Back to results
US 8,302,181 B2Granted
Image reading apparatus, authentication method, evaluation system, method, and computer program product
AssigneesPfu Limited, Fujitsu Limited
InventorsHiroshi Kakutani, Seigo Kotani
Life of this patent
Estimating the term…
Abstract
A TPM chip installed in an image reading apparatus records an operation log, and encrypts recorded operation log with a secret key. The image reading apparatus transmits encrypted operation log to an evaluation apparatus. The evaluation apparatus receives the encrypted operation log, decrypted received operation log, and evaluates an operation performed on the image reading apparatus based on decrypted operation log.
Claims9
An image reading apparatus, comprising:
- an acquiring unit for acquiring user-identification information for identifying a user;
- and
- a tamper-resistant chip including
- a storing unit that stores therein
- a secret key that is unique to the image reading apparatus;
- valid-user identification information for identifying a valid user who is permitted to operate the image reading apparatus;
- apparatus-specific information that is unique to the image reading apparatus;
- and
- apparatus environment information including (i) an operating parameter, including at least one of resolution, color/monochrome, document size, or contrast, for an operation of the image reading apparatus and (ii) operating-log information including contents of the operation, wherein the operation described by the operating parameter is not a user-authentication operation;
- a collecting unit for collecting apparatus-specific information and apparatus environment information;
- a user-authentication unit for performing authentication of the user by determining whether the acquired user-identification information is correct based on the stored valid-user identification information;
- an apparatus-authentication unit for performing authentication of the image reading apparatus by determining whether the collected apparatus-specific information is correct based on the stored apparatus-specific information;
- an environment-authentication unit for performing authentication of an apparatus environment of the image reading apparatus by determining whether any one or both of the collected operating parameter and the collected operating-log information are correct based on the stored operating parameter and the stored operating-log information;
- and
- an encrypting unit for encrypting information with the stored secret key.
12 more elements
An evaluation system, comprising:
- an image reading apparatus;
- and
- an evaluation apparatus connected to the image reading apparatus via a network for evaluating an operation performed on the image reading apparatus, wherein
- the image reading apparatus includes
- an acquiring unit for acquiring user-identification information for identifying a user;
- and
- a tamper-resistant chip including
- a storing unit that stores therein 1) a secret key that is unique to the image reading apparatus, 2) valid-user identification information for identifying a valid user who is permitted to operate the image reading apparatus, 3) apparatus-specific information that is unique to the image reading apparatus, and 4) apparatus environment information including (i) an operating parameter, including at least one of resolution, color/monochrome, document size, or contrast, for an operation of the image reading apparatus and (ii) operating-log information including contents of the operation, wherein the operation described by the operating parameter is not a user-authentication operation;
- a collecting unit for collecting apparatus-specific information and apparatus environment information;
- a user-authentication unit for performing authentication of the user by determining whether the acquired user-identification information is correct based on the stored valid-user identification information;
- an apparatus-authentication unit for performing authentication of the image reading apparatus by determining whether the collected apparatus-specific information is correct based on the stored apparatus-specific information;
- an environment-authentication unit for performing authentication of an apparatus environment of the image reading apparatus by determining whether any one or both of the collected operating parameter and the collected operating-log information are correct based on the stored operating parameter and the stored operating-log information;
- and
- an encrypting unit for encrypting apparatus environment information with the stored secret key;
- and
- a transmitting unit for transmitting the encrypted apparatus environment information to the evaluation apparatus, and
- the evaluation apparatus includes
- a receiving unit for receiving the encrypted apparatus environment information from the image reading apparatus;
- a decrypting unit for decrypting the received apparatus environment information;
- and
- an evaluation unit for evaluating the operation performed on the image reading apparatus based on the decrypted apparatus environment information.
18 more elements
An evaluation method for an evaluation system that comprises an image reading apparatus and an evaluation apparatus connected to the image reading apparatus via a network for evaluating an operation performed on the image reading apparatus, the evaluation method comprising:
- the image reading apparatus acquiring user-identification information for identifying a user;
- the image reading apparatus performing authentication of the user by determining whether the acquired user-identification information is correct based on valid-user identification information for identifying a valid user who is permitted to operate the image reading apparatus, the valid-user identification information being stored in a tamper-resistant chip installed in the image reading apparatus;
- the image reading apparatus collecting, when it is determined that the acquired user-identification information is valid, (i) apparatus-specific information that is unique to the image reading apparatus and (ii) apparatus environment information including (ii1) an operating parameter, including at least one of resolution, color/monochrome, document size, or contrast, for an operation of the image reading apparatus and (ii2) operating-log information including contents of the operation, wherein the operation described by the operating parameter is not a user-authentication operation;
- the image reading apparatus performing authentication of the image reading apparatus by determining whether the collected apparatus-specific information is correct based on apparatus-specific information stored in the tamper-resistant chip;
- the image reading apparatus performing authentication of an apparatus environment by determining whether any one or both of the collected operating parameter and the collected operating-log information are correct based on apparatus environment information stored in the tamper-resistant chip;
- the image reading apparatus encrypting, when it is determined that the collected apparatus-specific information and the collected apparatus environment information are valid, the apparatus environment information with a secret key stored in the tamper-resistant chip;
- the image reading apparatus transmitting the encrypted apparatus environment information to the evaluation apparatus;
- the evaluation apparatus receiving the encrypted apparatus environment information from the image reading apparatus;
- the evaluation apparatus decrypting the received apparatus environment information;
- and
- the evaluation apparatus evaluating the operation performed on the image reading apparatus based on the decrypted apparatus environment information.
8 more elements
An authentication method, comprising:
- acquiring user-identification information for identifying a user of an image reading apparatus;
- performing authentication of the user by determining whether the acquired user-identification information is correct based on valid-user identification information for identifying a valid user who is permitted to operate the image reading apparatus, the valid-user identification information being stored in a tamper-resistant chip installed in the image reading apparatus;
- collecting, when it is determined that the acquired user-identification information is valid, (i) apparatus-specific information that is unique to the image reading apparatus and (ii) apparatus environment information including (ii1) an operating parameter, including at least one of resolution, color/monochrome, document size, or contrast, for an operation of the image reading apparatus and (ii2) operating-log information including contents of the operation, wherein the operation described by the operating parameter is not a user-authentication operation;
- performing authentication of the image reading apparatus by determining whether the collected apparatus-specific information is correct based on apparatus-specific information stored in the tamper-resistant chip;
- performing authentication of an apparatus environment by determining whether the collected apparatus-specific information is correct based on apparatus environment information stored in the tamper-resistant chip;
- encrypting, when it is determined that the collected apparatus-specific information and the collected apparatus environment information are valid, the apparatus environment information with a secret key stored in the tamper-resistant chip;
- and
- transmitting the encrypted apparatus environment information to an evaluation apparatus.
5 more elements
A non-transitory computer-readable recording medium having a program for causing a computer to execute an authentication method, comprising:
- acquiring user-identification information for identifying a user of an image reading apparatus;
- performing authentication of the user by determining whether the acquired user-identification information is correct based on valid-user identification information for identifying a valid user who is permitted to operate the image reading apparatus, the valid-user identification information being stored in a tamper-resistant chip installed in the image reading apparatus;
- collecting, when it is determined that the acquired user-identification information is valid, (i) apparatus-specific information that is unique to the image reading apparatus and (ii) apparatus environment information including (ii1) an operating parameter, including at least one of resolution, color/monochrome, document size, or contrast, for an operation of the image reading apparatus and (ii2) operating-log information including contents of the operation, wherein the operation described by the operating parameter is not a user-authentication operation;
- performing authentication of the image reading apparatus by determining whether the collected apparatus-specific information is correct based on apparatus-specific information stored in the tamper-resistant chip;
- performing authentication of an apparatus environment by determining whether the collected apparatus-specific information is correct based on apparatus environment information stored in the tamper-resistant chip;
- encrypting, when it is determined that the collected apparatus-specific information and the collected apparatus environment information are valid, the apparatus environment information with a secret key stored in the tamper-resistant chip;
- and
- transmitting the encrypted apparatus environment information to an evaluation apparatus.
5 more elements
An evaluation method, comprising:
- receiving encrypted apparatus environment information including (i) an operating parameter, including at least one of resolution, color/monochrome, document size, or contrast, for an operation of the image reading apparatus and (ii) operating-log information including contents of the operation, wherein the operation described by the operating parameter is not a user-authentication operation;
- decrypting the received apparatus environment information;
- and
- evaluating an operation performed on the image reading apparatus based on the decrypted apparatus environment information.
1 more element
A non-transitory computer-readable recording medium having a program for causing a computer to execute an evaluation method, comprising:
- receiving encrypted apparatus environment information including (i) an operating parameter, including at least one of resolution, color/monochrome, document size, or contrast, for an operation of the image reading apparatus and (ii) operating-log information including contents of the operation, wherein the operation described by the operating parameter is not a user-authentication operation;
- decrypting the received apparatus environment information;
- and
- evaluating an operation performed on the image reading apparatus based on the decrypted apparatus environment information.
1 more element
Dependencies are inferred from the claim text.