JP2008146261A - Information processing apparatus, information processing apparatus control method, and program - Google Patents

Abstract

It is possible to allow a third party to re-edit only a specific object among data provided to a server, and to prevent a change or falsification beyond the intention of the data creator.
A permission object that permits re-editing is designated from among objects constituting data, a re-editing content for the permitted object is designated, a permitted orderer that is permitted to re-edit is designated, and data is falsified. In order to prevent this, the falsification preventing data is embedded in the data, and the specified information is stored together with the data and provided to a third party.
[Selection] Figure 2

Description

  The present invention relates to an information processing apparatus that enables an object on a server to be edited by a client via a network, a control method for the information processing apparatus, and a program.

  In recent years, various information providing services using the Internet have been developed with the development of communication systems and the development of information communication technologies. In the information providing service using the Internet, it is possible to provide so-called multimedia information including not only text information but also images and sounds. Against this backdrop, recently, the provision of services related to multimedia information and mail-order sales via the Internet have become common, and the number of users has increased.

  In addition, with the spread of digital cameras and the like, services for ordering prints of images taken with digital cameras via the Internet are becoming established. Some of these services simply print digital image data as is, but some services process image data or edit image data as one of the materials to create new print data. . An example of the former is printing of image data taken by a digital camera onto a photographic paper or the like, and a typical example of the latter is printing a New Year's card using image data.

In order to process image data, edit image data as one of the materials, and create new print data, the location of images, characters, line drawings, etc. (hereinafter referred to as objects) It is necessary to specify the font type and size. (For example, refer to Patent Document 1.)
However, editing operations on the web browser are limited, and it is necessary to exchange data via the network, so various editing designations can be made while maintaining a good user experience on the web browser. It was difficult to do.

  As one of these methods, it may be considered to specify the location of an object, the type and size of a font used for character notation in an application of a client-side terminal device connected to a network. Then, the edited data completed by the application of the terminal device on the client side is uploaded to a server which is an information processing apparatus through a network, and printing is performed on the server side.

In this case, when the post-edit data creator requests the server to print, as with the post-edit data creator, access the server using his / her terminal and request the print. become. However, at this time, all the ordered data can be ordered only by the same edited data created by the creator of the edited data.
JP 2006-072850 A

  However, if all the ordered data is the same, it may not be an appropriate service. For example, in a graduation album, an album that does not include its own children is not very valuable to the parents. However, if everyone downloads the data created by the creator and allows it to be edited by the client-side application, it may be edited beyond the intention of the data creator. Not appropriate. In addition, since there is an opportunity for non-data creators to directly touch the data, there is a problem that the possibility of falsification occurs.

  An object of the present invention is to allow a third party to re-edit only a specific object of data provided to a server, and to prevent changes and tampering beyond the intention of the data creator. There is to do.

In order to achieve the above object, an information processing apparatus according to an embodiment of the present application is:
An object specifying means for specifying an allowed object that permits re-editing from a plurality of objects constituting the data;
Re-edit content specifying means for specifying re-edit content for the permission object;
A means for specifying an authorized orderer that designates the orderer permitted to re-edit; and
An embedding means for embedding falsification preventing data in the data;
Storage means for storing the permission object, the re-edited content, and the permission orderer together with the data;

In order to achieve the above object, a method of controlling an information processing apparatus according to another embodiment of the present application is as follows:
An object designating process for designating an authorized object that permits re-editing from a plurality of objects constituting the data;
A re-editing content specifying step for specifying re-editing content for the permitted object;
A designation step of an authorized orderer that designates an orderer who is permitted to re-edit; and
An embedding step of embedding falsification preventing data in the data;
A storage step of storing the permission object, the re-edited content, and the permission orderer together with the data.

  According to the present invention, it is possible to allow a third party to re-edit only a specific object among the data provided to the server, and to prevent changes and alterations beyond the intention of the data creator. Become.

  Hereinafter, an information processing apparatus according to a preferred embodiment of the present invention will be described with reference to the accompanying drawings.

<Configuration example>
Hereinafter, an information processing system to which an information processing apparatus according to a preferred embodiment of the present invention is applied will be described with reference to the accompanying drawings. FIG. 1 is a block diagram showing a basic configuration of an information processing apparatus according to an embodiment of the present invention.

  The information processing apparatus illustrated in FIG. 1 is a computer apparatus that executes an application according to an embodiment of the present invention, which is used on a server apparatus (hereinafter referred to as a server) side and a client terminal apparatus (hereinafter referred to as a client) side.

  In FIG. 1, a display 101 displays information on data being processed by an application program, various message menus, and the like. The display 101 includes a CRT (Cathode Ray Tube), an LCD (Liquid Crystal Display), and the like. A DISPC 102 as a video RAM (VRAM) display controller controls screen display on the display 101. The keyboard 103 and the pointing device 104 input characters and the like. Further, it is used for indicating icons, buttons, etc. in GUI (Graphical User Interface). The CPU 105 controls the entire computer apparatus shown in FIG.

  A ROM 106 (Read Only Memory) stores programs executed by the CPU 105, parameters, and the like. A RAM (Random Access Memory) 107 is used as a work area when the CPU 105 executes various programs, a temporary save area during error processing, and the like.

  A hard disk drive (HDD) 108 and a removable media drive (RMD) 109 function as external storage devices. The removable media drive 109 is a device that reads / writes or reads a removable recording medium. The removable media drive 109 may be a flexible disk drive, an optical disk drive, a magneto-optical disk drive, a memory card reader, a removable HDD, and the like.

  It should be noted that the server and client functions described in the present embodiment, as well as application programs such as the OS and Web browser, data, and libraries are stored in at least one of the above-described storage media depending on the application. It is remembered.

  The expansion slot 110 is an expansion card mounting slot compliant with, for example, the PCI (Peripheral Component Interconnect) bus standard. Various expansion boards such as a video capture board, a sound board, and a GPIB board can be mounted here.

  The network interface 111 is an interface for connecting a computer device to a computer network. The bus 112 includes an address bus, a data bus, and a control bus, and connects the units described above. In addition to the network interface 111, serial interfaces such as RS-232C, RS-422, USB (Universal Serial Bus), and IEEE1394 are provided. Further, it has a parallel interface such as IEEE1284, and can be connected to an external device such as a modem or a printer.

<System overview>
FIG. 2 is an overall view of an information processing system to which the information processing apparatus according to the embodiment of the present invention is applied. As can be understood from FIG. 2, the printing process may exist outside the information processing system described here. The data created in the present embodiment is not limited to print data. The same applies when a drawing or the like is created by the same method as the information processing system to which the present embodiment is applied, but it is ambiguous to write only data. Therefore, in this specification, the purpose of the information processing system to which the present embodiment is applied is assumed to be printing, and the created data is assumed to be printing data. However, the present invention is not limited to the process of creating print data, and print data will be described as an example in order to have an understanding of an information processing system to which an embodiment of the present invention is applied. It is what you use.

  First, an operation flow of the entire information processing system to which the information processing apparatus according to the embodiment of the present invention is applied will be described with reference to FIG.

  As shown in step (1) in FIG. 2, first, print data is created using an application installed by a print data creator on a client-side personal computer 121 (hereinafter referred to as PC 121). In this case, the print data creator edits various data owned by himself / herself using this application, and creates print data. Next, as shown in step (2), the print data creator uses the PC 121 to select one of the objects constituting the edited data that is the print data, and sets an authorized object that permits re-editing. To do. If there is a type of re-editing that is permitted, the type of re-editing content is also selected. If there are other objects for which re-editing permission is to be set, these objects are also set as permission objects.

  Next, as shown in step (3), when the print data creator clicks the upload button of the application, print data that is edited data is uploaded to the server 122 together with re-edit information. The server 122 stores the uploaded print data in the data storage device 124 as shown in step (4).

  When the printing data is stored in the data storage device 124, the server 122 notifies the PC 121 of the URL to be displayed on the client side from the server 122 to the application on the PC 121, as shown in step (5). The application installed in the PC 121 starts up a Web browser and displays the notified URL.

  Next, as shown in step (6), the print data creator browses the print data with a Web browser, re-edits, inputs the email address of a so-called authorized orderer who permits the order, and clicks the OK button. . In the following, the person who has actually placed the order, including the person who made the order, is called the authorized orderer. In step (7) of FIG. 2, the server 122 sends an e-mail describing the URL of the Web page where the contents of the uploaded print data can be confirmed to the e-mail address of the authorized orderer designated by the print data creator.

  As shown in step (8), the authorized orderer who has received the e-mail uses the personal computer 123 (hereinafter referred to as PC 123) to input the URL written in the e-mail on the browser, and to enter the contents of the print data. Check. In step (9), the authorized orderer re-edits the object in accordance with the re-edit content set as permitted for re-editing. In the re-editing contents, in the case of a character, the character is designated, the font size and the font name are changed from the menu, and when the image is replaced, new image data is uploaded.

  The authorized orderer clicks the OK button after completing re-editing of the object using the PC 123. Then, as shown in step (10), the server 122 creates re-edited print data reflecting the re-edit result. Next, the number-of-books input screen is displayed on the Web browser of the PC 123 of the authorized orderer.

  Here, when the authorized orderer inputs the number of books and clicks the OK button, an authorized orderer and delivery destination input screen is displayed. When the authorized orderer inputs the authorized orderer's name and delivery destination information into the Web browser of the PC 123 and clicks the OK button, an estimate screen is displayed.

  Here, as shown in step (11), when the authorized orderer clicks the OK button, the server 122 performs processing necessary for charging. Then, as in the step (12), the order number and information on billing are presented to the authorized orderer. Further, the server 122 sends the re-edited print data to the printing device 125 in step (13) when the payment is confirmed such as confirmation of payment or price exchange. Next, details of each step of FIG. 2 will be described.

<Operation of print data creator and corresponding processing (1)>
The creation of the print data in step (1) of FIG. 2 is performed by arranging and drawing objects such as images, line drawings, characters, etc. using GUI, such as Adobe Illustrator or (registered trademark) Quark XPpress (registered trademark). Is. And it has the same interface as the interface which this kind of application has. It is not essential in the present invention how to perform image layout, line drawing and layout, character input and layout, font designation, and the like.

  In order to set permission for re-editing in the step (2) of FIG. 2, it is necessary to be able to select objects such as images, line drawings, and characters, but this is the only restriction. Since it makes a premise, it is general. This application is distributed to a person who has access authority to the server 122, for example. The distributed person installs it on his or her PC. The person who installed it becomes the creator of the print data, but this also does not place any restrictions on the application.

  On the other hand, the person to whom the mail in step (7) in FIG. 2 is sent, that is, the authorized orderer who is permitted to re-edit, is a link from the Web page that can confirm the contents of the print data specified in the mail, or The application can be downloaded from another URL in the mail. This application is more limited than the one used by the print data creator so that the authorized orderer cannot create the print data from the beginning (so that the authorized orderer cannot become the print data creator) It is also good. Further, although the application has the same function, it may be possible to create print data from the beginning only when the authentication on the server 122 side is obtained. Further, anyone may download the application without restricting the access to the server 122.

  In step (2) in FIG. 2, the print data creator selects a specific object and displays the menu by clicking the mouse (FIG. 3A) or the menu display from the menu bar (FIG. 3B). The menu is displayed.

  Assume that the print data creator selects “re-edit ...” (P301 or P311) in (a) or (b) of FIG. Then, a window for selecting reeditable contents that can be reedited is displayed. FIG. 4 is a GUI 4 that is an example of a GUI (Graphic User Interface) screen when the selected object is a character. Here, it is possible to check any of the check boxes of correction of the character content (P401), correction of the font type (P402), and correction of the font size (P403). When the OK button P411 is clicked after checking, the selected object can be re-edited as a permitted object, and re-edit contents that can be set at the time of re-editing are designated. When the cancel button P412 is clicked, the re-editing setting for the selected object is not changed. If the selected object has already been re-editable and it is desired to change the setting so that re-editing is not possible, it can be changed by selecting menus P302 and P312 in FIG.

<Data configuration example>
The format of the print data created by the application may be any format or language as long as it can represent images, characters, line drawings, and the like. In this embodiment, the format of print data created by the application is PDF (Adobe Portable Document Format (registered trademark)). PDF is a highly versatile format that can express images, characters, line drawings, and the like. The description using this is not an essential requirement in the present invention, and is merely a convenience for the description, and does not indicate a limitation of the invention.

  For example, the line drawing may not require free re-editing by the authorized orderer or may not be necessary in the first place, but in such a case, it is not necessary to use a general-purpose format such as PDF. Therefore, a markup language such as HTML (Hyper Text Markup Language) may be used. Moreover, other general-purpose formats and languages, for example, PDL (Page Description Language) such as Adobe PostScript (registered trademark) and Scalable Vector Graphics may be used. Furthermore, it goes without saying that you may use your own formats and languages instead of these publicly used formats and languages.

  When creating print data using an application, an image is represented as (a1) in FIG. 5, a character is represented as (b1) in FIG. 5, and a line drawing is represented as (c1) in FIG. When the print data creator sets re-editability for these images, characters, line drawings, etc., it indicates that re-editing is possible by adding the / Editable key to each dictionary.

  5 (a2), FIG. 5 (b2), and FIG. 5 (c2) are set to be re-editable with respect to FIG. 5 (a1), FIG. 5 (b1), and FIG. 5 (c1). Is the case. A dictionary is designated as a value corresponding to the / Editable key, and the dictionary includes a / Type key, a / Icon key, a / Id key, and values corresponding to each. The value corresponding to / Type means the permitted type of re-editing, and is represented as an array so that a plurality of types can be specified. For images, change the image when / Type is 1, change the image position when / Type is 2, change the image magnification when / Type is 3, and when / Type is 1 for characters. Means the designation of a character. In addition, when the / Type is 2, the font size is changed, when the / Type is 3, the font is changed, and in the case of a line drawing, the position is corrected when the / Type is 1. This means setting the edit contents. That is, in the case of (a2) in FIG. 5, the image is replaced, the image position is changed, and the image magnification is changed. In the case of (b2) in FIG. 5, the character is specified, the font size is changed, the font is changed. In case of (c2), correction of the position of the line drawing is permitted.

  If there are other editing methods that can be re-edited by the authorized orderer (step (9) in FIG. 2) or less than the above, it is natural that the value that can be set in / Type can be increased or decreased. It is. Note that (a1) and (a2) in FIG. 5 use the image XObject defined externally, so that they are listed as (a3) in FIG. 5 just in case, but this is not different from the normal case. .

  Further, a number or a character string necessary for specifying a permission object that permits re-editing is used as a value corresponding to the / Id key. For example, a value uniquely determined from the number of bytes of the PDF object and the object number is used. This value is determined by, for example, a result obtained by multiplying the object size and the object number by a specific number or a remainder obtained by dividing by a specific numerical value. In this way, by adding the / Id key and the value corresponding thereto, the application can easily check whether the value corresponding to the / Id key is correct when the authorized orderer re-edits. Thereby, it is possible to prevent the authorized orderer from re-editing any part. The reason that the file cannot be rewritten in this way is necessary because the PDF itself is downloaded.

  On the other hand, the / Editable key is also added to the PDF catalog object. A dictionary is designated as a value corresponding to the / Editable key. The dictionary includes a / Type key, an / Id key, and values corresponding to each ((d1) in FIG. 5). The value corresponding to the / Type key is any of / All, / Specified, and / Complete, and / All indicates that all objects can be corrected. Furthermore, / Specified indicates that only an object including the / Editable key can be corrected, and / Complete cannot be corrected. The / Id key is the same as that in the object. When the authorized orderer re-edits, the application checks whether the value corresponding to the / Id key is correct, and the authorized orderer re-edits any part. Is to prevent.

  Further, it is assumed that the member registration with the server 122 is required in advance before the print data creator uses the application to create the print data that is the edited data and upload the created print data. In this case, although not essential, values corresponding to the / Editable key of the catalog object may include values for the / User key and / File key ((d2) in FIG. 5). As the value corresponding to the / User key, the number assigned to each print data creator by the server 122 (hereinafter referred to as a print data creator ID) is encrypted by some method. On the other hand, as a value corresponding to the / File key, the print data creator uploads the print data. When the server 122 stores the print data in the data storage area, the number assigned to each print data (hereinafter referred to as a print data ID) is encrypted by some method.

  The server 122 decrypts values corresponding to the / User key and / File key included in the uploaded print data by an appropriate method. The print data creator identified by the print data ID obtained from the value corresponding to the / File key is the print data creator identified by the print data creator ID obtained from the value corresponding to the / User key. It is determined whether or not. Thereby, it is possible to know whether the print data edited by the authorized orderer is the print data that has been properly uploaded by the registered print data creator. If the print data is not properly uploaded by the officially registered print data creator, or if the values corresponding to the / User key and / File key could not be decrypted by an appropriate method, become. In other words, it is sufficient that the upload by the authorized orderer is rejected and the subsequent processing is not performed. In order to perform this check, the following three points are assumed.

  α1: When the print data creator performs member registration in advance, the print data creator ID is numbered for each print data creator and stored in the database. When the print data creator uploads the print data, a login authentication process is performed. At this time, the print data creator ID or the information associated with the print data creator ID and the password added to the print data creator ID are used.

  α2: The print data creator uploads the print data, and the server 122 numbers the print data ID for each print data. When storing print data in a database or file system that is a data storage area, the database has an actual storage location and information associated with the print data ID. The actual storage location is the primary key of the stored table record in the case of a database, and the file path in the case of a file system.

  α3: Information relating the print data ID and the print data creator ID is also stored in the database.

  In addition, any one of the / User key and its corresponding value and the / File key and its corresponding value is effective in determining whether it is regular print data. The print data creator specified by the print data creator ID obtained from the value corresponding to the / User key is not registered in the database. Alternatively, it can be determined that the print data specified by the print data ID obtained from the value corresponding to the / File key is not registered in the database. When only the / User key and its corresponding value are included, only α1 is assumed. On the other hand, when only the / File key and its corresponding value are included, only α2 is assumed.

<Operation of print data creator and corresponding processing (2)>
The print data creator who has completed the settings for creating and re-editing print data, after confirming the print data, uploads the print data to the server 122 (step (3) in FIG. 2). FIG. 6 shows a GUI 6 as an example of a confirmation screen in the application. The print data creator checks the print data on the PC 121. If it is determined that there is no problem, the upload button P612 is clicked or the upload menu is selected from the Internet menu P603. Then, the application uploads print data to the server 122.

  When the print data is uploaded to the server 122, the application sets the value corresponding to the / Type key included in the dictionary that is the value corresponding to the / Editable key of the catalog object to / Specified. Then, the value corresponding to the / Id key is also changed accordingly. That is, only the permitted object including the / Editable key can be modified. At the time when the print data created by the application by the print data creator is saved on the local disk, the value corresponding to the / Type key is / All. That is, all objects can be modified as permitted objects.

  The URL uploaded at this time is a URL for the print data creator to upload, and may be embedded as a constant in the application, or by inquiring about a specific URL of the server 122 before uploading. You may get it.

  Then, the server 122 stores the print data in the data storage device 124 (step (4) in FIG. 2). When member registration is required to use the server 122, prior member registration and member authentication processing at the time of upload are required, but the description is omitted because they are not essential in this embodiment.

  When the server 122 succeeds in storing the print data in the data storage device 124, the server 122 notifies the application of the PC 121 of the URL of the GUI screen, which is a Web page used for specifying the authorized orderer (step (5 in FIG. 2). )). The application starts up a default Web browser and displays the notified URL (step (6) in FIG. 2, FIG. 7).

  Using the GUI 7 in FIG. 7, the print data creator inputs the email address of the authorized orderer in the text field P702 and clicks the OK button P703. If it is desired to confirm the contents of the uploaded print data, clicking on the link P704 causes a GUI 8 transition of the screen for confirming the print data (FIG. 8). On the GUI 8 screen, the print data can be confirmed by converting the print data into JPEG or the like and displaying it (P801). In addition, since the link P802 for making a transition to the GUI 7 is provided in the GUI 8, it is possible to set the mail address of the authorized orderer after confirming the contents of the print data.

  The print data creator can also re-edit as an authorized orderer by clicking the button P803, and can order as an authorized orderer by clicking the button P804. In these cases, compared to the process for the authorized orderer who received the notification from the print data creator, the screen that transitions after the re-editing or ordering work or when the cancel button is clicked, The difference is that it is not GUI 9 shown in FIG. 9 but GUI 8. However, nothing else changes and will be described later.

  In FIG. 7, when the OK button P <b> 703 is clicked, a request is generated for the server 122. Upon receiving the request, the server 122 transmits the URL of the GUI 9, which is a Web page for the authorized orderer to confirm the contents of the print data, to the email address of the authorized orderer entered by the print data creator (FIG. 2). Step (7)).

<Operation of authorized orderer and corresponding process>
By displaying this URL with a Web browser, the authorized orderer can confirm the contents of the print data and browse the GUI 9 for downloading the application and the print data (step (8) in FIG. 2, FIG. 8). ). When the authorized orderer tries to display the URL notified by e-mail on the Web browser, the server 122 generates JPEG from the print data or displays the JPEG created when the print data is uploaded as a preview image ( P901). Prior to creating a JPEG image, it is determined whether or not an object in the page is set to be re-editable by searching for the / Editable key. If it exists, links P902 and P904 are displayed on the GUI 9.

  The authorized orderer can look at the preview image and click the link P903 to place an order as it is. In these cases, compared to the process for the print data creator that has been re-edited and uploaded after downloading, the screen that transitions after the completion of the order work or when the cancel button is clicked is not GUI 10 but GUI 9. There are some differences. However, nothing else changes and will be described later.

  There is a portion where the print data creator permits the authorized orderer to re-edit and the link P902 is displayed, but the authorized orderer has not yet downloaded the application and installed it in his / her PC 123. In that case, an application is downloaded and installed by clicking the link P902. Then, the authorized orderer clicks the link P904 to download the print data, and opens the downloaded file with the application.

  In addition, an input area for inputting the URL notified by e-mail on the application may be prepared, and the application may download the print data and open the downloaded file when the authorized orderer inputs it. .

  When the print data is opened by the application, it is confirmed that the value corresponding to the / Type key included in the dictionary that is the value corresponding to the / Editable key of the catalog object is / All or / Specified. If it is any other value, an error is displayed and the process is stopped. It is determined whether the value corresponding to the / Id key included in the dictionary that is the value corresponding to the / Editable key of the catalog object is correct. If the value is not correct, an error is displayed and the processing is stopped.

  Further, whether or not re-editing is permitted is determined by whether or not the / Editable key and the corresponding value exist in the object. At this time, it is also determined whether the value corresponding to the / Id key included in the dictionary corresponding to the / Editable key is correct. / If the value corresponding to the Id key is incorrect, an error is displayed and the process is stopped. It is assumed that the value corresponding to the / Type key is / All or / Specified, and the value corresponding to the / Id key of the catalog object and each object is correct. In this case, the application opens the print data, and the authorized orderer can re-edit the portion permitted to be re-edited by the print data creator (step (9) in FIG. 2).

  It is assumed that the value corresponding to the / Type key included in the dictionary corresponding to the / Editable key of the catalog object is / Specified. Also, assume that all objects have a / Editable key and a corresponding value, and the value corresponding to the / Id key contained therein is also correct. In this case, the reeditable range is the same as when the value corresponding to the / Type key is / All. However, when the value corresponding to the / Type key is / Specified, the re-editing permission cannot be further set.

  Assume that the applications used by the print data creator and the authorized orderer are the same. In this case, whether the user of the application is a print data creator or an authorized orderer is determined based on a value corresponding to the / Type key included in the dictionary which is a value corresponding to the / Editable key of the catalog object. That is, if the value corresponding to the / Type key is / All, the application user is determined to be a print data creator, and if the value corresponding to the / Type key is / Specified, it is determined to be an authorized orderer. To do. When the application user is the print data creator, the URL uploaded from the application is the URL for the print data creator to upload. In the case of the authorized orderer, the URL is used for uploading by the authorized orderer after re-editing to be described later.

  As described in Creating print data by the print data creator, re-editing of print data uses objects such as images, line drawings, and characters such as Adobe Illustrator (registered trademark) and Quark XPpress (registered trademark) using the GUI. Deploy. It uses the same interface as this kind of application. How to perform image layout, line drawing and layout, character input, layout, and font designation is not essential in the present invention and will not be described further.

  The authorized orderer who has finished re-editing the print data, after confirming the print data, uploads the print data to the server 122. FIG. 6 shows an example of a confirmation screen in the application. The print data creator confirms the print data. If it is determined that there is no problem, the upload menu P612 is clicked or the upload menu is selected from the Internet menu P603. Then, the application creates print data reflecting the re-edit result. At that time, the application sets the value corresponding to the / Type key included in the dictionary corresponding to the / Editable key of the catalog object to / Complete, and changes the value corresponding to the / Id key accordingly. The print data is uploaded to the server 122.

  The URL uploaded at this time is a URL for the authorized orderer after re-editing to upload, and may be embedded as a constant in the application. Alternatively, it may be acquired by inquiring about a specific URL of the server 122 before uploading. Furthermore, the URL for uploading by the print data creator and the URL for uploading by the authorized orderer after editing can be the same. In this case, it is assumed that the value corresponding to the / Type key included in the dictionary that is the value corresponding to the / Editable key of the catalog object of the uploaded print data is / Specified. At this time, it is determined that the upload is from the print data creator, and the GUI 7 of the Web page is displayed. In addition, when it is / Complete, it may be determined that uploading is performed from the authorized orderer after editing, and a GUI 10 of a Web page described later may be displayed. Each time a request is issued to this URL, a session ID is issued, and this session ID is retained in subsequent screen transitions.

  The server 122 determines whether or not the value corresponding to the / Id key included in the dictionary that is the value corresponding to the / Editable key of the uploaded catalog object and each object is correct. If the value corresponding to the / Id key is not correct, an error is displayed and the process is stopped. Furthermore, values corresponding to the / User key and / File key are required as values corresponding to the / Editable key of the catalog object. If the above assumptions α1 to α3 are satisfied, it can be normally decrypted as described above, whether the print data creator ID and the print data ID exist in the database, or the print data creator ID and the print data ID. Check if is associated. If it is determined as abnormal by these checks, an error is displayed and the process is stopped.

  When it is determined as normal by these checks, the server 122 saves the uploaded print data as print data associated with the session ID separately from the print data created by the print data creator. The authorized orderer can confirm the contents by creating the JPEG data by rendering the corresponding page of the print data and displaying the GUI 10 of the Web page. When the authorized orderer uses the links P1010 and P1011, the JPEG data is created on the spot, or the web page GUI 10 is displayed using the JPEG data created in advance as a preview image. Confirmation can be made.

  In the present embodiment, the print data associated with the session ID is stored separately from the print data created by the print data creator. This is to make it possible for each authorized orderer to upload print data edited by the application when there are a plurality of authorized orderers. Therefore, if the data is stored in association with the session ID, the print data is referred only for the duration of the session. Therefore, after the session no longer exists, it is necessary to delete the data.

  In addition, an ID that persists for a short period of time, such as a session ID, may be issued that persists for a long time and is not reused. In this case, the print data after editing is stored in the PC 123 of each authorized orderer as cookie information, or the ID is explicitly presented to each authorized orderer, and the ID is associated with the edited print data. Reorders can also be made possible.

  Furthermore, the URL notified to the authorized orderer is changed according to the e-mail address (in addition, a password is also sent by another e-mail), and the e-mail address (sent separately by mail before the authorized orderer confirms the contents of the print data) Password). In this way, it is possible to perform authentication processing or to save the print data as the editing result in response to the registered mail address by requesting input of the mail address when uploading.

  The catalog object and the dictionary corresponding to the / Editable key of each object may include the encrypted mail address of the authorized orderer as a value for the / Mail key. It is also possible to perform an authentication process by requesting the input of an email address when uploading (in the case of prior registration of an authorized orderer, an ID or ID that identifies the authorized orderer is encrypted instead of the email address) It would also be possible to use a normalized string). By adopting such a method, it is possible to permit editing only for the authenticated processing, and to save the print data as the editing result for each authorized orderer, thereby enabling reordering.

  When the authorized orderer confirms the preview and clicks the link P1003 to place an order, the server 122 displays the GUI 11 of the Web page (step (11) in FIGS. 10 and 2).

  When the authorized orderer inputs the order quantity in the text field P1101 and clicks the button P1110, the GUI 12 of the Web page is displayed (step (11) in FIGS. 11 and 2). The authorized orderer inputs the address and name of the authorized orderer in the text fields P1201 and P1202, respectively, and the delivery address and name in the text fields P1203 and P1204, respectively. When the button P1210 is clicked, the server 122 displays the Web page GUI 13 (step (11) in FIGS. 12 and 2).

  In FIG. 13, when the authorized orderer confirms the order breakdown written in P1301 and clicks the button P1310, the server 122 displays the GUI 14 of the Web page (step (12) in FIGS. 14 and 2). Since the order number used for inquiry etc. is written in P1401, the authorized orderer refrains from this and the order is completed. When placing an order again, the link P1402 is clicked, and then the transition is made to the GUI 10 of the Web page. If the user clicks the cancel buttons P1111, P1211, and P1311 on the Web pages GUI 11, 12, and 13, the screen transitions to the Web page GUI 10.

  In this embodiment, since it is assumed that payment is made by cash on delivery, explanation on charging is not required in the GUI 14, but a description of the bank account number to be deposited in the GUI 14 is added and an instruction to instruct the deposit is added. Also good. In addition, other payment methods such as preparing a screen for inputting a credit card number may be used between the GUI 13 and the GUI 14, but the payment method is not essential in the description of the present embodiment, and thus will be omitted.

  The server 122 sends the print data to the printing process (step (13) in FIG. 2) when the payment is confirmed such as confirmation of payment or cash on delivery. If payment is not confirmed at this time, the print data is sent to the printing process at the timing when payment is completed (triggered by a notification from the payment system or an explicit instruction by an operation tool). What has been printed in the printing process is sent by mail means to the delivery destination designated by the authorized orderer in P1203 and P1204.

  The re-editing operation of the information processing apparatus according to the embodiment of the present invention will be further described using the flowcharts of FIGS. In step S1501 of FIG. 15, the print data creator uses the PC 121 to create edit data. In addition, the permitted object and the re-editing contents that permit re-editing to a third party are designated. Further tampering prevention data is embedded in the editing data for later tampering inspection. In step S1502, the data is uploaded to the server 122.

  The server 122 performs an authentication process on the uploaded data in step S1503, and if it is confirmed, saves the uploaded data in the data storage device 124. In step S1504, the PC 121 is requested to specify an authorized orderer (permitting re-editing).

  The PC 121 designates an authorized orderer in step S1505 and uploads it to the server 122 in step S1506. In response to this, after confirming the authentication process, the server 122 stores information data regarding the authorized orderer in the data storage device 124.

  Next, moving to FIG. 16, the server 122 issues a mail to the authorized orderer designated in step S1601. The authorized orderer who has received the mail selects edit data in step S1602, and requests the server 122 to download the edit data using his / her PC 123 in step S1603.

  In response, in step S1604, the server 122 first performs an authentication processing operation, and then reads out the corresponding data from the data storage device 124 and downloads it to the PC 123 in step S1605.

  In step S1606, the authorized orderer re-edits the edited data as necessary according to the downloaded data. In step S1607, the data is uploaded to the server 122.

  After the authentication process, the server 122 saves the re-edited data sent to the data storage device 124, and then executes a falsification check that checks whether unauthorized editing, i.e., falsification, has been performed in step S1609. In step S1501, it is checked whether re-editing beyond the range specified and permitted by the editing data creator has been performed. If improper editing, that is, falsification, is made, the stop of the process is notified to the authorized orderer's PC 123 as in step S1610, and the process ends.

  However, if there is no unjust editing, that is, no tampering, in step S1611, the order details are requested from the authorized orderer. The authorized orderer fills in the order details using the PC 123 in step S1612 and uploads it to the server 122 in step S1613.

  In response to this, the server 122 prints the re-edit data according to the order contents in step S1614 after the authentication process. The billing process is also performed. This printing process may be requested to a printing office outside the system. Thus, the printed material based on the re-edit data is mailed to the authorized orderer who owns the PC 123, and the processing is completed.

  According to the information processing apparatus according to the embodiment of the present invention described above, a third party is allowed to re-edit only a specific object among the data provided to the server, and the intention of the print data creator is It is possible to prevent excessive changes and tampering.

<Other embodiments>
Note that a software program that implements the functions of the above-described embodiments may be supplied from a recording medium directly to a system or apparatus having a computer that can execute the program using wired / wireless communication. In addition, the present invention includes a case where an equivalent function is achieved by the computer of the system or apparatus executing the supplied program.

  Accordingly, the program code itself supplied and installed in the computer in order to implement the functional processing of the present invention by the computer also realizes the present invention. That is, the computer program itself for realizing the functional processing of the present invention is also included in the present invention.

  In this case, the program may be in any form as long as it has a program function, such as an object code, a program executed by an interpreter, or script data supplied to the OS.

1 is a block configuration diagram of a computer device that can be used as a Web server and a client in an information processing apparatus according to an embodiment of the present invention. It is a figure explaining the operation | movement procedure of the system of the information processing apparatus which concerns on embodiment of this invention, and its process. It is a figure which shows the re-editing setting menu on the application used in the information processing apparatus which concerns on embodiment of this invention. It is a figure which shows the interface which designates the content of the re-editing on the application used in the information processing apparatus which concerns on embodiment of this invention. It is a figure for demonstrating the embedding method of the re-editing information on the application used in the information processing apparatus which concerns on embodiment of this invention. FIG. 4 is a diagram illustrating a Web page used when uploading from an application used by a print data creator to a server in the information processing apparatus according to the embodiment of the present invention. In the information processing apparatus according to the embodiment of the present invention, it is a diagram showing a Web page for designating the mail address of the authorized orderer after the print data creator has uploaded. In the information processing apparatus according to the embodiment of the present invention, it is a diagram showing a Web page on which a print data creator confirms print data after uploading. It is a figure which shows the web page in which an authorized orderer downloads print data in the information processing apparatus which concerns on embodiment of this invention. It is a figure which shows the Web page in which an authorized orderer confirms print data in the information processing apparatus which concerns on embodiment of this invention. It is a figure which shows the Web page for an authorized orderer to input order quantity in the information processing apparatus which concerns on embodiment of this invention. In an information processor concerning an embodiment of the present invention, it is a figure showing a Web page for a permission orderer to input a permission orderer address name and a delivery address name. It is a figure which shows the web page for an authorized orderer to confirm the order content in the information processing apparatus which concerns on embodiment of this invention. In an information processor concerning an embodiment of the present invention, it is a figure showing a Web page where an authorized orderer confirms completion of an order. It is a flowchart figure explaining operation | movement of re-editing in the information processing apparatus which concerns on embodiment of this invention. It is a flowchart figure explaining operation | movement of re-editing in the information processing apparatus which concerns on embodiment of this invention.

Claims (9)

An object specifying means for specifying an allowed object that permits re-editing from a plurality of objects constituting the data;
Re-edit content specifying means for specifying re-edit content for the permission object;
A means for specifying an authorized orderer that designates the orderer permitted to re-edit; and
An embedding means for embedding falsification preventing data in the data;
Storage means for storing the permission object, the re-edited content, and the permission orderer together with the data;
An information processing apparatus characterized by that. Downloading means for downloading the permission object, the re-edited content and the data to the permission orderer,
The information processing apparatus according to claim 1. The storage means stores re-edited data re-edited by the authorized orderer;
The information processing apparatus according to claim 1 or 2. The designation means of the authorized orderer designates the authorized orderer by an email address.
The information processing apparatus according to claim 1. Further comprising authentication means for executing an authentication process when access occurs from the authorized orderer.
The information processing apparatus according to claim 1. A receiving means for receiving an order for printing the re-edited data from the authorized orderer;
The information processing apparatus according to claim 3. Tampering inspection means for inspecting tampering of the re-edited data using the tampering prevention data,
The information processing apparatus according to claim 3. An object designating process for designating an authorized object that permits re-editing from a plurality of objects constituting the data;
A re-editing content specifying step for specifying re-editing content for the permitted object;
A designation step of an authorized orderer that designates an orderer who is permitted to re-edit; and
An embedding step of embedding falsification preventing data in the data;
Storing the permission object, the re-editing content, and the permission orderer together with the data,
A method for controlling an information processing apparatus.   A program for causing a computer to execute the procedure of the control method for the information processing apparatus according to claim 8.

Images