KR100352905B1 - System, method and program recording media for security of printed paper - Google Patents

Abstract

The present invention relates to a recording medium for recording an output document security system, a method and a program for forcibly printing security information on a document output from a printer. As an output document security system, a server provided with a server module for security print control 12 is installed. A client computer 20 and a printer 50 installed with a computer 10 and a client module 22 for secure print control, the client module 22 having a document in the application 24 of the client computer 20; Forcibly connects a print job to a print command as a secure print job, creates secured print data, displays it on the screen, and requests the user module to the server module 12 of the server computer 10 when the user selects the print command again. The server module 12 checks the user information in the database 16 of the server computer 10 and clicks the result. Notifies the client module 22, and the client module 22 transmits the secured print data to the printer 50 through the predetermined print manager 30 according to the user confirmation result of the server module 12. An output document security system, an output document security method, and a recording medium on which an output document security program is recorded are provided.

Description

Recording medium recording system, method and program for output document security {SYSTEM, METHOD AND PROGRAM RECORDING MEDIA FOR SECURITY OF PRINTED PAPER}

The present invention relates to a recording medium for recording an output document security system, a method and a program, and more particularly, a record recording an output document security system, a method and a program for forcibly displaying information of a user who uses a printer in an output document. It is about the medium.

Recently, as the work environment of the company is changed to an environment using a computer, a communication network, and the Internet, efforts to protect confidential data such as important documents or drawings of the company which have been created from theft, leakage, and loss are greatly increased.

Among these efforts, PC data security, database security, network security, output document security, etc. are needed to establish the optimal data security system in the work environment where various tasks are performed through the communication network and printed documents are printed on the printer connected to the network. Should be taken into account.

In order to establish such a top-level data security system, it is necessary to check the ID used to prevent the leakage of data stored inside the PC, copy authority control on FDD or CD writer, and limit data sharing with other computers via FX cable. It secures data security, database security such as KMS and EDMS that prevents unauthorized people from accessing documents by assigning permissions such as writing and reading according to documents stored in the database, and access of hackers and crackers accessing the network. Network security, such as firewalls to control and protect the data, and the output document security to protect and prevent loss of internal data should be considered by specifying in the printed document the responsibility for the printed data.

On the other hand, as a conventional output document security solution, for example, by using DRM (Digital Right Management) technology, various documents are distributed to an encrypted file by specifying a specific user or an expiration date, and a method of preventing tampering or illegal access of information; How to automatically convert various documents such as Word, PowerPoint, PowerPoint, etc. into PDF files and prevent tampering or illegal viewing of changed documents, or encrypt the documents so that only those who have permission to use them can view the contents of the documents. The solutions used have been proposed.

However, these conventional output document security solutions mainly focus on placing restrictions on the handling of encrypted documents according to the encryption of documents or user rights. Therefore, in the case of using the conventional output document security solution to secure the output document, the cost of the encryption of the document or the purchase of an encryption solution is required a lot of costs, and moreover, such an output document security solution is relatively difficult to maintain There is this.

In addition, the data security solution for such a conventional output document also has a problem that substantially no security against copying or leakage of the output document.

The present invention is to solve the above problems and to provide a more efficient output document security solution, an object of the present invention by forcibly printing security information on the output document to maintain the security of the output document completely, construction and maintenance It is to provide an output document security system and method which is very low in cost and very easy to manage.

In addition, another object of the present invention is to provide a computer-readable recording medium having a program recorded therein for forcibly printing security information on an output document to maintain security of the output document.

1 is a schematic diagram showing an output document security system according to the present invention;

2 is a block diagram showing an output document security system according to the present invention;

3A is a block diagram for explaining a printing sequence of a general Windows printing architecture.

FIG. 3B is a block diagram illustrating a printing sequence of the present invention applied to the window printing architecture of FIG. 3A.

3c is a block diagram specifically illustrating a printing architecture of the present invention applied to a Windows NT / 2000 printing architecture;

4 is an exemplary view illustrating an example of a user interface unit of a security print task unit of the client module of FIG. 3C;

5 is an exemplary diagram illustrating an example of the server module of FIG. 3C;

6 is a flowchart illustrating a step of forcibly displaying security information on an output document in the output document security method according to the present invention.

Explanation of symbols on the main parts of the drawings

10: server computer 12: server module

16: database 18: administrator

20: client computer 22: client module

24: Application 30: Print Manager

35: Graphics Engine 37: I / O Manager

50: printer 52: printer server

In order to achieve the above object, according to an aspect of the present invention, a server computer with a secure print control server module is installed, a client computer with a secure print control client module is installed, and a printer connected to the server computer and the client computer; The client module forcibly connects a print job for a document print command in an application program of the client computer to a secure print job, creates secured print data, and displays it on the screen. Requesting user authentication, the server module checks the user information in the database of the server computer and informs the client module of the result, and the client module according to the user authentication result. The output document security system, characterized in that sending to the printer is provided with a predetermined print manager.

Further, according to another aspect of the invention, in the output document security method of a system including a server computer and a plurality of client computers and printers connected to the server computer, (a) installing a server module for secure print control on the server computer Installing a client module for secure print control on the client computer; and (b) forcing a print job for a document print command in an application program of the client computer through a hook process of the client module. Connecting to a secure print job unit of the client module; (c) creating and displaying secured print data on the screen through the secure print job unit; and (d) according to a user's printing command. User to the server module via network communicator Requesting authentication, and (e) outputting the secured print data to the printer through a print manager after receiving the user authentication through the server module is provided.

According to another aspect of the present invention, there is provided a recording medium on which a program for securing an output document of a system including a server computer and a plurality of client computers and printers connected to the server computer is provided. Install a server module for print control and a client module for secure print control on the client computer, and (b) execute a hook process of the client module to print a document print command from an application program of the client computer. Forcibly connecting to the secure print job unit of the client module, and (c) creating and displaying secured print data on the screen through the secure print job unit, and (d) the security print job unit according to a user's printing command. The server via a network communicator A computer-readable record that requires a user authentication to the module and (e) executes a series of procedures for transmitting the secured print data to a printer through a print manager after receiving the user authentication of the server module. A medium is provided.

In the present invention described above, the secured print data includes user PC information, user information, print date and time, and watermark in addition to print data for the document. Here, the watermark is preferably a translucent optical watermark represented by an image or text.

In addition, in the above-described present invention, the client module includes a hook processing unit and a security print job unit, and the hook processing unit forcibly connects a print job of the application program to the security print job unit.

In addition, in the above-described present invention, the security print operation unit includes a user interface unit and a network communicator, wherein the user interface unit includes a watermark insertion removal selection unit, a watermark display content adjusting unit, a watermark display adjusting unit, and a user And an information display unit, a print option display unit, a preview unit, and a command button unit, wherein the network communicator requests the server module for user authentication, receives a confirmation result, and prints secured print data according to the authentication result of the user. Transfer from the user interface of the security print job unit to the printer through the print manager.

In the present invention, the watermark insertion removal selection unit, the watermark display content adjustment unit, and the user information display unit are activated to enable insertion, removal, or content adjustment according to the user's printing authority level.

In addition, in the present invention, the server module includes a user register for user registration and print authority setting, and a log database unit for storing and managing log data.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a schematic diagram showing an output document security system according to the present invention, Figure 2 is a block diagram showing an output document security system according to the present invention.

Basically, when the output document security system of the present invention outputs a document from the client computer or the application 24 of the user computer 20, the user document must be authenticated through the server module 12 installed in the server computer 10. Characterized in that the print data containing the security information is transmitted to the printer 50 and output.

In addition, the server module and the client module of the present invention are functionally named, and the present invention can be applied to a system in which at least one computer and at least one printer are connected. In other words, in the output document security system of the present invention, the printer 50 connected to at least one computer may select and use at least one of a network print, a public printer, and a local printer. Therefore, the following detailed description focuses on network printers for convenience of explanation, but it is obvious that the present invention is not limited to the network printers.

1 and 2, an output document security system according to the present invention is a server computer 10 having a server module 12 for secure print control installed therein, and a client module 22 for secure print control connected to the server computer 10. ) Is installed, and a network printer 50 connected to the server computer 10 and the user computer 20, respectively.

Specifically, in the output document security system, the client module 22 forcibly converts a print job into a secure print job for a document print command issued by an application program.

In addition, the client module 22 creates the print data containing the security information and displays it on the screen (see Fig. 4). When the user finishes the secure print setting and presses the print confirmation button, the server module 12 installed in the server computer 10 requests the user's authentication.

The server module 12 checks the user information in the database 16 of the server computer 10 and informs the client module 22 of the result again.

The client module 22, which has been notified of the above-described user authentication result, transmits the print data including security information through the print manager 30 such as a predetermined spooler or spooler service processor according to the user authentication result. To print the secured print data.

In FIG. 1, the printer server 52 indicates that the printer 50 can be connected to a network to provide a print job service directly to the user computer 20. As shown in FIG. However, in the output document security system of the present invention, all print jobs are configured to pass through the server computer 20 regardless of the presence or absence of the print server 52.

On the other hand, as shown in FIG. 2, the manager 18 sets user information and authority through user registration and manages all print jobs to be recorded and stored in the log database as log data.

As described above, in the output document security system of the present invention, security information including user information, user PC information, print date and time, and watermark is forcibly printed on all output documents of the user who uses the network printer 50. In addition, according to the user authority level set in the server PC is configured to delete or change the content of the security information printed on the output document. This setting will be mentioned in more detail in the following description.

In order to describe the above-described output document security system of the present invention in more detail, the printing order and architecture of the present invention applied to the printing architecture of Windows NT / 2000 will be described with reference to FIGS. 3A to 3C and FIGS. 4 and 5. .

FIG. 3A is a block diagram illustrating a printing order of a general Windows printing architecture. FIG. 3B is a block diagram illustrating a printing order of the present invention applied to the Windows printing architecture of FIG. 3A. FIG. 3C is a Windows NT / 2000 printing. A block diagram specifically showing the printing architecture of the present invention applied to the architecture. In addition, Figure 4 is an exemplary view showing an example of the user interface included in the security print job of Figure 3c, Figure 5 is an exemplary view showing an example of the server module of Figure 3c.

First, a printing procedure in a general Windows system will be described with reference to FIG. 3A.

As shown in Fig. 3A, when a document print command is issued from an application 24, a print job prints print data for a document printed to a printer through Win32 GDI, which is a device driver used when displaying a screen in Windows. Write. At this time, the print spooler user interface and the print job are managed by the spooler or the spooler driver (20a).

When the print data is all created and the user issues a final print confirmation command, the spooler first determines the place or device to transmit the print data through the spooler router 20b.

Then, between the user PC 20 and the printer 50, the print data is divided into packets and transmitted to the language monitor 20d, and the local printer provider 20c transmits and receives in a bidirectional communication port environment. The print data is sent to the printer 50 through a language monitor 20d that manages and a port monitor 20e that manages ports for sending and receiving print data between the spooler and the printer. do.

Next, the printing procedure of the present invention applied to the Windows system will be described with reference to FIG. 3B. However, descriptions that overlap with the above description will be omitted.

As shown in FIG. 3B, when a document printing command is issued from the application program 24, the hook processing unit 23 of the client module 22 installed in the client computer or the user computer 20 makes the print job a secure print job. Switch. That is, the Win32 GDI used for print jobs and the drivers for the print driver user interface (gdi32.dll, Printer Driver UI DLL) are used for secure print jobs (for example, Security Print Viewer.exe, Security Print Driver UI DLL). ) Is forcibly connected (see FIG. 3C).

Next, the client module 22 creates the print data including the security information through the security print work unit 25 and displays it on the screen through the user interface unit 26. The user modifies the final print data on the screen of the print data including the security information (see Fig. 4). Here, some security information of the print data is set to be impossible to delete or modify according to the user's authority.

Then, when the user clicks the print confirmation button of the final print data, the secure print network communicator 27 requests user authentication to the server module 12 of the server computer 10. The server module 12 checks the user database 16 and informs the network communicator 27 of the result again.

The network communicator 27 certified by the user transmits the print data to the printer 50 through print jobs of the drivers 20a 'to 20e of FIG. 3b. In addition, when the user is not authenticated, the print job is canceled or a predetermined error message is displayed to the user.

Next, the printing architecture of the present invention applied to the Windows system will be described with reference to FIG. 3C. However, descriptions that overlap with the above description will be omitted.

As shown in FIG. 3C, the output document security system of the present invention applied to Windows NT / 2000 can be roughly divided into a user mode, a server mode, and a kernel mode. In the user mode, the document print command of the application 24 of the user computer 20 is first passed to the spooler client drive and the GDI drive by the application processor 24 '. At this time, the hook processing unit 23 of the secure print control client module 22 installed in the user computer 20 forcibly connects the above-described document print job to the secure print working unit 25 of the client module 22.

At this time, the graphic information about the output document is passed to the client module 22 in the form of an enhanced meta file (EMF).

The secure print operation unit 25 of the client module 22 creates secured print data by including security information in the print data, displays it on the screen, and then, if the user is authenticated, the secured print data is processed by the spooler service processor. Hand over to 30 to continue the print job.

The spooler service processor 30 is a print manager of a typical Windows system. After the print data is secured through the print jobs of the drivers 30, 33, 35, and 37, the spooler service processor 30 is processed according to the normal printing step to print the To print at 50. At this time, the print data transmitted to the spooler service processor 30 becomes secure print data including security information. The security information contained in the secure print data includes a visible watermark or a semi-transparent optical watermark synthesized in the information about the document of the application program, the user PC information, the user information, and the printing date and time.

On the other hand, a record of all the print jobs of the user is recorded and stored as log data in the log database unit 12b of the server module 12.

Referring to FIG. 4, the security print operation unit 25 described above includes a user interface unit 26 as illustrated in FIG. 4. The user interface section 26 includes a watermark insertion removal selection section 26a, a watermark display content adjusting section 26b, a watermark display adjusting section 26c, a user information display section 26d, and a print option display section 26e. ), A preview section 26f, and a command button section 26g.

The watermark insertion removal selection section 26a is activated to select the insertion or removal of the watermark according to the user's authority. For example, if the user's authority level is high, the user can select insertion and removal, but if the user's authority level is low, the watermark is fixedly displayed to be inserted unconditionally.

The watermark display content adjusting unit 26b is composed of an input window and a selection window for inputting and adjusting the content of the watermark inserted in the output document. In addition, as shown in FIG. 4, when the watermark is text, the contents written in the mark and the login window are displayed as two watermarks 26b '. In addition, when the watermark is an image, although not shown in the drawing, an image on a computer may be "loaded" and inserted as an image watermark.

The watermark display adjustment unit 26c is configured with selection windows that determine the font, text format, transparency, and tilt of the watermark to be inserted. The watermark display adjustment unit 26c can be appropriately selected and adjusted to match the contents of the output document.

The user information display section 26d is information about a user computer currently using a printer and includes a user's name or ID, a company name or a department name, and a printing date and time. Also, the user information display section 26d can be adjusted to the upper and lower middle or the like so as to be placed at an appropriate position of the printed document.

The print option display section 26e is configured to select a printer and determine the number of pages printed on one sheet. The preview unit 26f is configured to display on the screen a document to be output in accordance with the selected print option. The command button section 26g includes preview, print, and cancel buttons.

On the other hand, as mentioned above, in the output document security system of the present invention, when the user's grade is high, the watermark insertion removal selection unit 26a, the watermark display content adjusting unit 26b, and the user information display unit 26d are inserted. It can be activated, not inserted, or its contents can be adjusted. Therefore, according to the configuration of the present invention, the security of the output document can be appropriately adjusted according to the user's authority level. This has the advantage that the output document can be secured as a whole while giving flexibility of security according to the user in the output document security.

Referring to FIG. 5, the server module 12 provides an administrator environment as shown in FIG. 5 under a Windows NT / 2000 environment. As shown in Fig. 5, the server module 12 includes a user register 12a and a log database 12b for setting user registration and authority. The user registration unit 12a inputs and stores information about a user's registration and printing authority. Therefore, each user is forcibly printed security information specified in the output document according to the authority. The log database unit 12b records and stores print usage information of each user. In addition, the log database unit 12b can simply search the user's print records through a separate search box.

As described above, the present invention provides a print document security system and an output document by installing the secure print control server module 12 and the client module 22 in the server computer 10 and the user computer 20, respectively. It has the function of management at the same time. In other words, the client module 22 of the present invention serves as a virtual printer driver that must be forcibly passed by the user when performing a printing operation, thereby outputting user information, user PC information, printing date and time, watermark, and the like during printing. Forcibly print on documents to increase security.

And by checking the user authentication from the client module through the server module 12, it is possible to grade management and user rating processing of all documents output to the printer 50. In addition, if the user's authority is high, the user can arbitrarily decide whether to insert the user information and watermark, but if the user's grade is low, the user's information and watermark are forcibly inserted regardless of the user's intention. This security management is done through the user DB stored in the server and can be done very effectively because it grants the right according to the user's level.

Next, the output document security method according to the present invention will be described in detail with reference to FIG.

Referring to Figure 6, the output document security method of the present invention first installs the server module 12 for controlling the secure printer on the server computer 10, and installing the client module 22 for controlling the secure printer on the client computer 20 It is prepared (S10).

Then, when the user issues a print command for the document created by the application 24 of the user computer 20 (S11), the secure print control client module 22 installed in the user computer 20 is secure print hook processing unit ( Through 23), the print job is forcibly switched to the secure print job state (S12). Then, the security print job unit 25 in charge of the security print job creates security print data by including the security information in the print data and displays it on the screen (see Fig. 4) (S13). If the user checks or corrects the settable portion of the secure print data displayed on the screen and previews it, and then clicks the print button (S14), the secure print network communicator 27 of the client module 22 is connected to the server module 12. User authentication is required at step S15).

In response to the user authentication request, the server module 12 for secure print control installed in the server computer 10 checks the user information in the database 16 of the server computer 10 and returns the result to the network communicator of the client module 22. 27).

The network communicator 27 transmits the print data including the security information to the printer 50 through the spooler, the spooler service processor or the print manager 30 according to the verification result of the user information (S16). In the printer 50, security information is forcibly printed on the output document (S17).

On the other hand, when the user is not authenticated from the server module 12, the print data is ignored (S18) and the print job is terminated.

The embodiments disclosed in the specification and the drawings present specific examples and are not intended to limit the scope of the present invention. Therefore, it will be apparent to those skilled in the art that other modifications based on the technical spirit of the present invention can be carried out in addition to the embodiments disclosed herein.

As described above, according to the present invention, by using the server module and the client module for secure print control, there is an advantage that the construction and maintenance of the output document security system is easy and the output security and the print job management can be simultaneously performed.

In addition, according to the present invention, by using the server module and the client module for the virtual printer driver to force the user to go through the printing business to secure the output document, the user name, user PC name, IP address, Security information such as output date and time, watermarks and the like is forcibly printed on the output document has the advantage that can greatly increase the security of the output document.

In addition, according to the present invention, by the user management and authentication through the server module, there is an advantage that the rating management of the document output to the printer and the rating management of the print user is very easy.

According to the present invention, if the user's authority is high, the user can arbitrarily decide whether to insert the user information and watermark, but if the user's grade is low, the user's information and watermark are forcibly inserted regardless of the user's will, The advantage is that you can grant printing rights that match your privilege level.

Claims (19)

A server computer 10 provided with a server module 12 for secure print control, a client computer 20 with a client module 22 for secure print control, and a printer connected to the server computer 10 and the client computer 20. An output document security system comprising: The client module 22 is a hook process 23 for forcibly connecting a print job for a document print command in the application 24 of the client computer 20 to the secure print job 25. ; And a user interface unit 26 for creating and displaying the secured print data on the screen, and requesting the user module to the server module 12 according to a print confirmation command of the user, and predetermined secured print data according to the result. It includes a secure print work unit 25 having a network communicator 27 for transmitting to the printer 50 through the print manager 30 of the, The server module 12 checks the user information in the database 16 of the server computer 10 in response to a user authentication request received through the network communicator 27 and notifies the network communicator 27 of the result. Output document security system, characterized in that. The method of claim 1, And the secured print data includes user PC information, user information, a print date and time, and a watermark in addition to print data for the document. The method of claim 2, And the watermark is a translucent optical watermark. delete The method of claim 1, The user interface section 26 includes a watermark embedding removal selecting section 26a, a watermark display content adjusting section 26b, a watermark display adjusting section 26c, a user information display section 26d, and a print option display section ( 26e), a preview section (26f), and a command button section (26g). The method of claim 5, The watermark insertion removal selection unit 26a, the watermart display content adjustment unit 26b, and the user information display unit 26d are activated to enable insertion, removal, or content adjustment according to the user's printing authority level. Output document security system. The method of claim 1, The server module (12) is an output document security system, characterized in that it comprises a user registration unit (12a) for user registration and print authority setting and a log database unit (12b) for storing and managing log data. In the output document security method of a system including a server computer and a plurality of client computers and printers connected to the server computer, (a) installing a secure print control server module (12) on the server computer (10) and installing a secure print control client module (22) on the client computer (20); (b) forcibly printing the print job to the document printing command in the application program 24 of the client computer 20 through the hook process 23 of the client module 22; Connecting to the secure print working section 25 in steps S11 and S12; (c) creating and displaying secured print data on the screen through the user interface unit 26 of the secure print work unit 25 (S13); (d) requesting user authentication to the server module 12 through a network communicator 27 of the security print work unit 25 according to a user's printing command (S14, S15); (e) outputting the secured print data to the printer 50 through the print manager 30 according to the user authentication result received from the server module 12 (S16 and S17). Output document security method. The method of claim 8, And the secured print data includes user PC information, user information, a print date and time, and a watermark in addition to print data for the document. The method of claim 9, And the watermark is a translucent optical watermark. The method of claim 8, The user interface section 26 includes a watermark embedding removal selecting section 26a, a watermark display content adjusting section 26b, a watermark display adjusting section 26c, a user information display section 26d, and a print option display section ( 26e), a preview section (26f), and a command button section (26g). The method of claim 11, The watermark insertion removal selection unit 26a, the watermark display content adjustment unit 26b, and the user information display unit 26d are activated to enable insertion, removal, or content adjustment according to the user's printing authority level. Output document security method. The method of claim 8, And the server module (12) comprises a user register (12a) for user registration and print authority setting and a log database (12b) for storing and managing log data. A recording medium having recorded thereon a program for securing an output document of a system including a server computer and a plurality of client computers and printers connected to the server computer, Install a secure print control server module 12 on the server computer 10 and install a secure print control client module 22 on the client computer 20: The print job is forcibly sent to the client module 22 through a hook process 23 of the client module 22 with respect to a document print command from the application program 24 of the client computer 20. To a secure print job 25; Create secured print data and display on the screen through the user interface unit 26 of the secure print job unit 25; Requesting user authentication to the server module 12 via the network communicator 26 of the secure print working section 25 according to a user's printing command; A computer program that records a program for executing a series of procedures for transmitting the secured print data to the printer 50 through the print manager 30 according to a user authentication result received from the server module 12. Record carrier. The method of claim 14, And the secured print data includes user PC information, user information, a printing date and time, and a watermark in addition to the print data for the document. The method of claim 15, And the watermark is a translucent optical watermark. A computer readable recording medium having recorded thereon an output document security program. The method of claim 14, The user interface section 26 includes a watermark embedding removal selecting section 26a, a watermark display content adjusting section 26b, a watermark display adjusting section 26c, a user information display section 26d, and a print option display section ( 26e), a preview section (26f), and a command button section (26g). A computer-readable recording medium having recorded thereon an output document security program. The method of claim 17, The watermark insertion removal selection unit 26a, the watermark display content adjustment unit 26b, and the user information display unit 26d are activated to enable insertion, removal, or content adjustment according to the print permission level of the user. A computer-readable recording medium that records an output document security program. The method of claim 14, The server module 12 includes a user registration unit 12a for user registration and print authority setting, and a log database unit 12b for storing and managing log data. Readable record carrier.