Source: http://www.google.fr/patents/US20050062998?hl=fr
Timestamp: 2013-12-12 22:04:58
Document Index: 731524563

Matched Legal Cases: ['art 111', 'art 112', 'art 113', 'art 114', 'art 115', 'art 111', 'art 112', 'art 113', 'art 113', 'art 112', 'art 114', 'art 113', 'art 115', 'art 21', 'art 22', 'art 23', 'art 24', 'art 25', 'art 21', 'art 22', 'art 23', 'art 22', 'art 23', 'art 113', 'art 23', 'art 113', 'art 24', 'art 23', 'art 24', 'art 113', 'art 112', 'art 111', 'art 112', 'art 115', 'art 115', 'art 112', 'art 115', 'art 113', 'art 114', 'art 113', 'art 114', 'art 114', 'art 25', 'art 23', 'art 23', 'art 113', 'art 23', 'art 113', 'art 24', 'art 23', 'art 25', 'art 25', 'art 25', 'art 115', 'art 113', 'art 112', 'art 113', 'art 113', 'art 114', 'art 114', 'art 25', 'art 25', 'art 25', 'art 23', 'art 113', 'art 112', 'art 112', 'art 113', 'art 113', 'art 23', 'art 23', 'art 23', 'art 113', 'art 21', 'art 22', 'art 114', 'art 114', 'art 112', 'art 25', 'art 113', 'art 112', 'art 113', 'art 113', 'art 114', 'art 112', 'art 113', 'art 114', 'art 112', 'art 114', 'art 114', 'art 113', 'art 114', 'art 114', 'art 114', 'art 25', 'art 25', 'art 25', 'art 23', 'art 23', 'art 24', 'art 24', 'art 25', 'art 25', 'art 25', 'art 25', 'art 25', 'Application No. 2003']

Brevet US20050062998 - Information processing device, printing device, print data transmission ... - Google�BrevetsRecherche Images Maps Play YouTube Actualit�s Gmail Drive Plus » Recherche avanc�e dans les brevets | Connexion Recherche avanc�e dans les brevets BrevetsAn information processing device is provided to transmit print information securely to a printing device, and a printing device is provided to print out the information transmitted from the information processing device. The information processing device transmits print data to the printing device connected...http://www.google.fr/patents/US20050062998?utm_source=gb-gplus-shareBrevet US20050062998 - Information processing device, printing device, print data transmission method, printing method, print data transmitting program, and recording medium Num�ro de publicationUS20050062998 A1Type de publicationDemande Num�ro de demandeUS 10/942,918 Date de publication24 mars 2005 Date de d�p�t17 sept. 2004 Date de priorit�22 sept. 2003Autre r�f�rence de publicationCN1601577A, CN100530275C, EP1517507A1, US7535586 Num�ro de publication10942918, 942918, US 2005/0062998 A1, US 2005/062998 A1, US 20050062998 A1, US 20050062998A1, US 2005062998 A1, US 2005062998A1, US-A1-20050062998, US-A1-2005062998, US2005/0062998A1, US2005/062998A1, US20050062998 A1, US20050062998A1, US2005062998 A1, US2005062998A1 InventeursHiroya Kumashio Cessionnaire d'origineHiroya KumashioExporter la citationBiBTeX, EndNote, RefMan R�f�renc� par (7), Classifications (19), �v�nements juridiques (2) Liens externes: USPTO, Cession USPTO, EspacenetInformation processing device, printing device, print data transmission method, printing method, print data transmitting program, and recording mediumUS 20050062998 A1 R�sum� An information processing device is provided to transmit print information securely to a printing device, and a printing device is provided to print out the information transmitted from the information processing device. The information processing device transmits print data to the printing device connected via a network. The information processing device includes: an encryption key generating part that generates an encryption key to be used to encrypt the print data, based on inherent information that is unique to the printing device and is represented by a fixed value; and an encrypting part that encrypts at least part of the print data, using the encryption key generated by the encryption key generating part. The print data encrypted by the encrypting part are transmitted to the printing device. Images(18) Revendications(32)
DESCRIPTION OF THE PREFERRED EMBODIMENTS The following is a description of embodiments of the present invention, with reference to the accompanying drawings. FIG. 1 illustrates the structure of a printing system in accordance with the present invention. As shown in FIG. 1, the printing system 1 includes an information processing device 10 and a printer 20 that are connected to each other via a network 30 such as the Internet or a LAN. The information processing device 10 is a user device such as a personal computer (PC) that is operated directly by users. In accordance with a document data print instruction issued by a user, the information processing device 10 converts document data into print data that can be processed by the printer 20. The information processing device 10 then transmits the print data to the printer 20, and requests the printer 20 to print out the print data. The printer 20 is a general purpose printer, and prints out the print data, which are transmitted from the information processing device 10, on a paper sheet. Next, the information processing device 10 is described in greater detail. FIG. 2 shows an example hardware structure of the information processing device 10 in accordance with the present invention. The information processing device 10 includes a driver device 100, a secondary storage device 102, a memory device 103, an arithmetic operations device 104, a network interface device 105, an input device 106, and a display device 107 that are connected to one another via a bus B. A print data transmitting program that realizes operations of the information processing device 10 is provided by a recording medium 101 such as a CD-ROM. When the recording medium 101 having the print data transmitting program recorded thereon is set to the driver device 100, the print data transmitting program recorded on the recording medium 101 is installed in the secondary storage device 102 via the driver device 100. The secondary storage device 102 stores necessary files and data, as well as the installed print data transmitting program. When there is an instruction to activate the print data transmitting program, the memory device 103 reads in the print data transmitting program from the secondary storage device 102. The arithmetic operations device 104 carries out operations of the information processing device 10, in accordance with the print data transmitting program stored in the memory device 103. The network interface device 105 may be formed with a modem or router, for example, and is used to connect to the network 30 shown in FIG. 1. The input device 106 may be formed with a keyboard and a mouse, and is used to input various operations instructions. The display device 107 displays information using a graphical user interface (GUI) or the like, in accordance with the print data transmitting program. FIG. 3 illustrates an example functional structure of the printing system in accordance with the present invention. As shown in FIG. 3, a print data transmitting program 11 is provided in the information processing device 10. The print data transmitting program 11 includes a user interface (UI) part 111, a data accumulating part 112, an encryption key generating part 113, an encrypting part 114, and an information acquiring part 115. The UI part 111 controls the GUI to receive input from users. The data accumulating part 112 is a memory area in which inherent information that is unique to the printer 20 and is represented by a fixed value, such as the MAC address of the printer 20 to be used by the encryption key generating part 113 (described later in greater detail) to generate an encryption key, is stored, and is included in the secondary storage device 102. The encryption key generating part 113 generates an encryption key, based on the information stored in the data accumulating part 112. In this embodiment, a common key encryption method is employed for ease of development and greater processing capacity. The encrypting part 114 encrypts print data using the encryption key generated by the encryption key generating part 113, and transmits the encrypted print data (hereinafter referred to as the �encrypted data�) to the printer 20. Here, the print data are generated by a printer driver 13 in accordance with a document data print instruction issued by a user to an application program 12 such as general purpose word-processing software, and are in such a format that can be decrypted by the printer 20. The information acquiring part 115 requests the printer 20 to transmit the MAC address of the printer 20, and receives the MAC address from the printer 20. The printer 20 includes a UI part 21, a data accumulating part 22, a decryption key generating part 23, a decrypting part 24, a print data processing part 25, a printer engine 26, and a network interface 27. The UI part 21 controls the display on the operations panel of the printer 20. The data accumulating part 22 is a memory area in which information to be used by the decryption key generating part 23 (described later in greater detail) to generate a decryption key is stored in advance. Based on the information stored in the data accumulating part 22, the decryption key generating part 23 generates a decryption key, using the same algorithm as the one used by the encryption key generating part 113 of the information processing device 10. As long as the same information are used, the decryption key generated by the decryption key generating part 23 and the encryption key generated by the encryption key generating part 113 are the same. The decrypting part 24 decrypts the encrypted data transmitted from the information processing device 10, using the decryption key generated by the decryption key generating part 23. The print data processing unit 25 controls the entire printing process to be carried out on the encrypted data transmitted from the information processing device 10. More specifically, the print data processing unit 25 causes the decrypting part 24 to decrypt the encrypted data, and causes the printer engine 26 to print out the print data generated through the decryption. The printer engine 26 outputs (prints out) the print data onto a paper sheet. The network interface 27 is the same as the network interface device 105 of the information processing device 10. In the following, the processing operation of the printing system 1 shown in FIG. 3 is described. FIG. 4 is a flowchart of an operation to be performed by the information processing device 10 in a first embodiment of the present invention. The operation shown in FIG. 4 is to be performed after the application program 12 carries out the document data printing process in accordance with an instruction from a user, and the printer driver 13 generates print data. In step S101, the encryption key generating part 113 acquires the MAC address of the printer 20 stored in the data accumulating part 112. The MAC address may be input by a user, with a screen image shown in FIG. 5 being displayed by the UI part 111. FIG. 5 shows an example of the input screen for prompting a user to input the MAC address of the selected printer. The input screen 150 shown in FIG. 5 includes a printer select area 151 and a MAC address input area 152. The printer select area 151 is a combo box to be used by a user to select a printer whose MAC address is to be input. The MAC address input area 152 is a text box in which a user inputs the MAC address of the selected printer. As a user inputs the MAC address and clicks an OK button 153 on the input screen 150, the MAC address is stored in the data accumulating part 112. However, a user inputting a MAC address often leads to an error, resulting in poorer usability. To counter this problem, the information acquiring part 115 may automatically acquire the MAC address of the printer 20. In a case where a TCP/IP protocol is used as a communication protocol in the network 30, for example, an ARP (Address Resolution Protocol) that determines a MAC address from an IP address is used in the TCP/IP, thereby acquiring the MAC address of the selected device. Since the information processing device 10 is normally informed of the IP address of the printer 20 as a transmission destination (otherwise, the information processing device 10 cannot transmit print data to the printer 20), the information acquiring part 115 acquires the MAC address from the IP address of the printer 20, using the ARP, and then stores the MAC address in the data accumulating part 112. Whether a user is inputting the MAC address or the information acquiring part 115 is automatically acquiring the MAC address, this address acquiring process may be carried out in advance or at least prior to step S101, when a print instruction is issued. After step S101, the operation moves on to step S102. In step S102, the encryption key generating part 113 generates an encryption key based on the MAC address of the printer 20. As means to generate an encryption key from given data, a Message Digest algorithm that generates data of a predetermined length using a hash function is normally employed. Examples of the Message Digest algorithms that can be employed here include MD5 and SHA-1. After step S102, the operation moves on to step S103. In step S103, the encrypting part 114 encrypts the print data, using the encryption key generated by the encryption key generating part 113. Examples of common key encrypting algorithms that can be employed here include DES and RC4. If MD5 is used to generate an encryption key while DES with a 56-bit key is used for encryption, 128-bit data are generated by MD5. The first 56 bits of the 128-bit data are cut off, and are used as an encryption key. More specifically, the MAC address of the printer 20 is converted into 128-bit data by MD5, and the first 56 bits of the 128-bit data are used as an encryption key. Using this encryption key, the encrypting part 114 encrypts the print data with DES. Here, it is absolutely vital to hide the encryption key generating algorithm and the encrypting algorithm. In this embodiment, the encryption key generating algorithm and the encrypting algorithm are both incorporated into the print data transmitting program 11 and the printer 20 in advance, so as not to be directly referred to. After step S103, the operation moves on to step S104. In step S104, the print data (the encrypted data) encrypted by the encrypting part 114 are transmitted to the printer 20 via the network interface device 105. Next, the operation to be performed by the printer 20 is described. FIG. 6 is a flowchart of the operation to be performed by the printer 20 in the first embodiment of the present invention. In step S111, the print data processing part 25 receives the encrypted data, which is transmitted from the information processing device 10 in step S104, via the network interface 27. In step S112, the decryption key generating part 23 acquires the MAC address of the printer 20, and generates a decryption key based on the MAC address. Here, the decryption key generating part 23 generates the decryption key, using the same key generating algorithm as the one used by the encryption key generating part 113 of the information processing device 10. Accordingly, the decryption key generating part 23 converts the MAC address into 128-bit data with MD5, and cuts off the first 56 bits from the 128-bit data. Thus, the decryption key generated in step S112 becomes the same as the encryption key generated by the encryption key generating part 113 in step S102. The operation then moves on to step S113. In step S113, the decrypting part 24 decrypts the encrypted data with DES, using the decryption key generated by the decryption key generating part 23. Through this step, the print data are turned into the original plain text. The operation next moves on to step S114. In step S114, the print data processing part 25 determines whether the print data have been successfully decrypted. In the case where the decryption has been successful, the print data processing part 25 causes the printer engine 25 to print out the print data in step S115. In the case where the decryption has not been successful, the print data processing part 25 discards the print data, and suspends the printing process in step S116. As described above, in the printing system 1 of the first embodiment, the information processing device 10 and the printer 20 are not provided with an encryption key in advance, but each generates an encryption/decryption key, using the MAC address that is the information inherent in the printer 20. Accordingly, even if the print data are unjustly acquired during a communication and are transmitted to another printer, the printer that has unjustly received the print data cannot generate the correct encryption key and cannot perform proper printing. In this manner, anyone who tries to obtain information unjustly cannot have the print data printed out, unless he or she finds out how the encryption key is generated and which algorithm is used in the encrypting process. Furthermore, as the encryption key is not to be transmitted in this embodiment, the probability of the encryption key being stolen is reduced accordingly. Also, as any complicated mechanism that is required by a public key encryption method is not employed in this embodiment, structuring the system is relatively easy. In a case where tight security is not desired by users, however, the procedures such as the inputting of a MAC address are rather troublesome. Also, the information acquiring part 115 may fail to acquire the MAC address of a selected printer, due to a timeout or the like. For this reason, the value of a MAC address is not always recognized in the information processing device 10. To counter this problem, an operation that enables a printing process without a MAC address input or acquired is now described as a second embodiment of the present invention. FIG. 7 is a flowchart of the operation to be performed by the information processing device 10 in the second embodiment. The operation shown in FIG. 7 is performed in the same timing as the operation shown in FIG. 4. In step S201, the encryption key generating part 113 acquires the MAC address of the printer 20 from the data accumulating part 112. In step S202, the encryption key generating part 113 determines whether the MAC address has been successfully acquired. In the case where the MAC address has been successfully acquired, the same procedures as steps S102 and S103 (FIG. 4) are carried out to generate an encryption key and to encrypt the print data in steps S203 and S204. As well as the encrypted data, the information indicating that the MAC address has been used to generate the encryption key is then transmitted to the printer 20 in step S205. In the case where the MAC address has not been successfully acquired, the operation moves on to step S206 from step S202. In step S206, the encryption key generating part 113 generates an encryption key based on a preset value such as �00:00:00:00:00:00�, instead of the MAC address. However, the key generating algorithm used here is the same as the key generating algorithm used to generate the encryption key based on the MAC address. The operation then moves on to step S207. In step S207, the encrypting part 114 encrypts the print data, using the encryption key generated based on the preset value. The operation next moves on to step S208. In step S208, as well as the encrypted data encrypted by the encrypting part 114, the information indicating that the MAC address has not been used to generate the encryption key is transmitted to the printer 20. Next, the operation to be performed by the printer 20 is described. FIG. 8 is a flowchart of the operation to be performed by the printer 20 in the second embodiment. In step S211, the print data processing part 25 receives the encrypted data and the information indicating whether the MAC address has been used to generate the encryption key (the information will be hereinafter referred to as the �MAC address use flag�). The print data processing part 25 receives the encrypted data and the MAC address use flag, which are transmitted from the information processing device 10 in step S206 or S208, via the network interface 27. The operation then moves on to step S212. In step S212, the print data processing part 25 determines whether the MAC address has been used to generate the encryption key in the information processing device 10, based on the MAC address use flag. In the case where the MAC address has been used, the operation moves on to step S213. The same procedures as steps S112 through S116 (FIG. 6) are then carried out to decrypt the encrypted data and to print out the decrypted print data in steps S213 through S218. In the case where the MAC address has not been used, the operation moves on to step S214. In step S214, the decryption key generating part 23 generates a decryption key, based on the same preset value as in the information processing device 10. The operation then moves on to step S215, and the same procedures as in the case where the MAC address has been used are carried out to decrypt the encrypted data and to print out the decrypted print data in steps S215 through S218. As described above, in the printing system 1 of the second embodiment, the print data can be encrypted and then transmitted from the information processing device 10 to the printer 20, even if the MAC address is not input or acquired. In a case where the preset value is the same as that of another printer, the effect that the print data are output only to the designated printer cannot be obtained, unlike the case of using the MAC address. If users do not desire great security, however, greater usability can be obtained, as procedures such as the inputting of an MAC address can be omitted. Thus, the printing system 1 can be made more flexible. Next, an operation to give more security is described as a third embodiment of the present invention. FIG. 9 is a flowchart of the operation to be performed by the information processing device 10 in the third embodiment. The operation shown in FIG. 9 is performed in the same timing as the operations shown in FIG. 4 or 7. In step S301, the encryption key generating part 113 acquires the MAC address and a print password from the data accumulating part 112. Here, the print password is a character string that has been input by a user as data for generating an encryption key, together with the MAC address. The print password should be input by a user through the input screen that is used when the MAC address is input. FIG. 10 shows an example of the input screen in the third embodiment. The input screen 160 shown in FIG. 10 is the same as the input screen 150 shown in FIG. 5, except that a print password input area 161 to be used to input a print password is added. When a user inputs a MAC address and a print password, and clicks an OK button 162 on the input screen 160, the MAC address and the print password are stored in the data accumulating part 112. The procedures of step S302 and later are the same as the procedures of steps S202 through S208 (FIG. 8) of the second embodiment, except for the encryption key generating process (steps S303 and S306). In the operation shown in FIG. 9, the encryption key generating part 113 generates an encryption key based on the MAC address and the print password in step S303, with the MAC address having been successfully acquired. In the case where the MAC address has not been successfully acquired, the encryption key generating part 113 generates an encryption key based on the preset value and the print password in step S306. In generating an encryption key based on a MAC address/preset value and a print password, the combined data of the MAC address/preset value and the print password may be converted into 128-bit data by MD5, and the first 56 bits of the 128-bit data may be cut off and used as an encryption key. Next, the operation to be performed by the printer 20 is described. FIG. 11 is a flowchart of the operation to be performed by the printer 20 in the third embodiment of the present invention. The operation shown in FIG. 11 is the same as the operation shown in FIG. 8 of the second embodiment, except for the encryption key generating process (steps S313 and S314). In the operation shown in FIG. 11, the decryption key generating part 23 generates a decryption key based on the MAC address and the same print password as in the information processing device 10 in step S313, with the MAC address having been used in generating the encryption key in the information processing device 10. In the case where the MAC address has not been used to generate the encryption key in the information processing device 10, the decryption key generating part 23 generates a decryption key based on the preset value and the print password in step S314. This technique of generating a decryption key based on a MAC address/preset value and a print password is the same as the corresponding technique used to generate an encryption key in the information processing device 10. Accordingly, the decryption key generated by the decryption key generating part 23 is the same as the encryption key generated by the encryption key generating part 113 of the information processing device 10, as long as the same print password as the print password used in the information processing device 10 is input to the printer 20. The print password in the printer 20 should be input by a user through the input screen that is displayed on the operation panel by the UI part 21. FIG. 12 shows an example of the input screen for inputting a print password into the printer 20. The input screen 250 shown in FIG. 12 has a print password input area 251 through which a print password is to be input. When a user inputs a print password with the same value as the print password used in the information processing device 10 into the print password input area 251, and clicks an OK button 252, the print password is stored in the data accumulating part 22. As described above, in the printing system 1 of the third embodiment, not only a MAC address that is static information but also a print password that is dynamic information is used as the information for generating an encryption/decryption key. Accordingly, a system with more security can be structured. If an encryption or decryption key is generated based only on static information such as a MAC address, the encrypted data might be decrypted by acquiring the MAC address of the printer 20 and the algorithm for generating the encryption or decryption key. Dynamic information such as a print password, on the other hand, is difficult for a third party to identify, and thus, decrypting the encrypted data can be made more difficult. In the third embodiment, if a password is not set in both the information processing device 10 and the printer 20, the same operation as the operation of the second embodiment should be performed to smoothly print out the print data. Meanwhile, an application program such as Adobe Acrobat Reader (copyright) prompts a user to input a password to prevent others from reading the contents of a document (the password will be hereinafter referred to as the �document password�). Based on the document password, document data (PDF data) are encrypted and stored. In a case where the encrypted document data are stored in a user terminal, the document data decrypted in the user terminal are transmitted to a printer, thereby putting the plain text on the network, which is not desirable for security reasons. To counter this problem, encrypted document data are transmitted to a printer and then decrypted in the printer. However, the document password used in the encryption is also necessary in decrypting the encrypted document data. Therefore, the document password and the encrypted document data need to be transmitted to the printer. However, if the user terminal transmits the document password as plain text to the printer, the encryption of the document data becomes pointless. Once the document password is stolen, the encrypted document data can be easily decrypted. To counter this problem, the security level in handling document data should be increased. In the following, an operation to give more security by applying the present invention to document data encrypted with a password is described as a fourth embodiment of the present invention. FIG. 13 illustrates an example functional structure of a printing system as a fourth embodiment of the present invention. In FIG. 13, the same components as those shown in FIG. 3 are denoted by the same reference numerals as those in FIG. 3, and explanation of them is omitted. In the fourth embodiment, PDF data are used as document data. The functions of the information processing device 10 shown in FIG. 13 are substantially the same as those shown in FIG. 3, except for the operation of the encrypting part 114. In the fourth embodiment, the encrypting part 114 encrypts a document password stored in the data accumulating part 112, instead of print data. The document password is a password that is used to encrypt PDF data by a PDF application program 14 such as Acrobat Reader that can cope with PDF data. The printer 20 is also substantially the same as the printer 20 shown in FIG. 3, except that the print data processing part 25 of the fourth embodiment can process PDF data. In the following, the operation procedures to be carried out in the printing system 1 shown in FIG. 13 are described. FIG. 14 is a flowchart of an operation to be performed by the information processing device 10 in the fourth embodiment. The procedures of steps S401 through S403 in FIG. 14 are the same as steps S301 through S303 in FIG. 9. More specifically, the encryption key generating part 113 acquires the MAC address and a print password from the data accumulating part 112 in step S401. The encryption key generating part 113 then determines whether the MAC address has been successfully acquired in step S402. In the case where the MAC address has been successfully acquired, the encryption key generating part 113 generates an encryption key, based on the MAC address and the print password in step 403. The operation then moves on to step S404. In step S404, the encrypting part 114 obtains a document password from the data accumulating part 112, and then encrypts the document password, using the encryption key generated by the encryption key generating part 113. Further, the encrypting part 114 encodes the encrypted document password (hereinafter referred to as the �encrypted password�) into text data by Base64. The document password should be input by a user through the input screen that is used when the MAC address is input. FIG. 15 shows an example of the input screen in the fourth embodiment. The input screen 170 shown in FIG. 15 is the same as the input screen 160 shown in FIG. 10, except that a document password input area 171 for inputting a document password is added. When a user inputs a MAC address, a print password, and a document password, and clicks an OK button 172 on the input screen 170, the MAC address, the print password, and the document password are stored in the data accumulating part 112. After step S404, the operation moves on to step S405. In step S405, the encoded encrypted password and the information indicating that the MAC address has been used to generate the encryption key are set in a print control command that is included in data to be transmitted to the printer 20. The information will be hereinafter referred to as the �MAC address use flag�. FIG. 16 shows an example format of the data to be transmitted to the printer 20. As shown in FIG. 16, the transmission data 180 have a print control command 181 of PJL (Printer Job Language) added to PDF data 182. In the example shown in FIG. 16, the PJL is designed especially to set an encrypted password and the MAC address use flag. The PDFPASSWORD command denoted by reference numeral 181 is a PJL command for setting an encrypted password. Since binary data cannot be transmitted with a PJL command, an encoded encrypted password should be set here. The USEMACHINENO command denoted by reference numeral 184 is a PJL command for setting the MAC address use flag. If �1� is set in the USEMACHINENO command, the MAC address has been used to generate the encryption key. If �0� is set, the MAC address has not been used to generate the encryption key. In this manner, suitable values are set in the PDFPASSWORD command and the USEMACHINENO command in step S405. The operation then moves on to step S406. In step S406, the encrypting part 114 generates transmission data that have the print control command added to the encrypted PDF data that have been encrypted and stored beforehand by the PDF application program 14. The encrypting part 114 then transmits the transmission data to the printer 20. In the case where the MAC address has not been successfully acquired (�No� in step S402), the operation moves on to step S407. In step S407, the encryption key generating part 113 generates an encryption key based on a preset value, instead of the MAC address. The operation then moves on to step S408. In step S408, the encrypting part 114 encrypts the document password, using the encryption key, and encodes the encrypted password. The operation next moves on to step S409. In step S409, the encrypting part 114 sets the encoded encrypted password and the MAC address use flag in the print control command. The MAC address use flag indicates that the MAC address has been used to generate the encryption key. After step S409, the operation moves on to step S406. In step S406, the encrypting part 114 generates transmission data that have the print control command added to the encrypted PDF data, and transmit the transmission data to the printer 20. Next, the operation to be performed by the printer 20 is described. FIG. 17 is a flowchart of the operation to be performed by the printer 20 in the fourth embodiment. In step S411, the print data processing part 25 receives the transmission data, which are transmitted from the information processing device 10 in step S406, via the network interface 27. In step S412, the print data processing part 25 acquires the value of the PDFPASSWORD command and the value of the USEMACHINENO command from the print control command included in the transmission data. The operation then moves on to step S413. In step S413, the print data processing part 25 determines whether the MAC address has been used to generate the encryption key, based on the value of the USEMACHINENO command. In the case where the MAC address has been used, the decryption key generating part 23 generates a decryption key, based on the MAC address and the print password in step S414. In the case where the MAC address has not been used, the decryption key generating part 23 generates a description key, based on the preset value and the print password in step S415. After step S414 or S415, the operation moves on to step S416. In step S416, the decrypting part 24 decodes the encrypted password set as the value of the PDFPASSWORD command, thereby converting the encrypted password into binary data. The decrypting part 24 then decrypts the encrypted data as the binary data, using the decryption key. Thus, the plain text document password as text can be obtained. After step S416, the operation moves on to step S417. In step S417, the print data processing part 25 determines whether the decryption of the encrypted password has been successful. In the case where the decryption of the encrypted password has been successful, the operation moves on to step S418. In step S418, the print data processing part 25 decrypts the encrypted PDF data included in the transmission data, using the decrypted document password. By doing so, the plain text PDF data can be obtained. The operation then moves on to step S419. In step S419, the print data processing part 25 determines whether the decryption of the encrypted PDF data has been successful. In the case where the decryption of the encrypted PDF data has been successful, the operation moves on to step S420. In step S420, the print data processing part 25 causes the printer engine 26 to print out the decrypted PDF data. In the case where the decryption of the encrypted password has failed (�No� in step S417), or where the decryption of the encrypted PDF data has failed (�No� in step S419), the print data processing part 25 discards the PDF data, and suspends the printing process in step S421. Even if a document password is stolen in the printing system 1 of the fourth embodiment, the corresponding document data that are encrypted with the document password are difficult to decrypt, because the document password is also encrypted. In each of the first through fourth embodiments described so far, an encryption/decryption key is generated based on the MAC address of the printer 20. However, the information for generating an encryption/decryption key is not limited to the MAC address. In short, one of the effects of the present invention is to make encrypted information difficult for any other device or machine to decrypt, except the designated printer. To achieve this effect, the information for generating an encryption/decryption key should be the information inherent in the designated printer, including the machine number, the PI address, the name of the printer, or the like. To maintain the security of the system, however, the inherent information should preferably be fixed values such as the MAC address or the machine number, rather than the IP address or the printer name that can be freely changed. It should be noted that the present invention is not limited to the embodiments specifically disclosed above, but other variations and modifications may be made without departing from the scope of the present invention. This patent application is based on Japanese Priority Patent Application No. 2003-330578, filed on Sep. 22, 2003, the entire contents of which are hereby incorporated by reference. R�f�renc� par Brevet citant Date de d�p�t Date de publication D�posant TitreUS7296157 *10 juil. 200213 nov. 2007Electronics For Imaging, Inc.Methods and apparatus for secure document printingUS7502466 *6 janv. 200510 mars 2009Toshiba CorporationSystem and method for secure communication of electronic documentsUS7719708 *1 juin 200518 mai 2010Sharp Laboratories Of America, Inc.Secured release method and system for transmitting and imaging a print job in which a security attribute in the print job header will prevent acceptance of subsequent data packets until a user performs authentication on the imaging deviceUS783183012 nov. 20079 nov. 2010Electronics For Imaging, Inc.Methods and apparatus for secure document printingUS784931612 nov. 20077 d�c. 2010Electronics For Imaging, Inc.Methods and apparatus for secure document printingUS831999027 mars 200727 nov. 2012Brother Kogyo Kabushiki KaishaPrinting apparatus with data decryptionUS8429729 *22 juil. 200823 avr. 2013Marvell International Ltd.Secure wireless network setup using multicast packets* Cit� par l'examinateurClassifications Classification aux �tats-Unis358/1.14, 358/1.15, 713/150, 713/171 Classification internationaleG09C1/00, H04L9/00, G06F15/00, B41J29/00, G06F1/00, G06F21/00, H04L29/06, B41J29/38, G06F3/12 Classification coop�rativeH04L63/0428, G06F21/608, H04L63/06 Classification europ�enneG06F21/60C2, H04L63/06, H04L63/04B�v�nements juridiques DateCode�v�nementDescription1 oct. 2012FPAYFee paymentYear of fee payment: 419 nov. 2004ASAssignmentOwner name: RICOH COMPANY, LTD., JAPANFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:KUMASHIO, HIROYA;REEL/FRAME:016001/0697Effective date: 20040906Faire pivoterImage d'origineAccueil Google - Plan du site - T�l�chargements par lot sur l'USPTO - R�gles de confidentialit� - Conditions d'utilisation - � propos de Google�Brevets - Envoyer des commentairesDonn�es fournies par IFI CLAIMS Patent Services©2012 Google