shown) connected to the optical reading device 1 and records it on the storage medium. .

  Next, in the case where an electronic document is generated from a paper document by the optical reading device 1 according to the present embodiment, and the generated electronic document is delivered to each department in the company and subjected to an authentication process, the authentication process An example of the flow will be described. Here, a case will be described as an example where the optical reading device 1 is installed in a department A in the company, and an employee B who belongs to the department A digitizes a paper document using the optical reading apparatus.

  First, the optical reading device 1 accepts an input of an instruction to scan a paper document from the employee B via the operation unit 40, and the scanner unit 30 scans the paper document according to the instruction, and the contents (on the paper document) The image data obtained by digitizing the character information and graphic information printed on the image is output to the control unit 10.

  Then, the control unit 10 of the optical reading device 1 specifies the optical reading device 1, the employee B who is a user of the optical reading device 1, and the date and time T when the image data was generated. Source identification information including information to be generated is generated. Further, the control unit 10 generates an information addition data file in which the generated origin specifying information is added to the image data received from the scanner unit 30, and the storage medium is connected via the drive device connected to the optical reading device 1. To store.

  The recording medium storing the information additional data file is delivered to another department C. The employee D who belongs to the department C reads out the information addition file stored in the recording medium on the computer, displays it on the display, and confirms the contents.

  The employee D activates a predetermined program installed in the computer, and causes the computer to perform processing for extracting the origin specifying information added to the information additional data file.

  Specifically, for example, when the information addition data file is generated by embedding the source identification information as a digital watermark in the image data, the employee D reads the information addition data read from the storage medium into the computer. A process of extracting a digital watermark from image data of a file is performed. Here, when at least part of the image data of the information-added data file has been modified after being generated by the optical reading device 1, the digital watermark embedded in the image data is also changed. Therefore, in this case, since employee D cannot correctly extract the source identification information embedded as a digital watermark on the computer from the information additional data file, the source additional information is added to the information additional data file from the beginning. It is determined that the source identification information is not extracted because it has not been or has been tampered with and is not highly reliable.

  Further, for example, the information additional data file is generated by dividing the source specifying information into partial data having a predetermined data length and adding the divided partial data to predetermined data positions of the text data. In this case, the employee D holds information for specifying the data position of each partial data. Then, the employee D causes the computer to analyze the data position of each partial data added to the information additional data file read from the storage medium. Here, when at least a part of the information-added data file is altered, the data position of the added partial data is also changed. Accordingly, the employee D compares the data position of each analyzed partial data with the data position held in advance, and if these data positions do not match, the employee D determines that the information-added data file has been altered. To do. In addition, when the computer extracts the source identification information based on the data position of each partial data position held in advance, the source identification information cannot be extracted because the data position is changed, and the employee D determines that this information-added data file is not highly reliable.

  For example, when the information addition data file is generated by adding origin specifying information including a hash value generated using SHA-1 from the image data, the employee D stores the information in the computer. A hash value is generated by using SHA-1 from the image data of the information addition data file read from the medium. Then, the employee D compares the generated hash value with the hash value added to the information addition data file, and if they do not match, the added hash value is forged. to decide.

  Further, for example, the information additional data file is generated by adding the source specifying information encrypted using the secret key as post-encryption information and the source specifying information before encryption as pre-encryption information. If this is the case, the employee D holds a decryption key (secret key or public key) that can generate the source specifying information before encryption from the source specifying information after encryption. Then, the employee D causes the computer to perform processing for converting the pre-encryption information of the information additional data file read from the storage medium using the decryption key, and converts the converted information and the information additional data file into the information additional data file. If these information do not match when compared with the added post-encryption information, at least one of the pre-encryption information and post-encryption information added to the information additional data file is forged. Judge that

  If the source identification information that has not been forged can be extracted from the information additional data file by such extraction processing of the source identification information, the employee D determines that the information additional data file is stored in the department by the employee B. Using the optical reading device 1 installed at A, it can be confirmed that it was generated at time T. Here, for example, when the employee D knows that the information additional file is to be generated in the department A, the information additional data file is generated in the predetermined department with high reliability. Can be confirmed.

  As described above, the optical reading apparatus 1 according to the present embodiment generates an electronic document that does not require an authentication service via a third party, has high reliability, and can easily perform an authentication process. Can do.

  Next, an image processing apparatus according to a second embodiment of the present invention will be described with reference to the drawings. FIG. 3 is a block diagram illustrating a main configuration of the image processing apparatus 2 according to the present embodiment. As shown in FIG. 3, the image processing apparatus 2 includes a control unit 60, a storage unit 70, an operation unit 80, and an input / output interface unit 90.

  The control unit 60 operates according to a program stored in the storage unit 70. Specifically, the control unit 60 performs processing for generating source specifying information including information for specifying the image processing device 2 and processing for outputting the source specifying information and the electronic document in association with each other. Specific contents of the processing performed by the control unit 60 will be described in detail later.

  The storage unit 70 stores a program executed by the control unit 60. The storage unit 70 also operates as a work memory that holds various data generated by the control unit 60 during the process. Specifically, the storage unit 70 can be realized as a storage medium such as a hard disk, a semiconductor memory, or a combination thereof.

  The operation unit 80 is connected to an input operation interface such as a keyboard and a mouse. The operation unit 80 receives an instruction from the user of the image processing apparatus 2 through the input operation interface and outputs the instruction to the control unit 60.

  The input / output interface unit 90 is, for example, a USB (Universal Serial Bus) interface, is connected to a drive device or the like, receives data stored in a storage medium from the drive device, and outputs the data to the control unit 60. The input / output interface unit 90 is connected to an output device such as a printer device or a display device, and presents data input from the control unit 60.

  Next, the operation of the control unit 60 will be described in detail. FIG. 4 is a functional block diagram illustrating an example of main processing performed by the control unit 60. As shown in the figure, the control unit 60 includes a processing target data acquisition unit 61, a RIP (Raster Image Processing) processing unit 62, an information addition file generation unit 63, and a source identification information generation unit 64. It is configured.

  The processing target data acquisition unit 61 acquires data to be processed by the RIP processing unit 62 or the information addition file generation unit 63 described later via the input / output interface unit 90. Specifically, the processing target data acquisition unit 61 receives application data (drawing code data created by word processing software or the like) stored in a storage medium in the drive device from the drive device connected to the input / output interface unit 90. Or data including text data) is received and output to the RIP processing unit 62 and the information addition file generating unit 63.

  The RIP processing unit 62 performs RIP processing for outputting the application data received from the processing target data acquisition unit 61 from the printer device connected to the input / output interface unit 90. Specifically, for example, the RIP processing unit 62 converts application data into raster data in accordance with an instruction from the user received via the operation unit 80 and outputs the raster data to the input / output interface unit 90.

  The origin specifying information generating unit 64 performs the same processing as the source specifying information generating unit 13 of the optical reading device 1 in the first embodiment, for example, identification information for specifying the image processing device 2 or the image processing. Source identification information including at least one of user information for identifying the user of the device 2 is generated and output to the information addition file generation unit 63.

  The information addition file generation unit 63 generates an electronic document obtained by converting the application data received from the processing target data acquisition unit 61 into browsing data (bitmap data, PDF data, etc.), and the source specifying information generation unit is generated in the electronic document. An information addition data file to which the origin specifying information received from 64 is added is generated. The information addition data file generation process performed by the information addition file generation unit 63 is the same as the information addition file generation unit 12 of the optical reading device 1 in the first embodiment. The information addition file generation unit 63 outputs the generated information addition data file to the input / output interface unit 90 and stores the information addition data file in a storage medium via a drive device connected to the input / output interface unit 90.

  Next, an example of the flow of the authentication process when an electronic document is generated by the image processing apparatus 2 according to the present embodiment and the generated electronic document is delivered to each department in the company and subjected to the authentication process will be described. To do. Here, as an example, the image processing apparatus 2 is installed as a print server in a department E in the company, and an employee F who belongs to the department E performs electronic document output processing using the image processing apparatus 2 as an example. explain.

  First, the control unit 60 of the image processing apparatus 2 accepts application data created by the employee F and stored in a storage medium from a drive device connected to the input / output interface unit 90. Further, the control unit 60 instructs the employee F to output the application data as a paper document from a printer device (not shown) connected to the input / output interface unit 90 via the operation unit 80. Accept input of forming instructions.

  In response to the instruction from the employee F, the control unit 60 performs RIP processing on the application data received from the input / output interface unit 90, and outputs the raster data generated by the RIP processing to the printer device as a paper document. Print. On the other hand, the control unit 60 converts the application data received from the input / output interface unit 90 into browsing data and includes source specifying information including information for specifying the employee F and the image processing apparatus 2 respectively. And generating an information addition data file in which the generated origin specifying information is added to the browsing data. The control unit 60 stores the generated information addition data file in a recording medium in the drive device connected to the input / output interface unit 90 via the input / output interface unit 90.

  The information-added data file is an electronic document representing character information and graphic information on a paper document output from the printer apparatus after the image processing apparatus 2 performs application data RIP processing. The timing at which the control unit 60 generates the information-added data file is, for example, a timing at which an application data output instruction is received from the employee F via the operation unit 80, or a separate instruction for creating browsing data. It may be the accepted timing, but is not limited thereto.

  Next, the recording medium in which the information additional data file is stored is delivered to another department G, and the employee H who belongs to this department G has the same source as the employee D in the first embodiment on the computer. By performing specific information extraction processing, the reliability of the information-added data file is confirmed and its source is identified.

  Specifically, the computer used by the employee H extracts the source specifying information from the acquired information additional data file, and presents the extracted source specifying information to the employee H. As a result, the employee H can confirm that the information-added data file has been generated by the employee F using the image processing apparatus 2 installed in the department E.

  Here, if the employee H recognizes in advance that the information additional data file is to be created by the employee F of the department E, the employee H confirms that the information additional data file can be trusted. Confirm.

  In addition, information used by the employee H to identify each department, employee, etc., processing to be performed on the information additional data file, department name to which the information additional data file should be delivered next, etc. If the table in which the information instructing the process is associated with the information is stored, the computer extracts information identifying the employee F from the acquired information additional data file, and corresponds to the employee F in the table. Processing is performed in accordance with the instruction information attached and held, or whether or not the processing instructed by the instruction information may be performed is presented to the employee H. As a result, the employee H can quickly perform a predetermined process held in the table for each information-added data file without referring to the creator specifying information.

  The present invention is not limited to these embodiments. For example, the optical reading device 1 or the image processing device 2 is connected to a network and transmits / receives electronic data such as an information addition data file to / from each other or another computer via the network. Also good. In this case, for example, the optical reading device 1 or the image processing device 2 is provided by SNTP (Simple Network Time Protocol) or the like, and acquires a time stamp specifying the time when the predetermined processing is performed via the network. Origin specifying information including this time stamp may be generated.

  Further, when the optical reading device 1 or the image processing device 2 is connected to an authentication device that optically reads a user's fingerprint and performs an authentication process, the optical reading device 1 or the image processing device 2 acquires an authentication result generated by the authentication device. The origin specifying information including the authentication result may be generated.

  In addition, the optical reading device 1 and the image processing device 2 may be connected via a bus or the like and configured as an integrated device. In this case, the optical reading device 1 and the image processing device 2 share at least a part of the configuration of the control units 10 and 60, the storage units 20 and 70, the operation units 40 and 80, and the like as described above. Each process is performed.

  Further, the optical reading device 1 or the image processing device 2 is not limited to the one that generates the information additional data file when outputting the electronic document and the origin specifying information in association with each other. That is, for example, the optical reading device 1 or the image processing device 2 holds a database in which the source specifying information and the identification information are associated with each other on the file server via the network, and adds the identification information to the electronic document. Good. In this way, when the electronic document is read out on the computer, the associated source specifying information is read out.

It is a block diagram which shows the main structures of the optical reader which concerns on 1st embodiment of this invention. It is a functional block diagram which shows an example of the main processes which the optical reader which concerns on 1st embodiment of this invention performs. It is a block diagram which shows the main structures of the image processing apparatus which concerns on 2nd embodiment of this invention. It is a functional block diagram which shows an example of the main processes which the image processing apparatus which concerns on 2nd embodiment of this invention performs.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Optical reader, 2 Image processing apparatus, 10,60 Control part, 11 Image data acquisition part, 12 Information addition file generation part, 13 Source specific information generation part, 20,70 Storage part, 30 Scanner part, 40,80 Operation unit, 50 output unit, 61 processing target data acquisition unit, 62 RIP processing unit, 63 information addition file generation unit, 64 source identification information generation unit, 90 input / output interface unit.

Claims (6)

An optical reader for optically reading an image formed on a medium and generating image data,
Storage means for storing source identification information including information identifying the optical reader;
Image data generating means for outputting the source specifying information acquired from the storage means in association with the image data when generating an image data by reading an image;
An optical reader comprising: The optical reader according to claim 1.
The image data generating means associates the image data with the origin specifying information by generating a data file in which the origin specifying information acquired from the storage means is added to the image data.
An optical reading device. The optical reader according to claim 1 or 2,
The origin specifying information stored in the storage means includes information for specifying at least one of a user of the optical reading device or a time when the image data is generated.
An optical reading device. An image processing apparatus that receives an input of an image formation instruction and generates an electronic document based on the input image formation instruction.
Means for acquiring source specifying information for specifying at least one of the image processing apparatus or the user of the image processing apparatus;
Means for outputting the acquired origin specifying information in relation to the generated electronic document;
An image processing apparatus comprising: When a computer stores source specifying information including information for specifying the computer and optically reads an image formed on a medium to generate image data, the stored source specifying information is stored in the image data. Output in association
A program characterized by that. When a computer stores source specifying information including information for specifying the computer and optically reads an image formed on a medium to generate image data, the stored source specifying information is stored in the image data. Output in association
A computer control method.

Images