JP2007235716A - Image reading apparatus, image reading method and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image reading apparatus capable of reducing labor of notifying about an encryption password. <P>SOLUTION: An image reading apparatus 110 is provided which includes an image reading unit 200 for reading a document image 100 to generate image data corresponding to the document image 100; a data transmission destination setting unit 210 for setting a transmission destination of image data as a data transmission destination; a password setting unit 220 for setting a password character string 120 used for encrypting image data; a password notification destination setting unit 230 for setting the notification destination of the password character string 120 as a password notification destination; an encryption data generating unit 240 for generating encrypted data 130, by encrypting image data using the password character string 120; an encrypted data transmitting unit 250 for transmitting the encrypted data 130 to the data transmission destination; and a password notifying unit 260 for notifying the password notification destination of the password character string 120. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an image reading apparatus, an image reading method, and a computer program, and in particular, an image reading apparatus, an image reading method, and a computer that read an original image, generate image data corresponding to the original image, and transmit the image data to an arbitrary destination. Regarding the program.

  2. Description of the Related Art Conventionally, a multi-function machine that generates image data from a read document image and transmits it to an arbitrary destination is known. When transmitting the image data, the MFP can encrypt the image data using a password input by the user who owns the document and generate encrypted data. The encrypted data can be decrypted using a password managed by the user who owns the document.

Japanese Patent Laid-Open No. 2003-87458

  However, when the encrypted data is transmitted to a plurality of users (hereinafter referred to as receiving users), it is necessary to contact the receiving user with the password used to generate the encrypted data separately by telephone or e-mail. There was such a problem.

  The present invention has been made in view of the above problems, and an object of the present invention is to provide a new and improved image reading apparatus, image reading method, and image reading apparatus capable of reducing the trouble of notifying the password. To provide a computer program.

  According to a first aspect of the present invention, an image reading unit that reads a document image and generates image data corresponding to the document image, and a data transmission destination setting unit that sets a transmission destination of the image data as a data transmission destination A password setting unit for setting a password character string used for encryption of the image data, a password notification destination setting unit for setting a notification destination of the password character string as a password notification destination, and the password character string. Encrypts the image data, generates an encrypted data, an encrypted data generation unit, an encrypted data transmission unit that transmits the encrypted data to the data transmission destination, and notifies the password notification destination of the password character string An image reading apparatus having a password notification unit is provided.

  The password setting unit can set a character string input by the user as a password character string.

  The password setting unit can randomly generate a character string and set the generated character string as a password character string.

  The password setting unit can set the character string length input by the user as the password character string length.

  In addition to the data transmission destination, the data transmission destination setting unit can set the encryption strength used when generating the encrypted data and the access authority to the encrypted data.

  The password notification unit can perform encryption processing on the password character string before notifying the password character string to the password notification destination.

  The password notification unit can transmit the password character string to the data transmission destination when the data transmission destination is an e-mail address.

  The image reading apparatus may further include a password storage unit that stores the password character string, and a password character string output unit that outputs the password character string stored in the password storage unit. When the password notification unit fails to notify the password character string, the password notification unit can store the password character string in the password storage unit.

  The image reading apparatus may further include a password storage unit that stores the password character string, and a password character string output unit that outputs the password character string stored in the password storage unit. The password notification unit can store the password character string in the password storage unit.

  According to a second aspect of the present invention, an image reading step of reading an original image and generating image data corresponding to the original image, and a data transmission destination setting step of setting the transmission destination of the image data as a data transmission destination A password setting step for setting a password character string used for encryption of the image data, a password notification destination setting step for setting a notification destination of the password character string as a password notification destination, and the password character string. Encrypting the image data and generating encrypted data, encrypting data transmitting step for transmitting the encrypted data to the data transmission destination, and notifying the password character string to the password notification destination And a password notifying step. The image reading method is provided.

  According to a third aspect of the present invention, an image reading step of reading an original image and generating image data corresponding to the original image, and a data transmission destination setting step of setting the transmission destination of the image data as a data transmission destination A password setting step for setting a password character string used for encryption of the image data, a password notification destination setting step for setting a notification destination of the password character string as a password notification destination, and the password character string. Encrypting the image data and generating encrypted data, encrypting data transmitting step for transmitting the encrypted data to the data transmission destination, and notifying the password character string to the password notification destination A computer program for causing a computer to perform a password notification step is provided. Furthermore, according to the present invention, a recording medium on which the computer program is recorded is provided.

  As described above, according to the present invention, when the encrypted data is transmitted to an arbitrary destination, the password used for the generation of the encrypted data is notified to an arbitrary notification destination. Can be reduced.

  Exemplary embodiments of the present invention will be described below in detail with reference to the accompanying drawings. In the present specification and drawings, components having substantially the same functional configuration are denoted by the same reference numerals, and redundant description is omitted.

(Embodiment)
First, the image reading apparatus 110 according to the embodiment of the present invention will be described.

  FIG. 1 is an explanatory diagram illustrating a configuration of an image reading system 10 according to the present embodiment.

  The image reading system 10 includes an image reading device 110 (in this embodiment, a multi function device), an SMTP (Simple Mail Transfer Protocol) server 140, an SSL (Secure Socket Layer) server 150, and an FTP (File Transfer Protocol) server 160. And an SMB (Server Message Block) server 170.

  The image reading apparatus 110 is connected to the SMTP server 140, the SSL server 150, the FTP server 160, and the SMB server 170 via a network.

  The image reading device 110 reads the document image 100 and generates image data corresponding to the document image 100. Then, the image reading device 110 encrypts the image data and creates encrypted data 130.

  The image reading device 110 transmits the encrypted data 130 to the FTP server 160 or the SMB server 170. Further, the image reading apparatus 110 transmits the password character string 120 used for encrypting the image data included in the encrypted mail to the SMTP server 140 or transmits it to the SSL server 150 by SSL communication.

  FIG. 2 is an explanatory diagram showing the configuration of the image reading apparatus 110 according to the embodiment of the present invention.

  The image reading apparatus 110 includes an image reading unit 200, a data transmission destination setting unit 210, a password setting unit 220, a password notification destination setting unit 230, an encrypted data generation unit 240, an encrypted data transmission unit 250, a password notification unit 260, a password. A storage unit 270, a password character string output unit 280, a printer engine 290, an operation panel 300, and a network I / F (InterFace) 310 are included.

  The image reading unit 200 reads a document image and generates image data corresponding to the document image. Specifically, the image reading unit 200 is a scanner that optically reads an image of a document.

  The data transmission destination setting unit 210 sets a transmission destination of image data as a data transmission destination. In the present embodiment, the data transmission destination is set by user input to the operation panel 300.

  The password setting unit 220 sets a password character string used for image data encryption.

  The password notification destination setting unit 230 sets a password character string notification destination as a password notification destination. In the present embodiment, the password notification destination is set by user input to the operation panel 300.

  The encrypted data generation unit 240 encrypts the image data using the password character string set by the password setting unit 220 and generates encrypted data.

  The encrypted data transmission unit 250 transmits the encrypted data generated by the encrypted data generation unit 240 to the data transmission destination (in this embodiment, the FTP server 160 or the SMB server 170) via the network I / F 310.

  The password notification unit 260 notifies the password character string set by the password setting unit 220 to the password notification destination (SMTP server 140, SSL server 150, or password storage unit 270 in this embodiment).

  The password storage unit 270 stores the password character string notified from the password notification unit 260.

  The password character string output unit 280 outputs the password character string stored in the password storage unit 270 to the printer engine 290 or the operation panel 300 that is the output destination. If the output destination is the printer engine 290, the printer engine 290 prints out the output password character string. If the output destination is the operation panel 300, the operation panel 300 displays and outputs the output password character string on the operation panel 300.

(Operation of image reader)
The operation of the image reading apparatus 110 in the embodiment of the present invention will be described in detail.

  FIG. 3 is an explanatory diagram showing an operation processing flow of the image reading apparatus according to the embodiment of the present invention.

  In step S100, the data transmission destination setting unit 210 determines, in addition to the data transmission destination, the encryption strength used when generating the encrypted data and the access authority for the encrypted data based on the user input to the operation panel 300. To set.

  In the present embodiment, the encryption method and the number of encryption bits are set as the encryption strength, and edit prohibition, print prohibition, etc. are set as the access restriction.

  In step S <b> 110, password setting unit 220 sets a password character string used for encryption of image data based on user input contents on operation panel 300.

  In step S <b> 120, password notification destination setting unit 230 sets the password character string notification destination as the password notification destination based on the user input to operation panel 300.

  In step S130, the image reading unit 200 reads a document image and generates image data corresponding to the document image. Next, the encrypted data generation unit 240 encrypts the image data using the password character string set by the password setting unit 220 to generate encrypted data.

  In step S140, the encrypted data transmission unit 250 transmits the encrypted data generated by the encrypted data generation unit 240 to the data transmission destination.

  In step S150, the password notification unit 260 notifies the password character string set by the password setting unit 220 to the password notification destination (in this embodiment, the SMTP server 140, the SSL server 150, or the password storage unit 270).

(Password setting process flow)
Next, the operation of the password setting process in step S110 will be described in detail.

  FIG. 4 is an explanatory diagram showing an operation flow of password setting processing according to the embodiment of the present invention.

  In step S200, the password setting unit 220 randomly generates a character string as a password setting method, and sets the generated character string as a password character string (hereinafter referred to as a first setting method). For any one of setting the input character string as a password character string (hereinafter referred to as a second setting method), the user's specification is accepted from the password setting screen.

  FIG. 7 is an explanatory diagram showing an example of a password setting screen according to the embodiment of the present invention. On the password setting screen, the encryption strength used when generating the encrypted data can be set together with the password setting method. In FIG. 7, AES 128 bits is set as the encryption strength, and user input is set as the password setting method.

  In step S200, if the user selects the first setting method, the process proceeds to S220. If the user selects the second setting method, the process proceeds to S210.

  In step S210, password setting unit 220 accepts user input of a password character string used for encryption of image data from operation panel 300.

  In step S <b> 220, password setting unit 220 accepts a user input of a password character string length from operation panel 300.

  In step S230, the password setting unit 220 randomly generates a character string having the password character string length, and sets the generated character string as a password character string.

(Password notification method decision processing operation)
Next, the password notification method determination processing operation in step S120 will be described in detail.

  FIG. 5 is an explanatory diagram showing an operation flow of the determination process of the password notification method according to the embodiment of the present invention.

  In step S300, the password notification destination setting unit 230 uses a password storage unit (hereinafter referred to as a first notification destination), a designated destination (hereinafter referred to as a second notification destination), and a password storage unit as password notification destinations. In addition, the user designation is accepted via the operation panel 300 for any one of the designated destinations (hereinafter referred to as a third notification destination).

  In step S310, if the user designation in step S300 is the second notification destination or the third notification destination, the process proceeds to step S320, and if the user selection in step S300 is the first notification destination. The password notification method determination process ends.

  In step S <b> 320, password notification destination setting unit 230 receives a password character string transfer destination from operation panel 300. At this time, when the encrypted data transmission destination is an e-mail address, the e-mail address is set as the transfer destination of the password character string.

(Password notification processing operation)
Next, the operation of the password notification process in step S150 will be described in detail.

  FIG. 6 is an explanatory diagram showing an operation flow of password notification processing according to the embodiment of the present invention.

  In step S400, it is determined whether there is an instruction to transfer the password character string to the designated destination. If there is a transfer instruction to the designated destination, the process proceeds to step S410. If there is no transfer instruction to the designated destination, the process proceeds to step S440.

  In step S410, the password notification unit 260 transfers the password character string to the designated destination. At this time, the password notification unit 260 performs encryption processing on the password character string in order to protect the confidentiality of the password character string and prevent leakage.

  For example, an encrypted mail (S / MIME (SecureMIME)) using an electronic certificate is transmitted to the SMTP server 140, or a password character string is transmitted to the SSL server 150 by SSL communication.

  In addition to the password character string, the password notification unit 260 transfers at least information indicating the transmission destination of the encrypted data corresponding to the password character string and the file name of the encrypted data to the password notification destination.

  In step S420, the password notification unit 260 determines whether the transfer to the designated destination in step S410 has been successful. If the determination result is successful, the process proceeds to step S430. If the determination result is unsuccessful, the process proceeds to step S440.

  In step S430, it is determined whether there is an instruction to store the password character string in password storage unit 270. If the determination result is an instruction, the process proceeds to step S440. If the determination result is no instruction, the password notification process ends.

  In step S440, the password notification unit 260 stores the password character string in the password storage unit 270. At this time, the password character string is stored in an area that cannot be referred to by anyone other than a user (hereinafter referred to as an owner user) who has issued a document reading request (hereinafter referred to as a job) for information protection.

  In order to refer to the password character string stored in the area, user authentication for the password storage unit is required. That is, only the owner user can refer to the password character string of the encryption processing of the image data performed by the owner user in the past.

(Password output process)
Hereinafter, a process in which the image reading apparatus outputs a password character string will be described.

  First, in order to check the past job history, the user inputs a predetermined login user and login password to the operation panel 300 in order to log in to the image reading apparatus. If the login password for the login user is correct, the operation panel 300 displays and outputs a past job history list screen corresponding to the user.

  Next, the user refers to the job history list screen and selects a job history whose details are to be confirmed from the operation panel. Then, operation panel 300 transmits the job history output request to password character string output unit 280.

  Next, the password character string output unit 280 acquires the job history information including the password character string stored in the password storage unit 270. Then, the password character string output unit 280 transmits the acquired job history information to the operation panel 300.

  Finally, the operation panel 300 displays and outputs the job history information transmitted from the password character string output unit 280. Therefore, the user can confirm the password character string by referring to the job history information.

  FIG. 8 shows a job history screen on which the operation panel 300 displays and outputs job history information corresponding to the password character string.

  In FIG. 8, the item “job” is the name of the job. For example, “ScanToFTP” in FIG. 8 reads an original image, generates encrypted data corresponding to the original image, and converts the encrypted data to FTP. Indicates that it has been transferred to the server. The item “time” indicates the date and time when the encrypted data transmission unit 250 transmits the encrypted data to the data transmission destination.

  In FIG. 8, an item “transfer destination” indicates an IP address of a device in which encrypted data is stored, and an item “transfer destination path” indicates a directory path in which encrypted data is stored.

  In FIG. 8, an item “login user” indicates the name of a user used for login authentication of the data transmission destination when transmitting encrypted data. In addition, the item “login password” indicates a password used for login authentication of the data transmission destination when transmitting encrypted data.

  In FIG. 8, an item “format” indicates a file extension name of image data. The item “transfer file name” indicates the file name of the image data.

  In FIG. 8, an item “encryption” indicates whether or not the image reading apparatus has performed encryption processing on the image data before transmitting the image data to the data transmission destination. The item “password” indicates a password necessary for decrypting the encrypted data when the encrypted data is generated.

  When a print request from the owner user (generated when the “print password” button in FIG. 8 is pressed) is generated on the job history screen in FIG. 8, the password character string output unit 280 displays the password character string in the printer engine 290. To print out.

(Encrypted data decryption means)
A means for the user to decrypt the encrypted data transmitted to the data transmission destination will be described.

  The user can confirm the IP address of the device in which the encrypted data is stored by referring to the item “transfer destination” described in the mail notified to the designated destination or the job history screen shown in FIG. The directory path where the encrypted data is stored can be confirmed by referring to the item “transfer destination path”. In addition, the user can confirm the file name of the image data by referring to the item “transfer file name”, and can confirm the password necessary for decrypting the encrypted data by referring to the item “password”. it can.

  Then, the user enters the folder in which the encrypted data is stored based on the information of the items “login user”, “login password”, “transfer destination”, “transfer destination path”, and “transfer file name”. Access and open the encrypted data. Then, a screen for inputting the password character string is displayed, and the user inputs the password character string confirmed with reference to the item “password”. If the password character string input by the user is equal to the character string set by the password setting unit, the encrypted data is decrypted.

(Effect of this embodiment)
As described above, the image reading apparatus according to the present embodiment reads a document image and generates image data corresponding to the document image. Further, the image reading apparatus sets the transmission destination of the image data as the data transmission destination, sets a password character string used for encryption of the image data, and sets the notification destination of the password character string as the password notification destination.

  The image reading apparatus encrypts the image data using the password character string and generates encrypted data. Then, the image reading apparatus transmits the encrypted data to the data transmission destination and notifies the password notification destination of the password character string.

  That is, when the encrypted image data is transmitted to the data transmission destination, the image reading apparatus notifies the password notification destination of the password character string used to generate the encrypted data.

  As a result, it is possible for the user to reduce the trouble of separately providing the password character string.

  In addition, by using a randomly generated character string as a password character string used when encrypting image data, it is possible to prevent an unintended password input mistake and to save the user from entering a password. Can do.

  In addition to the data transmission destination, the data transmission destination setting unit can also set the encryption strength used when generating the encrypted data and the access restriction on the encrypted data. Encryption settings can be made according to the importance of data.

  In addition, since the password notification unit performs encryption processing on the password character string before notifying the password notification destination of the password character string, it is possible to improve security in the password notification processing.

  Further, when the data transmission destination is an e-mail address, the image reading apparatus can also transmit the password character string and the encrypted data to the data transmission destination (for example, a PC (Personal Computer) client). As a result, the user can decrypt the encrypted data transmitted together with the password character string using the password character string in his / her PC client.

  Further, the image reading apparatus can store the password character string used for the image data encryption process (at least one of transfer to the designated destination and storage in the password storage unit). As a result, even when the user forgets the password character string, the user can confirm the password character string by referring to the storage location.

  In addition, when the password notification unit fails to transfer the password character string to the designated destination, the password notification unit stores the password character string in the password storage unit. As a result, it is possible to avoid the risk of losing the password character string when the transfer of the password character string fails.

  As mentioned above, although preferred embodiment of this invention was described referring an accompanying drawing, it cannot be overemphasized that this invention is not limited to the example which concerns. It will be apparent to those skilled in the art that various changes and modifications can be made within the scope of the claims, and these are naturally within the technical scope of the present invention. Understood.

It is explanatory drawing which shows the structure of the image reading system concerning embodiment of this invention. It is explanatory drawing which shows the structure of the image reading apparatus concerning embodiment of this invention. It is explanatory drawing which shows the operation processing flow of the image reading apparatus concerning embodiment of this invention. It is explanatory drawing which shows the operation | movement flow of the password setting process concerning embodiment of this invention. It is explanatory drawing which shows the operation | movement flow of the password notification method determination process concerning embodiment of this invention. It is explanatory drawing which shows the operation | movement flow of the password notification process concerning embodiment of this invention. It is explanatory drawing which shows an example of the password setting screen concerning embodiment of this invention. It is explanatory drawing which shows an example of the job history screen concerning embodiment of this invention.

Explanation of symbols

  10 image reading system, 100 original image, 110 image reading device, 120 password character string, 130 encrypted data, 200 image reading unit, 210 data transmission destination setting unit, 220 password setting unit, 230 password notification destination setting unit, 240 encryption An encrypted data generation unit, 250 an encrypted data transmission unit, a 260 password notification unit, a 270 password storage unit, and a 280 password character string output unit.

Claims (11)

An image reading unit that reads an original image and generates image data corresponding to the original image;
A data transmission destination setting unit for setting the transmission destination of the image data as a data transmission destination;
A password setting unit for setting a password character string used for encryption of the image data;
A password notification destination setting unit for setting a notification destination of the password character string as a password notification destination;
Encrypting the image data using the password character string, and generating an encrypted data;
An encrypted data transmission unit for transmitting the encrypted data to the data transmission destination;
A password notification unit for notifying the password notification destination of the password character string;
An image reading apparatus comprising: The image reading apparatus according to claim 1,
The password setting unit sets a character string input by the user as a password character string.
An image reading apparatus. The image reading apparatus according to claim 1,
The password setting unit randomly generates a character string, and sets the generated character string as a password character string.
An image reading apparatus. The image reading apparatus according to claim 3.
The password setting unit sets a character string length input by a user as a password character string length.
An image reading apparatus. In the image reading apparatus in any one of Claims 1-4,
The data transmission destination setting unit sets, in addition to the data transmission destination, an encryption strength to be used when generating the encrypted data and an access right to the encrypted data.
An image reading apparatus. In the image reading apparatus in any one of Claims 1-5,
The password notification unit performs an encryption process on the password character string before notifying the password character string to the password notification destination.
An image reading apparatus. The image reading apparatus according to claim 1,
The password notification unit
When the data transmission destination is an email address, the password character string is transmitted to the data transmission destination.
An image reading apparatus. In the image reading apparatus in any one of Claims 1-7,
A password storage unit for storing the password character string;
A password character string output unit for outputting the password character string stored in the password storage unit;
Further comprising
If the password notification unit fails to notify the password character string, the password notification unit stores the password character string in the password storage unit.
An image reading apparatus. The image reading apparatus according to any one of claims 1 to 5,
A password storage unit for storing the password character string;
A password character string output unit that outputs the password character string stored in the password storage unit;
The password notification unit stores the password character string in the password storage unit;
An image reading apparatus. An image reading step of reading a document image and generating image data corresponding to the document image;
A data transmission destination setting step of setting the transmission destination of the image data as a data transmission destination;
A password setting step for setting a password character string used to encrypt the image data;
A password notification destination setting step of setting the notification destination of the password character string as a password notification destination;
Encrypting the image data using the password character string, and generating encrypted data to generate encrypted data;
An encrypted data transmission step of transmitting the encrypted data to the data transmission destination;
A password notification step of notifying the password character string to the password notification destination;
An image reading method comprising: An image reading step of reading a document image and generating image data corresponding to the document image;
A data transmission destination setting step of setting the transmission destination of the image data as a data transmission destination;
A password setting step for setting a password character string used to encrypt the image data;
A password notification destination setting step of setting the notification destination of the password character string as a password notification destination;
Encrypting the image data using the password character string, and generating encrypted data to generate encrypted data;
An encrypted data transmission step of transmitting the encrypted data to the data transmission destination;
A password notification step of notifying the password character string to the password notification destination;
A computer program that causes a computer to perform

Images