Image data processing device and image data processing program

1. An image data processing device, comprising:

an image data storage unit that stores image data; and

a data converter including a hardware processor, which executes program instructions to thereby cause the data converter to provide functions of:

a first encryption unit that encrypts the image data stored in the image data storage unit using a first encryption key to create encrypted image data;

a second encryption key creation unit that creates a second encryption key assigned to each of usage authorities;

a key-storage data creation unit that creates a key-storage data for each of the usage authorities, by encrypting the first encryption key and authority information indicating said each usage authority using the second encryption key assigned to said each usage authority;

a device-supplementary data creation unit that creates device-supplementary data for at least one of the usage authorities and for at least one device key of at least one image data processing device, the device-supplementary data including an identifier of the device key and encrypted data created by encrypting the second encryption key assigned to the usage authority using the device key of the image data processing device; and

a data output unit that outputs the encrypted image data with supplementary data including the key-storage data and the device-supplementary data for each of the usage authorities.

2. The image data processing device according to claim 1 ,

wherein the device-supplementary data creation unit creates the device-supplementary data based on at least the device key of the image data processing device, and

wherein the image data processing device further comprises:

a data decryption unit including another hardware processor, which executes program instructions to thereby causes the data decryption unit to provide functions of:

a second encryption key acquiring unit that acquires the device-supplementary data assigned to the image data processing device from the supplementary data attached to the encrypted image data outputted by the data output unit, and acquires the second encryption key by decrypting the acquired device-supplementary data;

a first encryption key acquiring unit that acquires the first encryption key from the key-storage data using the acquired second encryption key; and

a decryption unit that decrypts the encrypted image data using the acquired first encryption key to obtain image data, and

a printer that outputs the image data decrypted by the decryption unit.

3. The image data processing device according to claim 2 , wherein the second encryption key acquiring unit decrypts the acquired device-supplementary data using a secret key of the image data processing device.

4. The image data processing device according to claim 2 , further comprising:

a user key storage unit that stores at least one user key corresponding to respective usage authorities of the image data, and

wherein the functions include functions of

a user-supplementary data creation unit that creates user-supplementary data for each of the user keys stored in the user key storage unit, the user-supplementary data including an identifier of the user key and encrypted data created by encrypting the second encryption key assigned to the usage authority corresponding to the user key using the user key.

5. The image data processing device according to claim 4 , further comprising:

an encrypted image data storage unit that stores the encrypted image data with the supplementary data outputted by the data output unit; and

a control unit including a third hardware processor, which executes program instructions to thereby causes the control unit to provide functions of:

an authentication unit that executes authentication of the user in response to an operation by the user;

a user-supplementary data detection unit that detects the user-supplementary data corresponding to the user key of a user authenticated by the authentication unit from the supplementary data attached to the encrypted image data stored in the encrypted image data storage unit;

an authority information acquiring unit that acquires authority information by decrypting the key-storage data corresponding to the same usage authority as the user-supplementary data detected by the user-supplementary data detection unit using the second encryption key acquired by the second encryption key acquiring unit, and

an image output unit that outputs an image based on the image data decrypted by the decryption unit within usage authority based on the authority information.

6. The image data processing device according to claim 5 , wherein the image output unit causes the printer to print an image based on the image data decrypted by the decryption unit only when printing is permitted by the authority information acquired by the authority information acquiring unit.

7. The image data processing device according to claim 1 ,

wherein the user key is a public key of the user, and

wherein the device key is a public key of the image data processing device.

8. An image data processing device receiving data from another image data processing device that includes

an image data storage unit that stores image data;

a data converter including a first hardware processor, which execute program instructions to thereby causes the data converter to

encrypt the image data stored in the image data storage unit using a first encryption key to create encrypted image data,

create a second encryption key assigned to each of a plurality of usage authorities,

create key storage data for each of the usage authorities by encrypting the first encryption key and authority information using the second encryption key,

create encrypted data by encrypting the second encryption key using a device key of the image data processing device, and

create device supplementary data including an identifier of the device key and the encrypted data; and

a data output unit that outputs the encrypted image data with supplementary data including the key-storage data and the device-supplementary data,

the image data processing device comprising:

a data decryption unit including a second hardware processor, which executes program instructions to thereby causes the data decryption unit to provide functions of:

a second encryption key acquiring unit that acquires the device-supplementary data assigned to the image data processing device from the supplementary data attached to the encrypted image data outputted by the another image data processing device, and acquires the second encryption key by decrypting the acquired device-supplementary data;

a first encryption key acquiring unit that acquires the first encryption key from the key-storage data using the acquired second encryption key; and

a decryption unit that decrypts the encrypted image data using the acquired first encryption key to obtain image data, and

a printer that outputs the image data decrypted by the decryption unit.

9. A non-transitory computer-readable medium that contains image data processing program instructions embodied therein, the program instructions comprising

instructions of a first encryption unit that encrypts image data stored in an image data storage unit using a first encryption key to create encrypted image data;

instructions of a second encryption key creation unit that creates a second encryption key assigned to each of a plurality of usage authorities;

instructions of a key-storage data creation unit that creates a key-storage data for each of the usage authorities, by encrypting the first encryption key and authority information indicating said each usage authority using the second encryption key assigned to said each usage authority;

instructions of a device-supplementary data creation unit that creates device-supplementary data for at least one of the usage authorities and for at least one device key of at least one image data processing device, the device-supplementary data including an identifier of the device key and encrypted data created by encrypting the second encryption key assigned to the usage authority using the device key of the image data processing device; and

instructions of a data output unit that outputs the encrypted image data with supplementary data including the key-storage data and the device-supplementary data for each of the usage authorities.

10. The non-transitory computer-readable medium of claim 9 , further comprising:

instructions of a second encryption key acquiring unit that acquires the device-supplementary data assigned to the image data processing device from the supplementary data attached to the encrypted image data outputted by the data output unit, and acquires the second encryption key by decrypting the acquired device-supplementary data;

instructions of a first encryption key acquiring unit that acquires the first encryption key from the key-storage data using the acquired second encryption key;

instructions of a decryption unit that decrypts the encrypted image data using the acquired first encryption key to obtain image data, and

instructions of an output unit that outputs the image data decrypted by the decryption unit.