JP2007122294A - Network print system, and print server and client to be used for the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent a file from being downloaded by the others even when a removable storage device to be used as a key is lost, and to obtain effects which are substantially the same as those in storing a complicate password only by storing a simple password. <P>SOLUTION: When a user inputs a simple password for a USB memory by operating an input device (S30), this password is encrypted (S31), and the encrypted password for the USB memory stored in the USB memory is read (S32), and whether or not both of them are matched is decided (S33), and when it is decided that they are matched (S33), the step is advanced to a user authentication step (S35). <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a network print system and a print server and a client used therefor.

  Personal printer usage is relatively low. In some cases, you may want to print out a file on the go.

  Therefore, a network print system is disclosed in which a file is uploaded from a client to a data center, the file is downloaded from the data center in a print server installed in a convenience store, and the contents of the file are printed out ( Patent Document 1) below.

  According to this system, when a USB memory storing user authentication information is coupled to a print server, authentication is automatically performed and the download is executed.

  However, when the USB memory as a key is lost, there is a problem that the above information is downloaded to another person and secret information is leaked.

In order to solve this problem, if the user enters a password that is remembered, it is easy to forget if the password is complicated, and information that can be seen by others if you keep a record so that you do not forget it. Leakage problems arise.
JP 2005-129007 A

  In view of such problems, the object of the present invention is to store a simple password without downloading a file to another person even if a removable storage device such as a USB memory used as a key is lost. It is an object of the present invention to provide a network print system capable of obtaining substantially the same effect as storing a complicated password, and a print server and a client used therefor.

  In one aspect of the network print system according to the present invention, a client, a print server, and a data server are coupled via a communication medium such as the Internet.

The client
An information processing device;
A writing / reading device for writing information supplied from the information processing device to a removable storage device, for example, a USB memory, or reading information written in the removable storage device;
An input means coupled to the information processing apparatus for inputting the first password;
The information processing apparatus causes the second password obtained by encrypting the first password to be written to the removable storage device via the writing apparatus.

The print server
An information processing device;
A printer coupled to the information processing apparatus;
A reading device for reading stored contents from a removable storage device;
An input means coupled to the information processing apparatus for inputting the first password;
The information processing apparatus includes:
Reading the second password stored in the removable storage device via the reading device;
Determining whether the first password input from the input means corresponds to the second password;
If it is determined that it is compatible, the user authentication information stored in the removable storage device is transmitted to the data server, the file corresponding to the user authentication information is received from the data server, and the contents are The image is supplied to the printer to form an image.

  The data server includes a storage device in which a database in which user authentication information is associated with file contents is stored, and when it is determined that the user authentication information received from the information processing device is registered Transmitting the contents of the file corresponding to the user authentication information to the information processing apparatus;

  According to the configuration of the above aspect, when the input first password for the removable storage device does not correspond to the second password stored in the removable storage device, the process does not proceed to the user authentication step, and the second password is Since the first password is encrypted and the first password is unknown even if it is read, it is possible to prevent leakage of secret information even if the removable storage device is lost.

  Also, with this encryption, the user only needs to set a simple first password, so that it can be remembered without recording, and password leakage due to recording can be prevented.

  Other objects, configurations and effects of the present invention will become apparent from the following description.

  FIG. 1 shows an outline of a network print system according to Embodiment 1 of the present invention.

  A plurality of clients 20, a data server 30 commonly used by them, and a large number of distributed print servers 40 are connected to the Internet 10 as a communication medium so that the user can use it on the go. Yes. For example, the data server 30 is installed at the head office of a convenience store, and the print server 40 is arranged at each branch.

  FIG. 2 is a block diagram illustrating a schematic configuration of the client 20.

  The client 20 has a general configuration in which an input device 22 and a display device 23 are coupled to a computer main body 21. In the computer main body 21, a storage device 211, a USB memory interface 212, an input interface 213, a display interface 214, and a network interface 215 are coupled to the MPU 210 via a bus. The storage device 211 includes an external storage device such as a ROM, a RAM, and a hard disk device, and an OS and application programs are installed in the external storage device.

  The USB memory interface 212 includes a mounting portion 212a to which the USB memory 50 as a removable storage device is detachable. The USB memory 50 stores user authentication information (user ID and password) as a network print system use permit and a USB memory password as a USB memory use permit.

  An input device 22 such as a keyboard or a pointing device is coupled to the input interface 213, and a display device 23 is coupled to the display interface 214. The network interface 215 is coupled to the Internet 10 via a terminal adapter or router (not shown).

  FIG. 3 is a functional block schematic diagram of the data server 30.

  In this data server 30, the control unit 31 is coupled to the Internet 10 via a network interface 215 and a router (not shown) on the one hand, and on the other hand to a database server, that is, a database management system (DBMS) 33 and a database 34. Are combined. The control unit 31 functionally indicates a combination of an OS, a Web server program, and a Web application program. The control unit 35 can access the file storage area 35, and the downloaded file to be printed and the Web page provided to the client 20 and the print server 40 are stored in the file storage area 35. In response to a request from the client 20 or the print server 40, the control unit 31 searches for, adds, deletes, updates, etc. records in the database 33 via the DBMS 33 and accesses the corresponding file in the file storage area 35.

  FIG. 4 is a block diagram illustrating a schematic configuration of the print server 40.

  In the print server 40, an input device 42, a display device 43 and a printer 44 are coupled to a computer main body 41. In the computer main body 41, a storage device 411, a USB memory interface 412, an input interface 413, a display interface 414, a network interface 415, and a printer interface 416 are coupled to the MPU 410 via a bus. The storage device 411 includes external storage devices such as a ROM, a RAM, and a hard disk device, and an OS and application programs are installed in the external storage device.

  The USB memory interface 412 includes a mounting portion 412a to which the USB memory 50 as a removable storage device is detachable. An input device 42 such as a keyboard or a pointing device is coupled to the input interface 413, a display device 43 is coupled to the display interface 414, and a printer 44 is coupled to the printer interface 416. The network interface 415 is coupled to the Internet 10 via a terminal adapter or router (not shown).

  FIG. 5A shows a configuration example of the user information table. This table includes fields such as an ID and password for user authentication, a user name, an address, an e-mail address, and a registration date.

  FIG. 5B shows a configuration example of the print target file information table. This table includes fields such as a file name for identifying a file to be printed, a user ID, and a file upload date / time. This file name is, for example, a combination of a user ID and a file name assigned by the user, and functions as a file ID.

  FIG. 6 is a flowchart showing processing when a print data file is uploaded from the client 20 to the data server 30. Application programs corresponding to this flowchart are stored in the storage device 211 of FIG. 2 and the storage device 311 of FIG. 3 and are executed by the MPU 210 and the MPU 310, respectively. The communication information between the client 20 and the data server 30 is encrypted using, for example, a one-time password automatically generated using a random number by the IPsec method and using this as a key. In the following, the step identification numbers in the figure are shown in parentheses.

  For security reasons, the resource of the client 20 cannot be accessed from the data server 30 via the browser of the client 20, so that the application program in which the browser is incorporated is distributed to the user and installed in the storage device 211.

  In FIG. 2, the user attaches the USB memory 50 to the attachment unit 212a. The USB memory 50 stores a user ID and password for the data server 30 at the user registration stage of the system. When the application program stored in the storage device 211 is activated, the process of FIG. 6 is started.

  (S10) An input screen is displayed on the display device 23. FIG. 7 shows an outline of this input screen.

  The user enters the full path name of the file to be uploaded in the text box 51. This input can be easily input by pressing the browse button 52 to display a file dialog box and selecting a file displayed on the file dialog box. The user also inputs a simple password that is easy to remember into the text box 53 as a USB memory key.

  (S11) When the execute button 54 is pressed, the process proceeds to step S12.

  (S12) The user authentication ID and password are read from the USB memory 50, and this ID is entered in the text box 55 and "*" is entered in the text box 56.

  (S13) The data entered in the text boxes 51, 53 and 55 and the user authentication password are transmitted to the site address of the data server 30 which is initially set in the text box 57.

  (S20) The data server 30 receives this, searches the user information table of FIG. 5A using the user ID as a key, reads out the corresponding user authentication password, and is the same as that received from the client 20. Determine whether you are doing it.

  (S21) If they match, the process proceeds to step S22. Otherwise, information indicating that the user is not registered is transmitted to the client 20 (not shown), and the process for the client 20 is terminated.

  (S22) The data server 30 transmits a reception code to the client 20.

  (S <b> 14) The client 20 transmits a file having a path name described in the text box 51 to the data server 30 together with the reception code.

  (S23) The data server 30 receives this acceptance code, specifies the registered user, then receives the file, stores it in the storage area 33, and enters the information in the table shown in FIG. 5B. . When the data server 30 completes reception, the data server 30 transmits completion information to the client 20.

  (S15) In response to this, the client 20 encrypts the password of the USB memory entered in the text box 53 and writes it in the USB memory 50. Thereby, the process of FIG. 6 is completed, and the user pulls out the USB memory 50 from the mounting portion 212a.

  When the user wants to print out the uploaded file, he / she goes to a nearby convenience store with the USB memory 50.

  FIG. 8 is a flowchart showing a process in which a file uploaded by a user is downloaded from the data server 30 and printed out by the print server 40 installed in the convenience store. The application program corresponding to the left part of this flowchart is stored in the storage device 411 in FIG. 4, and execution is started by the MPU 410 when the user attaches the USB memory 50 to the attachment unit 412a. The right part of this flowchart is executed by the data server 30 of FIG.

  (S30) The USB memory password input screen is displayed on the display device 43. The user inputs the password of the USB memory 50 by operating the input device 42.

  (S31) In response, the MPU 410 encrypts the input USB memory password.

  (S32) The MPU 410 reads the encrypted password for the USB memory stored in the USB memory.

  (S33) It is determined whether or not this password matches that encrypted in step S31. If they do not match, the process proceeds to step S34, and if they match, the process proceeds to step S35.

  (S34) The MPU 410 displays a password input error on the display device 43, and returns to step S30.

  (S35) The MPU 410 reads the user authentication ID and password from the USB memory 50 and transmits them to the data server 30.

  (S40) In response to this, the data server 30 performs user authentication as described above.

  (S41) If it is confirmed that the user is a registered user, the process proceeds to step S42. Otherwise, information indicating that the user is not a registered user is transmitted to the print server 40 (not shown), and the process for the print server 40 is terminated. .

  (S42) The file information table shown in FIG. 5B is searched using the user ID as a key, the hit record is read, and transmitted to the print server 40 together with the reception code.

  (S36) In response to this, the print server 40 causes the display device 43 to display a list of received records.

  (S37) The user selects a file to be printed from the displayed list. Thereby, the selected data is transmitted to the data server 30 together with the reception code.

  (S43) In response to this, the data server 30 transmits the corresponding file to the print server 40.

  (S38) The print server 40 receives this and supplies it to the printer 44 to print the contents.

  According to the first embodiment, if the input USB memory password does not correspond to the password stored in the USB memory 50, the process does not proceed to the user authentication step, and the USB memory password stored in the USB memory 50 is not used. Since the password is encrypted and the password before encryption is unknown even if it is read, it is possible to prevent leakage of secret information even if the USB memory 50 is lost.

  In addition, this encryption allows the user to set a simple password for the USB memory, so that it can be remembered without recording, and password leakage due to recording can be prevented. .

  Note that the present invention includes various other modifications.

  For example, the correspondence relationship between the first password that is the password for the USB memory before encryption and the second password that is the password for the USB memory after encryption only needs to correspond to each other. For example, the first password encrypted n times (n ≧ 2) is used as the second password, and the first password is encrypted m times (1 ≦ m <n), which is the second password. May be determined to correspond to each other as long as it matches (n−m) times.

  Further, a configuration in which a plurality of users share a single USB memory and a first password is set for each user, or a configuration in which a single user sets a first password for each file or file group may be employed. .

  Furthermore, the correspondence between the user authentication information and the file described in the claims corresponds to the user ID that is a part of the user authentication information and the file name as the file ID as described in the above embodiment. The user authentication information may be associated with the file indirectly by associating the file ID with the file.

  The removable storage device is not limited to the USB memory, and may be configured to couple the memory to the processor via radio waves.

1 is a schematic explanatory diagram illustrating a network print system according to a first embodiment of the present invention. It is a block diagram which shows schematic structure of a client. It is a functional block diagram which shows schematic structure of a data server. FIG. 3 is a block diagram illustrating a schematic configuration of a print server. (A) shows an example of the configuration of the user information table, and (B) is an explanatory diagram showing an example of the configuration of the file information table. It is a flowchart which shows a process when uploading the data file for printing to a data server from a client. It is a schematic explanatory drawing of step S10 of FIG. It is a flowchart which shows the process which downloads the file which the user uploaded from the data server by the print server installed in the convenience store, and has it print out.

Explanation of symbols

10 Internet 20 Client 21, 41 Computer main body 210, 410 MPU
211, 411 Storage device 212, 412 USB memory interface 212a, 412a Mounting unit 213, 413 Input interface 214, 414 Display interface 215, 32, 415 Network interface 22, 42 Input device 23, 43 Display device 30 Data server 31 Control unit 33 Database management system 34 Database 35 File storage area 40 Print server 44 Printer 416 Printer interface 51, 53, 55-57 Text box 52 Reference button 54 Execution button

Claims (7)

An information processing device;
A printer coupled to the information processing apparatus;
A reading device for reading stored contents from a removable storage device;
An input means coupled to the information processing apparatus for inputting the first password;
The information processing apparatus includes:
Reading the second password stored in the removable storage device via the reading device;
Determining whether the first password input from the input means corresponds to the second password;
If it is determined that it is compatible, the contents of the supplied file are supplied to the printer to form an image.
A print server characterized by that. The information processing apparatus is coupled to a data server via a communication medium, and the data server includes a storage device in which a database in which user authentication information and file contents are associated is stored.
The information processing device reads the user authentication information stored in the removable storage device via the reading device, transmits the user authentication information to the data server, and uses the content of the file received from the data server as the content of the supplied file. And
The print server according to claim 1.   The print server according to claim 1, wherein the second password is an encrypted version of the first password. A print server;
A data server connected to the print server via a communication medium;
In the network print system, the print server includes:
An information processing device;
A printer coupled to the information processing apparatus;
A reading device for reading stored contents from a removable storage device;
An input means coupled to the information processing apparatus for inputting the first password;
The information processing apparatus includes:
Reading the second password stored in the removable storage device via the reading device;
Determining whether the first password input from the input means corresponds to the second password;
If it is determined that it is compatible, the user authentication information stored in the removable storage device is transmitted to the data server, the file corresponding to the user authentication information is received from the data server, and the contents are Supply to the printer to form an image,
The data server includes a storage device in which a database in which user authentication information is associated with file contents is stored, and when it is determined that the user authentication information received from the information processing device is registered Transmitting the contents of the file corresponding to the user authentication information to the information processing apparatus;
A network print system characterized by that.   5. The network print system according to claim 4, wherein the second password is an encrypted version of the first password. An information processing device;
A writing / reading device for writing information supplied from the information processing device to a removable storage device or reading information written in the removable storage device;
An input means coupled to the information processing apparatus for inputting the first password;
And the information processing device causes the second password encrypted from the first password to be written to the removable storage device via the writing device.
A client characterized by that. A network print system according to claim 5 and a client according to claim 6 coupled to the network print system via a communication medium,
The client transmits user authentication information and file contents read from the removable storage device to the data server according to claim 5,
The data server causes the user authentication information received from the client to be associated with the contents of the file and written to the storage device of the data server.
A network print system characterized by that.

Images