Network system

Description: TECHNICAL FIELD [Detailed description of the invention]

【0001】

[Technical field to which the invention belongs]

The present invention relates to a network system that provides various services to user terminals connected via a communication means or the like.

【0002】

[Conventional technology]

Generally, on a network, anyone can receive services using the network without specifying a user (user). For example, in a print network, a plurality of clients can connect to a print server via the network and receive print services.

【0003】

On such a network, not only can a third party easily view the data, but it is also possible to use the network with malicious intent such as falsification of the data. For example, in a printer network, a document for printing may be peeped or tampered with. For this reason, some networks are made available only to pre-registered users.

【0004】

On the other hand, in some print networks and the like, when processing is performed according to a request from a user, a charge is made according to the processing amount and the like. In such a case, in order to limit the use of an unspecified number of networks, the user should register the use of the print server in advance and use the print network using the ID and dark place number set at the time of this registration. It has become. In addition, the data sent and received on the network is encrypted.

【0005】

By the way, even if the ID set at the time of registration is used or encrypted to send and receive data, the encrypted data may be decrypted if it is used for a long period of time. For this reason, the ID etc. may be used by others. In such a case, there is a possibility that a problem such as being charged may occur even though the user has not requested the processing.

【0006】

On the other hand, as one of the methods to prevent problems such as being charged even if the processing is not requested, there is a method of registering the user when the user uses the print network. is there.

【0007】

However, if the user registers when using the network, it takes time to register in the network, which causes problems such as the inability to use the network smoothly. Therefore, it is desired to improve the security on the network system without impairing the convenience of the network system.

【0008】

[Problems to be Solved by the Invention]

The present invention has been made in view of the above facts, and an object of the present invention is to provide a network system for improving security without impairing the convenience of the network.

【0009】

[Means for solving problems]

In order to achieve the above object, the present invention creates a server public key and a server private key that decrypts data encrypted by the server public key in response to a registration request from a user terminal connected by a communication means. The server public key is passed to the user terminal, the user identifier encrypted by the user terminal with the server public key and the user public key created by the user terminal together with the user private key are decrypted with the server private key, and the server secret is obtained. The user identifier and the user public key are stored together with the key, and when the user terminal receives the processing request encrypted by the server public key, it is decrypted by the server private key and created in response to the processing request. It is characterized in that the password is encrypted by the user public key and passed to the user terminal, and the user inputs the password into a predetermined input means to pass the processing result corresponding to the processing request to the user.

【0010】

According to the present invention having the above configuration, the user who uses the network registers in advance. When the user requests user registration, the server creates a public key for encrypting data and a private key for decrypting the data encrypted by this public key, and requests registration. Give the user the created public key.

【0011】

When the user receives the public key, he / she creates an identifier such as an ID for identifying himself / herself, creates a public key and a private key, encrypts the identifier and the public key with the public key received from the server, and sends the server to the server. hand off. In addition, the user saves the public key received from the server together with the created identifier and private key.

【0012】

The server decrypts the encrypted identifier and public key with the private key, and stores the identifier and public key for each user together with the private key created for each user.

【0013】

By completing the user registration in this way, the user can use the network.

【0014】

On the other hand, when the registered user requests the server for processing using the network, the identifier and the processing content are encrypted using the public key and passed to the server. The server decrypts this using the private key, sets a password for this processing request, encrypts the set password using the user's public key, and passes it to the user. The user decrypts and saves the password using the private key.

【0015】

After that, this password is used when requesting the execution of the process requested by the user or when receiving the process result.

【0016】

With this configuration, since the user has registered the user in advance, the work when requesting the process can be simplified. In addition, since the processing result is received using the password set each time the server receives the processing request, it is possible to simplify the processing when requesting a job while improving security, and when the user requests a job. Since the execution result is received using the password set in, there is no charge for the job even though the job has not been requested.

【0017】

In such an invention, the input means is provided in the output means for executing the processing request and outputting the processing result, and when the password is input, the processing result corresponding to the processing request is sent to the user. It may be handed over.

【0018】

Further, in the present invention, the server may be a print server that performs a print service and output a print result based on a print request. This makes it possible to reliably pass the print result using the print network to the registered user.

【0019】

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 shows a schematic configuration of a print network 10 as an example of a network to which the present invention is applied. The print network 10 has a general configuration in which a print server 12 and a user terminal 14 or the like are connected via a communication line 16 or the like.

【0020】

As shown in FIGS. 1 and 2, a printer 18 is connected to the print server 12 as an output device, and when the print server 12 receives a print request for a document or the like from the user terminal 14, the print server 12 uses the printer 18. Perform print processing upon request.

【0021】

As shown in FIG. 2, the print server 12 is provided with a network I / F 20, a registration processing unit 22, and a job processing unit 24. Further, the print server 12 is provided with a hard disk (HD30) as a storage means for storing user information together with the encryption unit 26 and the decryption unit 28.

【0022】

A key generation unit 32 is connected to the registration processing unit 22, and when a user registration request is input from the user terminal 14, the key generation unit 32 encrypts data for each user. Public key Ke_SAnd the public key Ke_SPrivate key Kd that can decrypt only the code encrypted by_STo create.

【0023】

In the registration processing unit 22, the public key Ke_SAnd private key Kd_SWhen you create the public key Ke_STo the user terminal 14. That is, the print server 12 sends the private key Kd to the user terminal 14 that has made the user registration request._SPublic key Ke that can only be decrypted by_SPass.

【0024】

On the other hand, the user terminal 14 is provided with a network I / F 34, an encryption unit 36, a decryption unit 38, a registration processing unit 40, and an HD 42 for storing registered registration information. Further, the key generation unit 44 and the user ID creation unit 46 are connected to the registration processing unit 40.

【0025】

The registration processing unit 40 of the user terminal 14 requests the user registration, and the public key Ke created by the print server 12_SIs received, the key generator 44 receives the private key Kd on the user side._UAnd public key Ke_UIs created, and the user ID creation unit 46 creates a user ID as an identifier for identifying the user on the print network 10.

【0026】

In addition, the registration processing unit 40 uses the public key Ke together with the user ID._UAnd private key Kd_UWhen you create the user ID, private key Kd_UAnd public key Ke_SIs stored in HD42 as registration information, and the public key Ke is stored in the encryption unit 36._SUser ID and public key Ke using_UIs encrypted and sent to the print server 12.

【0027】

The print server 12 uses the public key Ke sent to the user terminal 14._SUser ID and public key Ke encrypted by_UWhen you receive the private key Kd_SIs decoded by the decoding unit 28. The registration processing unit 22 uses the decrypted user ID and public key Ke._UWith private key Kd_SIs stored and saved in HD30 as user information.

【0028】

By storing the registration information on each of the print server 12 and the user terminal 14 in this way, the user registration on the print network 10 is completed, and thus the job request from the user terminal 14 can be accepted.

【0029】

On the other hand, the user terminal 14 is provided with a job processing unit 48, and when a print request is made to the print server 12, a document or the like for which the print is requested together with the user ID (hereinafter, will be described as "document 50"). In the encryption unit 36, the public key Ke_SThe job is requested by encrypting it using the above and sending it to the print server 12.

【0030】

When the job processing unit 24 of the print server 12 receives the print request sent from the user terminal 14, the job processing unit 24 sets the private key Kd for each registered user in the decryption unit 28._SIs decrypted using, and is stored in, for example, the processing waiting unit 52. When the job processing unit 24 receives the print request, the password creation unit 54 sets a password for each request. The password set is the public key Ke in the encryption unit 26._UIt is encrypted using and sent to the user terminal 14 that requested the print.

【0031】

The user terminal 14 is provided with a password storage means 62, and when it is sent from the print server 12 by making a print request, the decryption unit 38 transmits this password to the private key Kd._UIs used to decrypt this password and store it in the password storage means 62. As such a password storage means 62, a hard disk or a semiconductor memory may be used, but it is more preferable to use a removable media that can be carried while the password is stored.

【0032】

On the other hand, the print server 12 is provided with an input unit 56 for inputting a password and a comparison unit 58 for comparing the input password with the password created by the password creation unit 54.

【0033】

Here, when the user who made the print request from the user terminal 14 enters the password in the input unit 56, the entered password is compared with the password created for each requested job, and the corresponding password is supported. Run the job. That is, the document 50 of the job corresponding to the entered password is output from the processing waiting unit 52 to the printer 18. When the document 50 is input, the printer 18 executes a print process based on the document 50 and outputs the document 50.

【0034】

As a result, the user can receive the print result of the job 50 requested to be printed. Further, in the print server 12, when the password is input and the print process is performed, the billing unit 60 charges based on the processing amount and saves the user information in the HD 30.

【0035】

The flow of user registration and job request (print request) in the print network 10 will be described below with reference to FIGS. 3 to 6.

【0036】

FIG. 3 shows the processing flow on the user terminal 14 side at the time of user registration, and FIG. 4 shows the processing flow on the print server 12 side.

【0037】

As shown in FIG. 3, when performing user registration, the user terminal 14 creates registration information of a predetermined form in step 100 and sends a user registration request to the print server 12 (step 102).

【0038】

As shown in FIG. 4, the print server 12 confirms whether or not there is a user registration request sent from the user terminal 14 in the first step 120, and when there is a registration request (affirmative judgment in step 120). To step 122 to receive the registration request.

【0039】

Upon receiving the registration request, in step 124, the private key Kd for each user_SAnd public key Ke_STo create. After this, in step 126, the created public key Ke_SIs sent to the user terminal 14 that has been registered as a user, thereby responding to the user terminal 14.

【0040】

On the other hand, as shown in FIG. 3, when the registration request is made in the user terminal 14, it is confirmed in step 104 whether or not there is a response from the print server 12, and the print server 12 uses the public key Ke._SIf the response is made in step 104 and the result is affirmed in step 104, in step 106, the public key Ke sent from the print server 12_STo receive.

【0041】

After this, in step 108, the public key Ke on the user side_UAnd private key Kd_UAnd in step 110, the user ID is created. After this, in step 112, the public key Ke sent from the print server 12_SUser ID and public key Ke_UIs encrypted and sent to the print server 12 (step 114). In step 116, the created user ID and private key Kd_UPublic key Ke sent from print server 12 with_SIs stored and saved in the HD42 as user registration information, and the main processing of user registration on the user terminal 14 side is completed.

【0042】

As shown in FIG. 4, in the print server 12, the public key Ke is sent to the user terminal 14._SIs sent, it waits for a response from the user terminal 14 (step 128), and when the user terminal 14 responds and makes an affirmative judgment in step 128, the process proceeds to step 130 and the user terminal 14 is sent the user ID and public key Ke._UIn step 132, the private key Kd_SUser ID and public key Ke using_UTo decrypt.

【0043】

After this, in step 134, the private key Kd_SWith public key Ke_UAnd save the user ID as user information in HD30, and finish the user registration.

【0044】

In this way, it is possible to use the process provided by the print server 12 that completes the user registration. Here, the flow of the print process using the print network 10 will be described with reference to FIGS. 5 and 6. Note that FIG. 5 shows an outline of the flow of print requests on the user terminal 14 side, and FIGS. 6 (A) and 6 (B) show the flow of processing for print requests on the print server 12 side. ..

【0045】

As shown in FIG. 5, in the user terminal 14, when requesting the print process of the document 50 to the print server 12, the document 50 for which the print process is requested together with the user ID in the first step 140 is set to the public key Ke._SEncrypt using and send the encrypted user ID and document 50 to the print server 12 (step 142).

【0046】

On the other hand, as shown in FIG. 6A, the print server 12 confirms whether or not there is a print request that is a job request in step 160, and if there is a print request from a pre-registered user, step 160 To make an affirmative judgment with, the process proceeds to step 162, and a print request is received. After that, in step 164, the private key Kd set for each pre-registered user_SDecrypts the print request using, and reads the document 50 to be printed together with the user ID (step 166).

【0047】

In the next step 168, the read document 46 is stored in the processing waiting unit 52, and in step 170, a password is created. The password created is the public key Ke in step 172._UIt is encrypted by and sent to the user terminal 14 that made the print request (step 174), and the acceptance of the print request is completed.

【0048】

On the other hand, as shown in FIG. 5, when the print request is sent, the user terminal 14 waits for a response from the print server 12 (step 144) and receives a response from the print server 12 (affirmative judgment in step 144). Go to step 146 and receive the encrypted password. In the next step 148, the private key Kd_UTo decrypt the encrypted password and save it in the password storage means 62 (step 150).

【0049】

The user completes the print processing request by receiving the password for the print request in this way.

【0050】

On the other hand, when receiving the requested print process, for example, the user goes to the printer 18 and inputs the password received from the print server 12 into the input unit 54. The password may be input by key operation at this time, and the password is stored in the removable media, and the removable media in which the password is stored is provided in the input unit. It may be loaded in.

【0051】

As shown in FIG. 6B, the printer server 12 confirms whether or not the password has been entered in the input unit 56 in step 180, and if the password is entered and affirmative judgment is made in step 180, the process proceeds to step 182. After migrating and reading the entered password, this password is compared with the password created for each print request (step 184).

【0052】

After that, in step 186, the document 50 of the corresponding password is output from the processing waiting unit 52 to the printer 18. As a result, the printer 18 executes the print process based on the document 50 and outputs the printer.

【0053】

In addition, the user who has entered the password can receive the print based on the document 50 for which the print request has been made by executing the print process based on this password.

【0054】

In addition, the print server 12 charges according to the processing amount (printing amount, etc.) in step 190 according to the execution of the requested print processing, and saves the requested print processing in HD30 as user information, for example. As a result, the print network 10 charges the registered user at a predetermined timing for the service provision fee and the like.

【0055】

As described above, in the print network 10 applied to the present embodiment, since the user registration is performed in advance, the processing when receiving the provision of the print service or the like becomes complicated, or when the print service is requested. It doesn't take long.

【0056】

In addition, the user terminal 14 is the print server 12 and the private key Kd._SPublic key Ke generated in pairs with_SThe user ID and document 50, etc. are encrypted using, and on the print server 12, the private key Kd is used on the user terminal 14._UPublic key Ke generated in pairs with_USince the password and the like are encrypted using the above, high security on the communication line 16 can be ensured.

【0057】

On the other hand, when the print server 12 receives the print request, the password created for each print request is passed to the user terminal 14, and the print request is executed by inputting this password. Therefore, the print network 10 It is possible to reliably prevent a third party connected to the user from making a print request using another person's user ID.

【0058】

That is, the public key Ke passed by the print server 12 to the user terminal 14._SEven if a third party can make a print request using, it is necessary to enter the password in order to execute the print request. This password is the private key Kd generated by the user terminal 14 when registering as a user._UIt is extremely difficult for a third party to obtain this password because it must be decrypted using.

【0059】

Therefore, it is possible to surely prevent the registered user from incurring a network usage fee or the like for the print processing requested by a third party.

【0060】

Further, in the print network 10, the user who has made the print request executes the requested print process by inputting the password from the input unit 56 provided in the print server 12 or the printer 18. It is possible to prevent the print result from being seen by other users as well as being mistakenly passed to another user to surely receive the print result requested by the user.

【0061】

It should be noted that this embodiment shows an application example of the present invention, and does not limit the configuration of the network to which the present invention is applied.

【0062】

For example, in the present embodiment, the printer 18 executes the requested print process by inputting the password into the input unit 56 provided in the print server 12 or the printer 18, but the print server 12 executes the requested print process. The print result may be passed by the user inputting the password in the input unit 56 by executing the requested print process at the same time as creating the above.

【0063】

In addition, the password, etc. received by the user terminal 14 from the print server 12 is used as the public key Ke._SThe print process may be executed by encrypting the data using the above and returning the data to the print server 12.

【0064】

Further, in the present embodiment described above, the printer network 10 that provides a print service for printing a document 50 or the like has been described as an example, but the present invention is applied not only to the print service but also to a network that provides an arbitrary service. be able to.

【0065】

Further, in the present embodiment, the network that provides the print service has been described as an example, but the present invention is not limited to this, and the shopping service and the ticket reservation service can also be applied. In this case, for example, when a user is registered in advance, a public key is held between the network server and the user terminal, and an item is purchased or a ticket is reserved from the user terminal, the network server creates a password and uses this password. , Encrypted with the public key created by the user terminal at the time of user registration and handed over.

【0066】

After that, the password is entered when the user receives the purchased item or the reserved ticket. As a result, goods and tickets can be reliably delivered to users who use the network, and accurate billing becomes possible.

【0067】

[Effect of the invention]

As described above, the present invention passes the public key generated by each other between the network server and the user terminal at the time of user registration, and when the registered user requests the service, the public key created by the network server is used and the public key is used. Since the password used by the network server for which the service is requested to deliver the service result is passed using the public key created by the user terminal, the process when requesting the service is simplified and the registered user is assured. The excellent effect of being able to provide services can be obtained.

【0068】

Further, in the present invention, since the request result can be received by inputting the password, the request result can be reliably delivered to the user.

[Simple explanation of drawings]

[Figure 1]

It is a schematic block diagram of the print network applied to this embodiment.

[Figure 2]

It is a functional block diagram which shows the schematic structure of the print server and the user terminal applied to this embodiment.

[Fig. 3]

It is a flow chart which shows the outline of the process of user registration in a user terminal.

[Fig. 4]

It is a flow chart which shows the outline of the process of user registration in a print server.

[Fig. 5]

It is a flow chart which shows the outline of the print request in a user terminal.

[Fig. 6]

(A) is a flow chart showing an outline of acceptance of a print request by the print server, and (B) is a flow chart showing an outline of processing of the received print request.

[Explanation of symbols]

10 Print network (network) 12 print server 14 User terminal 16 Communication line (communication means) 18 Printer (output device) 20, 34 Network I / F (communication means) 22 Registration processing department 24 Job processing unit 26, 36 Cryptography 28, 38 Decoding section 32, 44 key generator 46 User ID Creation Department 50 documents 54 Password Creator 56 Comparison section