JP2001268356A - Information processing apparatus and information processing system and information transferring method and storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing system capable of realizing the protection of intellectual assets such as the copyright of transmission information or the prevention of the outflow of any illegal copy or illegal data, and performing the accurate security management of the transmission information. SOLUTION: A storage means 207 stores symbol image information having a signature function (symbol image information having the meaning of signature). When information indicated by an information transfer request from another device 120(X) is image information, a synthesizing means 205 synthesizes the symbol image information in the storage means 207 with the image information. A transferring means 202 transfers the composite image obtained by the synthesizing means 205 to a device 120(X).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing apparatus for use in a system in which apparatuses such as a computer, an image reading apparatus, and an image forming apparatus exchange information with each other via a network. The present invention relates to a computer-readable storage medium storing an information processing system, an information transfer method, and processing steps for executing the method.

[0002]

2. Description of the Related Art Conventionally, in a system in which various devices such as a computer, an image reading device, and an image forming device are connected on a network, various information including image information is transmitted via the network. Because
Security management for the information at the time of information transmission is widely used.

[0003]

However, in the above-described conventional system, although security management is performed, protection of intellectual property such as copyright of transmitted information and illegal copying are not performed. And the prevention of unauthorized data leakage could not be reliably realized.

Accordingly, the present invention has been made to eliminate the above-mentioned drawbacks. The present invention is applied to transmission information on a network, such as copyright information of a creator of the information, a signature (signature), an authentication key, and the like. By adding a を, protection and management of transmission information, ranking of copyright information and signatures added according to the importance of transmission information, an unconventional configuration that can implement a charging service etc. according to the rank, An information processing apparatus, an information processing system, an information transfer method, which can realize protection of intellectual property such as copyright of transmission information, prevention of illegal copying and leakage of unauthorized data, and secure security management of transmission information; It is another object of the present invention to provide a storage medium in which a computer stores processing steps for executing the same.

[0005]

For such a purpose,
A first invention is an information processing apparatus for transferring, via a network, information indicated by a request to an information transfer requesting device, the storage means for storing symbol image information having a signature function, When the information indicated by the transfer request is image information, combining means for combining symbol image information in the storage means with the image information, and a combined image obtained by the combining means, Transfer means for transferring the data to the existing device.

A second invention is an information processing apparatus for transferring information indicated by a request to an information transfer requesting device via a network, the storage means for storing symbol image information having a signature function, In a case where the information indicated by the information transfer request is image information, the storage means stores the image information indicated by the information transfer request based on the presence / absence of a collation key for the information transfer request and the collation result of the collation key. A synthesizing means for synthesizing the symbol image information in the information transfer request; and a synthesizing image obtained by the synthesizing means on the basis of the presence or absence of the collation key for the information transfer request and the collation result of the collation key. Transfer means for transferring the data to the device.

[0007] In a third aspect based on the second aspect,
The synthesizing unit executes the synthesizing process when a matching key for the information transfer request is present and the matching of the matching key fails, or when there is no matching key for the information transfer request. I do.

[0008] In a fourth aspect based on the second aspect,
The transfer means, if there is no matching key for the information transfer request, or if there is a matching key for the information transfer request and the matching result of the matching key fails, the combining means obtained by the combining means When the image is transferred and the verification key for the information transfer request is present and the verification result of the verification key matches, the original image information not subjected to the synthesis processing by the synthesis means is transferred. It is characterized by.

A fifth invention is an information processing apparatus for transferring, via a network, information indicated by a request to an information transfer requesting device, and stores a plurality of symbol image information having a signature function. Means, when the information indicated by the information transfer request is image information, the image information indicated by the information transfer request is converted to the image information indicated by the information transfer request based on the presence or absence of a matching key for the information transfer request and the matching result of the matching key. A synthesizing unit for synthesizing predetermined symbol image information in the storage unit; and a synthesizing image obtained by the synthesizing unit based on the presence or absence of a matching key in response to the information transfer request and the matching result of the matching key. Transfer means for transferring data to the device that has requested the transfer.

In a sixth aspect based on the fifth aspect,
The storage means stores the plurality of symbol images in association with a plurality of collation keys, and the synthesizing means has a collation key for the information transfer request and determines that the collation result of the collation key matches. In this case, a symbol image corresponding to the collation key for the information transfer request is obtained from the plurality of symbol images in the storage unit, and the collation key for the information transfer request is present, and the collation key is unsuccessful. Or in the case where there is no matching key for the information transfer request, a default symbol image in the storage means is acquired.

In a seventh aspect based on the sixth aspect,
The storage means stores the plurality of symbol images in association with an access right rank indicated by the plurality of collation keys.

According to an eighth aspect of the present invention, in any one of the first, second and fifth aspects, when the information indicated by the information transfer request is other information than image information, Is transferred as it is.

A ninth aspect of the present invention is an information processing system in which a plurality of devices are communicably connected to each other, wherein at least one of the plurality of devices is the first to eighth devices.
Characterized by having the function of the information processing device according to any one of the above.

According to a tenth aspect, there is provided an information transfer method for transferring information between at least a first device and a second device on a network via the network, wherein the first device comprises: The transfer target information indicated by the file transfer request from the second device,
A determining step of determining whether the information is image information or other information, a holding step in which the first device holds a symbol image having a signature, and a determination result in the determining step. An adding step in which the first device adds the symbol image held in the holding step to the image information as the transfer target information;
A transfer step of transferring the transfer target information after the addition of the symbol image in the adding step to the second device, by the first device.

[0015] An eleventh invention is an information transfer method for transferring information between at least a first device and a second device on a network via the network, wherein the first device comprises: The transfer target information indicated by the file transfer request from the second device,
A determining step of determining whether the information is image information or other information; a holding step of holding the symbol image having the meaning of the signature by the first device; Based on the management step of managing the access right of the device, the determination result in the determination step, and the management information in the management step, the first device sends the image information that is the transfer target information to the image information. An adding step of adding the symbol image held in the holding step, and the first device, based on the management information in the managing step, transfers the transfer target information after the symbol image is added in the adding step to the Transferring to a second device.

A twelfth invention is an information transfer method for transferring information between at least a first device and a second device on a network via the network, wherein the first device has The transfer target information indicated by the file transfer request from the second device,
A determination step of determining whether the information is image information or other information; a holding step in which the first device holds a plurality of symbol images having a signature meaning; and a collation key for the file transfer request. A management step of managing an access right of a second device, and the first device, based on a collation key for the file transfer request, allows the first device to select a corresponding symbol image from the plurality of symbol images held in the holding step. The first device, based on the determination result in the determination step and the management information in the management step, obtains the symbol image in the image information which is the transfer target information. An adding step of adding the symbol image obtained in the step, and the management information based on the management information in the management step. There are, in the first device, the transfer target information after the symbol image added by the adding step, characterized in that it comprises a transfer step of transferring to said second device.

In a thirteenth aspect based on the twelfth aspect, the holding step holds the plurality of symbol images in association with an access right rank indicated by a verification key for the file transfer request. It is characterized by including.

According to a fourteenth aspect, a processing program for implementing the function of the information processing apparatus according to any one of claims 1 to 8 or the function of the information processing system according to claim 9 is provided.
It is a storage medium that is readable by a computer.

According to a fifteenth aspect of the present invention, a computer readable storage medium stores the processing steps of the information transfer method according to any one of the tenth to thirteenth aspects.

[0020]

Embodiments of the present invention will be described below with reference to the drawings.

(First Embodiment) The present invention provides, for example,
It is applied to a network system 100 as shown in FIG. This network system 100 (hereinafter, simply referred to as “system 100”) includes a plurality of devices 120 on a network 110 as shown in FIG.
(1), 120 (2), 120 (3),... Are connected so that information can be exchanged with each other.

The devices 120 (1), 120 (2), 1
Although various devices can be applied as 20 (3),..., In the present embodiment, the device 120 (1) is a computer, and the other devices 120 (2), 120 (3),.
Are devices such as a computer, an image reading device, and an image forming device.

The devices 120 (1), 120
Each of (2), 120 (3),... Has the same configuration with respect to a function relating to an information transfer operation (file transfer operation) described in detail later.

For example, a device 1 as a computer
20 (1) (hereinafter, referred to as “computer 120 (1)”) is an image compression / expansion unit 206 that performs image compression / expansion processing.
And the image obtained by the image compression / decompression unit 206 and the memory 2
An image synthesizing unit 205 for synthesizing a signature image (symbol image having a signature meaning) in a file 07, a file management unit 203 for managing a synthesized image obtained by the image synthesizing unit 205 as a file, and a file management unit 203. Accessed database 204 and file management unit 2
, A file transfer unit 202 that performs a transfer process when transferring (file transfer) the file managed by the network 03 via the network 110, and other devices 120 (2), 120 (3),. And a network interface 201 for exchanging information.

The computer 120 (1) is, for example, a C that controls the operation of the entire computer 120 (1).
It includes a PU 211 and a memory 212 in which a processing program for operation control by the CPU 211 and the like are stored. Accordingly, when the CPU 211 reads and executes the processing program in the memory 212, the image compression / decompression unit 206, the image synthesis unit 205, the file management unit 203, and the file transfer unit 202 execute, for example, as shown in the flowchart of FIG. The operation (file transfer operation) of the computer 120 (1) is performed.

Step S301: File transfer unit 202
Are connected to the other devices 120 (2), 12 (12) on the network 110 via the network interface 201.
. 0 (3),... This file transfer request includes transfer information including a file name and transfer destination information (request destination information).

Step S302: File transfer unit 202
Receives a file transfer request and acquires the file indicated by the request from the database 204 via the file management unit 203.

Step S303: File transfer unit 202
Determines whether the file (target file) acquired in step S302 is an image file or another file. Here, as the file determination method, a method using an extension of a file name is adopted. For example, if the extension is “BMP”, “GIF”, “JPG”,
If the target file is an image file, the target file is regarded as an image file.

If the result of determination in step S303 is that the target file is not an image file,
The process 310 (file transfer process) is executed.

Step S304: If the result of determination in step S303 is that the target file is an image file,
The file transfer unit 202 transfers the target file to the image combining unit 2
05. The image synthesizing unit 205 determines whether the target file (image file) from the file transfer unit 202 has been compressed. As a compression determination method here, a method using an extension of a file name is adopted. For example, when the extension is "BMP", it is regarded as uncompressed, when "GIF" is GIF compression, when "JPG" is JPEG compression, and when "JBG", it is regarded as JBIG compression.

If the result of the determination in step S304 is that the target file is not compressed, the process in step S305 is not executed, and the process in step S30 is continued.
Proceed to 6.

Step S305: If the result of determination in step S304 is that the target file is a compressed file,
The image synthesizing unit 205 converts the target file (compressed file) into a file that can be synthesized by the expansion process in the image compression and expansion unit 206. At this time, the image compression / decompression unit 206 performs GIF compression, JPEG compression, and JBIG
It has various compression / decompression functions such as compression, and executes decompression processing corresponding to the compression method (see step S304) indicated by the file name extension of the transfer information included in the file transfer request.

Step S306: The image synthesizing unit 205
The signature image in the memory 207 is obtained.

Step S307: The image synthesizing unit 205
An image synthesis process is performed in which an image (original image) of the target file (or a file decompressed in step S305 if the file is a compressed file) and the signature image acquired in step S306 are overlapped.

Specifically, first, in the present embodiment, as shown in FIG. 3, an original image 401 and a signature image 402
Are rectangular images. Therefore, the image synthesizing unit 205
Starts from the upper right of both the original image 401 and the signature image 402, and uses the image with the smaller image size as the composite portion. In FIG. 3, since the signature image 402 has a smaller image size than the original image 401, the original image 40
An image size of the signature image 402 starting from the upper right of 1 is a combined portion 403 of the original image 401. Then, the image synthesizing unit 205 superimposes the synthesizing part 403 and the signature image 402, and synthesizes the image 404 such that the same color part (black and black or white and white) is white and the different color part (black and white) is black. (XOR image) and the composite image 40
4 is embedded in a portion corresponding to the synthesized portion 403 of the original image 401. The image obtained as a result is an image (composite image) indicated by “405”.

Step S308: The image synthesizing unit 205
It is determined whether or not the original image in the synthesis processing is obtained from the file expanded in step S305 in the compressed target file.

If the result of determination in step S308 is that the original image is not obtained from a decompressed file, that is, if the original target file is not a compressed file, the next step S309 is not executed, and step S3 is performed as it is.
Proceed to 10.

Step S309: If the result of determination in step S308 is that the original image is obtained from a decompressed file, that is, if the original target file is a compressed file, the image synthesizing unit 205 determines in step S307 The generated composite image is compressed by the image compression / decompression unit 206 using the same compression method as the compression method at the time of decompression.

Step S310: The image synthesizing unit 205
The synthesized image itself generated in step S307, the synthesized image compressed in step 309, or the file determined as another file by the determination in step S303 is defined as a file having the file name of the target file.
This is supplied to the file management unit 203. File management unit 20
3 transfers the file from the image synthesizing unit 205 to the request destination device on the network 110 via the file transfer unit 202 and the network interface 201.

As described above, in the present embodiment, a symbol image (signature image) having the meaning of a signature (signature) is synthesized with an image to be transferred, and the synthesized image is transferred. As a result, protection of intellectual property such as copyright of transmission information, prevention of illegal copying and leakage of unauthorized data, etc. can be reliably performed, and reliable security management of transmission information can be performed.

In the present embodiment, whether or not the target file is an image file, whether it is a compressed file, and which compression method is used is determined by the extension of the file name. However, the present invention is not limited to this, and the following determination method may be used.

Example 1: The file storage format in the database 204 is hierarchized (directoryed), the directory in which the target file is stored is recognized, and if the target file is stored in a predetermined directory, the target file is It is assumed that the target file, which is an image file, is a compressed file. Example 2: File management is performed by assigning attributes to files, and an image file, a compressed file, and a compression method are determined based on the attributes of the file. Example 3: At the time of file transfer, the operation of transferring one file is managed as one job, the attributes of the job are managed, and based on the attributes, the image file is determined, the compressed file is determined, and the compression method is determined. Make a determination.

In the present embodiment, a method of superimposing a signature image on an original image in an XOR format is used as an image synthesizing method. However, the present invention is not limited to this.
A method of processing the signature image on the original image so that the signature image can be discriminated, such as a method of making the color information of the symbol portion (signature image portion) negative, a method of increasing the color tone of the color information, and a method of shifting the image. You may.

FIG. 4 shows a web browser display example of an HTML document based on the present embodiment. The display image shown in FIG. 4 is a JPEG image, and is an example of an image obtained as a result of adding a signature.

(Second Embodiment) The present invention provides, for example,
This is applied to a network system 500 as shown in FIG. This network system 500 (hereinafter, simply referred to as “system 500”) is the system 1 of FIG.
The configuration is the same as that of the configuration 00, except that the configuration further includes a collation key collation unit 501. still,
In the system 500 of FIG. 5, parts that operate in the same manner as the system 100 of FIG. 1 are given the same reference numerals, and detailed description thereof will be omitted.

In the system 500 according to the present embodiment, the collation key collation unit 501 collates the collation keys, determines whether or not the collation keys match, and holds the result.

The file transfer request in the present embodiment is indicated by a command as shown in FIG. 6, for example.
In FIG. 6, the commands indicated by “511” and “512” mean a file transfer request without a matching key.
The command indicated by “513” is a collation key ([KEY: a
bcde]) means that there is a file transfer request.

FIG. 7 shows a computer 1 according to the present embodiment.
20 shows the operation (file transfer operation) 20 (1). Hereinafter, the file transfer request 5 shown in FIG.
A file transfer operation in the case where each of 11 to 513 is received will be described. In the flowchart of FIG. 7, the same reference numerals are given to portions where processing is performed in the same manner as in the flowchart of FIG. 2, and detailed description thereof will be omitted.

(1) File transfer request 511 (<loa
d “main.txt” to PC1>) Operation at the time of acceptance

First, the file transfer unit 202 transmits the data to the network 1 via the network interface 201.
, Other devices 120 (2), 120 (3),.
(Step S30)
1).

Next, the file transfer unit 202 sends a file transfer request (<load “main.txt”) from an arbitrary device (here, a device indicated by “PC1”).
When toPC1> is received, the file (“main.txt”) indicated by the request is acquired from the database 204 via the file management unit 203 (step S302).

Next, the file transfer unit 202 transmits the file (“main.tx”) acquired in step S302.
t ”) is an image file or another file (step S303).
The extension of the file (“main.txt”) is “txt
t ", that is, the target file is determined to be a text file.

Then, the file transfer unit 202 determines the file (“mai”
n. txt ") is a text file,
The file (“main.txt”) is transferred to the file transfer unit 202 and the network interface 20 without performing the processing in steps S521 to S524 and S307.
1 to the request destination device (device indicated by “PC1”) on the network 110 (step S310).

(2) File transfer request 512 (<loa
d “mainDraw1.gif” to PC1>) Operation when receiving

First, the file transfer unit 202 transmits the data to the network 1 via the network interface 201.
, Other devices 120 (2), 120 (3),.
(Step S30)
1).

Next, the file transfer unit 202 sends a file transfer request (<load “mainDraw”) from any device (here, the device indicated by “PC1”).
1. gif "to PC1>", the file ("mainDraw1.g") indicated by the request is received.
if ″) is acquired from the database 204 via the file management unit 203 (step S302).

Next, the file transfer unit 202 transmits the file (“mainDraw”) acquired in step S302.
1. gif ") is an image file or another file (step S303). Here, the file (" mainDraw1.gif ") is determined.
Is "gif", that is, the target file is determined to be an image file.

Next, the file transfer section 202 determines the file (“mainD
raw1. gif ”) is an image file, so that the file file (“ mainDraw1.g
if ”) is supplied to the image composition unit 205 (step S5).
21).

Next, the image synthesizing unit 205 determines whether the file transfer request is with or without the collation key (step S522). Here, the file transfer request (<load “mainDraw1.gi”
Since f "to PC1>) does not have a collation key, the image synthesizing unit 205 performs steps S523 and S52.
The processing of synthesizing the original image and the signature image as described above is performed without performing the processing of step 4 (the verification processing of the verification key) (step S307).

Then, the image synthesizing unit 205 determines in step S
The composite image file generated in step 307 is supplied to the file management unit 203. The file management unit 203 transfers the file from the image synthesis unit 205 to the file transfer unit 202.
Then, the data is transferred to the request destination device on the network 110 via the network interface 201 (step S310).

(3) File transfer request 513 (<loa
d “mainDraw1.gif” to PC1 [KE
Y: abcde]>) Operation at the time of reception

First, the file transfer unit 202 sends the information to the network 1 via the network interface 201.
, Other devices 120 (2), 120 (3),.
(Step S30)
1).

Next, the file transfer unit 202 sends a file transfer request (<load “mainDraw”) from an arbitrary device (here, the device indicated by “PC1”).
1. gif "to PC1 [KEY: abcde]>), the file (" m
ainDraw1. gif ") is transferred to the file management unit 20.
3 from the database 204 (step S302).

Next, the file transfer unit 202 checks the file (“mainDraw”) acquired in step S302.
1. gif ") is an image file or another file (step S303). Here, the file (" mainDraw1.gif ") is determined.
Is "gif", that is, the target file is determined to be an image file.

Next, the file transfer unit 202 determines the file (“mainD”) based on the result of the determination in step S303.
raw1. gif ") is an image file, so that the file (" mainDraw1.gif ")
Is supplied to the image synthesizing unit 205 (step S521).

Next, the image synthesizing unit 205 determines whether the file transfer request is with or without the collation key (step S522). Here, the file transfer request (<load “mainDraw1.gi”
Since f "to PC1 [KEY: abcde]> has a collation key ([KEY: abcde]), the image synthesizing unit 205 sets the collation key ([KEY: abcd]).
e]) is supplied to the matching key matching unit 501. The collation key collation unit 501 receives the collation key ([K
EY: abcde]) is collated by an arbitrary collation method (step S523).

Next, the image synthesizing unit 205 determines whether or not the collation keys match (whether or not the collation key is authenticated) based on the collation result in the collation key collation unit 501 (step S524).

If the result of determination in step S524 is that the collation key has been authenticated, a file transfer request (<load “m
ainDraw1. gif "to PC1 [KEY: ab
cde]>) is requested for the file (“mai”).
nDraw1. gif ”) is deemed to have the right to be acquired as it is, and the image synthesizing unit 205 does not execute the above-described image synthesizing process, but executes the file (“ mainDra ”).
w1. gif ") as it is, and the file management unit 2
03. The file management unit 203 transfers the file from the image composition unit 205 to the requested device on the network 110 via the file transfer unit 202 and the network interface 201 (step S310).

On the other hand, if the result of determination in step S524 is that the verification key has not been authenticated, a file transfer request (<
load "mainDraw1.gif" to PC1
[KEY: abcde]>), the image compositing unit 205 determines that the request destination (PC1) does not have the right to obtain the file (“mainDraw1.gif”) as it is.
Executes the above-described image synthesizing process, and supplies the file of the synthesized image obtained as a result to the file management unit 203 (step S307). The file management unit 203 transfers the file from the image synthesis unit 205 to the file transfer unit 202.
Then, the data is transferred to the request destination device on the network 110 via the network interface 201 (step S310).

As described above, the present embodiment is configured to execute the processing of synthesizing the original image and the signature image based on the collation result of the collation key (password) of the file transfer request. The access right of the request destination can be managed, and more reliable security management can be performed.

In the present embodiment, the collation key is collated each time a file transfer request is received. However, the present invention is not limited to this. The necessity of image composition may be determined by using a resource access method and determining the login account.

(Third Embodiment) The present invention provides, for example,
This is applied to a network system 600 as shown in FIG. This network system 600 (hereinafter simply referred to as “system 600”) is the system 1 of FIG.
The configuration is the same as that of the configuration 00, except that an image selection unit 601 and a key list memory 602 are further provided. In the system 600 shown in FIG. 8, the same reference numerals are given to the parts operating in the same manner as the system 100 shown in FIG. 1, and the detailed description thereof will be omitted.

In the system 600 according to the present embodiment, the key list in the memory 602 corresponds to, for example, a collation key 611 of a file transfer request and an ID (signature image ID) 612 indicating a signature image as shown in FIG. This is the list that I attached. The signature image ID 612 in this key list is associated with the rank of the access right of the user corresponding to the collation key.

The memory 207 ′ stores a plurality of signature images indicated by the signature image IDs in the key list of the memory 602. The image selection unit 601 acquires the signature image ID corresponding to the verification key of the file transfer request from the key list in the memory 207 ′.

FIG. 10 shows an operation (file transfer operation) of the computer 120 (1) in the present embodiment. In the flowchart of FIG. 10, the same reference numerals are given to portions where processing is performed in the same manner as in the flowcharts of FIGS. 2 and 7, and a detailed description thereof will be omitted.

Steps S301 to S303: The file transfer unit 202 transmits the information to another device 120 on the network 110 via the network interface 201.
(2), 120 (3),... (Step S301), the file indicated by the request is acquired from the database 204 via the file management unit 203 (Step S302), and the file ( It is determined whether the target file is an image file or another file.

If the result of determination in step S303 is that the target file is not an image file, the processing of step S310 (file transfer processing) is executed.

Step S521: If the result of determination in step S303 is that the target file is an image file,
The file transfer unit 202 supplies the target file and its file name to the image composition unit 205. Further, the file transfer unit 202 determines that the file transfer request is a verification key (see FIG.
If it is found that the key is present, the matching key is also supplied to the image selecting unit 601.

Step S522: The image selection unit 601
It is determined whether the file transfer request is with or without the collation key.

If the result of determination in step S522 is that the file transfer request does not include a collation key, the flow advances to step S622, which will be described later.

Step S523: If the result of determination in step S522 is that the file transfer request has a collation key, the image selection unit 601 determines whether the collation key in the file transfer request matches (i.e., whether the collation key has been authenticated). Is determined. The collation key collation unit 50 according to the second embodiment
1 may be provided, and the collation key collation unit 501 may be requested to collate the collation key.

If the result of determination in step S523 is that the collation keys in the file transfer request do not match, the flow advances to step S622 described below.

Step S621: If the collation key of the file transfer request matches as a result of the determination in step S523, the image selecting unit 601 retrieves the signature image ID corresponding to the collation key of the file transfer request from the key list of the memory 602. Acquired and supplied to the image synthesis unit 205. Specifically, for example, as shown in FIG.
UEST ”, the image selection unit 601 generates the signature image ID“ SAM ”corresponding to the collation key“ GUEST ”.
PLE. bmp "is obtained and supplied to the image synthesizing unit 205.

Step S622: If the file transfer request does not include the collation key as determined in step S522,
Alternatively, if the collation keys of the file transfer request do not match as determined in step S523, the image selection unit 601 supplies the default signature image ID preset in the key list of the memory 602 to the image synthesis unit 205.

Step S623: After the processing in step S621 or S622, the image synthesizing unit 205
The signature image indicated by the signature image ID from 01 is acquired from the memory 207 ′.

Step S304: The image synthesizing unit 205
In step S521, it is determined whether the target file (image file) supplied from the file transfer unit 202 is a compressed file.

If the result of determination in step S304 is that the target file is not compressed, the process in step S305 is not executed, and step S30 is performed as it is.
Proceed to 6.

Step S305: If the result of determination in step S304 is that the target file has been compressed,
The image synthesizing unit 205 converts the target file (compressed file) into a file that can be synthesized by the expansion process in the image compression and expansion unit 206.

Step S307: The image synthesizing unit 205
An image synthesis process is performed in which the image (original image) of the target file (or the file decompressed in step S305 if the file is a compressed file) and the signature image acquired in step S623 are overlapped.

Step S308: The image synthesizing unit 205
It is determined whether or not the original image in the synthesis processing is obtained from the file expanded in step S305 in the compressed target file.

If the result of determination in step S308 is that the original image is not obtained from a decompressed file, that is, if the original target file is not a compressed file, the next step S309 is not executed and step S3 is executed as it is.
Proceed to 10.

Step S309: If the result of determination in step S308 is that the original image is obtained from a decompressed file, that is, if the original target file is a compressed file, the image synthesizing unit 205 determines in step S307 The generated composite image is compressed by the image compression / decompression unit 206 using the same compression method as the compression method at the time of decompression.

Step S310: The image synthesizing unit 205
The synthesized image itself generated in step S307, the synthesized image compressed in step 309, or the file determined as another file by the determination in step S303 is defined as a file having the file name of the target file.
This is supplied to the file management unit 203. File management unit 20
3 transfers the file from the image synthesizing unit 205 to the request destination device on the network 110 via the file transfer unit 202 and the network interface 201.

As described above, in the present embodiment, based on the collation result of the collation key (password) of the file transfer request, the original image and the signature image are combined, and the signature image in the combination process is executed. Is configured to be an image corresponding to the collation key, the access right of the request destination of the file transfer request can be managed, and more reliable security management can be performed.

An object of the present invention is to supply a storage medium storing software program codes for realizing the functions of the host and the terminal according to the first to third embodiments to a system or an apparatus, and to provide the system or the apparatus with the storage medium. It is needless to say that the present invention is also achieved when the computer (or CPU or MPU) of the apparatus reads out and executes the program code stored in the storage medium. In this case, the program code itself read from the storage medium realizes the functions of the first to third embodiments, and the storage medium storing the program code constitutes the present invention. As storage media for supplying the program code, ROM, floppy (registered trademark) disk, hard disk, optical disk, magneto-optical disk, CD-RO
M, CD-R, magnetic tape, nonvolatile memory card, and the like can be used. In addition, the first to third programs are executed by executing the program code read by the computer.
Not only is the function of the embodiment realized, but also the OS or the like running on the computer performs part or all of the actual processing based on the program code instructions, and the processing performs the first to third processing. It goes without saying that a case where the function of the embodiment is realized is also included. Further, after the program code read from the storage medium is written to a memory provided in an extended function board inserted into the computer or an extended function unit connected to the computer,
Based on the instructions of the program code, a CPU or the like provided in the function expansion board or the function expansion unit performs a part or all of the actual processing.
It goes without saying that a case where the function of the embodiment is realized is also included.

[0096]

As described above, according to the present invention, when image information is transferred between a plurality of devices connected on a network, the device that transfers the image information has a signature (signature). Since a symbol image (signature image) having a meaning is composed (added) to image information to be transferred, intellectual property such as a copyright of a creator of the image information to be transferred can be surely protected. This makes it possible to reliably prevent unauthorized copying and unauthorized data leakage. Also, if the collation result of the collation key (authentication key) of the information transfer request is a match, the original original image information is transferred instead of the image information obtained by synthesizing the signature image, so that only a specific user , It is possible to use the original image information. Also, a plurality of signature images are stored in association with a plurality of ranked matching keys related to the access right, and the signature image associated with the matching key of the information transfer request is used for image synthesis. For example, it is possible to rank users, and it is also possible to synthesize signature images according to the rank of the user. This makes it possible to clearly indicate the right to use the image information according to the user who requests the image information, and it is possible to use the image information for a billing service or the like.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a network system to which the present invention is applied in a first embodiment.

FIG. 2 is a flowchart for explaining a file transfer operation in the network system.

FIG. 3 is a diagram illustrating an image combining process in the file transfer operation.

FIG. 4 is a diagram for explaining an example of an operation result of the file transfer operation.

FIG. 5 is a block diagram showing a configuration of a network system to which the present invention is applied in the second embodiment.

FIG. 6 is a diagram for explaining a file transfer request in the network system.

FIG. 7 is a flowchart for explaining a file transfer operation in the network system.

FIG. 8 is a block diagram showing a configuration of a network system to which the present invention is applied in a third embodiment.

FIG. 9 is a diagram for explaining a key list in the network system.

FIG. 10 is a flowchart for explaining a file transfer operation in the network system.

[Explanation of symbols]

Reference Signs List 100 network system 110 network 120 (1), 120 (2), 120 (3), ... device 201 network interface 202 file transfer unit 203 file management unit 204 database (original image) 205 image synthesis unit 206 image compression / decompression unit 207 memory (Signature image) 211 CPU 212 Memory

Claims (15)

[Claims] 1. An information processing apparatus for transferring, via a network, information indicated by a request to an information transfer requesting device via a network, comprising: storage means for storing symbol image information having a signature function; When the information indicated by the request is image information, synthesizing means for synthesizing the symbol image information in the storage means with the image information, and a synthesized image obtained by the synthesizing means in response to the information transfer request. An information processing apparatus, comprising: a transfer unit configured to transfer data to a device. 2. An information processing apparatus for transferring, via a network, information indicated by an information transfer request to a device that has made an information transfer request, comprising: storage means for storing symbol image information having a signature function; When the information indicated by the request is image information, a symbol image in the storage means is converted into the image information indicated by the information transfer request based on the presence or absence of a matching key for the information transfer request and the matching result of the matching key. Combining means for combining information; and transferring the combined image obtained by the combining means to the device which has requested the information transfer, based on the presence or absence of a matching key for the information transfer request and the matching result of the matching key. An information processing apparatus comprising: 3. The synthesizing means executes the synthesizing process when the collation key for the information transfer request is present and the collation of the collation key fails, or when the collation key for the information transfer request is absent. The information processing apparatus according to claim 2, wherein: 4. The synthesizing unit according to claim 1, wherein the verification unit does not have a verification key for the information transfer request, or the verification unit has a verification key for the information transfer request and the verification result of the verification key fails. Transfer of the synthesized image obtained in the above, and a verification key for the information transfer request is present,
3. The information processing apparatus according to claim 2, wherein when the collation result of the collation key is a match, the original image information not subjected to the synthesizing process by the synthesizing means is transferred. 5. An information processing apparatus for transferring, via a network, information indicated by a request to an information transfer requesting device via a network, wherein said storage means stores a plurality of symbol image information having a signature function. When the information indicated by the information transfer request is image information, the image information indicated by the information transfer request is converted into the image information indicated by the information transfer request based on the presence / absence of a collation key for the information transfer request and the collation result of the collation key. Synthesizing means for synthesizing predetermined symbol image information; and a synthesizing image obtained by the synthesizing means based on the presence / absence of a collation key for the information transfer request and the collation result of the collation key. An information processing apparatus, comprising: a transfer unit configured to transfer data to a device. 6. The storage means stores the plurality of symbol images in association with a plurality of collation keys, and the synthesizing means has a collation key for the information transfer request, and If the match is a match,
When a symbol image corresponding to a collation key for the information transfer request is obtained from a plurality of symbol images in the storage unit, and a collation key for the information transfer request is present, and the collation key is unsuccessful. 6. The information processing apparatus according to claim 5, wherein when there is no matching key for the information transfer request, a default symbol image in the storage unit is acquired. 7. The storage device according to claim 6, wherein the storage unit stores the plurality of symbol images in association with an access right rank indicated by the plurality of collation keys.
An information processing apparatus according to claim 1. 8. The information processing apparatus according to claim 1, wherein the information indicated by the information transfer request is information other than image information.
The information processing apparatus according to claim 1, wherein the other information is transferred as it is. 9. An information processing system in which a plurality of devices are communicably connected to each other, wherein at least one of the plurality of devices is the information processing apparatus according to claim 1. An information processing system having a function of: 10. An information transfer method for transferring information between at least a first device and a second device on a network via the network, wherein the first device includes the second device. Determining whether the transfer target information indicated by the file transfer request from the device is image information or other information, and the first device holds a symbol image having a signature. A holding step; an adding step in which the first device adds the symbol image held in the holding step to the image information as the transfer target information based on a determination result in the determining step; A transfer step of transferring the transfer target information after the addition of the symbol image in the adding step to the second device; Information transfer method, which comprises and. 11. An information transfer method for transferring information between at least a first device and a second device on a network via the network, wherein the first device includes the second device. Determining whether the transfer target information indicated by the file transfer request from the device is image information or other information, and the first device holds a symbol image having a signature. Holding step, and the second key by the verification key for the file transfer request.
A management step of managing the access right of the device; and a determination result in the determination step, and the management information in the management step, the first device transfers the image information as the transfer target information to the image information. An adding step of adding the symbol image held by the holding step; and, based on the management information in the managing step, the first device converts the transfer target information after the symbol image is added in the adding step into the transfer information. Transferring to a second device. 12. An information transfer method for transferring information between at least a first device and a second device on a network via the network, wherein the first device includes the second device. A determining step of determining whether the transfer target information indicated by the file transfer request from the device is image information or other information; and the first device converts a plurality of symbol images having a signature meaning into a plurality of symbol images. A second holding step based on a holding step of holding and a collation key for the file transfer request.
The first device acquires a corresponding symbol image from the plurality of symbol images held in the holding step, based on a management step of managing the access right of the device, and a collation key for the file transfer request. The first device, based on the symbol image obtaining step, the determination result in the determining step, and the management information in the managing step, transfers the symbol information to the image information as the transfer target information by the symbol image obtaining step. An adding step of adding the obtained symbol image; and, based on the management information in the managing step, the first device replaces the transfer target information after the symbol image is added in the adding step with the second information. Transferring information to a device. 13. The method according to claim 12, wherein the holding step includes a step of holding the plurality of symbol images in association with an access right rank indicated by a collation key for the file transfer request. Information transfer method. 14. A computer readable storage of a processing program for implementing the function of the information processing apparatus according to claim 1 or the function of the information processing system according to claim 9. A storage medium characterized by the above-mentioned. 15. A storage medium, wherein the processing steps of the information transfer method according to claim 10 are readable by a computer.