Information processing device, program, and information processing system

Abstract

To inhibit image data from being leaked to a third person who is not authorized when the image data stored in a data storing apparatus is used via a communication line.SOLUTION: An image reading apparatus 2 stores a storage range identifier for identifying a range of a location at which image data is stored in a data storing apparatus for storing the image data, and an identifier common to an identifier that is retained by the data storing apparatus, transmits the read image data and the identifier to the data storing apparatus, generates a storage position identifier for identifying a position at which the read image data is stored using the storage range identifier and a character string that is generated by an algorithm common to an algorithm in the data storing apparatus, and transmits the generated storage position identifier to a terminal that uses the image data stored at the position that is identified by the storage position identifier.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to an information processing device, a program, and an information processing system. [Background technology]

[0002] Patent document 1 discloses that image data representing a scanned image is stored on a server on the Internet, location data indicating the storage location is sent to a specified email address, and the image data can be accessed from the terminal that receives the email. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2017-167660 A Summary of the Invention [Problem to be solved by the invention]

[0004] The present invention has an object to prevent the occurrence of a situation in which image data stored in a data storage device is leaked to a third party without proper authorization when the image data is used via a communication line. [Means for solving the problem]

[0005] The information processing device according to claim 1 of the present invention has a processor, Transmitting an identifier common to an identifier held by a data storage device storing image data to the data storage device, and transmitting the image data from the data storage device after authentication using the transmitted identifier in the data storage device; A storage range identifier that identifies the range of the storage location of the image data of The stored and read image data and the identifier are transmitted to the data storage device, and a storage location identifier that identifies the storage location of the read image data is generated using the storage range identifier and a character string generated by an algorithm common to the data storage device, and the generated storage location identifier is transmitted to a terminal that uses the image data stored in the storage location identified by the storage location identifier.

[0006] The information processing device according to claim 2 of the present invention comprises: The computer has a processor that stores a storage range identifier that identifies the range of the storage location of image data in a data storage device that stores image data, the storage range identifier including a device identifier that identifies the information processing device itself and an identifier that is common to the identifier held by the data storage device, transmits the read image data and the identifier to the data storage device, generates a storage location identifier that identifies the storage location of the read image data using the storage range identifier and a character string generated by an algorithm common to the data storage device, and transmits the generated storage location identifier to a terminal that uses the image data stored in the storage location identified by the storage location identifier.

[0008] Claims of the invention 3 The information processing device according to claim 1 or 2 In the configuration described in the above, the processor transmits a device identifier for identifying the information processing device itself and the storage location identifier including the character string.

[0009] Claims of the invention 4 The information processing device according to the present invention comprises: 3 In the configuration described in any one of the above, the processor encrypts data to be transmitted to the data storage device using a public key corresponding to the data storage device and transmits the encrypted data.

[0010] Claims of the invention 5 The information processing device according to the present invention comprises: 4 In the configuration described in any one of the above, the processor transmits to the terminal the storage location identifier including a character string that specifies processing for image data stored in the data storage device.

[0011] Claims of the invention 6 The information processing device according to the present invention comprises: 5 In the configuration described in any one of the above, when there are multiple terminals to which the storage location identifier is to be transmitted, the processor transmits the storage location identifier including a terminal identifier that identifies the terminal to which the storage location identifier is to be transmitted.

[0012] Claims of the invention 7 The program relating to the present invention is a step of transmitting an identifier common to an identifier held by a data storage device storing image data to the data storage device; and a step of transmitting the identifier from the data storage device after authentication is performed in the data storage device using the transmitted identifier. A storage range identifier that identifies the range of the storage location of the image data Recorda step of storing the read image data and the identifier in the storage device; a step of transmitting the read image data and the identifier to the data storage device; a step of generating a storage location identifier that identifies the storage location of the read image data using the storage range identifier and a character string generated by an algorithm common to the data storage device; and a step of transmitting the generated storage location identifier to a terminal that uses the image data stored in the storage location identified by the storage location identifier. The program of claim 8 of the present invention is a program for causing a computer to execute the steps of: storing a storage range identifier that identifies the range of the storage location of image data in a data storage device that stores image data, the storage range identifier including a device identifier that identifies the information processing device itself and an identifier that is common to the identifier held by the data storage device; transmitting the read image data and the identifier to the data storage device; generating a storage location identifier that identifies the storage location of the read image data using the storage range identifier and a character string generated by an algorithm common to the data storage device; and transmitting the generated storage location identifier to a terminal that uses the image data stored in the storage location identified by the storage location identifier.

[0013] An information processing system according to claim 9 of the present invention comprises an image reading device and a data storage device, wherein a processor of the image reading device stores a storage range identifier that identifies the range of a storage location of image data in the data storage device that stores the image data and an identifier that is common to the identifier held by the data storage device, transmits the read image data and the identifier to the data storage device, generates a storage location identifier that identifies the storage location of the read image data using the storage range identifier and a character string generated by an algorithm common to the data storage device, and transmits the generated storage location identifier to a terminal that uses the image data stored in the storage location identified by the storage location identifier, and a processor of the data storage device transmits the storage range identifier that identifies the range of the storage location of the image data transmitted from the image reading device to the image reading device, acquires the image data and the identifier from the image reading device, generates the storage location identifier using the storage range identifier and a character string generated by an algorithm common to the image reading device, and stores the image data in the storage location identified by the generated storage location identifier. Effect of the Invention

[0014] Claim 1, 7 According to the present invention, when image data is stored in a communication line equivalent to an open network such as the Internet, the occurrence of a situation in which the image data is leaked to a third party without legitimate authority is prevented. Furthermore, the storage range identifier can be used when authentication using the identifier is completed. According to the inventions of claims 2 and 8, when image data is stored in a communication line equivalent to an open network such as the Internet, the occurrence of a situation in which the image data is leaked to a third party without proper authority can be suppressed. Furthermore, a storage range identifier including a device identifier for identifying an information processing device can be used. Claim 3 According to the present invention, it is possible to use a storage location identifier including a character string and a device identifier for identifying an information processing device. Claim 4 According to the present invention, data can be encrypted with a public key corresponding to the data storage device to make the data confidential. Claim 5 According to the present invention, it is possible to specify processing by utilizing a character string that specifies processing for image data stored in a data storage device. Claim 6 According to the present invention, when there are multiple terminals to which the storage location identifier is to be transmitted, each storage location identifier can include a different terminal identifier. According to the invention of claim 9, when image data is stored in a communication line equivalent to an open network such as the Internet, the occurrence of a situation in which the image data is leaked to a third party without legitimate authority is suppressed. [Brief description of the drawings]

[0015] [Figure 1] FIG. 1 is a diagram showing an example of the overall configuration of an information processing system 9. [Diagram 2] FIG. 2 is a diagram showing an example of a hardware configuration of the server device 1. [Diagram 3] FIG. 2 is a diagram showing an example of a hardware configuration of an image reading device 2. [Figure 4] FIG. 13 is a diagram showing an example of a management table 123. [Diagram 5] FIG. 2 is a diagram showing an example of a functional configuration of the server device 1. [Figure 6] FIG. 2 is a diagram showing an example of a functional configuration of the image reading device 2. [Figure 7] FIG. 4 is a sequence diagram showing an example of the operation of the information processing system 9. [Figure 8] FIG. 4 is a sequence diagram showing an example of the operation of the information processing system 9. [Figure 9] FIG. 4 is a sequence diagram showing an example of the operation of the information processing system 9. [Figure 10] 4 is a flowchart showing an example of the operation of the server device 1. [Figure 11] 4 is a flowchart showing an example of the operation of the image reading device 2. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0016] <Embodiment> <Configuration of information processing system> Fig. 1 is a diagram showing an example of the overall configuration of an information processing system 9. The information processing system 9 shown in Fig. 1 is a system for storing image data obtained by scanning an image of a document or the like in a data storage device via a communication line, and for using the image data via the communication line. As shown in Fig. 1, the information processing system 9 has a server device 1, an image reading device 2, a user terminal 3, and a communication line 4.

[0017] The server device 1 is an example of a data storage device of the present invention, and is a computer that stores image data.

[0018] The image reading device 2 is an example of the information processing device or image reading device of the present invention, and is a computer that optically reads a document written on a medium such as paper as an image and generates image data representing the image. The image reading device 2 may be a so-called multifunction device that combines an image forming device, an image reading device, a facsimile, a copier, etc.

[0019] The user terminal 3 is a device corresponding to an example of a terminal of the present invention, and is a computer operated by a user for the purpose of downloading, viewing, editing, saving, etc. The user terminal 3 is, for example, a personal computer, a smartphone, a tablet, or the like.

[0020] The communication line 4 is a line that communicatively connects the server device 1, the image reading device 2, and the user terminal 3. The communication line 4 may be, for example, a LAN (Local Area Network), a WAN (Wide Area Network), the Internet, or a combination of these. The communication line 4 may also include a Public Switched Telephone Network (PSTN), an Integrated Services Digital Network (ISDN), or the like.

[0021] The numbers of the server device 1, the image reading device 2, the user terminal 3, and the communication line 4 in the information processing system 9 are not limited to those shown in Fig. 1. For example, the server device 1 may be configured as a cluster system in which multiple devices share functions.

[0022] When image data read by the image reading device 2 is used on the user terminal 3, there is a method of attaching the read image data to an e-mail and sending it to the user terminal 3. However, since there is a limit to the data size that can be attached to an e-mail, this method is not suitable for sending image data with a large data size. For this reason, for example, in an intranet within an organization, a method has been considered in which the image reading device 2 holds the read image data for a certain period of time and sends a URL for downloading the image to the user terminal 3 by e-mail. The reason such a method is used is that it is possible to download even image data with a large data size by using an e-mail address that is easy to specify and accessing the URL with a web browser or the like, without entering authentication information such as a user ID or password.

[0023] Considering the recent spread of telecommuting and remote work, it would be convenient if such a mechanism could be used not only on a closed network such as an intranet, but also on an open network such as the Internet. However, if the URL is leaked to a third party without proper authorization, that third party could download the image data, which poses a security problem.

[0024] <Hardware configuration of server device 1> Fig. 2 is a diagram showing an example of the configuration of the server device 1. The server device 1 shown in Fig. 2 has a processor 11, a memory 12, and an interface 13. In other words, the server device 1 is an example of an information processing device having a memory and a processor. These components are connected to each other so that they can communicate with each other, for example, by a bus.

[0025] The processor 11 reads out and executes a program stored in the memory 12 to control each part of the server device 1. The processor 11 is, for example, a CPU (Central Processing Unit).

[0026] The interface 13 is a communication circuit that communicatively connects the server device 1 to the image reading device 2 via the communication line 4, either wired or wirelessly.

[0027] The memory 12 is a storage means for storing an operating system, various programs, data, etc., which are loaded into the processor 11. The memory 12 includes a RAM (Random Access Memory) and a ROM (Read Only Memory). The memory 12 may include a solid state drive, a hard disk drive, etc. The memory 12 also stores a private key 121, a public key 122, a management table 123, a key code 124, and a URL generation algorithm 125.

[0028] The server device 1 and the image reading device 2 are prepared for each organization, such as a company or a business. For this reason, the server device 1 and the image reading device 2 store a common key code as an identifier (one example of an identifier in the present invention) for identifying the organization. This key code is, for example, a character string of a predetermined number. In FIG. 1, only one server device 1 and one image reading device 2 belonging to a certain organization are illustrated, but if there are multiple server devices 1 and multiple image reading devices 2 belonging to this organization, all of these server devices 1 and image reading devices 2 store a common key code. In other words, the server devices 1 and image reading devices 2 belonging to a common organization are in a corresponding relationship, and image data read by the image reading device 2 is stored in the server device 1 corresponding to the image reading device 2.

[0029] A set of private keys and public keys is prepared for each organization and stored in the server device 1. The private keys and public keys comply with, for example, a PKI (Public Key Infrastructure).

[0030] The memory 12 stores the image data generated by the image reading device 2. The image data is stored in the memory 12 in a storage range of a certain size secured for each organization. In this embodiment, the storage range of a certain size secured for each organization is called the image data storage range, and the location where each image data is stored in each image data area is called the image data storage position. The image data storage range and the image data storage position are both expressed by a URL (Uniform Resource Locator). The URL meaning the image data storage range is a higher-level URL than the URL meaning the image data storage position. The URL generation algorithm stored in the memory 12 is a program for generating a URL that expresses such an image data storage range and image data storage position.

[0031] Here, Fig. 4 is a diagram showing an example of the management table 123. The management table 123 shown in Fig. 4 has a record in which the serial number of the image reading device 2 (an example of a device identifier in the present invention) is described, a record in which an image data storage range URL (an example of a storage range identifier in the present invention) meaning a range in which image data generated by the image reading device 2 is stored in the memory 12 is described, and a record in which an image data storage location URL (an example of a storage location identifier in the present invention) meaning a location in which image data generated by the image reading device 2 is stored in the memory 12 is described. As shown in the figure, when the serial number is "aaa", the image data storage range URL is "www.xxx.com / yyy / aaa" which includes a character string corresponding to the serial number at the end. Furthermore, the image data storage location URL is "www.xxx.com / yyy / aaa / jksaroie585" which includes, for example, a random character string (an example of a character string in the present invention) at the end of the image data storage range URL.

[0032] <Hardware configuration of image reading device 2> Fig. 3 is a diagram showing an example of the configuration of the image reading device 2. The image reading device 2 shown in Fig. 3 includes a processor 21, a memory 22, an interface 23, an operation unit 24, and a display unit 25. These components are connected to each other so as to be able to communicate with each other, for example, by a bus.

[0033] The processor 21 reads and executes a program stored in the memory 22 to control each part of the image reading device 2. The processor 21 is, for example, a CPU.

[0034] The interface 23 is a communication circuit that connects the image reading device 2 and the server device 1 so that they can communicate with each other via the communication line 4, either wired or wirelessly.

[0035] The operation unit 24 includes operation devices such as operation buttons, a keyboard, a touch panel, and a mouse for inputting various instructions, and upon receiving an operation, sends a signal to the processor 21 according to the content of the operation.

[0036] The display unit 25 has a display screen such as a liquid crystal display, and displays images under the control of the processor 21. A transparent touch panel of the operation unit 24 may be disposed on top of the display screen.

[0037] Memory 22 is a storage means for storing an operating system, various programs, data, etc., which are loaded into processor 21. Memory 22 includes RAM and ROM. Memory 22 may include a solid state drive, a hard disk drive, etc. Public key 221, key code 222, serial number 223, and URL generation algorithm 224 stored in memory 22 are the same as those described for server device 1.

[0038] <Functional configuration of server device 1> 5 is a diagram showing an example of a functional configuration of the server device 1. The processor 11 of the server device 1 executes a program stored in the memory 12, thereby functioning as a private key storage unit 110 for storing a private key, a public key storage unit 111 for storing a public key, a key code storage unit 112 for storing a key code, a decryption unit 113 for performing decryption using the private key, a determination unit 114 for performing various determinations as described below, an image data storage range URL generation unit 115 for generating the image data storage range URL described above, an image data storage location URL generation unit 116 for generating the image data storage location URL described above, an image data storage area 117 for storing image data, and a transmission / reception unit 118 for transmitting or receiving various data via the communication line 4.

[0039] <Functional configuration of image reading device 2> 6 is a diagram showing an example of the functional configuration of the image reading device 2. The processor 21 of the image reading device 2 executes a program stored in the memory 22 to function as a public key storage unit 210 for storing a public key, a key code storage unit 211 for storing a key code, a serial number storage unit 212 for storing a serial number assigned to the image reading device 2 for identifying each image reading device, an encryption unit 213 for performing encryption using the public key, an image data storage location URL generation unit 214 for generating the image data storage location URL described above, and a transmission / reception unit 215 for transmitting or receiving various data via the communication line 4. The image data storage location URL generation unit 116 of the server device 1 and the image data storage location URL generation unit 214 of the image reading device 2 generate image data storage location URLs according to the same algorithm.

[0040] <Operation> <Initial setting operation> The operation of the information processing system 9 will be described with reference to Figs. 7 to 11. For example, when a predetermined condition is satisfied, such as when an image reading device 2 is newly installed or when its settings are reset, the process illustrated in Fig. 7 is executed. At this time, the processor 11 of the server device 1 executes the process illustrated in Fig. 10. Note that, before the processes of Figs. 7 and 10 are started, the server device 1 and the image reading device 2, which are in a corresponding relationship with each other, store a common key code. Specifically, if the server device 1 and the image reading device 2, which are in a corresponding relationship with each other, are products of the same manufacturer, a common key code is stored in the process in which these devices are manufactured or shipped from a factory. Also, if the server device 1 and the image reading device 2, which are in a corresponding relationship with each other, are devices belonging to a common organization such as a business establishment or office, these devices store a common key code through input by an administrator of the organization, etc.

[0041] First, the processor 21 of the image reading device 2 requests a public key and an electronic signature from the server device 1 (step S11 in FIG. 7). When the processor 11 of the server device 1 receives the request from the image reading device 2 via the interface 13 (step S101 in FIG. 10), it transmits the public key and the electronic signature to the image reading device 2 (step S12 in FIG. 7 and step S102 in FIG. 10). The processor 21 of the image reading device 2 verifies the validity of the public key using the electronic signature and stores it in the memory 22.

[0042] Next, the processor 21 of the image reading device 2 requests the server device 1 to generate a storage range for the image data transmitted from the image reading device 2 (step S13 in FIG. 7). This request for generating the image data storage range is generated by encrypting the key code and serial number (e.g., aaa) stored in the memory 22 and a generation request form (including attribute information on the image data storage range, such as the size of the image data storage range and the validity period) with the public key.

[0043] When the processor 11 of the server device 1 receives a request for generating an image data storage range from the image reading device 2 via the interface 13 (step S103 in FIG. 10), it decrypts it with a private key (step S104 in FIG. 10). If the decryption is successful (step S105 in FIG. 10; YES), authentication is performed based on whether the decrypted key code matches the key code stored in the memory 22 (step S106 in FIG. 10; YES), and then an image data storage range URL is generated (step 14 in FIG. 7 and step S107 in FIG. 10). Then, the processor 11 of the server device 1 transmits the generated image data storage range URL to the image reading device 2 (step S15 in FIG. 7 and step S108 in FIG. 10). The processor 21 of the image reading device 2 stores the received image data storage range URL (e.g., www.xxx.com / yyy / aaa) in the memory 22 (step S16 in FIG. 7). If the determination results are negative in steps S105 and S106 in FIG. 10, a predetermined error process is performed (step S109 in FIG. 10).

[0044] <Image data storage operation> Next, when an instruction to read an image is given in the image reading device 2, the process shown in Fig. 8 is executed. At this time, the processor 21 of the image reading device 2 executes the process shown in Fig. 11.

[0045] First, when the user instructs the image reading device 2 to read an image, the processor 21 of the image reading device 2 transmits a service utilization request to the server device 1 (step S21 in FIG. 8). When the user instructs to read an image, an email address to which the image data storage location URL is to be sent is designated by the user or automatically after user authentication. This service utilization request is a key code and serial number (e.g., aaa) stored in the memory 22 and a usage availability determination request (image data storage range URL (e.g., www.xxx.com / yyy / aaa)) encrypted with the public key.

[0046] When the processor 11 of the server device 1 receives a service usage request from the image reading device 2 via the interface 13, the processor 11 decrypts the request with a private key and determines whether or not the service is available (step S22 in FIG. 8). This determination is made based on whether or not the decrypted key code matches the key code stored in the memory 22, and whether or not there is an image data storage range corresponding to the decrypted serial number and the usage availability determination request. The processor 11 of the server device 1 then transmits a usage availability notification including the result of the usage availability determination to the image reading device 2 (step S23 in FIG. 8). When the received usage availability notification indicates that the service is available, the processor 21 of the image reading device 2 performs a process of reading the document set by the user and generates image data (step S24 in FIG. 8 and step S201 in FIG. 11).

[0047] Next, the processor 21 of the image reading device 2 transmits an image data storage request to the server device 1 (step S25 in FIG. 8 and steps S202 and S203 in FIG. 11). This image data storage request is generated by encrypting, with the public key, the key code and serial number (e.g., aaa) stored in the memory 22, the generated image data, a random character string (e.g., jksaroie585) generated by the URL generation algorithm, and an image data storage request.

[0048] When the processor 11 of the server device 1 receives an image data storage request from the image reading device 2 via the interface 13, the processor 11 decrypts the request with a private key and determines whether the image data can be stored. This determination is made based on whether the decrypted key code matches the key code stored in the memory 12 and whether an image data storage range corresponding to the decrypted serial number exists. That is, the processor 11 of the server device 1 determines that the image data can be stored when the decrypted key code matches the key code stored in the memory 12 and an image data storage range corresponding to the decrypted serial number exists. If the image data can be stored, the processor 11 of the server device 1 stores the image data in a location in the memory 12 that can be accessed by an image data storage URL (e.g., www.xxx.com / yyy / aaa / jksaroie585) including the decrypted random character string (e.g., jksaroie585) at the end of the image data storage range (e.g., www.xxx.com / yyy / aaa) corresponding to the decrypted serial number (step S26 in FIG. 8). After storing the image data, the processor 11 of the server device 1 transmits the storage result to the image reading device 2 (Step S27 in FIG. 8).

[0049] Then, the processor 21 of the image reading device 2 receives the storage result (step S204 in FIG. 11), and if the storage of the image data is successful (step S205 in FIG. 11; YES), generates an e-mail in which the image data storage location URL (e.g., www.xxx.com / yyy / aaa / jksaroie585) including the random character string (e.g., jksaroie585) generated by the URL generation algorithm is described at the end of the image data storage range URL (e.g., www.xxx.com / yyy / aaa) stored in step S16 in FIG. 7 (step S28 in FIG. 8 and step S206 in FIG. 11). Then, the processor 21 of the image reading device 2 sends this e-mail to the user terminal 3 corresponding to the e-mail address specified when the image reading is instructed by the user (step S29 in FIG. 8 and step S207 in FIG. 11). Note that, if the determination result in step S205 in FIG. 11 is negative, a predetermined error process is performed (step S208 in FIG. 11).

[0050] Then, in FIG. 9, the processor of the user terminal 3 displays the received email (step S31 in FIG. 9), and when the user specifies the URL of the image data storage location, the processor accesses the URL (step S32) and obtains the image data from the server device 1 (step S33).

[0051] According to the above-mentioned configuration, the server device 1 and the image reading device 2 are authenticated by key codes, and then the image data is stored in the server device 1. Therefore, there is a low possibility that the image data transmitted from the image reading device 2 is stored in the server device 1 that stores a key code different from that of the image reading device 2. This prevents the image data from being leaked to a third party without proper authority. In addition, since the image data is not attached to an e-mail, there is no restriction on the data size of data that can be attached to an e-mail.

[0052] <Modification> The above is a description of the embodiment, but the contents of this embodiment may be modified as follows. In addition, the following modifications may be combined with each other.

[0053] <Variation 1> In the above-described embodiment, the server device 1 has the processor 11 configured as a CPU, but the control means for controlling the server device 1 may have other configurations. For example, the server device 1 may have various processors other than a CPU.

[0054] Here, the term "processor" refers to a processor in a broad sense, including general-purpose processors (such as the CPU mentioned above) and dedicated processors (such as GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

[0055] <Variation 2> The operations of the processor in the above-mentioned embodiment may be performed not only by one processor but also by multiple processors located at physically separate locations working together. The order of the operations of the processor is not limited to the order described in the above-mentioned embodiment, and may be changed as appropriate.

[0056] <Variation 3> In the above embodiment, the processor 21 of the image reading device 2 describes the image data storage location URL in an e-mail and transmits it to the user terminal 3, but in addition to the image data storage location URL, a URL that is a character string that specifies the processing for the image data (e.g., deleting the image data) may also be described in the e-mail and transmitted to the user terminal 3. For example, in a case where the image data is used by a single user terminal 3, if the user who used the image data accesses the above URL when deleting the image data, the processor 11 of the server device 1 deletes the stored image data. In this way, the processor 21 of the image reading device 2 may transmit to the user terminal 3 a storage location identifier that includes a character string that specifies the processing for the image data stored in the server device 1.

[0057] <Modification 4> The destination of the e-mail describing the image data storage location URL may be a plurality of user terminals 3 (i.e., a plurality of e-mail addresses). In this case, the image data storage location URL is changed for each destination, that is, a different image data storage location URL is described for each destination in each e-mail. The processor 11 of the server device 1 can identify which user has used the image data by monitoring the presence or absence of access for each of these image data storage location URLs. In other words, when there are a plurality of user terminals 3 to which the image data storage location URL is to be transmitted, the processor 21 of the image reading device 2 may transmit an e-mail describing an image data storage location identifier including a terminal identifier (e.g., an e-mail address) that identifies the destination user terminal 3.

[0058] <Variation 5> In the above embodiment, it is assumed that the server device 1 and the image reading device 2 in the corresponding relationship belong to a common organization, but for example, a business operator who provides an image data storage service may prepare a server device 1 or a data storage area of ​​the server device 1 for each organization. In other words, it is sufficient that the server device 1 and the image reading device 2 are in a corresponding relationship.

[0059] <Variation 6> A password may be set for each image data. For example, when reading an image, a user may input a password into the image reading device 2 and the image reading device 2 may notify the server device 1 of the password, and when using the image data, the user may input the password into the user terminal 3 and the user terminal 3 may notify the server device 1 of the password, and the processor 11 of the server device 1 may compare the two and, if they match, determine that the image data is usable.

[0060] <Variation 7> The image data stored in the server device 1 may be deleted by the processor 11 after a certain period of time has passed.

[0061] <Variation 8> In addition, when communicating via a communication line, measures to prevent data leakage may be taken, such as using S / MIME encryption or SSL communication.

[0062] <Variation 9> In the above-mentioned embodiment, the program executed by the processor 11 of the server device 1 is an example of a program that causes a computer having a processor to execute the steps of: storing a storage range identifier that identifies the range of the storage location of image data in a data storage device that stores image data transmitted from the processor, and an identifier that is common to the identifier held by the data storage device; transmitting the read image data and the identifier to the data storage device; generating a storage location identifier that identifies the storage location of the read image data using the storage range identifier and a character string generated by an algorithm common to the data storage device; and transmitting the generated storage location identifier to a terminal that uses the image data stored in the storage location identified by the storage location identifier. This program may be provided in a state where it is stored in a recording medium that can be read by a computer device, such as a magnetic recording medium such as a magnetic tape or a magnetic disk, an optical recording medium such as an optical disk, a magneto-optical recording medium, or a semiconductor memory. This program may also be downloaded via a communication line such as the Internet. [Explanation of symbols]

[0063] 1...server device, 11...processor, 110...private key storage unit, 111...public key storage unit, 112...key code storage unit, 113...decryption unit, 114...determination unit, 115...image data storage range URL generation unit, 116...image data storage location URL generation unit, 117...image data storage area, 118...transmission / reception unit, 12...memory, 121...private key, 122...public key, 123...management table, 124...key code, 125...URL generation algorithm, 13...interface 2...image reading device, 21...processor, 210...public key storage unit, 211...key code storage unit, 212...serial number storage unit, 213...encryption unit, 214...image data storage location URL generation unit, 215...transmission / reception unit, 22...memory, 221...public key, 222...key code, 223...serial number, 224...URL generation algorithm, 23...interface, 24...operation unit, 25...display unit, 3...user terminal, 4...communication line, 9...information processing system

Claims

1. A processor is included. The processor, Transmitting an identifier common to an identifier held by a data storage device that stores image data to the data storage device; storing, in the data storage device, a storage range identifier that identifies a range of a storage location of the image data, the storage range identifier being transmitted from the data storage device after authentication using the transmitted identifier; Transmitting the read image data and the identifier to the data storage device; generating a storage location identifier for identifying a storage location of the read image data by using the storage range identifier and a character string generated by an algorithm common to the data storage device; The generated storage location identifier is transmitted to a terminal that uses the image data stored in the storage location identified by the storage location identifier. Information processing device.

2. A processor, The processor, storing a storage range identifier for identifying a range of a storage location of the image data in a data storage device storing the image data, the storage range identifier including a device identifier for identifying the information processing device itself and an identifier common to an identifier held by the data storage device; Transmitting the read image data and the identifier to the data storage device; generating a storage location identifier for identifying a storage location of the read image data by using the storage range identifier and a character string generated by an algorithm common to the data storage device; The generated storage location identifier is transmitted to a terminal that uses the image data stored in the storage location identified by the storage location identifier. Information processing device.

3. The processor, Transmitting a device identifier for identifying the information processing device itself and the storage location identifier including the character string 3. The information processing device according to claim 1 or 2.

4. The processor, Data to be transmitted to the data storage device is encrypted with a public key corresponding to the data storage device and then transmitted.

4. The information processing device according to claim 1.

5. The processor, The storage location identifier including a character string specifying a process for the image data stored in the data storage device is transmitted to the terminal. The information processing device according to any one of claims 1 to 4.

6. In a case where the storage location identifier is to be transmitted to a plurality of terminals, The processor transmits the storage location identifier including a terminal identifier that identifies the terminal to which the storage location identifier is to be transmitted. The information processing device according to any one of claims 1 to 5.

7. On the computer, transmitting an identifier common to an identifier held by a data storage device that stores image data to the data storage device; storing, in the data storage device, a storage range identifier that identifies a range of a storage location of the image data, the storage range identifier being transmitted from the data storage device after authentication using the transmitted identifier; transmitting the scanned image data and the identifier to the data storage device; generating a storage location identifier for identifying a storage location of the read image data by using the storage range identifier and a character string generated by an algorithm common to the data storage device; transmitting the generated storage location identifier to a terminal that uses the image data stored in the storage location identified by the storage location identifier; A program for executing the above.

8. A computer comprising: storing a storage range identifier for identifying a range of a storage location of the image data in a data storage device storing the image data, the storage range identifier including a device identifier for identifying the information processing device itself and an identifier common to an identifier held by the data storage device; transmitting the scanned image data and the identifier to the data storage device; generating a storage location identifier for identifying a storage location of the read image data by using the storage range identifier and a character string generated by an algorithm common to the data storage device; transmitting the generated storage location identifier to a terminal that uses the image data stored in the storage location identified by the storage location identifier; A program for executing the above.

9. An image reading device; A data storage device, The processor of the image reading device storing a storage range identifier for identifying a range of a storage location of the image data in a data storage device storing the image data, and an identifier common to an identifier held by the data storage device; Transmitting the read image data and the identifier to the data storage device; generating a storage location identifier for identifying a storage location of the read image data by using the storage range identifier and a character string generated by an algorithm common to the data storage device; Transmitting the generated storage location identifier to a terminal that uses the image data stored in the storage location identified by the storage location identifier; The processor of the data storage device transmitting the storage range identifier to the image reading device, the storage range identifier identifying the range of the storage location of the image data transmitted from the image reading device; acquiring the image data and the identifier from the image reading device; generating the storage location identifier using the storage range identifier and a character string generated using an algorithm common to the image reading device; The image data is stored in a storage location identified by the generated storage location identifier. Information processing system.

Images