KR100727960B1 - Apparatus and method for managing secure file - Google Patents

Abstract

Disclosed are a print data output method and apparatus. The method comprises the steps of: (a) extracting location information contained in a given print data file; (b) determining whether there is location information coincident between the extracted location information and the prepared location information; And (c) if it is determined that the match, characterized in that it comprises the step of interpreting the print data contained in the print data file. Therefore, even if anyone can access the print data file on the network, the present invention has the effect of preventing illegal leakage of the print data. Furthermore, the present invention can enhance the security effect by encrypting at least one of the print data and the positional information. In addition, the present invention is different from the authentication password used for encrypting the location information and the authentication password used for encoding the print data, so that the security of the contents of the print data is maintained even if one of the two authentication passwords is illegally leaked. Effect. In addition, the present invention also has the effect of allowing the user to recognize the general information about the contents contained in the print data before the security data is decrypted by managing the print data file containing the meta data.

Description

Apparatus and method for managing secure file}

1 is a block diagram of an embodiment for explaining the principle of generating a print data file by the print data output apparatus according to the present invention.

2 and 3 are reference diagrams for describing the block diagram shown in FIG. 1.

4 is a reference diagram for describing a path capable of obtaining location information.

5A to 5D are diagrams representing the acquired location information in the form of XML.

6 is a diagram illustrating an example of metadata in the form of XML.

FIG. 7 is a structural diagram for describing a print data file generated by the print data output apparatus shown in FIG. 1.

Fig. 8 is a flowchart of the first embodiment for explaining the principle of generating a print data file by the print data output device according to the present invention.

Fig. 9 is a flowchart of a second embodiment for explaining the principle of generating a print data file by the print data output device according to the present invention.

FIG. 10 is a block diagram of an embodiment for explaining a case where print data included in a print data file given to a print data output apparatus according to the present invention can be interpreted.

FIG. 11 is a reference diagram for describing the block diagram shown in FIG. 10.

12 is a flowchart of one embodiment for explaining the case where print data can be interpreted by the print data output apparatus according to the present invention.

<Description of Symbols for Main Parts of Drawings>

110: authentication password input unit 112: file encryption unit

114: location information generation unit 116: location information encryption unit

118: location information insertion unit 120: metadata generation unit

122: metadata insertion unit 124: image acquisition unit

1112: metadata recognition unit 1116: location information decoding unit

1118: location information acquisition unit 1120: inspection unit

1122: user interface unit 1124: file decryption unit

The present invention relates to the management of a print data file, and more particularly, to the print data contained in the print data file only when there is a positional information corresponding to the position information extracted from a given print data file and the prepared position information. The present invention relates to a print data output method and apparatus for preventing illegal leakage of print data by forming an image.

According to the conventional print data output apparatus, the print data file is generated by encrypting the print data by using an authentication password provided in advance. At this time, the print data may be document data or image data.

Since the print data file generated by the conventional print data output device is encrypted, a third party who wants to know the contents of the print data must decrypt the print data file and recognize the authentication password used for the encryption. Should be doing.

As a result, the conventional print data output apparatus can know the contents of the print data if only the authentication password used for the encryption is disclosed, and thus, the security of the print data contents cannot be guaranteed when the print data file is leaked to the outside. Therefore, there is a problem that illegal external leakage of the print data is possible. Further, the conventional print data output apparatus also has a problem in that the user cannot recognize the contents of the managed print data in advance before the print data file is decrypted.

The technical problem to be solved by the present invention is to form print data by forming an image of the print data included in the print data file only when there is a position information coincident between the position information extracted from the given print data file and the prepared position information. It is to provide a print data output method to prevent illegal leakage of the product.

Another technical problem to be solved by the present invention is to print by forming an image of the print data included in the print data file only when there is a position information coincident between the position information extracted from the given print data file and the prepared position information. It is to provide a print data output device that prevents illegal leakage of data.

Another technical problem to be solved by the present invention is to form an image of the print data included in the print data file only when there is a position information coincident between the position information extracted from the given print data file and the prepared position information. It is to provide a computer-readable recording medium that stores a computer program to prevent illegal leakage of print data.

In order to achieve the above object, the print data output method according to the present invention, (a) extracting the position information contained in the given print data file; (b) determining whether there is location information coincident between the extracted location information and the prepared location information; And (c) if it is determined that the match, characterized in that it comprises the step of interpreting the print data contained in the print data file.

Preferably, the extracted position information of the present invention is position information of a place capable of forming an image of the print data, and the provided position information of the present invention is position information of a place where step (c) is performed.

The present invention preferably further comprises the step of (d) forming an image of the print data. The present invention preferably further comprises the step of (e) if it is determined that they do not match, notifying the user that the interpretation of the print data is impossible.

Step (c) of the present invention, if determined to match (c1), decrypting the security data included in the print data file; And (c2) analyzing the print data that is the result of the decryption, wherein the secure data is the encrypted print data.

In the step (a) of the present invention, the extraction is performed by decrypting the position information included in the print data file, and the position information included in the print data file is preferably encrypted position information.

If both the print data and the position information included in the print data file according to the present invention are encrypted, the step (a) of the present invention uses the given first authentication password to provide the position information included in the print data file. The extraction is performed by decrypting the location information, and the location information included in the print data file is location information encrypted using the first authentication password. In step (c), if it is determined to be identical, the second authentication password is given. Decrypt the security data by using, the security data is print data encrypted using the second authentication password, the second authentication password may be different from the first authentication password. In this case, the print data file of the present invention may include metadata, and the metadata is data containing arbitrary information about the print data.

In order to achieve the above object, the print data output method according to the present invention comprises the steps of: (a) generating location information of a place capable of forming an image of a given print data; And (b) inserting the generated position information into the given print data to generate a print data file.

The step (a) of the present invention generates the security data and the location information, and the step (b) inserts the generated location information into the generated security data to generate the print data file, the security data Preferably, the print data is an encrypted result.

The step (a) of the present invention further includes the step of encrypting the location information, and the step (b) preferably inserts the encrypted location information into the security data.

In the step (a) of the present invention, the generated location information is encrypted using a given first authentication password, the print data is encrypted using a given second authentication password, and the first authentication password and the first authentication password are used. 2 It is preferable that authentication passwords are different.

Step (b) of the present invention includes: (b1) inserting the generated location information into the generated security data; And (b2) inserting metadata into the inserted result, wherein the metadata is data containing arbitrary information about the print data.

In order to achieve the above object, the print data output apparatus according to the present invention, the position information extraction unit for extracting the position information contained in the given print data file; An inspection unit for inspecting whether there exists location information matching between the extracted location information and the provided location information; And a print data analyzer configured to interpret print data included in the print data file in response to the inspected result.

In order to achieve the above another object, the print data output apparatus according to the present invention, the position information generation unit for generating the position information of the place capable of forming the image of the given print data; And a location information insertion unit for generating a print data file by inserting the generated location information into the given print data.

In order to achieve the above another object, a computer-readable recording medium according to the present invention, (a) extracting the location information contained in a given print data file; (b) determining whether there is location information coincident between the extracted location information and the prepared location information; And (c) if it is determined to match, interpreting the print data included in the print data file.

According to another aspect of the present invention, a computer-readable recording medium according to the present invention includes the steps of: (a) generating location information of a place where image formation of a given print data is possible; And (b) inserting the generated position information into the given print data to generate a print data file.

Hereinafter, with reference to the accompanying drawings will be described in detail an embodiment of a print data output method and apparatus according to the present invention. However, terms to be described below are terms defined in consideration of functions in the present invention, and may be changed according to intentions or customs of users or operators. Therefore, the definition should be made based on the contents throughout the specification.

1 is a block diagram of an embodiment for explaining a print data output apparatus according to the present invention, wherein an authentication password input unit 110, a file encryption unit 112, a location information generation unit 114, and a location information encryption unit 116 are shown. ), The location information inserting unit 118, the metadata generating unit 120, the metadata inserting unit 122 and the image acquisition unit 124.

The print data file managed by the print data output device according to the present invention means a file for which security is required. More specifically, the print data file managed by the print data output apparatus according to the present invention means a file generated by processing the print data so that only the authorized person can check the contents of the print data.

The print data file managed by the print data output apparatus according to the present invention may be composed of position information and print data. In this case, the print data file means print data into which position information is inserted. The positional information to be inserted into the print data means the positional information of a place where the image of the print data can be formed. For example, when print data in which the position information of the places a, c, and d are inserted is given to a certain image forming apparatus, the position information acquired by the image forming apparatus is used to print the given print data in the image forming apparatus. It must exist in the position information inserted in the print data. Therefore, if the image forming apparatus was provided at a place b, and the position information of b was obtained as a result of acquiring the position information of the place where it was provided, the image forming apparatus cannot print the given print data.

As a result, even if each of the print data and the positional information is not encrypted, the print data cannot be printed at places other than a, c, and d. That is, the print data into which the positional information is inserted can be kept secure, and therefore, the position data into which the positional information is inserted can be called a print data file.

On the other hand, the print data file may be composed of metadata, encrypted location information and encrypted print data. That is, for more complete security, each of the location information and the print data included in the print data file may be encrypted location information and encrypted print data. In this case, each of the location information and the print data may be encrypted using an authentication password. More specifically, the location information may be encrypted using the first authentication password, and the print data may be encrypted using the second authentication password.

The block diagram shown in FIG. 1 shows a block diagram for generating a print data file composed of meta data, encrypted location information, and encrypted print data. Therefore, if the block diagram shown in FIG. 1 generates a print data file composed of unencrypted location information and unencrypted print data, the authentication password input unit 110, the file encryption unit 112, and the location information encryption in FIG. The unit 116, the metadata generator 120, and the metadata inserter 122 may not be provided.

Hereinafter, all the blocks of FIG. 1 will be described in detail. That is, the description of FIG. 1 disclosed below is a description of the print data file when both the print data and the position information included in the print data file are encrypted.

The authentication password input unit 110 receives at least one of the first authentication password and the second authentication password. Here, the first authentication password means an authentication password used when encrypting the location information, and the second authentication password means an authentication password used when encrypting the print data. On the other hand, when the print data and the location information included in the print data file is not encrypted, the authentication password input unit 110 may not be provided in the present invention.

On the other hand, the encrypted print data is referred to as security data hereinafter.

The first authentication password described above is also used when decrypting the encrypted location information, and similarly, the second authentication password is also used when decrypting the security data. On the other hand, the first authentication password and the second authentication password is preferably different from each other.

The file encryption unit 112 may encrypt the input print data using the second authentication password input to the authentication password input unit 110. At this time, IN 1 is the input print data. As a result, the file encryption unit 112 generates security data.

The location information generation unit 114 generates location information of one or more places where the security data can be decrypted. To this end, it is preferable that the place where the security data can be decrypted is predetermined or predetermined. That is, the location information generation unit 114 generates and outputs location information of the designated or determined place.

Meanwhile, the location information generation unit 114 may obtain location information of a place where the location information is provided, and output one or more location information that is previously matched with the obtained location information. A possible example of a path where the location information generator 114 obtains location information of a place where it is provided will be described in the description of FIG. 4 to be described later.

The location information encryption unit 116 encrypts the location information generated by the location information generation unit 114 using the first authentication password input to the authentication password input unit 110. As a result, the location information encryption unit 116 generates encrypted location information.

The location information insertion unit 118 inserts the encrypted location information into the security data generated by the file encryption unit 112.

The metadata generator 120 generates metadata to be included in the print data file. Here, meta data is data containing arbitrary information regarding print data. For example, the metadata may include any information about the contents of the print data and any information about the manager of the print data.

Here, the arbitrary information regarding the contents of the print data includes the title of the print data, the creator of the print data, the creation time of the print data, the last change time of the print data, the management number of the print data, and the print. It may include an outline of the data.

Further, any information about the administrator of the print data may include the administrator's name, the administrator's telephone number, the administrator's email address, and the like.

The metadata inserting unit 122 inserts the generated metadata into the result output from the location information inserting unit 118 to generate a print data file. Here, the result output from the location information insertion unit 118 means secure data into which the encrypted location information is inserted. On the other hand, OUT 1 means the generated print data file.

When IN 1 is not print data but a hard copy document, it is preferable that an image acquisition unit 124 is provided in the print data output device according to the present invention.

The image acquisition unit 124 scans the document to generate image data. Hereinafter, print data in the case where IN 1 is a file type is called document data, and print data in the case where IN 1 is a hard copy type document is called image data.

FIG. 2 is a reference diagram for describing the block diagram shown in FIG. 1. Reference numerals 210, 220, and 230 refer to document data, a driver, and an image forming apparatus, respectively. Meanwhile, reference numerals 240, 250, and 260 are the same as reference numerals 112, 118, and 122, respectively, shown in FIG.

Here, the document data may be any type of file that can be generated using a file printing function. That is, the document data may be a file of a type that can be directly output from the image forming apparatus 230. The driver may be a driver provided in the host device connected to the image forming apparatus 230. At this time, the image forming apparatus 230 becomes a peripheral device of the host device. A printer, a multifunction peripheral (MFP) may be an example of the image forming apparatus 230.

The document data 210, the first authentication password and the second authentication password input to the authentication password input unit 110, location information generated by the location information generator 114, and meta generated by the metadata generator 120. All of the data is provided to the driver 220.

The driver 220 provides all of the provided document data 210, the first authentication password, the second authentication password, the location information, and the meta data to the image forming apparatus 230. The image forming apparatus 230 may include a file encryption unit 240, a location information encryption unit 116, a location information insertion unit 250, and a metadata insertion unit 260.

In this case, the file encryption unit 240 encrypts the document data to generate security data, and the location information encryption unit 116 encrypts the location information. In addition, the location information insertion unit 250 inserts encrypted location information into the security data, and the metadata insertion unit 260 inserts metadata into the security data into which the location information is inserted.

The print data file generated by the metadata inserting unit 260 is transferred to the driver 220. At this time, a file having an extension of prn is preferable, and the transferred print data file is named as a file having an extension of eprn (encrypted prn).

On the other hand, if the print data file managed by the print data output apparatus according to the present invention is composed of unencrypted location information and unencrypted print data, in FIG. 2, the first authentication password, the second authentication password, and the meta data are drivers ( 220, the file encryption unit 240 and the metadata insertion unit 260 may not be provided in the print data output device illustrated in FIG. 2.

FIG. 3 is another reference diagram for describing the block diagram shown in FIG. 1. Reference numerals 310, 320, 330, and 340 refer to hardcopy type documents, drivers, image forming apparatuses, and image data, respectively. Meanwhile, reference numerals 350, 360, and 370 are the same as reference numerals 112, 118, and 122, respectively, shown in FIG.

Here, the driver may be a driver provided in the host device connected to the image forming apparatus 330. At this time, the image forming apparatus 330 becomes a peripheral device of the host device. A printer, a multifunction peripheral (MFP) may be an example of the image forming apparatus 330.

The first authentication password and the second authentication password inputted to the authentication password input unit 110, the location information generated by the location information generator 114, and the metadata generated by the metadata generator 120 are all drivers 320. Is provided.

The driver 320 provides all of the provided first authentication password, the second authentication password, the location information, and the meta data to the image forming apparatus 330. The image forming apparatus 330 includes an image acquisition unit 124, a file encryption unit 350, a location information encryption unit 116, a location information insertion unit 360, and a metadata insertion unit 370. Can be.

In this case, the image acquisition unit 124 scans the document 310 to generate the image data 340, and the file encryption unit 350 encrypts the image data 340 to generate security data, and position The information encryption unit 116 encrypts the location information. In addition, the location information insertion unit 360 inserts encrypted location information into the security data, and the metadata insertion unit 370 inserts metadata into the security data into which the location information is inserted. Thus, the print data file 380 is generated.

On the other hand, if the print data file managed by the print data output apparatus according to the present invention is composed of unencrypted location information and unencrypted print data, in FIG. 3, the file encryption unit 350 and the metadata insertion unit 370 may not be provided in the print data output device illustrated in FIG. 3.

4 is a reference diagram for describing a path capable of obtaining location information. As described in the description of FIG. 1, the location information generation unit 114 generates location information (hereinafter, referred to as "target location information") of a place where decryption of security data can be performed.

More specifically, the location information generator 114 may generate location information designated by a user as target location information, obtain location information of a place where the user is provided, and generate the obtained location information as target location information. You may. As such, the designated location information or acquired location information may be referred to as initial location information.

The target location information may include extended location information as well as initial location information. Here, the extended location information refers to location information of a place previously designated corresponding to the initial location information. If the extended position information matching the initial position information is provided in a database in advance, the position information generation unit 114 matches the acquired or designated initial position information as well as the initial position information and the extended position information provided. Can also be generated as target location information.

As described in the description of FIGS. 1 to 3, the host device 430 provided with the driver 220 or 320 and a network connected thereto and the location information generating unit 114 and the file encrypting unit 112 are provided. In the image forming apparatus 430 provided with the location information encrypting unit 116, the location information inserting unit 118, and the metadata inserting unit 122, the initial location information may be generated through the following path.

The location information of the place where the location information generation unit 114 is provided is the location information of the image forming apparatus 430, and a user who wants to specify the location information of the image forming apparatus 430 may use the location information that he or she is aware of. It may be designated as the location information of the image forming apparatus 430. As shown in FIG. 4, the location information on the network (WWW: World Wide Web) of the image forming apparatus 430 may be transmitted through the Internet 450. The search result may be generated as position information of the image forming apparatus 430.

On the other hand, the location information generator 114 may obtain its own location information. That is, the image forming apparatus 430 provided with the location information generator 114 may acquire its own location information. To this end, it is preferable that a position information generator (not shown) is provided in the print data output apparatus according to the present invention.

The location information generator (not shown) generates location information of the image forming apparatus 430. The location information generator (not shown) may be provided in the satellite 410 or the mobile phone base station 440.

For example, the position information generator (not shown) provided in the satellite 410 (GPS satellite) accurately recognizes the position on the earth of the image forming apparatus 430 and generates information about the recognized position. On the other hand, the image forming apparatus 430 is preferably equipped with a GPS receiver. The mounted GPS receiver receives the information about the generated position from the satellite 410 as position information, and transmits the received position information to the position information generating unit 114, and the position information generating unit 114 receives the received position information. Generate position information as initial position information.

In this case, the mounted GPS receiver may receive information about the generated position directly from the satellite 410, and the antenna 420 connected to the image forming apparatus 430 is received from the satellite 410. Information about the generated position may be received from the antenna 420.

Similarly, the location information generator (not shown) provided in the cell phone antenna 440 accurately recognizes the location of the image forming apparatus 430 in the base station network and generates information about the recognized location. do. The base station network is composed of a plurality of cells, the cell phone base station provided for each cell has its own unique cell ID (Cell ID). As a result, the location information generator (not shown) provided in the mobile phone base station 440 existing in the cell in which the image forming apparatus is located generates its own cell ID as the location information of the image forming apparatus 430. The position information generation unit 114 provided in the image forming apparatus 430 receives the generated position information and generates the received position information as initial position information.

On the other hand, as described above, if the extended position information is provided to match the generated initial position information, the position information generator 114 also generates the extended position information as the target position information. As a result, the location information generation unit 114 may generate location information of one or more places capable of decoding the print data file.

For example, the initial position information is the position information of the image forming apparatus designated by the user among the plurality of image forming apparatuses provided on the third floor of the building A. The initial position information includes the position information of all the image forming apparatuses provided in the building A and the C. If the positional information of all the image forming apparatuses provided in the building is provided as the extended positional information, the positional information generating unit 114 displays the positional information of all the image forming apparatuses provided in the building A and the positional information of all the image forming apparatuses provided in the C building. It can generate as target location information. In this case, it is assumed that building A and building C are buildings in which the same company is located.

As described above, the position information generator 114 for acquiring the position information and generating the position information is provided in the image forming apparatus 430, but the position information generating unit 114 is connected to the image forming apparatus 430. It may be provided in a connected host device (not shown).

5A to 5D are diagrams illustrating location information acquired as initial location information by the location information generation unit 114 in the form of XML.

As shown in FIG. 5A, the acquired location information may be location information on the earth of the image forming apparatus 430 recognized by the location information generator (not shown) provided in the satellite 410 (GPS satellite).

In addition, as shown in FIG. 5B, the acquired location information is obtained from the base station network of the image forming apparatus 430 recognized by the location information generator (not shown) provided in the cell phone antenna 440 (Cell phone antenna). It may also be location information.

In addition, as shown in FIG. 5C, the acquired location information may be location information of a building where the image forming apparatus 430 in which the location information generator 114 is provided is located. Meanwhile, as shown in FIG. 5D, the obtained location information may be a MAC address of the image forming apparatus 430 in which the location information generator 114 is provided.

6 is a diagram illustrating an example of metadata in the form of XML. As shown, the metadata may include any information about the contents of the print data and any information about the manager of the print data.

As described above, any information (docinfo) relating to the contents of the print data includes the title of the print data, the author of the print data, the creation time of the print data, and the print. The last modified time of the data (modified), the control number (document) of the print data, the outline description of the print data and the like can be included.

Where yyyy means year, mm means month, dd means date, hh means time, mm means minutes, ss means seconds, and nn means number Means.

Further, any information (contactinfo) relating to the administrator of the print data may include the administrator's name (docmanager), the administrator's telephone number, the administrator's email address, and the like.

7 is a print data file managed by a print data output apparatus according to the present invention, which is a structural diagram of a print data file composed of metadata, encrypted position information, and encrypted print data. More specifically, FIG. 7A is a structure diagram of the print data file 710, FIG. 7B is a structure diagram of the file header 712, and FIG. 7C is a diagram of the meta data 714. 7 is a structural diagram of the header 730, and FIG. 7D is a structural diagram of the header 740 of the location information 716.

As shown in FIG. 7A, the print data file when the print data is document data includes a file header 712, meta data 714, encrypted location information 716, and security data 718. It is composed. At this time, the security data 718 means encrypted print data.

When the print data file is provided on the memory, the file header 712 relates to an offset, which is a relative address where each of the metadata 714, the location information 716, and the security data 718 is located on the memory. Information is included. That is, as shown in FIG. 7B, the file header 712 includes data about the metadata start offset 720, data about the location information offset 722, and an encrypted document data offset 724. Contains data about.

On the other hand, as shown in Fig. 7C, the metadata on the print data file 710 is provided with a header 730, and the header 730 contains data indicating the length of the metadata. .

Similarly, as shown in FIG. 7D, the encrypted location information on the print data file 710 is provided with a header 740, and the header 740 includes data indicating the length of the location information. have.

8 is a flowchart illustrating a process of generating a print data file composed of unencrypted position information and unencrypted print data as a print data file managed by the print data output apparatus according to the present invention.

The location information generating unit 114 generates location information of a place where the given print data IN 1 can be printed (step 810), and the location information inserting unit 118 transfers the generated location information to the given print data IN. By inserting in step 1, a print data file is generated (step 820).

9 is a print data file managed by a print data output apparatus according to the present invention, which is a flowchart for explaining a process of generating a print data file composed of metadata, encrypted location information, and encrypted print data. 1 encrypting the location information using the authentication password, encrypting the print data using the second authentication password, inserting the encrypted location information into the encrypted print data, and adding meta data to the inserted security data. Steps of creating a file (steps 910 to 924) are performed.

The print data output apparatus according to the present invention is requested to generate a print data file (step 910), and the authentication password input unit 110 opens the authentication password input window (step 912). After operation 912, the user views the opened authentication password input window and inputs the first authentication password and the second authentication password to the authentication password input unit 110 (operation 914).

The location information encryption unit 116 encrypts the location information generated by the location information generation unit 114 using the first authentication password (step 916), and the file encryption unit 112 encrypts the given document data. 2, secure data is generated by encrypting using the authentication password (step 918).

The location information inserter 118 inserts the encrypted location information into the secure data (step 920), and the metadata inserter 122 inserts the metadata generated by the metadata generator 120 into the encrypted location. The information is added by inserting it into the inserted secure data (step 922). By the above steps 910 to 922, a print data file managed by the print data output apparatus according to the present invention is generated (step 924).

FIG. 10 is a block diagram of another embodiment for explaining a print data output apparatus according to the present invention, and includes a metadata extraction unit 1110, a metadata recognition unit 1112, an authentication password input unit 1114, and a location information decryption unit ( 1116, a location information acquisition unit 1118, an inspection unit 1120, a user interface unit 1122, a file decoding unit 1124, a print data analysis unit 1126, and an image forming unit 1128.

IN 2 means a print data file managed by the print data output device according to the present invention, and more specifically, means OUT 1 shown in FIG.

The block diagram shown in FIG. 10 is a print data output device capable of receiving a print data file consisting of metadata, encrypted location information, and encrypted print data, and printing print data included in the received print data file. It is a block diagram showing.

Accordingly, the block diagram shown in FIG. 10 receives a print data file composed of unencrypted location information and unencrypted print data, and outputs print data capable of printing the print data contained in the received print data file. In FIG. 10, the metadata extractor 1110, the metadata recognizer 1112, the authentication code inputter 1114, the location information decoder 1116, and the file decoder 1124 are not provided in FIG. 10. You may not. Hereinafter, all the blocks of FIG. 10 will be described in detail.

The metadata extracting unit 1110 extracts meta data included in a given print data file from the print data file. The metadata recognizer 1112 recognizes the content of the extracted metadata to the user. To this end, the metadata recognizer 1112 may include a user interface for displaying the contents of the extracted metadata.

In this case, the user interface provided in the metadata recognizing unit 1112 may display the contents of the extracted metadata so that the user may recognize the rough contents of the print data. OUT 2 means content displayed in the user interface provided in the metadata recognizer 1112.

The authentication password input unit 1114 receives the first authentication password and the second authentication password. IN 3 may mean the first authentication password or may mean the second authentication password. The first authentication password is an authentication password used when decrypting the encrypted location information, and the second authentication password is an authentication password used when decrypting the security data.

That is, both the authentication password used when encrypting the location information and the authentication password used when decrypting the location information must be the same as the first authentication password, the authentication password used when encrypting the print data and the authentication used when decrypting the print data. The passwords must all be the same as the second authentication password. Here, it is preferable that the first authentication password and the second authentication password are different.

The location information decryption unit 1116 decrypts the encrypted location information by using the first authentication password input to the authentication password input unit 1114. As a result, the original location information that is not encrypted is extracted. That is, if the authentication password input to the authentication password input unit 1114 as the authentication password used for decryption of the encrypted location information is the same as the authentication password input to the authentication password input unit 110 as the authentication password used for encryption of the location information. The location information decoding unit 1116 extracts the location information contained in the print data file IN 2.

As a result, the authentication password input unit 1114 and the location information decoding unit 1116 function as a location information extraction unit (not shown). Here, the extracted location information is location information in an unencrypted state. If IN 2 is OUT 1, the extracted location information is a result of decrypting the encrypted target location information included in OUT 1.

That is, the location information acquired by the location information acquisition unit 1116 means location information of one or more places that can decrypt the security data included in the print data file, and the location information means the above-described target location information.

On the other hand, if the print data file managed by the print data output apparatus according to the present invention is composed of unencrypted position information and unencrypted print data, the metadata extracting unit 1110 to position information decrypting unit 1116 may be used. As described above, the location information extracting unit (not shown) should be provided. At this time, the location information extraction unit (not shown) extracts the location information included in the print data file.

The location information acquisition unit 1118 obtains location information of the place where it is provided. At this time, the principle of the position information acquisition unit 1118 to obtain the position information of the place where it is provided is the same as the principle that the position information generation unit 114 shown in Figure 1 obtains the position information of the place where it is provided. .

The inspection unit 120 checks whether there is location information that matches the location information acquired by the location information acquisition unit 1118 and the location information decoded by the location information decoding unit 1116.

If the inspection unit 1120 determines that there is no corresponding location information, the user interface unit 1122 recognizes that the user cannot decrypt the security data included in the print data file. For example, the user interface unit 1122 may display that decryption is impossible. OUT 3 means content that the user interface 1122 recognizes.

On the other hand, if the inspection unit 1120 checks that the matching location information exists, the file decryption unit 1124 uses the second authentication password inputted to the authentication password input unit 1114 for the security data included in the print data file. To decrypt.

If the authentication password input to the authentication password input unit 1114 for decryption of the security data is the same as the authentication password input to the authentication password input unit 110 for encryption of the print data, the file decryption unit 1124 stores the security data. Decode to generate print data.

In this case, the print data analysis unit 1126 analyzes the contents of the print data. The user interface unit 1122 may display the interpreted contents. On the other hand, the image forming unit 1128 forms an image in accordance with the interpreted contents. In other words, the image forming unit 1128 forms an image of the print data. OUT 4 means print data that has been printed out.

However, if the authentication password input to the authentication password input unit 1114 for decryption of the print data is not the same as the authentication password input to the authentication password input unit 110 for encryption of the print data, the file decryption unit 1124 is a user. The interface unit 1122 instructs the user interface unit 1122 to let the user know that decryption of the security data is impossible.

Similarly, if the authentication password input to the authentication password input unit 1114 to decrypt the location information is not the same as the authentication password input to the authentication password input unit 110 to encrypt the location information, the location information decryption unit 1116 The user interface unit 1122 instructs the user interface unit 1122 to let the user know that decoding of the location information is impossible.

FIG. 11 is a reference diagram for describing the block diagram shown in FIG. 10, where reference numeral 1210 denotes a print data file, and reference numeral 1220 denotes an image forming apparatus. Meanwhile, reference numerals 1212, 1218, 1222, 1224, and 1226 are the same as reference numerals 1110, 1116, 1120, 1122, and 1124, respectively, shown in FIG.

The metadata extracting unit 1212 extracts metadata included in the print data file 1210. Meanwhile, the metadata recognizer 1112 recognizes the content of the extracted metadata to the user. For example, the metadata recognizing unit 1112 may display the contents of the extracted metadata through the user interface 1214 included therein.

The metadata extracting unit 1212 is provided in the driver. The driver may be a driver provided in the host device connected to the image forming apparatus 1220. At this time, the image forming apparatus 1220 becomes a peripheral device of the host device.

A printer, a multifunction peripheral (MFP) may be an example of the image forming apparatus 1220. The location information decoder 1218, the inspector 1222, and the file decoder 1226, which will be described later, may be provided in the image forming apparatus 1220.

The authentication password input unit 1114 receives the first authentication password and the second authentication password through the authentication password input window 1216 provided therein. The location information decryption unit 1218 provided in the driver decrypts the encrypted location information by using the first authentication password input to the authentication password input unit 1114.

The inspection unit 1222 checks whether there is location information that matches the location information acquired by the location information acquisition unit 1118 and the location information decoded by the location information decoding unit 1116.

If it is checked that no matching location information exists, the user interface unit 1224 informs the user that decryption of the security data is impossible. The user interface 1224 may be provided in the driver.

At this time, the user interface 1224 may display the personal information of the user who attempted the decryption. If a login-login ID and a log-in password are required to use the host device, the personal information of the user who attempted the illegal leakage of the print data can be traced.

That is, the user interface unit 1224 may display, on the user interface unit 1224, personal information of a user logged in at the time when the inspection unit 1222 is checked that there is no matching location information. In this case, the inspection unit 1222 may inform the administrator of the print data of the user's personal information.

However, if the inspection unit 1222 determines that the matching position information exists, the file decryption unit 1226 decrypts the security data to generate print data. The image forming apparatus 1220 provided with the file decoder 1226 may print out the generated print data or display the contents of the generated print data on the provided user display.

12 is a flowchart of another embodiment for explaining a method of outputting print data according to the present invention, in which position information is decoded using a first authentication code, and the decoded position information is obtained by the position information acquisition unit 1118. Decryption of the security data using the second authentication password (steps 1310 to 1326) only when the location information matches.

The metadata extractor 1110 extracts metadata from the print data file, and the metadata recognizer 1112 allows the user to recognize the contents of the extracted metadata (step 1310).

The print data output apparatus according to the present invention is instructed to decrypt from the user (step 1312), and the authentication password input unit 1114 receives a first authentication password and a second authentication password from the user (step 1314).

The location information decoding unit 1116 decodes the location information using the inputted first authentication password (step 1316), and the location information obtaining unit 1118 performs location information of the place where the location information decoding unit 1116 is provided. In step 1318, the location information acquisition unit 1118 acquires location information of the place where the location information is obtained.

The inspection unit 1120 determines whether there is location information that matches the acquired location information and the decoded location information (step 1320). If it is determined, the file decoding unit 1124 determines the inputted second authentication password. By using the decrypted security data to generate the print data (step 1322). After step 1322, the image forming unit (not shown) prints the generated print data (step 1324).

In contrast, if it is determined by the inspection unit 1120 that there is no corresponding location information (step 1320), the user interface unit 1122 recognizes that the user cannot decrypt the security data (step 1326).

On the other hand, the flowchart shown in Figure 12 is a flow chart for explaining the process of printing the print data in the given print data file, given a print data file consisting of metadata, encrypted location information and encrypted print data .

If the given print data file is a print data file consisting of unencrypted position information and unencrypted print data, the process of printing print data from the given print data file extracts the position information from the print data file. Obtaining location information of a place where the printing is performed; determining whether there is a matching location information between the extracted location information and the obtained location information; and if it is determined that the matching location information exists, Printing the print data, and notifying the user that the print data cannot be printed if it is determined that there is no matching position information.

The invention can also be embodied as computer readable code on a computer readable recording medium. Computer-readable recording media include all kinds of recording devices that store data that can be read by a computer system. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disks, optical data storage devices, and the like, which are also implemented in the form of carrier waves (for example, transmission over the Internet). Include. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion. In addition, functional programs, codes, and code segments for implementing the present invention can be easily inferred by programmers in the art to which the present invention belongs.

What has been described above is only one embodiment for implementing the printing data output method and apparatus according to the present invention, and the present invention is not limited to the above-described embodiment, the gist of the present invention as claimed in the following claims. Without departing, those who have ordinary knowledge in the field of the present invention may make various changes.

As described above, the print data output method and apparatus according to the present invention decrypts the security data included in the print data file only when the location information extracted from the given print data file and the prepared location information match. Although anyone can access the print data file on the network, it has the effect of preventing illegal leakage of the print data. Furthermore, the print data output method and apparatus according to the present invention differ from the authentication password used for encrypting the position information and the authentication password used for encoding the print data, so that one of the two authentication passwords is illegally leaked. The security of the contents of the print data is maintained. In addition, the method and apparatus for outputting print data according to the present invention manages a print data file containing meta data so that the user can recognize in advance about the information contained in the print data before the security data is decrypted. It also has an effect.

Claims (29)

(a) extracting location information added to the given print data; (b) comparing whether the extracted location information matches the prepared location information; And and (c) printing the print data when the extracted position information and the prepared position information coincide with each other. The method of claim 1, wherein the extracted location information is location information of a region which is preset to print the print data. The method of claim 1, wherein the prepared position information is position information of a place where step (c) is performed. The method of claim 1, wherein the printing is impossible if the extracted positional information and the prepared positional information do not match. The method of claim 4, wherein the print data output method comprises: Print data output method characterized in that notifying the user that the printing is impossible. The method of claim 1, wherein the print data is secure data to which an encryption technique is applied. The method of claim 6, wherein step (c) comprises: (c1) if it is determined to match, decrypting the security data; And (c2) printing the decrypted security data. The method of claim 7, wherein the step (a), And printing position information added to the security data. The method of claim 7, wherein the step (a), The extraction is performed by decrypting the positional information added to the print data using the given first authentication password, wherein the positional information added to the print data is the positional information encrypted using the first authentication password, In step (c), if it is determined to match, the security data is decrypted using a given second authentication password, and the security data is print data encrypted using the second authentication password. The second authentication password is a print data output method, characterized in that different from the first authentication password. The method of claim 7, wherein the metadata is added to the print data, and the metadata is data containing arbitrary information about the print data. (a) generating location information on a region which is set in advance to enable image formation; And (b) adding the generated position information to a print data file. 12. The print data output method according to claim 11, wherein the print data file is a security data file by including the location information. 12. The method of claim 11, wherein at least one of the print data and the position information is encrypted. The method of claim 11, wherein the step (a) generates security data and the location information, and the step (b) inserts the generated location information into the generated security data to generate the print data file. The security data is a print data output method, characterized in that the print data is encrypted. 15. The method of claim 14, wherein step (a) further comprises encrypting the location information, and step (b) inserts the encrypted location information into the security data. . The method of claim 15, wherein the step (a), Encrypting the generated location information using a given first authentication password, encrypting the print data using a given second authentication password, and wherein the first authentication password and the second authentication password are different. How to print data. The method of claim 14, wherein the print data output method, (c) inserting metadata into the added result; And the meta data is data containing arbitrary information about the print data. A location information extraction unit for extracting location information added to the given print data; An inspection unit for checking whether the extracted location information matches the provided location information; And And an image forming unit which prints the print data when the extracted position information and the prepared position information coincide with each other. 19. The apparatus of claim 18, wherein the extracted position information is position information on a region which is preset to print the print data. 19. The method of claim 18, wherein the provided position information is position information of a region where the image forming unit is provided. 19. The print data output apparatus according to claim 18, wherein the printing is impossible if the extracted position information and the prepared position information do not match. The apparatus of claim 21, wherein the print data output device comprises: Print data output device characterized in that notifying the user that the printing is impossible. 19. The apparatus of claim 18, wherein the print data is secure data to which an encryption technique is applied. The apparatus of claim 23, wherein the print data output device comprises: If the extracted location information and the provided location information is inconsistent, further comprising a file decryption unit for decrypting the security data, And the image forming unit prints the decrypted security data. A location information generation unit for generating location information on a region which is preset to form an image; And And a position information insertion unit for adding the generated position information to a print data file. The print data output method according to claim 25, wherein the print data file is a security data file by including the location information. 26. The method of claim 25, wherein at least one of the print data and the position information is encrypted. (a) extracting location information added to the given print data; (b) comparing whether the extracted location information matches the prepared location information; (c) a computer-readable recording medium storing a computer program for performing a print data output method, the method comprising: printing the print data when the extracted position information matches the prepared position information. . (a) generating location information on a region which is set in advance to enable image formation; And and (b) adding the generated location information to a print data file. A computer readable recording medium storing a computer program for performing a print data output method.

Images