JP2013098755A - Image processing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an image processing system capable of surely preventing document data leakage.SOLUTION: When it receives browsing permission setting information and document identification information included in bar coding data transmitted from a terminal device 2, a server 3 searches the document data stored in storage means for document data of the document identification information from a portable terminal and determines whether the browsing permission setting information transmitted from a portable terminal 2 matches the browsing permission setting information associated with the searched document data. When it determines that the browsing permission setting information transmitted from the portable terminal 2 matches the browsing permission setting information associated with the searched document data, the server 3 transmits key information for decrypting an encryption specification region to the terminal device 2. The portable terminal 2 decrypts the encryption specification region using the key information transmitted from the server 3 and displays the decrypted region in display means 2b.

Description

  The present invention relates to an image processing system for enhancing the security of document data that can be printed by an image forming apparatus such as an MFP (Multi Function Peripherals) which is a multifunction digital multi-function peripheral.

  In recent years, in a company or office, when a user creates document information with a personal computer (PC) or the like, the PC used at home is avoided in order to avoid leakage of confidential information. In many cases, it is prohibited to take them outside.

  Further, conventionally, when the important area of the text is encrypted and the user decrypts the encrypted area using the decryption device, the server receives the authentication and receives the management received from the decryption device. If the number is sent to the server, the server finds the decryption key, sends the found decryption key and the encrypted area information to the decryption apparatus, and the decryption apparatus decrypts the encrypted area with the decryption key. Have been proposed (see, for example, Patent Document 1).

JP 2008-301471A

  However, even when taking out a PC is simply prohibited as in the prior art, when the created document data is printed using an MFP or the like, the printed matter can be carried around. In that case, if the printed material is carelessly lost or misplaced somewhere by carrying the printed material, information may be leaked.

  Further, in the above-described prior art, a decryption device is used. However, when data after decryption is printed, information is also leaked.

  The present invention has been made in view of the above circumstances, and an object thereof is to provide an image processing system capable of reliably preventing leakage of document data.

The above problem is solved by the following means.
(1) An image processing system including a server and a portable terminal connectable to the server, wherein the server generates identification information generating means for generating document identification information to be added to document data created by a user, and a user A key generation unit that generates a key for encrypting the encryption designated area in the document data designated by the document data, the document identification information generated by the identification information generation unit, the key generated by the key generation unit, and a user A storage unit for associating and storing the browsing permission setting information set by the key, and the encryption designation area is encrypted with the key generated by the key generation unit, and the encrypted data and the identification information generation unit The generated document identification information is bar-coded and the bar-coded data is converted into the dark data. Reconstructing means for reconstructing document data by substituting the designated data area, and the mobile terminal obtains the barcoded data obtaining means for obtaining the barcoded data in the document data, and the obtaining Transmitting means for transmitting the document identification information and the browsing permission setting information included in the bar-coded data to the server, and the server further includes portable data from the document data stored in the storage means. The search means for searching the document data of the document identification information transmitted from the terminal, and the browsing permission setting information transmitted from the portable terminal match the browsing permission setting information associated with the document data searched by the searching means. A judgment means for judging whether or not the darkness matches with the judgment means. Transmitting means for transmitting to the portable terminal key information for decrypting the encryption designation area, and the portable terminal further decrypts the encryption designation area using the key information transmitted from the server. An image processing system comprising: decrypting means for displaying; and display means for displaying the decrypted data in the encryption designation area.
(2) The image processing system according to (1), wherein the browsing permission setting information is position information indicating a position where a user who owns the portable terminal can browse the encryption designated area.
(3) The image processing system according to (1), wherein the browsing permission setting information information is time information indicating a time during which the user who owns the mobile terminal can browse the encryption designated area.
(4) The image processing system according to (1), wherein the browsing permission setting information information is user information indicating a user who can browse the encryption designation area.
(5) When the determination unit of the server determines that the browsing permission setting information transmitted from the mobile terminal does not match the browsing permission setting information associated with the document data searched by the searching unit, The server determines whether or not the approval information for viewing permission has been received from the user, and if the approval information has been received, the server transmits key information for decrypting the encryption designation area to the terminal device. An image processing system according to any one of the above.
(6) When there are a plurality of encryption areas in the document data, the key generation means of the server generates a different key for each encryption area, and the reconstruction means uses each generated key. 7. The image processing system according to any one of items 1 to 6, wherein each encryption area is encrypted.
(7) An image forming apparatus that receives and prints document data having the barcode-encoded encryption area from the server, the terminal device includes a photographing unit, and the document data printed by the image forming apparatus In the preceding items 1 to 6, the portable terminal captures the encrypted area in the printed matter by the photographing unit based on a user operation, and transmits the identification information to the server based on the photographed image data. The image processing system according to any one of the above.

  According to the invention described in the preceding paragraph (1), when the browsing permission setting information and the document identification information included in the barcode data are transmitted from the form terminal, the server that has received this transmits the document data stored in the storage means. The document data of the document identification information from the mobile terminal is searched for, and it is determined whether or not the browsing permission setting information transmitted from the portable terminal matches the browsing permission setting information associated with the searched document data. If it is determined that they match, the key information for decrypting the encryption designation area is transmitted to the terminal device. The portable terminal decrypts the encryption designation area using the key information transmitted from the server, and displays it on the display means.

  In this way, only when the browsing permission setting information held by the server matches the browsing permission setting information transmitted from the mobile terminal, decryption of the document data encryption designation area is permitted. Even if a situation occurs in which the printed document data is lost after being taken out or misplaced, the risk of the encrypted area being decrypted and leaked is reliably eliminated.

  According to the invention described in (2) above, since the browsing permission setting information is position information indicating a position where the user who owns the mobile terminal can browse the encryption designated area, the user is permitted to browse. By transmitting the position information from a position that matches the setting information, it is possible to easily browse the encryption designation area of the document data while ensuring security.

  According to the invention described in (3) above, since the browsing permission setting information is time information indicating a time during which the user who owns the mobile terminal can browse the encryption designated area, the user is permitted to browse. By transmitting the time information at a time suitable for the setting information, it is possible to easily browse the encryption designation area of the document data while ensuring security.

  According to the invention described in the above item (4), the browsing permission setting information information is user information indicating a user who can browse the encryption designated area. It is possible to easily browse the encryption specified area of the document data while ensuring the above.

  According to the invention described in (5) above, even if it is determined that the browsing permission setting information transmitted from the mobile terminal does not match the browsing permission setting information associated with the document data, for example, a boss or the like By the approval of viewing permission from the authorized person, it is possible to browse the encryption designated area of the document data.

  According to the invention described in item (6) above, when there are a plurality of encrypted areas in the document data, browsing for each encrypted area becomes possible.

  According to the invention described in (7) above, when the barcode-encrypted area in the printed matter printed by the image forming apparatus that has received the document data having the encryption area from the server is photographed by the photographing means of the portable terminal. Since the identification information is transmitted to the server based on the photographed image data, the operation becomes easy.

1 is a configuration diagram of an image processing system according to an embodiment of the present invention. It is a figure for demonstrating operation | movement of the image processing system shown in FIG. It is explanatory drawing of operation | movement in case the user of a portable terminal browses the encryption designation | designated area | region encrypted in document data. It is a figure for demonstrating operation | movement of the image processing system which concerns on other embodiment of this invention. It is a figure for demonstrating operation | movement of the image processing system which concerns on further another embodiment of this invention. It is explanatory drawing of operation | movement in case the user of a portable terminal browses the some encryption designation | designated area | region encrypted in document data. It is a figure which shows the state which image | photographs each barcode which is a some encryption area in printed matter. FIG. 5 is a sequence diagram illustrating a processing flow from when the server converts the encryption designation area into a barcode and when the MFP 1 prints the print data. 4 is a sequence diagram corresponding to FIG. 3 and showing a flow of processing for browsing an encryption designated area at a viewable position. FIG. FIG. 5 is a sequence diagram corresponding to FIG. 4 and showing a flow of processing for browsing the encryption designation area with the approval of the authorized person. FIG. 6 is a sequence diagram corresponding to FIG. 5 and showing a flow of processing for browsing a printed material when encryption is performed with a different key for each of a plurality of encryption designation areas.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a block diagram showing an image processing system according to an embodiment of the present invention.

  In FIG. 1, this image processing system includes an MFP 1 that is a multifunction digital multi-function peripheral as an image processing apparatus, a mobile terminal 2 such as a mobile phone and a tablet terminal owned by a user who can use the MFP 1, and a management. A server (simply referred to as a server) 3 and a user terminal (a user PC or simply a PC) 4 comprising a personal computer are provided. These MFP 1, portable terminal 2, server 3, and user PC 4 are connected to a network. 5 is connected.

  The MFP 1 includes an arithmetic processing unit 11, a printing unit 12, an image reading unit 13, an operation panel unit 14, a storage unit 15, a position information acquisition unit 16, and a network communication unit 17.

  The arithmetic processing unit 11 includes a CPU, a ROM, a RAM, and the like, and comprehensively controls the overall operation of the MFP 1.

  The printing unit 12 is a print engine unit that prints image data such as a document image and a received image on a document table on a sheet according to predetermined job conditions.

  The image reading unit 13 is a scanner unit that reads a document image on a document and converts it into image data.

  The operation panel unit 14 is used by the user to perform operation input. Although not shown, the operation panel unit 14 includes a key unit such as a start key, a stop key, and a numeric keypad, a liquid crystal touch panel, and the like. A display unit for displaying messages and the like is included.

  The storage unit 15 is a storage unit that stores various data such as image data, programs, and the like, and includes, for example, a hard disk drive (HDD).

  The network communication unit 17 is an interface that manages data exchange with each device (such as the portable terminal 2 and the server 3) on the network 5.

  In addition to the photographing unit 2a provided with the camera and the touch panel type display unit 2b, the portable terminal 2 functionally acquires the current position information related to the browsing permission setting information using the GPS function or the like. The position information acquisition unit 21, the transmission unit 22 that transmits the user name, the document ID that is the identification information of the document data, etc. to the server 3 together with the acquired position information, and the reception that receives the key information transmitted from the server 3 23, a decryption unit 24 for decrypting the encrypted data with the received key information, an analysis unit 25 for reading and analyzing a barcode such as a two-dimensional code photographed by the photographing unit 2a ing. Various functions of the portable terminal 2 are also realized by control by a control unit including a built-in CPU, ROM, and RAM.

  The server 3 includes a personal computer, and includes a CPU 31, a ROM 32, a RAM 33, a storage unit 34, a display device 35, an input device 36, a network interface unit (network I / F unit) 37, etc., and is connected to each other via a system bus 38. Has been.

  The CPU 31 comprehensively controls the entire server 3 by executing a program stored in the ROM 32. In particular, in this embodiment, a key and a document ID for encrypting the encryption designation area are generated for the document data transmitted from the MFP 1 together with information indicating the user name and the encryption designation area. These are associated with each other and further stored in association with the position information indicating the position where the user who owns the mobile terminal can view the encryption designated area, which is transmitted from the user PC 4 as one of the browsing permission setting information. Save to Part 4. In addition, the encryption designation area of the document data is encrypted with the generated key, and the encrypted data and the document ID are combined to be barcoded into a two-dimensional code, and the encrypted data is designated as the encryption designation. Control is performed by replacing the area and reconstructing the document data.

  Further, the CPU 31 searches the user's document data from the information including the user name, the position information, and the document ID transmitted from the portable terminal 2, or the position information associated with the retrieved document data, and the portable terminal 2. Is compared with the user's location information sent from, and it is determined whether or not they match each other. If it is determined that they match each other, the encryption specification area of the document data is encrypted. Control such as transmitting key information to the portable terminal 2 is performed, details of which will be described later.

  The ROM 32 is a storage medium that stores programs to be executed by the CPU 31 and other data.

  The RAM 33 is a storage medium that provides a work area when the CPU 31 operates according to the operation program.

  The storage unit 34 includes a storage medium such as a hard disk, and stores various data and programs. In this embodiment, as described above, the user name, document data, key information, document ID, position information that is browsing permission setting information, and the like are stored in association with each other from the image forming apparatus 1.

  The display device 35 includes a CRT, a liquid crystal display device, and the like, and displays various messages and an input reception screen, a selection screen, and the like for the user.

  The input device 36 is used for an input operation by a user, and includes a keyboard, a mouse, and the like.

  The network interface unit 37 functions as a communication unit that transmits and receives data to and from the image forming apparatus 1, the mobile terminal 2, and the user PC 4 via the network 5.

  FIG. 2 is a diagram for explaining the operation of the image processing system shown in FIG.

  In FIG. 2, first, when document data created by the user using the PC 4 is securely printed using the MFP 1, the PC 4 is operated to designate important portions (areas to be encrypted) of the document data (FIG. 2). (1)) The print data of the document data is transmitted from the PC 4 to the MFP 1 with the user name and information indicating the encryption designation area (also referred to as area information) ((2) in FIG. 2).

  Upon receiving the print data, the MFP 1 transmits the print data to the server 3 together with the user name and area information ((3) in FIG. 2).

  The server 3 generates a document ID and a key for encrypting the encryption designation area, and associates (associates) it with the user name ((4) in FIG. 2).

  The server 3 encrypts the encryption designation area with the generated key ((5) in FIG. 2), converts the encrypted data and the plain text document ID into a bar code ((6) in FIG. 2), The print data is reconstructed by replacing the converted data with the encryption designation area ((7) in FIG. 2).

  The server 3 sends the reconstructed print data to the MFP 1 ((8) in FIG. 2) and transmits the document ID to the user PC 4 ((9) in FIG. 2).

  The user designates the document ID transmitted from the server 3, and transmits the browsing permission setting information from the user PC 4 to the server 3 ((10) in FIG. 2). This browsing permission setting is to set conditions for permitting the user of the terminal device 2 to browse the encryption designation area encrypted by the server. In this embodiment, the user sets the encryption designation area. Position information indicating a position where browsing is possible is set. When the server 3 receives the setting information, it stores the setting information in association with the document data of the corresponding document ID. The browsing permission setting for the server 3 may be performed any time after the document ID is transmitted from the server 3 to the user PC 4.

  Upon receiving the print data from the server 3, the MFP 1 prints it on a paper medium (paper) ((11) in FIG. 2). The encryption specification area of the document data is printed in a bar code state. Instead of printing, it may be transmitted to a designated address of the portable terminal 2 ((12) in FIG. 2).

  FIG. 3 is an explanatory diagram of the operation when the user of the mobile terminal 2 browses the encrypted encryption designated area in the document data.

  In FIG. 3, a user at a viewable position uses the photographing unit 2 a of the mobile terminal 2 to photograph a barcode that is an encryption designation area in a printed material ((1) in FIG. 3). The portable terminal 2 reads and analyzes the photographed barcode and extracts a document ID.

  The user operates the mobile terminal 2 to transmit the document ID, the user name, and the current position information acquired by the position information acquisition unit 21 to the server 3 ((2) in FIG. 3). Note that the document ID may be transmitted as it is in the form of barcode encoded image data, and the document ID may be extracted on the server 3 side.

  The server 3 searches the document data stored in the database (referred to as DB) in the storage unit 34 for the document data that matches the received document ID ((3) in FIG. 3). For example, the position information stored in association with the document data as the browsing permission setting information is compared with the position information of the user received from the portable terminal 2 to determine whether or not they match ((4) in FIG. 3). ). If they match, the server 3 transmits key information that can decrypt the encrypted data in the encryption designated area in the document data to the portable terminal 2 ((5) in FIG. 3).

  The portable terminal 2 decrypts the data of the encryption designation area obtained by analyzing the image data of the captured bar-coded area with the received key and displays it on the display unit 2b ((6 in FIG. 3). )).

  As described above, the user browses the document data using the portable terminal 2 only when the positional information transmitted from the portable terminal 2 matches the positional information as the browsing permission setting information held in the server 3. can do. In other words, even if the user takes out the printed matter on which the document data is printed and accidentally leaves it, the encryption designation area is printed in a barcoded state, so that there is a risk that important information may be leaked. Can be resolved.

  FIG. 4 is a diagram for explaining the operation of the image processing system according to the second embodiment of the present invention. In this embodiment, when it is determined that the position information transmitted from the mobile terminal 2 does not match the position information as the browsing permission setting information held in the server 3, the viewing permission is given from an authority such as a supervisor. The approval allows browsing of the encryption specified area of the document data.

  In FIG. 4, the user uses the photographing unit 2a of the portable terminal 2 to photograph a barcode that is an encryption designation area in the printed matter ((1) in FIG. 4). The portable terminal 2 reads and analyzes the photographed barcode and extracts a document ID.

  The user operates the portable terminal to transmit the document ID, the user name, and the current position information to the server 3 ((2) in FIG. 4). Note that the document ID may be transmitted as it is as barcode image data, and the document data may be extracted on the server 3 side.

  The server 3 searches the internal document database for document data that matches the received document ID ((3) in FIG. 4). The positional information stored in association with the document data is compared with the positional information of the user received from the mobile terminal, and it is determined whether or not they match ((4) in FIG. 4). If they do not match, the server 3 determines that “browsing is not permitted”, notifies the user's portable terminal 2 of “browsing is not permitted” ((5) in FIG. 4), and “browse is not permitted” to the portable terminal 2. Is displayed ((6) of FIG. 4).

  The user of the portable terminal 2 that has received the “browsing disapproval” notification requests the approval of the authorized person such as the supervisor ((7) in FIG. 4), and sends the “approval request” notification to the supervisor. The document data is transmitted to the supervisor's designated address ((8) in FIG. 4). The document data to be transmitted may be any document data that allows the supervisor to identify the content of the document data, or may be a photograph of a part of the printed matter.

  The boss confirms the position information and the document data with his / her user PC 6 and accepts the “approval request” ((9) in FIG. 4), and notifies the server 3 of “browsing permission” ((10 in FIG. 4). )). Upon receiving this permission notice, the server 3 transmits key information that can decrypt the encrypted data in the encryption designated area in the document data to the user's portable terminal 2 ((11) in FIG. 4). .

  The portable terminal 2 decrypts the encrypted area data obtained by analyzing the captured image data of the barcode-coded area with the received key information and displays it on the display unit 2b ((12 in FIG. 4). )).

  As described above, in this embodiment, even when it is determined that the position information transmitted from the mobile terminal 2 does not match the position information associated with the document data and stored in the server 3, for example, a boss or the like. By the approval of viewing permission from the authorized person, it is possible to browse the encryption designated area of the document data.

  5 to 7 are diagrams for explaining the operation of the image processing system according to the third embodiment of the present invention. In this embodiment, a plurality of encryption areas are designated for document data.

  In FIG. 5, when document data created by the user with the PC 4 is securely printed using the MFP 1, the PC 4 is operated to designate important portions (areas to be encrypted) of the document data ((( 1)), print data of the document data is transmitted from the PC 4 to the MFP 1 with the user name and information of the encryption designation area attached ((2) in FIG. 5). In this case, a plurality of encryption areas can be specified. Also, the same encryption key may be assigned to all areas, or different keys may be assigned to each area.

  Upon receiving the print data, the MFP 1 transmits the print data to the server 3 together with the user name and the encryption designation area information ((3) in FIG. 5).

  The server 3 generates a document ID, an area ID for identifying each of the plurality of encryption designation areas, and a key for encrypting each encryption designation area, and associates (associates) them with the user name. ((4) in FIG. 5).

  The server 3 encrypts the encryption designated area with each generated key ((5) in FIG. 5), and barcodes the encrypted data together with the plain text document ID and area ID ((6 in FIG. 5). )), The barcode data is replaced with the encryption designation area to reconstruct the print data ((7) in FIG. 5).

  The server 3 sends the reconstructed print data to the MFP 1 ((8) in FIG. 5), and transmits the document ID and area ID to the user PC 4 ((9) in FIG. 5).

  The user designates the document ID transmitted from the server 3 and transmits position information as browsing permission setting from the user PC 4 to the server 3 ((10) in FIG. 5). When the server 3 receives the setting information, it stores the setting information in association with the document data of the corresponding document ID. In this case, different setting information may be set for each area ID indicating each encryption designation area. The browsing permission setting for the server 3 may be performed any time after the document ID is transmitted from the server 3 to the user PC 4.

  Upon receiving the print data from the server 3, the MFP 1 prints it on a paper medium (paper) ((11) in FIG. 5). The encryption specification area of the document data is printed in a bar code state. Instead of printing, it may be transmitted to a designated address of the portable terminal 2 ((12) in FIG. 5).

  FIG. 6 is an explanatory diagram of an operation when the user of the mobile terminal 2 views a plurality of encrypted encryption designated areas in the document data.

  In FIG. 6, the user uses the imaging unit 2a of the mobile terminal 2 to image each of the barcodes SA and SB, which are a plurality (two in this case) of encrypted areas in the printed material, as shown in FIG. (1) of FIG. The portable terminal 2 reads and analyzes the photographed bar code, and extracts a document ID and a region ID. In this example, the position information of company A is used as the browsing permission setting information for the encryption designation area of the barcode SA, and the position information of company B is used as the browsing permission setting information for the encryption designation area of the barcode SB. It is assumed that each is set.

  The user operates the portable terminal 2 to transmit the document ID, region ID, user name, and current position information to the server 3 ((2) in FIG. 6). Note that the document ID and the area ID may be transmitted as they are in the form of barcode-coded image data, and the document ID and area ID may be extracted on the server 3 side.

  The server 3 searches the document data stored in the database of the storage unit 34 for document data that matches the received document ID ((3) in FIG. 6). The position information for each encryption designation area stored in association with the document data as setting information is compared with the position information of the user received from the mobile terminal 2 to determine whether or not they match (FIG. 6). (4)).

  If the user is currently in company A, only the position information that is the browsing permission setting information for the encryption designation area of the barcode SA for company A matches the position information of the user received from the mobile terminal 2.

  Therefore, key information that can decrypt the encrypted data in the encryption designation area for company A in the document data is transmitted from the server 3 to the portable terminal 2 ((5) in FIG. 6).

  The portable terminal 2 decrypts the data of the encryption designation area obtained by analyzing the image data of the captured bar-coded area with the received key and displays it on the display unit 2b ((6 in FIG. 6). )).

  Thus, when there are a plurality of encrypted areas in the document data, browsing for each encrypted area becomes possible.

  FIG. 8 is a sequence diagram showing a processing flow until the server barcodes the encryption designation area and the MFP 1 prints the print data.

  In FIG. 8, in step S101, the user designates an area where document data (print data) is to be encrypted by an application on the PC 4, and instructs printing. In step S102, the PC 4 transmits the user name, encryption designation area (area information), and print data (full text) to the MFP 1. In step S103, the MFP 1 connects to the server 3, and the user name, encryption designation area, Send print data.

  In step S104, the server 3 generates a document ID and an encryption key for the received document data, and stores the generated information in association with the user name. In step S105, the server 3 encrypts the encryption designation area with the generated key.

  In step S106, the server 3 combines the encrypted data and the plain text document ID into a barcode, and in step S107, the server 3 replaces the barcoded data with the encryption designation area and reprints the print data. To construct.

  In step S <b> 108, the server 3 transmits the reconstructed print data to the MFP 1. Further, the generated document ID is transmitted to the user PC 4, and the user transmits position information that permits browsing permission as the browsing permission setting information from the user PC 4 together with the document ID, and the server 3 associates the document ID with the browsing permission setting information. Save.

  In step S109, the MFP 1 prints the received print data on a paper medium.

  As shown in FIG. 5, when there are a plurality of encryption designation areas (for example, two area steps SA and SB) and encryption is performed with a different key for each area, in step S104, the server 3 generates the generated document ID, the area ID corresponding to the encryption designation area, and key information for each area, and stores the generated document ID after associating it with the user name.

  In step S105, the server 3 encrypts the encryption designation area with the key information generated for each area ID. In step S106, the server 3 encrypts the encrypted data, the plaintext document ID, and the plaintext area. The ID will be converted into a barcode.

  FIG. 9 is a sequence diagram corresponding to FIG. 3 and showing a flow of processing for browsing the encryption designated area at a viewable position.

  In FIG. 9, in step S <b> 201, the user uses the imaging unit 2 a of the portable terminal 2 to photograph a bar-coded area of the printed matter. And the user name and the document ID read from the barcode are transmitted to the server 3.

  In step S203, the server 3 searches for whether or not the document data matching the received document ID exists in the DB, and if there is a matching document in step S204, the position as the browsing permission setting information. The information and the current position information of the user received from the portable terminal 2 are compared. In this example, since the comparison results match, it is determined that “browsing is permitted”, and in step S205, the server 3 transmits key information for decrypting the encrypted area to the portable terminal 2.

  In step S206, the portable terminal 2 decrypts the data encrypted by the received key information and displays it on the display unit 2b.

  FIG. 10 is a sequence diagram corresponding to FIG. 4 and showing a flow of processing for browsing the encryption designation area with the approval of the authorized person.

  In FIG. 10, in step S301, the user uses the imaging unit 2a of the portable terminal 2 to photograph a bar-coded area of the printed matter, and in step S302, the portable terminal 2 displays the current position information by the user's operation. And the user name and the document ID read from the barcode are transmitted to the server 3.

  In step S303, the server 3 searches for whether or not document data matching the received document ID exists in the DB, and if there is a matching document in step S304, the position as the browsing permission setting information. The information is compared with the position information received from the mobile terminal 2. In this example, since the comparison results do not match, it is determined that “browsing is not permitted”, and the server 3 transmits a “browsing is not permitted” notification to the mobile terminal 2 in step S305.

  In step S <b> 306, the mobile terminal 2 displays “not permitted to browse” to the user via the display unit. In step S307, the user requests approval from the boss in order to obtain permission from the boss who is an authorized person.

  In step S308, the mobile terminal 2 transmits an approval request notification including the current position information and each piece of document information to the supervisor's PC.

  In step S309, the boss checks each piece of information on the user's position information and document data by using an application on the PC, and determines whether or not approval is possible. When the boss approves, in step S310, the boss's PC application notifies the server 3 that the approval request for viewing has been approved.

  In step S311, the server 3 transmits key information for decryption to the mobile terminal 2, and in step S312, the mobile terminal 2 decrypts the encrypted data with the received key information, and displays the display unit 2b. To display.

  FIG. 11 corresponds to FIG. 5 and is a sequence diagram showing a flow of processing for browsing a printed material when encryption is performed with a different key for each of a plurality of encryption designation areas.

  In FIG. 11, it is assumed that the user is in the meeting room of the company A that is being visited, and the document data that is to be browsed has an area setting for the company A and an area setting for the company B. And

  In step S401, the user uses the imaging unit 2a of the portable terminal 2 to photograph a bar-coded area of the printed matter. In step S402, the portable terminal 2 displays the current position information and user name, The document ID read from the code and the area ID indicating the encryption designated area are transmitted to the server 3.

  In step S403, the server 3 searches for whether or not the document data matching the received document ID exists in the DB, and if there is a matching document in step S404, the position as the browsing permission setting information. The information is compared with the position information received from the mobile terminal 2. In this example, since the user is in company A, it is determined that “browsing is not permitted” for the encryption designation area of the area ID for company B.

  In step S <b> 405, the server 3 transmits an area ID and key information for the company A that can be browsed to the mobile terminal 2. In step S406, the mobile terminal 2 decrypts the encrypted data in the area indicated by the area ID using the received key information, and displays the decrypted data on the display unit 2b.

  Although one embodiment of the present invention has been described above, the present invention is not limited to the above embodiment.

  For example, the location information of the user who wants to browse is set as the browsing permission setting information, but the browsing permission setting information is time information indicating a time during which the user who owns the mobile terminal can browse the encryption designated area. Also good. In this case, the user can easily browse the encryption designated area of the document data while ensuring security by transmitting time information at a time suitable for the viewing permission setting information.

  Further, the browsing permission setting information information may be user information indicating a user who can browse the encryption designated area. In this case, a user who conforms to the browsing permission setting information can easily browse the encryption specified area of the document data while ensuring security.

  In addition, the user transmits document data including an encryption designation area from the PC 4 as print data to the MFP 1 and is transferred from the MFP 1 to the server 3. However, the user designates encryption from the PC 4 without the MFP 1. The document data including the area may be directly transmitted to the server 3, and the document data obtained by encrypting and encoding the encryption designated area may be directly transmitted from the server 3 to the portable terminal 2.

1 Image forming device (MFP)
2 mobile terminal 2a imaging unit 2b display unit 3 server 5 network 21 mobile terminal transmission unit 22 mobile terminal reception unit 23 mobile terminal decoding unit 31 CPU of server
34 Memory

Claims (7)

An image processing system comprising a server and a portable terminal connectable to the server,
The server
Identification information generating means for generating document identification information to be attached to document data created by a user;
Key generation means for generating a key for encrypting the encryption designated area in the document data designated by the user;
Storage means for storing the document identification information generated by the identification information generation means, the key generated by the key generation means, and the browsing permission setting information set by the user in association with each other;
The encrypted designation area is encrypted with the key generated by the key generation means, and the encrypted data and the document identification information generated by the identification information generation means are combined into a barcode, and the data is converted into a barcode. Reconstructing means for reconstructing document data by substituting
With
The portable terminal includes a barcoded data acquisition unit that acquires the barcoded data in document data;
Transmitting means for transmitting the document identification information and the browsing permission setting information included in the acquired barcoded data to the server;
With
The server further includes search means for searching for document data of document identification information transmitted from the portable terminal from among the document data stored in the storage means,
Determining means for determining whether or not the browsing permission setting information transmitted from the mobile terminal matches the browsing permission setting information associated with the document data searched by the searching means;
When it is determined that they match, the transmission means for transmitting the key information for decrypting the encryption designation area to the portable terminal,
With
The portable terminal further includes decryption means for decrypting the encryption designated area using the key information transmitted from the server;
Display means for displaying the decrypted data in the designated encryption area;
An image processing system comprising:   The image processing system according to claim 1, wherein the browsing permission setting information is position information indicating a position where a user who owns the mobile terminal can browse the encryption designation area.   The image processing system according to claim 1, wherein the browsing permission setting information information is time information indicating a time during which a user who owns the portable terminal can browse the encryption designated area.   The image processing system according to claim 1, wherein the browsing permission setting information information is user information indicating users who can browse the encryption designation area.   The determination means of the server, when it is determined that the browsing permission setting information transmitted from the mobile terminal does not match the browsing permission setting information associated with the document data searched by the searching means, It is determined whether permission approval information has been received. If the approval information has been received, the server transmits key information for decrypting the encryption designation area to the terminal device. An image processing system according to claim 1.   The key generation means of the server generates a different key for each encryption area when there are a plurality of encryption areas in the document data, and the reconstructing means uses each generated key to The image processing system according to claim 1, wherein the encryption area is encrypted. An image forming apparatus that receives and prints document data having the barcode-encoded encryption area from the server;
The terminal device includes photographing means,
The portable terminal captures a barcode-encrypted area in a printed matter of document data printed by the image forming apparatus with a photographing unit based on a user operation, and the identification information based on the photographed image data. The image processing system according to claim 1, wherein the image processing system is transmitted to the server.

Images