Image forming system and processing method of the image forming system

Abstract

This enables printing that guarantees authenticity for print data whose authenticity has been verified. [Solution] The image forming system comprises a first image forming apparatus, a management apparatus, and a blockchain apparatus, wherein the first image forming apparatus has a receiving means for receiving print instructions for print jobs, the management apparatus has an acquisition means for acquiring print data corresponding to the print jobs received by the receiving means, the blockchain apparatus has a first determination means for determining whether a first transaction relating to the print data has been registered, and a first registration means for registering information at the time of the print instruction for the print data as a second transaction if the first determination means determines that the first transaction has been registered, and the first image forming apparatus has a control means for controlling the printing of the print data after registration by the registration means.

Description

Technical Field

[0001] The present invention relates to an image forming system and a method for processing an image forming system.

Background Art

[0002] Blockchain technology is known as a technology with excellent anti-tampering properties because operations such as deletion or tampering of some registered data are almost impossible. It is known that the use of blockchain can prevent unauthorized changes to printed materials (see Patent Document 1).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] A service in which an image forming apparatus including a scanner and a printer cooperates with a blockchain service to guarantee the authenticity of printed materials can be considered. As an example of the assumed service, the image forming apparatus registers document identification information and trace information of printed materials (such as when and by whom printed) with the blockchain service. The image forming apparatus embeds the document identification information in the print data and performs printing. A person who receives the printed document can extract the document identification information from the document and inquire with the blockchain service to confirm the authenticity of the document.

[0005] In the case of hold printing in which a print job is held in a server or an image forming apparatus and printing is started by a user operating the image forming apparatus, when considering a service that guarantees the authenticity of printed materials, the authenticity of the held print job is not guaranteed. As a result, for example, even if the held print data is tampered with, the image forming apparatus prints it as a document with guaranteed authenticity.

[0006] The present invention aims to enable printing that guarantees authenticity for print data whose authenticity has been verified. [Means for solving the problem]

[0007] The image forming system comprises a first image forming apparatus, a management apparatus, and a blockchain apparatus, wherein the first image forming apparatus has a receiving means for receiving print instructions for print jobs, the management apparatus has an acquisition means for acquiring print data corresponding to the print jobs received by the receiving means, the blockchain apparatus has a first determination means for determining whether a first transaction relating to the print data has been registered, and a first registration means for registering information at the time of the print instruction for the print data as a second transaction if the first determination means determines that the first transaction has been registered, and the first image forming apparatus has a control means for controlling the printing of the print data after registration by the registration means. [Effects of the Invention]

[0008] According to the present invention, it becomes possible to print data whose authenticity has been confirmed, with the guarantee of authenticity being guaranteed. [Brief explanation of the drawing]

[0009] [Figure 1] This is a diagram showing the configuration of an image forming system. [Figure 2] This diagram shows the hardware configuration of the information processing device, bibliographic management device, authenticity data generation device, and blockchain device. [Figure 3] This is a diagram showing the hardware configuration of an image forming apparatus. [Figure 4] This diagram shows the functional configuration of an information processing device. [Figure 5] This diagram shows the functional configuration of an image forming apparatus. [Figure 6] This diagram shows the functional configuration of the bibliographic management system. [Figure 7] It is a diagram showing the functional configuration of an authenticity data generation device. [Figure 8] It is a diagram showing the functional configuration of a blockchain device. [Figure 9] It is a diagram showing the data structure of a blockchain device. [Figure 10] It is a diagram showing an example of a setting screen of a bibliographic management device. [Figure 11] It is a diagram showing an example of a screen of an image forming device. [Figure 12] It is a diagram showing an example of a property screen of a virtual driver provided by an information processing device. [Figure 13] It is a sequence diagram of authenticity guarantee printing in the first embodiment. [Figure 14] It is a flowchart showing the print instruction processing of an information processing device in the first embodiment. <000007​​​​​​​​​​​​​​​​​​​​​​​​​​​​​ [Figure 25] It is a diagram showing a device information table. [Figure 26] It is a diagram showing a setting information table. [Figure 27] It is a diagram showing a bibliographic information table. [Figure 28] It is a diagram showing a user information table. [Figure 29] It is a diagram showing a print permission information table. [Figure 30] It is a diagram showing a user information table. [Figure 31] It is a diagram showing authenticity information.

Mode for Carrying Out the Invention

[0010] Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings.

[0011] [First Embodiment] [Configuration of Image Forming System] FIG. 1 is a diagram showing a configuration example of an image forming system according to a first embodiment of the present invention.

[0012] The image forming system includes an information processing device 101, an image forming device 102, an image forming device 104, a bibliographic management device 103, an authenticity data generation device 111, a blockchain device 112, a LAN 100, and the Internet 110.

[0013] The information processing device 101, the image forming device 102, the image forming device 104, the bibliographic management device 103, the authenticity data generation device 111, and the blockchain device 112 are configured to be able to communicate with each other via the LAN 100 or the Internet 110.

[0014] In the present embodiment, the information processing device 101, the image forming device 102, the image forming device 104, and the bibliographic management device 103 are connected by the LAN 100, and the authenticity data generation device 111 and the blockchain device 112 are connected to the Internet 110 to form a network configuration.

[0015] However, as long as each device is connected to a network, it is also possible to place all devices within the LAN 100, or to connect the bibliographic management device 103 to the Internet 110, and this does not limit the configuration of the image forming system in this embodiment.

[0016] The information processing device 101 represents an electronic device such as a personal computer (PC) operated by the user. The information processing device 101 serves as a gateway for realizing authenticity-guaranteed printing (hereinafter referred to as authenticity-guaranteed printing) using the devices that constitute the image forming system.

[0017] The image forming apparatus 102 is a device that functions as a data entry machine, receiving and temporarily storing specified print job data when a user performs authenticity-guaranteed printing using the information processing apparatus 101.

[0018] The image forming apparatus 104 is a device that functions as an output machine, which actually outputs print job data on paper that the user has instructed to print with authenticity guaranteed from the information processing apparatus 101.

[0019] The bibliographic management device 103 is a device that has the function of managing bibliographic information (Figure 27, described later) generated from print job data received by the image forming apparatus 102.

[0020] The authenticity data generation device 111 is a device that provides functions such as generating document identification information (hereinafter referred to as identification information) that uniquely identifies electronic data or printed paper, registering the generated identification information with the blockchain device 112, and generating image data for embedding the identification information into print job data. In addition, the authenticity data generation device 111 provides a function to extract the embedded identification information from image data that has been digitized by means of scanning or capturing the printed paper on which the print job data with the embedded identification information has been output.

[0021] The blockchain device 112 is a device that provides the function of managing the aforementioned identification information. In the image forming system, the blockchain device 112 performs highly tamper-proof management in the form of a blockchain, as is commonly known, as a mechanism to guarantee the authenticity of documents using the aforementioned identification information.

[0022] The above configuration is shown as the minimum necessary configuration for the sake of clarity, and it is possible for multiple information processing devices 101, image forming apparatuses 102, and image forming apparatuses 104 to be connected to the LAN 100.

[0023] Furthermore, in this embodiment, the image forming apparatus 102 is described as a print input device and the image forming apparatus 104 as an output device, with each being described separately according to their respective roles. However, in reality, it is also possible to configure them as a single device that has all the functions of both a print input device and an output device. In other words, all image forming apparatuses connected to the image forming system can operate as both a print input device and an output device. Also, the image forming apparatus 102 and the image forming apparatus 104 may be single-function devices that only have a printing function and do not have the scanner function described later in Figure 3.

[0024] <Hardware configuration diagram of information processing device 101, bibliographic management device 103, authenticity data generation device 111, and blockchain device 112> Figure 2 is a block diagram showing an example of the hardware configuration of the information processing device 101, the bibliographic management device 103, the authenticity data generation device 111, and the blockchain device 112.

[0025] The information processing device 101, the bibliographic management device 103, the authenticity data generation device 111, and the blockchain device 112 each have a system bus 201, a CPU 202, RAM 203, ROM 204, HDD 205, a display 206, a keyboard / mouse 207, an interface 208, and a network interface card 209, respectively.

[0026] The CPU202, which is the Central Processing Unit, controls the entire device. The CPU202 executes application programs and the OS stored in the HDD205, which is the Hard Disk Drive, and controls the temporary storage of information and files necessary for program execution in the RAM203, which is the Random Access Memory.

[0027] ROM204, which is read-only memory, is a storage unit that stores various data such as basic I / O programs. RAM203 is a temporary storage unit that functions as the main memory and work area of ​​the CPU202. HDD205 is one of the external storage units, functioning as a large-capacity memory and storing applications, the OS, and related programs.

[0028] The display 206 is a display means that displays commands and other information entered from the keyboard / mouse 207, which is the instruction input unit. The interface 208 is an external device interface for connecting printers, USB devices, and peripheral devices.

[0029] The system bus 201 controls the flow of data within the device. The network interface card (NIC) 209 exchanges data with external devices via LAN 100 or the internet 110.

[0030] Unless otherwise specified in this embodiment, various processes are implemented by loading programs stored in ROM 204, etc., into RAM 203, etc., and executing them with CPU 202. Note that the configuration of each device is just one example and is not limited to the configuration example in Figure 2. For example, the storage location of data and programs can be changed to RAM 203, ROM 204, HDD 205, etc., depending on their characteristics.

[0031] <Hardware configuration diagram of image forming apparatus 102 and image forming apparatus 104> Figure 3 is a block diagram showing an example of the hardware configuration of image forming apparatus 102 and image forming apparatus 104. Here, we will describe it as image forming apparatus 102, but the configuration is the same for image forming apparatus 104.

[0032] Image forming apparatuses 102 and 104 each have a control unit 300, an operation unit 309, a printer 310, and a scanner 311, respectively. The control unit 300 has a CPU 301, ROM 302, RAM 303, HDD 304, operation unit I / F 305, printer I / F 306, scanner I / F 307, and network I / F 308.

[0033] The control unit 300, which includes the CPU 301, a Central Processing Unit, controls the overall operation of the image forming apparatus 102. The CPU 301 reads control programs stored in the ROM 302, a Read Only Memory, and performs various controls such as read control and transmission control.

[0034] The RAM 303, which is Random Access Memory, is used as the main memory and temporary storage area of ​​the CPU 301, such as the work area. The HDD 304, which is a Hard Disk Drive, stores image data, various programs, and various data described later. The image forming apparatus 102 has a hardware configuration as an information processing apparatus, but in addition to this, it further has the following hardware configuration.

[0035] The control unit interface (I / F) 305 connects the control unit (I / F) 309 to the control unit (I / F) 300. The printer interface (I / F) 306 connects the printer (I / F) 310 to the control unit (I / F) 300. Image data to be printed by the printer (I / F) 310 is transferred from the control unit (I / F) 300 via the printer interface (I / F) 306 and printed onto the recording medium by the printer (I / F) 310. The scanner interface (I / F) 307 connects the scanner (I / F) 311 to the control unit (I / F) 300. The scanner (I / F) 311 reads the image on the document, generates image data, and inputs it to the control unit (I / F) 300 via the scanner interface (I / F) 307.

[0036] The network interface 308 connects the control unit 300 (image forming apparatus 102) to the LAN 100. The network interface 308 transmits image data and information to external devices on the LAN 100 and receives various information from external devices on the LAN 100.

[0037] Unless otherwise specified in this embodiment, various processes are performed by loading the program stored in ROM 302 into RAM 303 and executing it with CPU 301. Note that the configuration of each device is merely an example and is not limited to the configuration shown in Figure 3. For example, the storage location for data and programs can be changed using ROM 302, RAM 303, HDD 304, etc., depending on their characteristics.

[0038] <Functional Configuration Diagram of Information Processing Device 101> Figure 4 is a block diagram showing an example of the functional configuration of the information processing device 101.

[0039] The information processing device 101 includes a communication unit 401, a database 402, an authentication management unit 403, a printing processing unit 404, and a printer driver 405.

[0040] The communication unit 401 provides the function of communicating with external devices configured on the LAN 100.

[0041] Database 402 is a database for storing credential information managed by the information processing device 101.

[0042] The authentication management unit 403 provides an authentication function for logging into the information processing device 101. In this embodiment, the information processing device 101 is configured to identify the user operating it using user information managed by the authentication unit 604 of the bibliographic management device 103, which will be described later. Therefore, when logging into the information processing device 101, the system determines whether operation is possible by querying the bibliographic management device 103 with the user ID and authentication information specified by the user. The user ID and password specified at the time of login are stored in the RAM 203 of the information processing device 101 until logout.

[0043] In this embodiment, the image forming apparatus 102 and image forming apparatus 104, described later, also use the user management function of the bibliographic management device 103 to perform user identification.

[0044] Furthermore, the authentication management unit 403 provides a function for managing credential information used to utilize the document identification information generation service in the authenticity data generation device 111. This is used during the printing process. An example of a credential information table stored in the aforementioned database 402 is shown in Figure 22.

[0045] The credential information table in Figure 22 consists of "User," "Connection Destination," "Purpose," "ID," and "Authentication Information." The "User" information is used to identify multiple users who use the information processing device 101. This user represents the user information of the user who logged into the information processing device 101.

[0046] Next, in order to manage the credentials of multiple services used by the user, the credentials of the service to be used are determined by the "connection destination". In this embodiment, since it is used for the purpose of connecting to the authenticity data generation device 111, only one service exists in Figure 22, but this does not restrict the retention of information for multiple services.

[0047] "ID" is information used to uniquely identify the account connected to the service being used. "Authentication information" is information used by the connected service to authenticate the account. "ID" and "Authentication information" are information issued by each connected service and are used in the authentication process of each service. In this embodiment, they are managed in one credential information table, but separate credential information tables may be created and managed for each connection destination and purpose.

[0048] In this embodiment, the credential information table is used jointly by all processing units of the information processing device 101, which will be described later. However, each processing unit may be configured to use its own credential information table.

[0049] The print processing unit 404 provides the function of adding authenticity data to an electronic document file that has received a print instruction and issuing a print instruction to the printer driver 405. The process of adding authenticity data involves acquiring an image with embedded identification information using the authenticity data generation device 111 via the communication unit 401 and overlaying it onto the electronic document file. This makes it possible to perform authenticity verification by extracting the embedded information after printing on paper. The print processing unit 404 can be provided in the form of a virtual printer driver (hereinafter referred to as a virtual driver) or a printing application.

[0050] The printer driver 405 provides a function to send print job data corresponding to the user's specified print command to the pre-configured image forming apparatus 102 via the communication unit 401.

[0051] The aforementioned verification application and printing application are provided as separate applications, but they may also be provided as a single application that integrates these functions.

[0052] <Functional configuration diagram of image forming apparatus 102 and image forming apparatus 104> Figure 5 is a block diagram showing an example of the functional configuration of the image forming apparatus 102 and the image forming apparatus 104. As mentioned above, in this embodiment, the image forming apparatus 102 and the image forming apparatus 104 are described as having a common configuration that includes both the functions of a print input machine and an output machine.

[0053] Image forming apparatus 102 and image forming apparatus 104 each have a communication unit 501, a processing control unit 502, an authentication management unit 503, a print control unit 504, a UI control unit 505, a job information database 506, a submission job management unit 507, and an authenticity verification control unit 508, respectively.

[0054] The communication unit 501 provides the function of communicating with external devices configured on the LAN 100.

[0055] The processing control unit 502 provides the function of distributing processing to the respective processing units described later in response to requests received from external devices via the communication unit 501, and transmitting the processing results from the distributed processing units to the external devices.

[0056] The authentication management unit 503 provides an authentication function for logging in when using the image forming apparatus 102 or 104. In this embodiment, the authentication management unit 503 is configured to identify the user operating the system using user information managed by the authentication unit 604 of the bibliographic management device 103, which will be described later. Therefore, when logging into the image forming apparatus 102 or 104, the system determines whether operation is possible by querying the bibliographic management device 103 with the user ID and authentication information specified by the user. The user ID and password specified at the time of login are stored in the RAM 303 of the image forming apparatus 102 or 104 until logout.

[0057] The print control unit 504 provides functions for controlling printing. If "Retain print jobs on the device 1013" is selected in the remote print setting 1011 of the bibliographic management device 103 in Figure 10(b), the print control unit 504 does not print the print job data received from the printer driver 405 of the information processing device 101, but instead generates bibliographic information from the print job data and registers it with the bibliographic management device 103. Also, when the print control unit 504 receives print job data from the bibliographic management device 103, it executes the output of the print job data. If "Execute all print jobs immediately 1012" in Figure 10(b) is selected, the print control unit 504 executes the output of all received print job data.

[0058] The UI control unit 505 controls the display and input of the operation panel to the operation unit 309, and provides the user with the functions of the image forming apparatus 102 and the image forming apparatus 104.

[0059] Job information database 506 is a database used to store submitted print job data.

[0060] The submission job management unit 507 uses the aforementioned job information database 506 to provide a function for managing the input and output of print job data files received from the information processing device 101. An example of a job information table stored in this job information database 506 is shown in Figure 23.

[0061] The job information table in Figure 23 consists of a "Job ID" and a "Print Job Path." The "Job ID" is a unique ID that identifies the received print job data. This information is used to identify the print job data. The "Print Job Path" indicates the storage location of the print job file for the identified print job data. In this embodiment, it is represented as a path to the storage location within the image forming apparatus 102, which is positioned as the input machine, but it is also possible to store the print job file directly in this table.

[0062] The authenticity verification control unit 508 provides the authenticity verification function for paper documents provided by the image forming apparatus 102 and the image forming apparatus 104.

[0063] <Functional Configuration Diagram of Bibliographic Management Device 103> Figure 6 is a block diagram showing an example of the functional configuration of the bibliographic management device 103.

[0064] The bibliographic management device 103 includes a communication unit 601, a processing control unit 602, an authentication information database 603, an authentication unit 604, a device information database 605, a device management unit 606, a setting information database 607, a setting management unit 608, a bibliographic information database 609, a bibliographic management unit 610, and a print job generation unit 611.

[0065] The communication unit 601 provides the function of communicating with external devices configured on the LAN 100 or the Internet 110.

[0066] The processing control unit 602 provides the function of distributing processing to the respective processing units described later in response to requests received from external devices via the communication unit 601, and transmitting the processing results from the distributed processing units to the external devices.

[0067] The authentication information database 603 is a database that stores user information for which the bibliographic management device 103, information processing device 101, image forming device 102, and image forming device 104 are available.

[0068] In addition to managing user information, the authentication unit 604 receives user information requested for authentication from the information processing device 101, image forming apparatus 102, and image forming apparatus 104 via the network, and provides a user information verification function using the information in the authentication information database 603. An example of an authentication information table stored in the authentication information database 603 is shown in Figure 24.

[0069] The authentication information table in Figure 24 consists of "User ID," "Authentication Information," and "User Name." "User ID" is information that uniquely represents the user connecting. "Authentication Information" is authentication information used to verify the specified ID. In this embodiment, "Authentication Information" is written as a password, but it may be something else. "User Name" is information intended to be used when displaying authenticated user information on the screen.

[0070] In this embodiment, user management is performed in the bibliographic management device 103, but it does not have its own authentication information and may use an external authentication server such as Active Directory or LDAP.

[0071] The device information database 605 is a database for storing device information for managing image forming machines that are connected to the bibliographic management device 103.

[0072] In addition to managing device information, the device management unit 606 provides a function to verify whether the image forming apparatus that sent the authentication request during authentication by the authentication unit 604 is authorized. An example of a device information table stored in this device information database 605 is shown in Figure 25.

[0073] The device information table in Figure 25 consists of "device name," "serial number," and "IP address." The "device name" is information assigned to visually identify the device and does not necessarily need to be unique, but it should be set to a name that is easy for administrators to identify. The "serial number" is information that uniquely identifies the device. This is included in the request information from the image forming machine that accessed the device, and this information is used to decide whether to grant permission. The "IP address" is information that indicates the location of the identified device.

[0074] The configuration information database 607 is a database for storing various setting values ​​related to the operation of the bibliographic management device 103.

[0075] The settings management unit 608 has the function of managing the settings of the bibliographic management device 103, as well as providing setting information to the image forming apparatus 102.

[0076] In this embodiment, it is described that the system has a function to set whether or not to perform hold printing, but it may also be configured to have multiple other setting values. An example of a setting information table to be stored in this setting information database 607 is shown in Figure 26.

[0077] The configuration information table in Figure 26 consists of "Definition" and "Value". The "Definition" uniquely represents the configuration content. The "Value" is the setting value of the "Definition," and this value changes the operation of the target device.

[0078] Bibliographic information database 609 is a database for storing bibliographic information of pending print jobs until the printing process is completed.

[0079] The bibliographic management unit 610 centrally manages the bibliographic information generated by the image forming apparatus 102, and provides functions for processing bibliographic registration, bibliographic list retrieval, and bibliographic deletion. Examples of bibliographic information tables stored in this bibliographic information database 609 are shown in Figures 27(a) to (d).

[0080] The bibliographic information table in Figure 27(a) consists of "ID", "Job ID", "Job Name", "Received Date and Time", "Storage Location", "Authenticity Information", and "Print Settings". The information stored in Figure 27(a) manages the bibliographic information of all print jobs sent from the devices registered in the device information table in Figure 25, for each ID. "ID" represents the "User ID" in the user authentication information in Figure 24 and is used to uniquely identify the user operating the print process. "Job ID" is an ID that uniquely identifies the print job issued by the image forming apparatus 102. "Job Name" is string information that allows the user to visually identify the job when displaying the bibliographic information list. This often uses the file name of the file to be printed, but is not restricted to other names. "Received Date and Time" stores the date and time when the print job was received by the image forming apparatus 102.

[0081] "Storage location" is information indicating the storage location of the print job, and as shown in Figure 27(b), it consists of an "IP address" that identifies the storage device and a "path" to the storage location within that device. "Authenticity information" indicates information used for processing by the authenticity data generator 111 to guarantee the authenticity of the print file. As shown in Figure 27(c), this information consists of three items: "processing account," "authentication information," and "print application name," which are the credential information used by the authenticity data generator 111 specified when performing the print process.

[0082] The "Print Settings," as shown in Figure 27(d), consist of five items related to printing specified by the printer driver 405 of the information processing device 101: "Color," "Size," "Number of Copies," "Stapling," and "Punching." These items are provided as an example of a bibliographic information table, but this does not restrict the storage of other information.

[0083] The print job generation unit 611 verifies whether the authenticity of the print data associated with the print job specified by the image forming apparatus 104 is guaranteed, and requests the authenticity data generation device 111 to register the printing information.

[0084] <Functional Configuration Diagram of Authenticity Data Generation Device 111> Figure 7 is a block diagram showing an example of the functional configuration of the authenticity data generation device 111.

[0085] The authenticity data generation device 111 includes a communication unit 701, a processing control unit 702, an authentication processing unit 703, a user information database 704, a printability determination unit 705, a printability information database 706, a document identification information generation unit 707, a document identification information extraction unit 708, and a print information registration unit 709.

[0086] The communication unit 701 provides the function of communicating with other devices via the Internet 110. The processing control unit 702 provides the function of executing processing in each processing unit in response to a request received from an external device via the communication unit 701, and transmitting the processing result to the external device via the communication unit 701.

[0087] The authentication processing unit 703 provides a function for authenticating users who use the service. The user information database 704 provides a function for storing user information of users who use the service. An example of a user information table stored in the user information database 704 is shown in Figure 28.

[0088] The user information table in Figure 28 consists of "ID," "Authentication Information," "Blockchain ID," and "Blockchain Authentication Information." "ID" is information for uniquely identifying a user. "Authentication Information" is information for authenticating a user who uses the authenticity data generation device 111 in conjunction with the ID. "Blockchain ID" is information for uniquely identifying a user managed by the blockchain device, which is linked to the user in order to make a transaction registration request from the authenticity data generation device 111 to the blockchain device 112. "Blockchain Authentication Information" is information for identifying a user who uses the blockchain device 112 in conjunction with the blockchain ID.

[0089] The printability determination unit 705 provides a function to determine whether the image forming apparatus is capable of authenticity-guaranteed printing. The printability information database 706 provides a function to hold the information necessary for determining whether authenticity-guaranteed printing is possible. An example of a printability information table stored in the printability information database 706 is shown in Figure 29.

[0090] The printability information table in Figure 29 consists of "manufacturer" and "model." The combination of "manufacturer" and "model" identifies the image forming apparatus. In this embodiment, the system is configured to determine whether an image forming apparatus has the capability to print by registering information about it in the printability information table. However, the configuration is not limited to registering information about low-capacity image forming apparatuses that cannot print, or any other information that can be used to make such a determination.

[0091] The document identification information generation unit 707 generates identification information for uniquely referencing the content to be registered in the blockchain, and provides a function to generate an embedded image for embedding that identification information on the printed surface.

[0092] The identification information for printed materials is generated by hashing the registration date and time and the registrant's information. This means that even when the same electronic data is printed, the identification information generated each time will be different, allowing each printed material to be uniquely identified as a separate piece of data.

[0093] As long as the identification information is information that can uniquely identify a person, there are no restrictions on the generation method other than that of this embodiment. For example, it may be a list of date and time and registrant information that is not hashed, or a combination of partially hashed information and a list of information.

[0094] The document identification information extraction unit 708 provides a function to extract identification information generated by the document identification information generation unit 707 from an image obtained by scanning a printed document.

[0095] The print information registration unit 709 provides a function to collect the printing information necessary to guarantee authenticity as a transaction and request registration from the blockchain device 112.

[0096] <Functional Configuration Diagram of Blockchain Device 112> Figure 8 is a block diagram showing an example of the functional configuration of the blockchain device 112.

[0097] The blockchain device 112 includes a communication unit 801, a processing control unit 802, an authentication unit 803, and a block data management unit 806. The authentication unit 803 includes an authentication processing unit 804 and a user information database 805. The block data management unit 806 includes a distributed ledger 807.

[0098] The communication unit 801 provides the function of communicating with other devices via the internet 110.

[0099] The processing control unit 802 provides the function of executing processing in each processing unit in response to a request received from an external device via the communication unit 801, and transmitting the processing result to the external device via the communication unit 801.

[0100] The authentication unit 803 consists of an authentication processing unit 804 and a user information database 805.

[0101] The authentication processing unit 804 provides a function for authenticating users who use the service.

[0102] The user information database 805 provides the function of storing user information. An example of a user information table stored in the user information database 805 is shown in Figure 30.

[0103] In Figure 30, the "Blockchain ID" is information used to uniquely identify a user when using the services provided by the blockchain device 112. The "Blockchain Authentication Information" is information used in conjunction with the Blockchain ID to identify the user using the blockchain device 112.

[0104] The block data management unit 806 performs blockchain processing such as transaction generation, block generation, writing to the distributed ledger 807, and referencing the distributed ledger 807.

[0105] The distributed ledger 807 provides the function of holding blocks. Generally, in a blockchain, the ledger is managed by multiple nodes (computers), and the block data management unit 806 may consist of multiple units.

[0106] <Blockchain data structure> Figure 9 is a block diagram showing the blocks held by the distributed ledger 807 and the transactions that are components of the blocks. In this embodiment, transaction 901 includes five pieces of information 902 to 906. Document identification information 902 is identification information for uniquely representing the aforementioned documents or printed materials. In this embodiment, this document identification information 902 is used as information for uniquely referencing the transaction to be registered on the blockchain.

[0107] The following four pieces of information, 903-906, are related to the evidence of the printed document. Registration date and time 903 represents the time when the document was registered with the blockchain device 112. Registrant 904 is the user information that made the registration, for example, the blockchain ID shown in Figure 30. Printing location 905 represents the equipment or location of the equipment that made the registration. Document type 906 represents the form or type of the document being registered, such as whether it is a printed document or electronic data.

[0108] Transaction 901 illustrates a case where all information about a document is available in a single registration. If all information is not available in a single registration, the information for a single document may be registered through multiple transactions. For example, information other than the print location 905 can be registered in transaction 907, and transaction 908 can be registered when the print location is determined. In this case, since information about the same document is being registered, the document identification information 902 will have the same value. In cases where printing can be done on any device, such as with hold printing, information such as the print location is determined later. In this embodiment, in the case of such hold printing, transaction 907 is registered when the printer driver issues a print command, and transaction 908 is registered when printing starts on the image forming apparatus.

[0109] While the information to be included in a transaction in this embodiment has been described, the information that may be included is not limited to this. For example, information such as the period during which the registration content is guaranteed, or information regarding the number of pages to verify that all pages of the printed material are present, may also be included.

[0110] Next, the structure of the block holding transactions 901, 907, and 908 will be explained using block 911. This is a schematic representation of a typical blockchain structure. Block 911 holds multiple transactions 915(a) to 915(c) and the hash value 912 of the block calculated from those transactions 915. Transactions 915(a) to 915(c) represent one of the aforementioned transactions 901, 907, or 908. In this embodiment, the number of transactions 915 included in block 911 is set to three, but this does not actually limit the number of transactions included in block 911.

[0111] Furthermore, block 911 holds the hash value 913 of the previous block, which is used to link blocks together. The hash value of block 914, which was generated before block 911, is stored in the hash value 913 of the previous block, indicating that the blocks are related. When the block after block 911 is generated, the hash value 912 of that block is set as the hash value of the previous block within the next block. This repetition of blocks creates a state where it is difficult to tamper with transaction data.

[0112] <Management screen of bibliographic management device 103> Figure 10 shows an example of a function setting screen provided by the bibliographic management device 103. The bibliographic management device management screen 1001 is generated by the processing control unit 602, and the device management unit 606 and the setting management unit 608 generate and provide the actual management screen.

[0113] This bibliographic management device management screen 1001 is displayed on the web browser of the information processing device 101 after the web browser operating on the information processing device 101 communicates with the bibliographic management device 103.

[0114] Figure 10(a) shows the device management display screen of the device management unit 606, which is displayed when device 1002 is clicked. The device list 1006 displays a list of image forming apparatuses 102 and 104 that provide the retention function of the bibliographic management device 103. The name 1007, serial number 1008, and IP address 1009 displayed in the list show the device information from Figure 25, respectively.

[0115] To add or remove image forming devices provided by the bibliographic management device 103, the user presses the Add Device button 1003 or the Delete Device button 1005. To edit the information (such as the IP address) of a registered device, the user presses the Edit Device button 1004. On this screen, the bibliographic management device 103 provides functions such as user authentication and remote printing for devices registered in the device information database 605.

[0116] Figure 10(b) shows the remote print settings screen of the settings management unit 608, which is displayed when the remote print settings 1011 is clicked.

[0117] In this embodiment, select one of the following two print settings.

[0118] If you select "Execute all print jobs immediately" 1012, all image forming apparatuses 102 registered in the device management unit 606 will immediately print upon receiving print job data without delay. Therefore, remote printing will not be available.

[0119] When "Retain print job on device" 1013 is selected, all image forming machines 102 registered in the device management unit 606 will retain the print job file on their own HDD 304 upon receiving the print job data. They then create bibliographic information for the retained print job data and request the bibliographic management unit 610 of the bibliographic management device 103 to add the bibliographic information. Even image forming machines other than the one that received the print job data can be configured to use remote printing by obtaining a list of bibliographic information from the bibliographic management unit 610 of the bibliographic management device 103.

[0120] Selecting "Retain print job on device" 1013 allows you to set the print job retention period 1014. This means that the input job management unit 507 on all registered image forming apparatuses 102 that are set to retain print jobs will store the print job for the period set by the print job retention period 1014 after receiving the print job. After the print job retention period 1014 has elapsed, the print job will be deleted.

[0121] Clicking the save button 1015 saves the remote printing settings in the format shown in Figure 26 and applies the changes.

[0122] The settings to be saved will be as follows:

[0123] Case: When "Run all print jobs immediately" 1012 is selected. Definition: "Retain Print", Value: "Do not perform" Definition: "Retention period", Value: "0"

[0124] Case: When "Keep print jobs on the device" 1013 is selected. Definition: "Retain Print", Value: "Perform" Definition: "Retention period", Value: The specified value for the print job retention period of 1014

[0125] In this embodiment, the image forming apparatus 102, which receives the print job data, is used as the storage location for the print job file. However, the storage location for the print job file is not limited to the image forming apparatus 102. For example, it can also be stored in the information processing device 101 that issues the print request, or in the bibliographic management device 103. To control these, the number of options on this management screen should be increased, and the print processing control should be performed accordingly.

[0126] <Operation screens for image forming apparatus 102 and image forming apparatus 104> Figure 11 shows an example of the operation screen provided by the image forming apparatus 102 and the image forming apparatus 104. This explanation of the operation screen will refer to the image forming apparatus 104 as the output device, but the same applies to the image forming apparatus 102.

[0127] Figure 11(a) shows an example of the top menu screen 1101 in the image forming apparatus 104. This screen is displayed on the operation unit 309 by the UI control unit 505 executed in the CPU 301 of the image forming apparatus 104.

[0128] When a user logs in to the image forming apparatus 104 using an IC card or the like, the top menu 1102 is displayed after login, and from this top menu 1102 the user can select the application they want to use on the image forming apparatus 104. Since the user is logged in to the image forming apparatus 104, the logged-in username 1106 is displayed on the screen. This indicates that the username "Suzuki" is currently logged in.

[0129] Applications installed in the image forming apparatus 104 are displayed as icons in the top menu 1102. The authenticity printing icon 1103 is for executing the authenticity printing process, and pressing it starts the process in the print control unit 504.

[0130] The authenticity verification icon 1104 is an icon for executing the authenticity verification process; pressing it starts the process of the authenticity verification control unit 508.

[0131] The copy icon 1105 is an icon for executing the copy process. Pressing it will perform the corresponding process, but in this embodiment, it is included to show that there are multiple icons in the menu, and since this is a general function of an image forming apparatus, a detailed description is omitted.

[0132] Figure 11(b) shows an example of the print job display screen 1111 provided by the image forming apparatus 104. When the user selects (presses) the authenticity print icon 1103 from the top menu 1102, this screen is displayed on the operation unit 309 by the UI control unit 505 executed on the CPU 301 of the image forming apparatus 104. The print job display screen 1111 displays a list of print jobs held by the authenticated user. On this screen, 1121 indicates that the username "Suzuki" is logged in. For each print job, the job name 1114, color / monochrome setting 1115, paper size 1116, and number of copies 1117 are displayed. On this screen, there are three print jobs (1118, 1119, 1120) that the logged-in user "Suzuki" can operate. The print control unit 504 obtains the bibliographic information held by the logged-in user "Suzuki" from the bibliographic management device 103, which manages bibliographic information, and displays it on the print job display screen 1111. For these print jobs, 1122 is the print button, 1123 is the delete button, and 1124 is the print settings button. The user selects the desired print job from the displayed print jobs and presses these buttons to perform operations on the target print job. 1125 is the refresh button. When pressed, the print control unit 504 of the image forming apparatus 104 retrieves the bibliographic information of the logged-in user "Suzuki" from the bibliographic management device 103 and updates the list of print jobs based on the retrieved bibliographic information.

[0133] Figure 11(c) is an example of the print settings screen 1131 that appears when the print settings button 1124 in Figure 11(b) is pressed. This screen is displayed on the operation unit 309 by the UI control unit 505 executed in the CPU 301 of the image forming apparatus 104. It is possible to change and update the print settings for the print job selected on the print job display screen 1111 and then print. The current settings are displayed for the double-sided printing setting 1132, color mode setting 1133, stapling setting 1134, punch setting 1135, number of copies setting 1136, and paper size setting 1137. From these, the user can select the print setting they want to change and change the setting value. 1138 is a back button, and if the back button 1138 is pressed after changing the print settings, the change to the print settings will be canceled. Button 1139 is a settings update button. When the user presses this button after changing the settings, the print control unit 504 updates the bibliographic information with the changed print settings and requests the bibliographic management device 103 to update the bibliographic information. Button 1140 is a print button. When the user presses this button after changing the settings, it updates the bibliographic information with the changed print settings and requests the bibliographic management device 103 to update the bibliographic information. Subsequently, the print control unit 504 prints the target print job with the changed print settings.

[0134] Figure 11(d) shows an example of the verification screen 1141 provided by the image forming apparatus 104. When the user selects (presses) the authenticity verification icon 1104 from the top menu 1102, this screen is displayed on the operation unit 309 by the UI control unit 505 executed on the CPU 301 of the image forming apparatus 104. The verification screen 1141 displays the start of the verification process and the verification results. On this screen, 1143 indicates that the username "Suzuki" is logged into the image forming apparatus 104. The verification image display area 1144 is where the image generated by scanning the paper to be verified is displayed, and image 1145 represents the scanned image. The authenticity item 1146 and authenticity data 1147 are where the authenticity information (transaction data) registered in the blockchain device 112 is displayed. 1148 is the verification button, and pressing it starts the authenticity verification process shown in Figure 18, which will be described later. The verification image display field 1144 and the authenticity data field 1147 are displayed as blank before the verification process, as they show the results of the authenticity verification process.

[0135] Figure 11(e) shows an example of the authenticity error screen 1151 displayed by the image forming apparatus 104 when an authenticity error occurs during authenticity-guaranteed printing. This screen is displayed on the operation unit 309 by the UI control unit 505 executed in the CPU 301 of the image forming apparatus 104. On this screen, 1153 indicates that the user name "Suzuki" is logged into the image forming apparatus 104. The print data display area 1154 is where data that failed to print due to authenticity-guaranteed printing is displayed, and the print data 1155 represents the print data that failed to print. The error display area 1156 is where an error message that failed to print due to authenticity-guaranteed printing is displayed. The finish button 1157 is a button that, when pressed, ends the printing process. The delete job and finish button 1158 is a button that, when pressed, requests the bibliographic management device 103 to delete the job that failed to print, and ends the printing process after receiving a completion notification.

[0136] <Virtual driver properties screen of information processing device 101> Users can display desired electronic data on the display 206 of the information processing device 101 using an application compatible with the data format of the electronic data. In addition to displaying the electronic data, this application also has functions such as editing and printing.

[0137] By executing this printing function, the user can operate a print settings screen (not shown as it is a general print screen) to select a printer driver that indicates the image forming apparatus 102 to be used as the output destination. When selecting this printer driver, the user can select the virtual driver of this embodiment that has been pre-installed on the information processing device 101.

[0138] Figure 12 shows an example of the properties screen for this virtual driver provided by the information processing device 101.

[0139] When you specify the properties of the virtual driver selected in the aforementioned print settings screen, the properties screen 1201 will be displayed.

[0140] The printer driver setting field 1202 is a printer driver selection field for selecting the image forming apparatus 102 that will perform the printing process after the virtual driver has performed the necessary processing for authenticity-guaranteed printing. There are no restrictions on the printer driver specified here; you can select the printer driver you normally use for printing. When printing, the print job is sent to the image forming apparatus 102 via the printer driver selected here. The print properties button 1203 is a button that displays the print properties screen of the printer driver selected in the printer driver setting field 1202. The property settings screen displayed when the print properties button 1203 is pressed is a typical printer driver property screen and is therefore not shown.

[0141] The credential selection field 1204 of the authenticity data generation service is a field for selecting credentials when using the embedded image generation function that embeds document identification information necessary for authenticity-guaranteed printing provided by the authenticity data generation device 111. In this embodiment, the credential file to be set is specified using the standard file selection screen provided by the information processing device 101.

[0142] The settings button 1205 is used to confirm the settings for authenticity-guaranteed printing. Pressing this button sets the specified credential file to the ID and authentication information in the credential information table in Figure 22. This prepares the system to perform authenticity-guaranteed printing using the settings specified on the properties screen 1201.

[0143] The Cancel button 1206 is used to stop the virtual driver property settings and close this properties screen. Pressing this button will discard all settings and changes made after displaying the properties screen 1201.

[0144] Pressing either the settings button 1205 or the cancel button 1206 will return you to the print settings screen launched from the application.

[0145] <Authenticity Printing Processing Sequence> Figure 13 is a sequence diagram of authenticity assurance printing in the first embodiment. This sequence consists of three main blocks.

[0146] The first block is the authenticity-guaranteed print instruction sequence from an application to the information processing device 101, as shown in sequence S1300. It begins when an application handling an electronic document file for which the user desires authenticity-guaranteed printing is issued a print instruction to the information processing device 101. The processing method of the image forming system will be described below.

[0147] Step S1301 represents a large block from the time the user initiates a print command until the completion of the print job registration process to the image forming apparatus 102. The processing of this block is described in detail in Figure 14. This sequence provides an overview of the processing.

[0148] Step S1302 is when the information processing device 101 configures the authenticity-guaranteed printing settings on the virtual driver properties screen shown in Figure 12. After selecting the printer driver on the screen and configuring the credentials for the authenticity data generation service, the user configures the settings using the settings button 1205, and then initiates printing from the application's print screen. The information processing device 101 then requests the authenticity data generation device 111 to generate authenticity-guaranteed printing data.

[0149] Step S1303 is a block in which the information processing device 101 requests the creation of authenticity-guaranteed print data, as described in step S1301. This block represents the process in which the authenticity data generation device 111 and the blockchain device 112 work together to generate the embedded image necessary for authenticity guarantee. The process of this block will be explained in detail using the next steps S1304 to S1305, and in Figure 17.

[0150] Step S1304 involves the authenticity data generation device 111 issuing unique identification information and generating an embedded image for use in the document identification information 902 necessary for authenticity-guaranteed printing.

[0151] Step S1305 is when the blockchain device 112 registers transaction 907, which is necessary for guaranteeing authenticity, in the distributed ledger 807 of the blockchain device 112.

[0152] In step S1306, the information processing device 101 overlays the embedded image generated in step S1304 onto the electronic document file that has received a print instruction, and generates authenticity-guaranteed print data. Then, it prepares the information necessary for authenticity-guaranteed printing and requests the image forming apparatus 102 to perform the printing process.

[0153] Step S1307 represents a block of print job registration processing in the image forming apparatus 102, which received a print request from the information processing apparatus 101 in step S1306. The processing of this block is described in detail in Figure 15.

[0154] Step S1308 represents the process of registering the bibliographic information of the print job received by the image forming apparatus 102 to the bibliographic management device 103.

[0155] Step S1309 involves the image forming apparatus 102 saving the print file of the received print job. Completing this process completes the print instruction.

[0156] The following block is the print job list display sequence performed by the image forming apparatus 104, as shown in sequence S1310. When a user prints a registered print job, the image forming apparatus 104 is operated to display the list. This is started when the user presses the authenticity print icon 1103 on the top menu screen 1101 of the image forming apparatus 104.

[0157] Step S1311 is executed by the print control unit 504 of the image forming apparatus 104 on the CPU 202. In this step, a request is made to the bibliographic management device 103, which will be described in the next step S1312, to obtain a list of bibliographic information for print jobs registered by users logged into the image forming apparatus 104. In this embodiment, the print jobs of user "Suzuki" will be displayed for explanation.

[0158] Step S1312 is executed by the bibliographic management unit 610 of the bibliographic management device 103 using the CPU 202. It retrieves data from the bibliographic information table of the bibliographic information database 609 shown in Figure 27 that matches the user "Suzuki" received from the image forming apparatus 104, and transmits it to the image forming apparatus 104.

[0159] Step S1313 is executed by the CPU 202, with the print control unit 504 and UI control unit 505 of the image forming apparatus 104 being controlled by the CPU 202. The print control unit 504, having received the bibliographic information list of print jobs from step S1312, passes the bibliographic list to the UI control unit 505, which then displays the job name 1114, color / monochrome setting 1115, paper size 1116, and number of copies 1117 on the print job display screen 1111. The displayed print job list is then presented to the user, completing the display of the print job list.

[0160] The final block is the printing sequence performed by the image forming apparatus 104, as shown in sequence S1320. This sequence involves the user selecting a desired print job from the displayed list of print jobs and completing the printing process. It starts with the print job list displayed on the print job display screen 1111 of the image forming apparatus 104, as described in sequence S1310.

[0161] Step S1321 represents the block from when the user presses the print button 1122 on the print job display screen 1111 of the image forming apparatus 104 to instruct the printing process until the printing is completed. In this step, the printing process is completed through steps S1321 to S1329. The processing in this block will be explained in detail in Figure 16.

[0162] Step S1322 involves obtaining print data from the image forming apparatus 102, which is the storage location for print data as described in the bibliographic information.

[0163] Step S1323 is a block in which the bibliographic management device 103 extracts authenticity data of the print data acquired in step S1322 during the aforementioned step S1321. The process of extracting authenticity data and determining whether it was successful is called verification, and this verification allows for confirmation of the authenticity of the data to be printed. The processing of this block will be explained in detail using the next steps S1324 to S1325, and the overview of the processing will be explained using Figure 17.

[0164] Step S1324 is when the authenticity data generation device 111 extracts embedded identification information from the print data.

[0165] In step S1325, the blockchain device 112 retrieves transaction 907 from the distributed ledger 807, in which the identification information extracted in step S1324 is held as document identification information 902.

[0166] Step S1326 is a block in which the bibliographic management device 103 registers the printing information necessary to guarantee authenticity for the printed data for which transaction 907 was successfully obtained in step S1323 during the extraction of authenticity data in step S1321. The processing of this block will be explained in detail using the next steps S1327 to S1328, and the overview of the processing will be explained using Figure 17.

[0167] In step S1327, the authenticity data generator 111 determines whether or not to register information during printing and summarizes the information during printing as transaction 908.

[0168] Step S1328 is when the blockchain device 112 registers transaction 908, which is necessary for guaranteeing authenticity, in the distributed ledger 807 of the blockchain device 112.

[0169] In step S1329, the image forming apparatus 104 prints the print data acquired in step S1322.

[0170] In step S1330, the bibliographic management device 103 deletes the print job data selected in step S1321, which marks the completion of printing.

[0171] Step S1331 involves the image forming apparatus 102 deleting the print data associated with the print job from the bibliographic management device 103.

[0172] When the image forming apparatus 104 receives notification that it has completed the processing up to step S1331, sequence S1320 ends.

[0173] <Print instruction flow of information processing device 101> Figure 14 is a flowchart illustrating the detailed processing flow of block S1301 mentioned above.

[0174] This flowchart is activated when the print processing unit 404 of the information processing device 101 receives a print command from the user and is executed by the CPU 202. In this embodiment, the explanation is given with the user logged in to the information processing device 101 as "Suzuki".

[0175] In step S1401, the print processing unit 404 displays the virtual driver properties screen 1201 on the display 206 of the information processing unit 101. On this screen, the user enters information into the input fields: the printer driver settings field 1202, the print properties button 1203, and the authenticity data generation service credential selection field 1204. After confirming the virtual driver settings by pressing the settings button 1205 on the same screen, printing starts when the application's print button (not shown) is pressed.

[0176] Step S1402 is when the print processing unit 404 monitors whether the print button for the application in step S1401 was pressed. If the print button was pressed, the process proceeds to step S1403. If the button to cancel the print request (not shown) is pressed, this flowchart is terminated. If any other user operation is detected, step S1402 is repeated to monitor the user operation again.

[0177] In step S1403, the printing processing unit 404 obtains the following data necessary for authenticity-guaranteed printing from the information processing unit 101.

[0178] • Logged-in user ID • Name of the electronic document file that was requested to be printed • Name of the printing application that is manipulating the electronic document file that was requested to be printed. • Printer driver configured in printer driver settings field 1202 • Print Properties Button 1203 • ID and authentication information set for "suzuki" in Figure 22 • The electronic document file

[0179] In step S1404, the printing processing unit 404 generates bibliographic data to be sent to the image forming apparatus 102, which is set in the printer driver configured in the printer driver setting field 1202, using the data acquired in step S1403. Of the bibliographic information shown in Figure 27, the following items are specified in this step.

[0180] User: The logged-in user ID Job name: The name of the electronic document file that was requested to be printed. Processing account: ID and authentication information set for "suzuki" in Figure 22 Print application name: The name of the printing application that is operating the electronic document file that was requested to be printed. Print settings: Values ​​in the print properties

[0181] In step S1405, the print processing unit 404 of the information processing device 101 requests the authenticity data generation device 111 to perform authenticity data generation processing to generate an embedded image containing the identification information necessary for authenticity-guaranteed printing. At this time, the "ID" and "authentication information" obtained in step S1403 are transmitted. The processing at the authenticity data generation device 111 is represented by block S1303 mentioned above, and is explained in detail in Figure 17. In this step, the embedded image to be embedded in the print data is received as the processing result in Figure 17.

[0182] In step S1406, the printing processing unit 404 overlays the embedded image from step S1405 onto the electronic document file acquired in step S1403 and combines them into a single electronic document file. In this embodiment, the embedded image for one page is overlaid onto each page of the electronic document file.

[0183] In step S1407, the printing processing unit 404 converts the electronic document file, on which the embedded image was superimposed in step S1406, into a print data format for transmission to the image forming apparatus 102. The conversion process in this step only needs to be print data that can be interpreted by the image forming apparatus 102, and since this is a standard process, details are omitted.

[0184] In step S1408, the print processing unit 404 sends the bibliographic data and print data generated in steps S1404 and S1407 as a print request to the image forming apparatus 102 set in the printer driver via the printer driver acquired in step S1403. In this embodiment, the image forming apparatus 102 to which the print request is sent will be described as "C3530," which is set in the printer driver "C3530" selected in the printer driver setting field 1202.

[0185] This step ends after receiving the processing result from the image forming apparatus 102 to which the print request was sent.

[0186] The process of requesting printing from the image forming apparatus 102 in this step is shown in block S1307 in the sequence diagram of Figure 13, and its details will be described in detail in the following Figure 15.

[0187] <Print job storage processing flow> Figure 15 is a flowchart illustrating the detailed processing flow of step S1408 described above.

[0188] In this flowchart, in step S1408 described above, the print control unit 504 of the image forming apparatus 102, specified by the printer driver 405 of the information processing device 101, receives processing via the processing control unit 502 and executes it on the CPU 301. At this time, the bibliographic data and print data generated by the information processing device 101 are received.

[0189] Step S1501 involves the print control unit 504 of the image forming apparatus 102 passing the "user" information from the bibliographic data to the authentication unit 604 of the bibliographic management device 103 and requesting authentication of the processing user. The authentication unit 604 of the bibliographic management device 103, upon receiving the information, compares it with the user ID registered in the authentication information table shown in Figure 24 and passes the result to the image forming apparatus 102.

[0190] Step S1502 proceeds to step S1503 if the matching result from step S1501 is found to be correct. If there is no match, the process terminates as an error because authenticity assurance printing is not possible.

[0191] In step S1503, the print data sent from the information processing device 101 is stored in the HDD 304 by the print job management unit 507 of the image forming apparatus 102. The job ID issued by the print job management unit 507 and the path information indicating the location where the print data is stored are then registered as the job ID and print job path, respectively, in the job information table in Figure 23.

[0192] The job ID issued in this step is configured to represent a unique value for each image forming apparatus 102 when issued by each apparatus as described in this embodiment. Alternatively, a unique job ID may be issued by requesting it from the bibliographic management device 103 or a specific image forming apparatus 102.

[0193] Step S1504 generates the following bibliographic data for the submission job management unit 507 to send to the bibliographic management device 103. This data is composed of the bibliographic data received from the information processing device 101 at the start of this flowchart, plus data obtained from the image forming apparatus 102 that is performing the processing.

[0194] User: The "user" of the bibliographic data received from the information processing device. Job ID: The "Job ID" generated in step S1503. Job name: The "job name" of the bibliographic data received from the information processing device. IP address: The "IP address" set on the network interface 308 of the image forming apparatus 102 that is running. Path: The "print job path" in step S1503 where the print data was stored. Processing Account: The "processing account" for bibliographic data received from the information processing device. Print application name: The "print application name" of the bibliographic data received from the information processing device. Print settings: Print settings for bibliographic data received from the information processing device.

[0195] Step S1505 is when the print control unit 504 of the image forming apparatus 102 requests the bibliographic management unit 610 of the bibliographic management device 103 to register the generated bibliographic data. The bibliographic management unit 610 of the bibliographic management device 103, upon receiving the data, registers the received bibliographic data in the bibliographic information table shown in Figure 27 using its own CPU 202. The bibliographic data to be registered is as follows.

[0196] User: The "user" of the bibliographic data received from the image forming apparatus 102. Job ID: The "Job ID" of the bibliographic data received from the image forming apparatus 102. Job name: The "job name" of the bibliographic data received from the image forming apparatus 102. Reception date and time: The date and time when this step was executed on the bibliographic management device 103. IP address: The "IP address" of the bibliographic data received from the image forming apparatus 102. Path: The "path" of the bibliographic data received from the image forming apparatus 102. Processing account: The ID of the "processing account" of the bibliographic data received from the image forming apparatus 102. Authentication information: Authentication information for the "processing account" of the bibliographic data received from the image forming apparatus 102. Print application name: The "print application name" of the bibliographic data received from the image forming apparatus 102. Print settings: "Print settings" for bibliographic data received from image forming apparatus 102.

[0197] Once registration is complete, the processing results are sent to the requesting image forming apparatus 102, and this step is terminated.

[0198] Step S1506 involves the print control unit 504 of the image forming apparatus 102 requesting the setting management unit 608 of the bibliographic management device 103 to acquire remote print setting information.

[0199] In step S1507, the setting management unit 608 of the bibliographic management device 103, which received the request in step S1506, uses its CPU 202 to obtain information on the setting value of the definition "hold print" from the setting information table in Figure 26 and transmits it to the print control unit 504 of the image forming apparatus 102.

[0200] In step S1508, the print control unit 504 of the image forming apparatus 102, having received the "hold print" setting value from step S1507, determines whether or not to perform hold print. If it receives the value to perform hold print, i.e., "perform" in this embodiment, then this processing flow ends. If hold print is not performed, the process proceeds to the next step S1509.

[0201] Step S1509 is executed by the print control unit 504 to immediately execute printing since no hold printing is performed. In this step, the print job with the job ID issued by the submission job management unit 507 in step S1503 is printed. Although this step is processed in the image forming apparatus 102, it performs the same processing as the image forming apparatus 104 as an output device. As mentioned above, the image forming apparatus 102 and the image forming apparatus 104 are described separately in this embodiment, but the functions they hold are configured in the same way. Therefore, the processing in this step will be described in detail in the printing process shown in Figure 16 below.

[0202] <Print job printing process flow> Figure 16 is a flowchart illustrating the detailed processing flow of the print job shown in block S1321 of Figure 13. This flowchart shows that in block S1321 of Figure 13, the print control unit 504 of the image forming apparatus 104 receives the job ID of the print job for which a print command has been received from the user, and this is executed by its own CPU 301. Also, as mentioned above, even in the case of an operation that does not hold the print job, as in step S1509 of Figure 15, the print control unit 504 of the image forming apparatus 104 performs the same print processing as if it had received the job ID of the print target.

[0203] In step S1601, the print control unit 504 receives the job ID of the print job specified by the user from the UI control unit 505. The received job ID is combined with the manufacturer name and model name information held by the image forming apparatus 104 itself and transmitted to the print job generation unit 611 of the bibliographic management device 103.

[0204] Step S1602 involves obtaining the bibliographic information of the print job registered in the bibliographic information table in Figure 27, which corresponds to the job ID received by the print job generation unit 611 of the bibliographic management device 103, from the bibliographic management unit 610.

[0205] In step S1603, if bibliographic information was obtained in step S1602, the job ID is sent to the input job management unit 507 of the image forming apparatus 102, which is indicated by the IP address in the obtained bibliographic information, to request the acquisition of print data, and the process proceeds to step S1604. If bibliographic information could not be obtained, an error is sent to the image forming apparatus 104 because there is no information to print, and the process proceeds to step S1611.

[0206] In step S1604, the input job management unit 507 of the image forming apparatus 102, which has been requested to acquire print data, refers to the job information table in Figure 23 and acquires the print data file from the location indicated by the print job path corresponding to the specified job ID. Then, it transmits the print data file to the bibliographic management device 103.

[0207] In step S1605, the print job generation unit 611 of the bibliographic management device 103, which has received the print data file, requests the authenticity data generation device 111 to extract authenticity data from the print data file. At this time, the print data file is sent and the process proceeds to step S1606.

[0208] Step S1606 is the process by which the authenticity data generator 111 extracts identification information embedded in the print data file. This process in the authenticity data generator 111 corresponds to block S1323 mentioned above, and will be explained in detail in Figure 17.

[0209] In step S1607, the print job generation unit 611 of the bibliographic management device 103 checks the received extraction results and determines whether it was able to obtain transaction 907. If the extraction is successful, the print job generation unit 611 of the bibliographic management device 103 requests the authenticity data generation device 111 to register the printing information necessary for authenticity assurance. At this time, the "processing account" and "authentication information" of the bibliographic information obtained in step S1602, the "manufacturer name" and "model name" obtained in step S1601, and the "document identification information" of the transaction obtained in step S1607 are sent, and the process proceeds to step S1608. If the extraction fails, the print data received in step S1604 is not guaranteed to be authentic, so the print data and error message are sent to the image forming apparatus 104 as an authenticity error, and the process proceeds to step 1615.

[0210] Step S1608 is when the authenticity data generator 111 registers the printing information necessary to guarantee authenticity. This processing by the authenticity data generator 111 corresponds to block S1326 mentioned above, and is explained in detail in Figure 17.

[0211] In step S1609, the print job generation unit 611 of the bibliographic management device 103 determines whether the registration in step S1608 was successful. If successful, the print data received in step S1604 and the "print settings" value of the print job information acquired in step S1602 are combined and transmitted from the print job generation unit 611 of the bibliographic management device 103 to the print control unit 504 of the image forming apparatus 104, and the process proceeds to step S1610. If unsuccessful, the process proceeds to step S1610.

[0212] In step S1610, the print job generation unit 611 of the bibliographic management device 103 determines the reason why the registration in step S1608 failed. As explained in detail in Figure 17, if the registration is deemed unacceptable in the registration feasibility determination in step S1715, the print data acquired in step S1604 is invalid, so the print data and error message are sent to the image forming apparatus 104 as an authenticity error, and the process proceeds to step 1615. If the failure is due to any other error, the result is sent to the image forming apparatus 104 as an error, and the process proceeds to step S1611.

[0213] Step S1611 checks whether the image forming apparatus 104 was able to acquire the print data. If it was, the process proceeds to the next step S1612. If bibliographic information was not found in step S1603, or if registration failed due to other errors in step S1610, the print data could not be acquired, and printing by the image forming apparatus 104 is impossible, so this flow is terminated.

[0214] In step S1612, the image forming apparatus 104, having received the print data and print settings transmitted from the bibliographic management device 103, performs RIP processing of the received print data according to the print settings in the print control unit 504, and prints by issuing a print command to the printer 310 via the printer I / F 307. Once printing is complete, it requests the bibliographic management unit 610 of the bibliographic management device 103 to delete the print job information.

[0215] Step S1613 is when the bibliographic management device 103 deletes the print job. Upon receiving a request to delete print job information from the print control unit 504 of the image forming apparatus 104, the bibliographic management unit 610 of the bibliographic management device 103 retrieves print job information matching the received job ID from the bibliographic information table in Figure 27, and then deletes the print job information with the same job ID from the bibliographic information table in Figure 27. Once the deletion is complete, it requests the image forming apparatus 102 to delete the print data, specifying the job ID of the deleted job.

[0216] Step S1614 involves deleting the print data. Upon receiving a request to delete print data from the bibliographic management unit 610 of the bibliographic management device 103, the input job management unit 507 of the image forming apparatus 102 retrieves job information matching the received job ID from the job information table in Figure 23 and deletes the print data in the path stored in that "print job path" from the HDD 304. It then deletes the job information with the same job ID from the job information table in Figure 23. The result of the deletion is notified from the image forming apparatus 102 to the bibliographic management device 103, and further notified to the requesting image forming apparatus 104, thus ending this processing flow.

[0217] In step S1615, the image forming apparatus 104, having received the authenticity error transmitted from the bibliographic management device 103, passes the authenticity error to the UI control unit 505 in the print control unit 504 and displays the authenticity error screen 1151. At this time, the received print data is displayed in the print data display field 1154, and the received error message is displayed in the error display field 1156.

[0218] Step S1616 monitors whether the image forming apparatus 104 has pressed the end button 1157 on the authenticity error screen 1151 or the delete job end button 1158. If the end button 1157 is pressed, this processing flow is terminated. If the delete job end button 1158 is pressed, a request is made to the bibliographic management unit 610 of the bibliographic management device 103 to delete the print job information, and the process proceeds to step S1613. If any other user operation is detected, step S1616 is repeated to monitor the user operation again.

[0219] <Processing flow of the authenticity data generation device 111> Figure 17 is a flowchart illustrating the detailed processing flow of the authenticity data generation process shown in block S1322 of Figure 13, the authenticity data extraction process shown in block S1323, and the printing information registration process shown in block S1326. This flowchart is executed by the processing control unit 702 of the authenticity data generation device 111, which has received a processing request, using its own CPU 202.

[0220] In step S1701, the processing control unit 702 confirms the details of the processing request. If, in step S1405, the processing control unit 702 receives a request from the print processing unit 404 of the information processing device 101 to generate authenticity data, the processing control unit 702 requests processing from the document identification information generation unit 707 and proceeds to step S1702. If, in step S1608, the processing control unit 702 receives a request from the print job generation unit 611 of the bibliographic management device 103 to register printing information, the processing control unit 702 requests processing from the print information registration unit 709 and proceeds to step S1709. If, in step S1606 or step S1803 described later, the processing control unit 702 receives a request from the document identification information extraction unit 708 to extract authenticity data, and proceeds to step S1718.

[0221] In step S1702, the document identification information generation unit 707 requests the authentication processing unit 703 to verify the authentication of the "processing account" and "authentication information" received from the request source. The authentication processing unit 703 determines whether the credential information matches the ID and authentication information in the user information table shown in Figure 28.

[0222] Step S1703 checks whether the authentication processing unit 703 matches the determination made in step S1702. If it matches, the process proceeds to step S1704. If it does not match, the process terminates as an error because it is not possible to generate authenticity data.

[0223] Step S1704 involves the document identification information generation unit 707 generating document identification information for authenticity verification to be embedded in the printed material. This document identification information is used to ensure the uniqueness of the printed material. In this embodiment, a string is used that combines a UUID for uniquely identifying the OS of the authenticity data generation device 111 and the execution date and time of this step (specified in units of microseconds).

[0224] Step S1705 is when the document identification information generation unit 707 generates an embedded image to be overlaid as the background of the printed document into which the document identification information generated in step S1704 is embedded. In this embodiment, the document identification information is embedded as obscured information in this embedded image so that the embedded information is not visible to the eye when printed. The embedded image does not have any limitations on the image format that can be implemented, such as an invisible image using yellow dots or an image with a visible code such as a QR code (registered trademark). The generated embedded image is temporarily stored on its own HDD 205.

[0225] Step S1706 is when the document identification information generation unit 707 creates a transaction 907 to register the document identification information embedded in the generated embedded image with the blockchain device 112. Specifically, the following data is compiled as transaction configuration information.

[0226] Document identification information: "Document identification information" generated in step S1704 Registration date and time: Date and time information obtained within the authenticity data generation device 111. Registered user: The "processing account" received from the request source. Document identification: "Print data" representing printed materials.

[0227] In step S1707, the processing control unit 702 sends the transaction configuration information created in step S1706 to the block data management unit 806 of the blockchain device 112 and requests the addition of the transaction to the block. When making the request, the "blockchain ID" and "blockchain authentication information" from the user information table in Figure 28, which are associated with the ID authenticated in step S1702, are also sent.

[0228] The block data management unit 806 of the blockchain device 112, upon receiving the request, passes the received "blockchain ID" and "blockchain authentication information" to the authentication processing unit 804 and requests confirmation of whether a matching user exists. The authentication processing unit 804 confirms that the "blockchain ID" and "blockchain authentication information" passed to it exist in the user information table shown in Figure 30 and returns the result to the block data management unit 806. The block data management unit 806 generates transaction information using the received transaction configuration information and registers it in its distributed ledger 807. Since this registration process is a general blockchain registration process, a detailed description is omitted.

[0229] Then, a message is sent to the document identification information generation unit 707 of the authenticity data generation device 111 indicating that the transaction processing in the blockchain device 112 has been completed.

[0230] In step S1708, the document identification information generation unit 707 of the authenticity data generation device 111, which has received confirmation that the transaction registration has been completed in the blockchain device 112, sends the embedded image that was temporarily stored in the HDD 205 in step S1705 to the requester. After sending, the embedded image temporarily stored in the HDD 205 is deleted, and this flow is terminated.

[0231] In step S1709, the print information registration unit 709 requests the authentication processing unit 703 to verify the authentication of the "processing account" and "authentication information" received from the requester. The authentication processing unit 703 determines whether the credential information matches the ID and authentication information in the user information table shown in Figure 28.

[0232] Step S1710 checks whether the authentication processing unit 703 matches the determination made in step S1709. If it matches, the process proceeds to step S1711. If it does not match, the process terminates as an error because it is not possible to generate authenticity data.

[0233] Step S1711 involves the printability determination unit 705 confirming whether the image forming apparatus 104, which the user has instructed to print, is suitable for authenticity-guaranteed printing. Specifically, the print information registration unit 709 requests the printability determination unit 705 to determine whether the "manufacturer name" and "model name" received from the request source are printable. The printability determination unit 705 checks the printability information table in Figure 29 to see if there is a record in which the "manufacturer" and "model" data perfectly match, and sends the result to the print information registration unit 709.

[0234] In step S1712, the document identification information generation unit 707 determines that if there is a record that matches the result of the verification in step S1703, it is "printable" and proceeds to step S1705. If there is no matching record, the process flow ends with an error indicating that printing cannot be permitted.

[0235] In step S1713, the processing control unit 702 requests the blockchain device 112 to obtain transaction data containing the "document identification information" received from the request source.

[0236] The block data management unit 806 of the blockchain device 112, upon receiving the request, retrieves the transaction that holds the received identification information as document identification information 902 from the distributed ledger 807. Since this retrieval process is a general blockchain search process, a detailed description is omitted. The retrieved transaction is transmitted to the authenticity data generation device 111 via the communication unit 801. If the transaction could not be retrieved, a message to that effect is similarly sent to the authenticity data generation device 111.

[0237] Step S1714 is when the authenticity data generator 111 refers to the transaction data received in step S1713 and determines whether it is possible to register print information. In this embodiment, registration is possible if two conditions are met. The first condition is that the transaction data received in step S1713 is in the form of transaction 907. In the case of transaction 901 or 908, it is clear that the print output has already been completed because it includes the print location 905. Since one print document is guaranteed by one piece of identification information, it is not permitted to register and print identification information that has already been printed out again. The second condition is that the registrant 904 included in the transaction data received in step S1713 matches the "processing account" received from the requester. The print processing unit 404 of the information processing device 101 confirms that the user who issued the print command and the user who operated the image forming apparatus 104 and issued the print command are the same person. This prevents unauthorized registration of transactions by third parties.

[0238] Step S1715 proceeds to step S1716 if the registration feasibility determination in step S1714 was successful. If registration is not possible, the process flow terminates with an error indicating that registration cannot be permitted.

[0239] Step S1716 is when the document identification information generation unit 707 creates a transaction 908 for registering the document identification information and printing information with the blockchain device 112 based on the document identification information received from the requester. Specifically, the following data is compiled as transaction configuration information.

[0240] Document Identification Information: "Document identification information" received from the requester. Registration date and time: Date and time information obtained within the authenticity data generation device 111. Registered user: The "processing account" received from the request source. Print location: "Model" received from the requester

[0241] In step S1717, the processing control unit 702 sends the transaction configuration information created in step S1716 to the block data management unit 806 of the blockchain device 112, requesting the addition of the transaction to the block. When making the request, the "blockchain ID" and "blockchain authentication information" from the user information table in Figure 28, which are associated with the ID authenticated in step S1709, are also sent. The processing of the blockchain device 112 is the same as the processing described in S1707 above. After the processing is completed, a message indicating the success of the processing is sent to the requester, and this flowchart ends.

[0242] In step S1718, the processing control unit 702 analyzes the print data file or scanned image file received from the request source and extracts embedded document identification information.

[0243] In step S1719, the processing control unit 702 determines whether the identification information extraction process in step S1718 was successful or not. If the extraction process is successful, the process proceeds to step S1720; otherwise, the process proceeds to step S1721.

[0244] In step S1720, the processing control unit 702 requests the blockchain device 112 to obtain transaction data containing the extracted document identification information. At this time, the extracted document identification information is sent to the blockchain device 112. The processing by the blockchain device 112 is the same as the processing described in step S1713 above.

[0245] In this embodiment, the acquired transaction data may include only transaction 907, or it may include both transaction 907 and transaction 908. In the authenticity data extraction request when verifying the authenticity of the print data in step S1606 described above, only transaction 907 is included. In the authenticity data extraction request when guaranteeing the authenticity of the printed material in step S1803 described later, both transaction 907 and transaction 908 are included.

[0246] Step S1721 is when the processing control unit 702 sends the transaction data obtained from step S1720 to the requester. If step S1719 fails, or if transaction data could not be obtained in step S1720, a message indicating extraction failure is sent to the requester. After transmission is complete, this flowchart is terminated.

[0247] <Authenticity Verification Process Flow> Figure 18 is a flowchart illustrating the authenticity verification process performed by the image forming apparatus 104. This flowchart is executed by the authenticity verification control unit 508, which is activated via the processing control unit 502 from the UI control unit 505 of the image forming apparatus 104 when it detects that the verification button 1148 on the aforementioned verification screen 1141 has been pressed, and is executed by its own CPU 301.

[0248] Since this process verifies the authenticity of printed paper, it is started with the target paper document placed on the scanner 311 of the image forming apparatus 104.

[0249] In step S1801, the authenticity verification control unit 508 scans the paper manuscript placed on the scanner 311 and generates an image file.

[0250] In step S1802, the authenticity verification control unit 508 checks whether the generation of the scanned image file was successful in step S1801. If successful, it proceeds to step S1803; if failed, it proceeds to step S1813.

[0251] In step S1803, the authenticity verification control unit 508 requests the authenticity data generation device 111 to extract the corresponding identification information from the embedded information embedded in the scanned image file. At this time, the scanned image file is sent to the authenticity data generation device 111. The processing of the authenticity data generation device 111 that has received the authenticity data extraction request is described in detail in FIG. 17 above.

[0252] In step S1804, the authenticity verification control unit 508 checks the extraction result received from the authenticity data generation device 111 and determines whether it has obtained transaction 901 or transaction 907 and transaction 908. If obtained, it proceeds to step S1805. If not obtained, the received error message is passed to step S1806.

[0253] In step S1805, the authenticity verification control unit 508 passes the obtained transaction data and the scanned image file generated in step S1801 to the UI control unit 505, and displays the scanned image file in the verification image display column 1144 of the verification screen 1141, and displays the values of each item in the authenticity data 1147. When obtaining transaction 907 and transaction 908, although the registration dates and times 903 of the transactions are different, the registration date information of transaction 908 is displayed to show the date and time at the time of printing.

[0254] In step S1806, the authenticity verification control unit 508 passes the acquired error message to the UI control unit 505, and the UI control unit 505 displays it in a message dialog (not shown as it is a common dialog).

[0255] In this embodiment, the authenticity verification process is described as a process of the image forming apparatus 104. However, any apparatus that can convert a paper manuscript into an image file or has an imaging function can perform a similar verification process, and this is not restrictive. For example, an information processing apparatus 101 connected to a flatbed scanner or a smartphone holding a camera is applicable.

[0256] As described above, in step S1601 of FIG. 16, the image forming apparatus 104 receives a print instruction for a print job.

[0257] In step S1604 of FIG. 16, the bibliographic management apparatus 103 acquires print data corresponding to the print job received in step S1601 from the image forming apparatus 102.

[0258] In step S1606 of FIG. 16 and step S1720 of FIG. 17, the blockchain apparatus 112 determines whether a first transaction 907 regarding the print data is registered.

[0259] In step S1608 of FIG. 16 and step S1717 of FIG. 17, when it is determined in step S1720 that the first transaction 907 is registered, the blockchain apparatus 112 registers the information at the time of the print instruction of the print data as a second transaction 908. Here, the information at the time of the print instruction includes, for example, the print location 905 in FIG. 9.

[0260] In step S1612 of FIG. 16, after the registration in step S1717, the image forming apparatus 104 controls to print the print data.

[0261] In step S1405 in Figure 14 and step S1707 in Figure 17, the blockchain device 112 registers the first transaction 907 before receiving the print instruction in step S1601.

[0262] The first transaction 907 includes identification information. In step S1705 of Figure 17, the authenticity data generator 111 generates an embedded image with the identification information embedded in it. The print data has the embedded image superimposed on it. In step S1720 of Figure 17, the blockchain device 112 determines whether the first transaction 907 corresponding to the identification information embedded in the print data has been registered.

[0263] In step S1718 of Figure 17, the authenticity data generation device 111, after receiving the print instruction in step S1601, extracts identification information from the print data. In step S1720, the blockchain device 112 determines whether or not a first transaction 907 corresponding to the identification information extracted in step S1718 has been registered.

[0264] In steps S1406 and S1407 of Figure 14, the information processing device 101 superimposes the embedded image onto the file and generates print data.

[0265] In step S1503 of Figure 15, the image forming apparatus 102 stores the print data generated in step S1407 of Figure 14. In step S1604 of Figure 16, the bibliographic management device 103 retrieves the print data stored by the image forming apparatus 102.

[0266] Alternatively, the image forming apparatus 104 may be configured to have the functions of the image forming apparatus 102. In that case, in step S1503, the image forming apparatus 104 stores the print data generated in step S1407. In step S1604, the bibliographic management device 103 retrieves the print data stored by the image forming apparatus 104.

[0267] [Second Embodiment] In the first embodiment, an example was described in which, during authenticity-guaranteed printing, the bibliographic management device 103 requests the authenticity data generation device 111 to register the printing information necessary for guaranteeing authenticity, and the authenticity data generation device 111 determines whether registration is possible and requests registration to the blockchain device 112.

[0268] In the second embodiment, an example is described in which the bibliographic management device 103 requests the blockchain device 112 to register information during printing. In this case, the determination of whether or not registration is possible, which was performed by the authenticity data generation device 111 in the first embodiment, is performed by the blockchain device 112 in the second embodiment.

[0269] The following explanation will focus on the differences between the first and second embodiments, using diagrams.

[0270] <Bibliographic Information Database> Figure 31 shows an example of authenticity information for the bibliographic information table stored in the bibliographic information database 609 of the bibliographic management unit 610 in the second embodiment.

[0271] The information in the bibliographic information table in Figure 31, excluding the authenticity information, is the same as in Figure 27. The authenticity information shows information used for processing in the authenticity data generation device 111 and information used for processing in the blockchain device 112. It consists of "processing account," "authentication information," and "print application name," which are necessary for processing in the authenticity data generation device 111, as well as "authorization information," which is necessary for processing in the blockchain device 112. The "authorization information" includes authorization codes and token information that authorize the transaction registration request to the blockchain device 112. The form of the authorization information is not restricted as long as it authorizes the registration request to the blockchain device 112, and it may be a temporary registration URL, for example.

[0272] <Print instruction flow of information processing device 101> FIG. 19 is a flowchart for explaining a detailed processing flow when receiving a user's printing instruction in the sequence S1300 in the second embodiment. This flowchart is started when the printing processing unit 404 of the information processing apparatus 101 that has received the user's printing instruction is executed by the CPU 202. In this embodiment, the explanation is given with the user logged in to the information processing apparatus 101 as "Suzuki".

[0273] The processing from step S1901 to step S1903 is the same as the processing explained in steps S1401 to S1403 in FIG. 14.

[0274] In step S1904, the information processing apparatus 101 requests the authenticity data generation apparatus 111 to obtain authorization information for registering information in the blockchain apparatus 112. At this time, the "ID" and "authentication information" obtained in step S1903 are transmitted.

[0275] Steps S1905 to S1909 are steps executed by the processing control unit 702 of the authenticity data generation apparatus 111 on its own CPU 202.

[0276] In step S1905, the processing control unit 702 requests the authentication processing unit 703 to confirm the authentication of the "processing account" and "authentication information" received from the information processing apparatus 101. The authentication processing unit 703 determines whether the received information matches the ID and authentication information in the user information table shown in FIG. 28.

[0277] In step S1906, the authenticity data generation apparatus 111 checks whether it matches the determination in step S1905. If it matches, it proceeds to step S1907. If it does not match, an authentication error message is sent to the information processing apparatus 101.

[0278] Step S1907 is when the authenticity data generation device 111 requests the blockchain device 112 to obtain authorization information for registration. When making the request, the "blockchain ID" and "blockchain authentication information" from the user information table in Figure 28, which are associated with the ID authenticated in step S1905, are sent together.

[0279] Step S1908 is executed by the processing control unit 802 of the blockchain device 112, which received the processing request, using its own CPU 202. The processing control unit 802 passes the received "blockchain ID" and "blockchain authentication information" to the authentication processing unit 804 and requests confirmation of whether a matching user exists. The authentication processing unit 804 confirms that the "blockchain ID" and "blockchain authentication information" passed to it exist in the user information table in Figure 30 and issues authorization information that permits the registration of a transaction. Then, it transmits the issued authorization information to the authenticity data generation device 111. The authorization information issuance process in this step is carried out using a general method of authentication and authorization, so a detailed description is omitted.

[0280] Step S1909 is when the authenticity data generation device 111 transmits the authorization information received from the blockchain device 112 to the information processing device 101.

[0281] Step S1910 determines whether the information processing device 101 was able to receive authorization information from the authenticity data generation device 111. If it was received, the process proceeds to step S1911. If obtaining authorization information fails, an error message is displayed in a message dialog (not shown as it is a general dialog), and this flowchart is terminated.

[0282] Step S1911 involves the information processing device 101 generating bibliographic data to be sent to the image forming apparatus 102, which is configured with the printer driver set in the printer driver setting field 1202. The bibliographic information specified in this step consists of the following items.

[0283] User: The logged-in user ID Job name: The name of the electronic document file that was requested to be printed. Processing account: The ID set for "suzuki" in Figure 22 Authentication information: Figure 22 and the authentication information set for "suzuki" Print application name: The name of the printing application that is operating the electronic document file that was requested to be printed. Authorization Information: Authorization information obtained in step S1909 to request registration to blockchain device 112. Print settings: Values ​​in the print properties

[0284] Steps S1912 to S1915 are the same as the process described in steps S1405 to S1408 in Figure 14.

[0285] <Print job printing process flow> Figure 20 is a flowchart illustrating the detailed processing flow when a user print command is received in the sequence S1320 described above in the second embodiment. This flowchart is started when the print control unit 504 of the image forming apparatus 104 receives the job ID of the print job for which a print command has been received from the user, and executes on its own CPU 301.

[0286] The processes from steps S2001 to S2007 are the same as those described in steps S1601 to S1607 in Figure 16.

[0287] Step S2008 involves the bibliographic management device 103 creating transaction data for registering the printing information necessary for guaranteeing authenticity with the blockchain device 112. Specifically, the following data is compiled as transaction configuration information.

[0288] Document Identification Information: The "Document Identification Information" of the transaction obtained in step S2007. Registration date and time: Date and time information obtained within the bibliographic management device 103. Registered user: "Processing account" for bibliographic information obtained in Step S2002 Print location: "Model name" obtained in step S2001

[0289] The bibliographic management device 103 sends the created transaction configuration information to the block data management unit 806 of the blockchain device 112, requests the addition of the transaction to the block, and proceeds to step S2009. When making the request, the "authorization information" of the bibliographic information obtained in step S2002 is also sent.

[0290] Step S2009 involves the block data management unit 806 of the blockchain device 112 registering transaction data that summarizes the printing information received from the bibliographic management device 103. The processing in this step is explained in detail in Figure 21.

[0291] The process from step S2010 to step S2017 is the same as the process described in steps S1609 to S1616 in Figure 16.

[0292] <Transaction registration processing flow during printing of blockchain device 112> Figure 21 is a flowchart illustrating the detailed processing flow of the print transaction registration shown in step S2009 of Figure 20. This flowchart is executed by the block data management unit 806 of the blockchain device 112, which has received the processing request, using its own CPU 202.

[0293] Step S2101 is when the block data management unit 806 passes the received "authorization information" to the authentication processing unit 804 and requests confirmation that registration is permitted. The authentication processing unit 804 checks the authorization information and returns the result to the block data management unit 806.

[0294] In step S2102, the block data management unit 806 checks the authorization result in step S2101. If authorization is successful, it proceeds to step S2103. If it fails, it terminates the process as an error.

[0295] Step S2103 involves the block data management unit 806 retrieving from the distributed ledger 807 a transaction in which the "document identification information" contained in the transaction data received from the requester is held as document identification information 902. Since this retrieval process is a general blockchain search process, a detailed description is omitted.

[0296] In step S2104, the block data management unit 806 determines whether a transaction can be registered. Registration is permitted if the following two conditions are met. The first condition is that the transaction obtained in step S2103 satisfies the form of transaction 907. In the case of the form of transactions 901 or 908, it is clear that the print output has already been completed because the print location 905 is included. Since one print document is guaranteed by one piece of identification information, it is not permitted to register and print identification information that has already been printed out again. The second condition is that the registrant 904 included in the transaction received in step S2103 matches the "registrant" in the transaction data received from the requester. The print processing unit 404 of the information processing device 101 confirms that the user who issued the print command and the user who operated the image forming apparatus 104 and issued the print command are the same person. This prevents unauthorized registration of transactions by third parties.

[0297] Step S2105 proceeds to step S2106 if the registration feasibility determination in step S2104 was successful. If registration is not possible, the process flow terminates with an error indicating that registration cannot be permitted.

[0298] Step S2106 involves the block data management unit 806 generating transaction 908 using the transaction data received from the requester and registering it in its own distributed ledger 807. Since this registration process is a standard blockchain registration process, a detailed description is omitted. After this step is completed, a notification of completion is sent to the requester, and this flowchart terminates.

[0299] In the second embodiment described above, an example was explained in which a request for information registration at the time of printing is made directly from the bibliographic management device 103 to the blockchain device 112. In this embodiment, the blockchain device 112 made a determination as to whether the transaction at the time of printing could be registered.

[0300] As described above, in step S1908 of Figure 19, the blockchain device 112 issues authorization information before the generation of print data in step S1914.

[0301] In step S2008 of Figure 20, the bibliographic management device 103, after receiving the print instruction in step S2001 of Figure 20, transmits authorization information to the blockchain device 112.

[0302] In step S2009 in Figure 20 and step S2102 in Figure 21, the blockchain device 112 determines whether registration is permitted based on the authorization information received in step S2008.

[0303] In step S2106 of Figure 21, if the blockchain device 112 determines that registration is permitted in step S2102, and if it determines that the first transaction 907 has been registered in step S2006 of Figure 20, it registers the information at the time of the print instruction for the print data as the second transaction 908.

[0304] As described above, according to the first and second embodiments, in hold printing, it becomes possible to print with guaranteed authenticity for print data whose authenticity has been verified.

[0305] (Other embodiments) This disclosure can also be implemented by supplying a program that implements one or more of the functions of the embodiments described above to a system or device via a network or storage medium, and by having one or more processors in the computer of that system or device read and execute the program. It can also be implemented by a circuit (e.g., an ASIC) that implements one or more functions.

[0306] Furthermore, the embodiments described above are merely examples illustrating how to implement this disclosure, and they should not be interpreted as limiting the technical scope of this disclosure. In other words, this disclosure can be implemented in various ways without departing from its technical concept or its main features.

[0307] This embodiment includes the following configuration. (Item 1) An image forming system comprising a first image forming apparatus, a management apparatus, and a blockchain apparatus, The first image forming apparatus has a receiving means for receiving print instructions for a print job, The management device has acquisition means for acquiring print data corresponding to the print job received by the receiving means, The aforementioned blockchain device A first determination means for determining whether or not a first transaction relating to the print data has been registered, If the first determination means determines that the first transaction has been registered, the system includes a first registration means that registers the information at the time of the print instruction for the print data as a second transaction. The first image forming apparatus is characterized by having a control means for controlling the printing of the print data after registration by the registration means. (Item 2) The image forming system according to item 1, characterized in that the blockchain device has a second registration means for registering the first transaction before the receiving means receives a print instruction. (Item 3) The aforementioned first transaction includes identification information, The image forming system has a generating device, The generation device has a first generation means for generating an embedded image into which the identification information is embedded, The aforementioned print data has the aforementioned embedded image superimposed on it. The image forming system according to item 2, characterized in that the first determination means determines whether or not the first transaction corresponding to the identification information embedded in the print data has been registered. (Item 4) The generating device has an extraction means for extracting the identification information from the print data after the receiving means has received the print instruction. The image forming system according to item 3, characterized in that the first determination means determines whether or not the first transaction corresponding to the identification information extracted by the extraction means is registered. (Item 5) The image forming system includes an information processing device, The image forming system according to item 3 or 4, characterized in that the information processing device has a second generation means for superimposing the embedded image onto a file and generating the print data. (Item 6) The blockchain device has an issuing means for issuing authorization information before the generation of the second generation means, The management device has a transmission means that transmits the authorization information to the blockchain device after the receiving means has received the print instruction. The blockchain device has a second determination means that determines whether or not registration is permitted based on the authorization information received from the transmission means. The image forming system according to item 5, characterized in that the first registration means registers the information at the time of the print instruction for the print data as a second transaction when the second determination means determines that registration is permitted and the first determination means determines that the first transaction has been registered. (Item 7) The image forming system has a second image forming apparatus, The second image forming apparatus has a storage means for storing print data generated by the second generation means, The image forming system according to item 5 or 6, characterized in that the acquisition means acquires the print data stored by the storage means. (Item 8) The first image forming apparatus has a storage means for storing print data generated by the second generation means, The image forming system according to item 5 or 6, characterized in that the acquisition means acquires the print data stored by the storage means. (Item 9) The image forming system according to any one of items 1 to 6, characterized in that the information given at the time of the print instruction includes the print location. (Item 10) A processing method for an image forming system having a first image forming apparatus, a management apparatus, and a blockchain apparatus, The first image forming apparatus includes a receiving step in which it receives a print instruction for a print job, The management device includes an acquisition step in which it acquires print data corresponding to the print job received in the acceptance step, The blockchain device performs a first determination step of determining whether or not a first transaction relating to the print data has been registered, If the blockchain device determines in the first determination step that the first transaction has been registered, it performs a first registration step of registering the information at the time of the print instruction for the print data as a second transaction, The first image forming apparatus, after the registration step, controls the printing of the print data, and A processing method for an image forming system, characterized by having the following features. [Explanation of symbols]

[0308] 401 Communications Department 402 Database 403 Authentication Management Department 404 Printing Processing Unit 405 Printer Driver 501 Communications Department 502 Processing Control Unit 503 Authentication Management Department 504 Print Control Unit 505UI Control Unit 506 Job Information Database 507 Submission Job Management Department 508 Authenticity Verification Control Unit 601 Communications Department 602 Processing Control Unit 603 Authentication Information Database 604 Authentication Department 605 Device Information Database 606 Device Management Department 607 Configuration Information Database 608 Settings Management Department 609 Bibliographic Information Database 610 Bibliographic Management Department 611 Print Job Generation Unit 701 Communications Department 702 Processing Control Unit 703 Authentication Processing Unit 704 User Information Database 705 Printability judgment section 706 Printability Information Database 707 Document Identification Information Generation Unit 708 Document Identification Information Extraction Unit 709 Print Information Registration Department 801 Communications Department 802 Processing Control Unit 803 Authentication Department 804 Authentication Processing Unit 805 User Information Database 806 Block Data Management Department 807 Distributed Ledger

Claims

1. An image forming system comprising a first image forming apparatus, a management apparatus, and a blockchain apparatus, The first image forming apparatus has a receiving means for receiving print instructions for a print job, The management device has acquisition means for acquiring print data corresponding to the print job received by the receiving means, The aforementioned blockchain device A first determination means for determining whether or not a first transaction relating to the print data has been registered, If the first determination means determines that the first transaction has been registered, the system includes a first registration means that registers the information at the time of the print instruction for the print data as a second transaction. The first image forming apparatus is characterized by having a control means for controlling the printing of the print data after registration by the registration means.

2. The image forming system according to claim 1, characterized in that the blockchain device has a second registration means for registering the first transaction before the receiving means receives a print instruction.

3. The first transaction includes identification information, The image forming system has a generating device, The generation device has a first generation means for generating an embedded image into which the identification information is embedded, The aforementioned print data has the aforementioned embedded image superimposed on it. The image forming system according to claim 2, characterized in that the first determination means determines whether or not the first transaction corresponding to the identification information embedded in the print data has been registered.

4. The generating device has an extraction means for extracting the identification information from the print data after the receiving means has received the print instruction. The image forming system according to claim 3, characterized in that the first determination means determines whether or not the first transaction corresponding to the identification information extracted by the extraction means is registered.

5. The image forming system includes an information processing device, The image forming system according to claim 3, characterized in that the information processing device has a second generation means for superimposing the embedded image onto a file and generating the print data.

6. The blockchain device has an issuing means for issuing authorization information before the generation of the second generation means, The management device has a transmission means that transmits the authorization information to the blockchain device after the receiving means has received the print instruction. The blockchain device has a second determination means that determines whether or not registration is permitted based on the authorization information received from the transmission means. The image forming system according to claim 5, characterized in that the first registration means registers the information at the time of the print instruction for the print data as a second transaction when the second determination means determines that registration is permitted and the first determination means determines that the first transaction has been registered.

7. The aforementioned image forming system includes a second image forming apparatus, The second image forming apparatus has a storage means for storing print data generated by the second generation means, The image forming system according to claim 5, characterized in that the acquisition means acquires the print data stored by the storage means.

8. The first image forming apparatus has a storage means for storing print data generated by the second generation means, The image forming system according to claim 5, characterized in that the acquisition means acquires the print data stored by the storage means.

9. The image forming system according to claim 1, characterized in that the information given at the time of the print instruction includes the print location.

10. A processing method for an image forming system having a first image forming apparatus, a management apparatus, and a blockchain apparatus, The first image forming apparatus includes a receiving step in which it receives a print instruction for a print job, The management device includes an acquisition step in which it acquires print data corresponding to the print job received in the acceptance step, The blockchain device performs a first determination step of determining whether or not a first transaction relating to the print data has been registered, If the blockchain device determines in the first determination step that the first transaction has been registered, it performs a first registration step of registering the information at the time of the print instruction for the print data as a second transaction, The first image forming apparatus, after the registration step, controls the printing of the print data, and A processing method for an image forming system, characterized by having the following features.

Images