System and method for using a profile to encrypt documents in a digital scanner

• US 20030044012A1
• Filed: 08/31/2001
• Published: 03/06/2003
• Est. Priority Date: 08/31/2001
• Status: Abandoned Application

• Current Assignee: Sharp Laboratories of America Incorporated (Hon Hai Precision Industry Co., Ltd.)
• Original Assignee: Sharp Laboratories of America Incorporated (Hon Hai Precision Industry Co., Ltd.)
• Inventors: Eden, Guy
• Application Number:
  US09/944,684
• Publication Number:
  US 20030044012A1
• Time in Patent Office: Days
• US Class Current: 380/243
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04N 1/44 Secrecy systems
• CPC Class Codes: H04N 1/4486 using digital data encryption
• CPC Class Codes: H04N 2201/0094 Multifunctional device, i.e. a device capable of all of reading, reproducing, copying, facsimile transception, file transception

Abstract

A system and method are provided for secure document transmission in a digital scanner. The method comprises: generating a plurality of passwords for a corresponding plurality of user groups; creating profiles having an address field and an encryption field; storing the profiles in a directory in response to the generated password; selecting a profile from the directory; scanning a document; encrypting the document in response to the encryption field of the selected profile; and, sending the encrypted document in response to the address field of the selected profile. Selecting a profile includes selecting a profile having either an email address or a file transfer protocol (FTP) address. Further, selecting a profile includes selecting a profile having either a symmetric or asymmetric (public) key encryption field. Then, creating profiles includes storing either the symmetric or public keys in the created profiles.

Claims

1. In a digital scanner, a method for secure document transmission, the method comprising:

selecting a profile having an encryption field;

scanning a document; and

,

encrypting the document in response to the encryption field of the selected profile.

2. The method of claim 1 wherein selecting a profile includes selecting a profile having an address field;

and,

the method further comprising;

sending the encrypted document in response to the address field of the selected profile.

3. The method of claim 2 further comprising:

creating profiles having an address field and an encryption field;

storing the profiles in a directory; and

,

wherein selecting a profile includes selecting a profile from the directory.

4. The method of claim 3 further comprising:

assigning each profile to a corresponding destination; and

,

wherein selecting a profile includes;

selecting a destination; and

,

using the profile assigned to the selected destination.

5. The method of claim 3 wherein selecting a profile includes selecting a profile having an address selected from the group including email addresses and file transfer protocol (FTP) addresses.

6. The method of claim 3 wherein selecting a profile includes selecting a profile having an encryption field selected from the group including symmetric and asymmetric (public) keys.

7. The method of claim 6 wherein selecting a profile includes selecting a profile having an asymmetric key;

and,

wherein creating profiles includes storing public keys in the created profiles.

8. The method of claim 6 wherein selecting a profile includes selecting a profile having a symmetric key;

and,

wherein creating profiles includes storing symmetric keys in the created profiles.

9. The method of claim 3 wherein creating profiles includes creating profiles for a plurality of user groups;

the method further comprising;

generating a plurality of passwords for the corresponding plurality of user groups; and

,

wherein storing the profiles in a directory includes storing profiles in a profile directory, in response to the generated password.

10. The method of claim 3 wherein selecting a profile includes selecting a profile having a link to a certification authority storing a public key;

and,

wherein encrypting the document using the encryption field from the selected profile includes using the public key signed by the certification authority to encrypt the document.

11. The method of claim 7 wherein encrypting the document using the encryption field from the selected profile includes:

generating a random session key;

encrypting the document with the session key using a symmetric algorithm;

encrypting the session key with an asymmetric algorithm using the selected profile public key; and

,

wherein sending the encrypted document to the address from the selected profile includes sending the encrypted session key.

12. The method of claim 6 wherein creating profiles includes creating a profile with a plurality of addresses and a corresponding plurality of public keys;

wherein encrypting the document includes generating a single encrypted document using an asymmetric algorithm; and

,

wherein sending the encrypted document includes sending the single encrypted document to each of the plurality of addresses in the profile.

13. In a digital scanner, a method for secure document transmission, the method comprising:

generating a password;

creating profiles having an address field and an encryption field;

storing the profiles in a directory in response to the generated password;

selecting a profile from the directory;

scanning a document;

encrypting the document in response to the encryption field of the selected profile; and

,

sending the encrypted document in response to the address field of the selected profile.

14. A digital scanner secure document transmission system, the system comprising:

a profile directory having an interface for selecting profiles with an encryption field;

a document scanner for encrypting documents in response to selected profile encryption field; and

,

a network interface for transmitting the encrypted documents.

15. The system of claim 14 wherein the profile directory supplies selected profiles with an address field;

and,

wherein the network interface transmits the encrypted documents in response to the address field of the selected profile.

16. The system of claim 15 further comprising:

a memory for storing the profiles; and

,

wherein the profile directory has an interface for creating profiles having an address field and an encryption field;

17. The system of claim 16 wherein the profile directory has an interface for accepting destinations and assigning each profile to a corresponding destination;

and,

wherein profiles are selected from the profile directory in response to entering the destination.

18. The system of claim 16 wherein the profile directory supplies selected profiles having an address selected from the group including email addresses and file transfer protocol (FTP) addresses.

19. The system of claim 16 wherein the profile directory supplies selected profiles having an encryption field selected from the group including symmetric and asymmetric (public) keys.

20. The system of claim 19 wherein the profile directory supplies selected profiles having an asymmetric key;

and, wherein the memory stores the public keys corresponding to each profile.

21. The system of claim 19 wherein the profile directory supplies selected profiles having a symmetric key;

and, wherein the memory stores the symmetric keys corresponding to each profile.

22. The system of claim 16 wherein the profile directory has an interface for generating passwords, the profile directory creating profiles for a plurality of user groups in response to the generated passwords.

23. The system of claim 16 further comprising:

a certification authority storing public keys;

wherein the profile directory supplies a selected profile having a link to the certification authority;

wherein the network interface negotiates with the certification authority for a public key corresponding to the selected profile; and

,

wherein the document scanner uses the public key signed by the certification authority to encrypt the document.

24. The system of claim 20 wherein the document scanner generates a random session key and encrypts the document with the session key using a symmetric algorithm;

wherein the document scanner encrypts the session key with an asymmetric algorithm using the selected profile public key; and

,

wherein the network interface transmits the encrypted session key with the encrypted document.

25. The system of claim 19 wherein the profile directory supplies a selected profile with a plurality of addresses and a corresponding plurality of public keys;

wherein the document scanner encrypts the document into a single encrypted document using an asymmetric algorithm; and

,

wherein the network interface sends the single encrypted document to each of the plurality of addresses in the selected profile.