Method and apparatus to enhance the security of data

• US 20030204731A1
• Filed: 04/29/2002
• Published: 10/30/2003
• Est. Priority Date: 04/29/2002
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Pochuev, Denis A., Wells, Trevor A., Walrath, Robert P.
• Application Number:
  US10/136,010
• Publication Number:
  US 20030204731A1
• Time in Patent Office: Days
• US Class Current: 713/181
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04N 1/32101 Display, printing, storage or transmission of additional information, e.g. ID code, date and time or title
• CPC Class Codes: H04N 1/4486 using digital data encryption
• CPC Class Codes: H04N 2201/3233 of authentication information, e.g. digital signature, watermark
• CPC Class Codes: H04N 2201/3278 Transmission

Abstract

A method includes generating data with an imaging system in response to a request from an information source and decrypting encrypted information received from the information source, using the imaging system and at least part of the data, to form decrypted information. In addition, the method includes forming a second hash from the decrypted information using the imaging system. Furthermore, the method includes forming an image on media using the decrypted information if the second hash equals a first hash received from the information source.

Claims

1. A system, comprising:

an information source configured to form encrypted information from information corresponding to an image using at least a part of data and to form a first hash of the information;

an imaging system configured to generate the data, to form decrypted information from the encrypted information using at least part of the data, to form a second hash from the decrypted information and to form an image on media if the first hash matches the second hash; and

a communication channel through which the encrypted information, the first hash, and at least part of the data move between the information source and the imaging system.

2. The system as recited in claim 1, wherein:

the information source includes a configuration to send a public key to the imaging system over the communication channel associated with a request to perform an imaging operation;

the data includes a string; and

the imaging system includes a configuration to generate an encrypted string using the public key and to send the encrypted string to the information source over the communication channel.

3. The system as recited in claim 2, wherein:

the information source includes a configuration to decrypt the string using a private key corresponding to the public key and a configuration to encrypt the information with symmetric encryption using the string; and

the imaging system includes a configuration to decrypt the encrypted information using the string used for the symmetric encryption.

4. The system as recited in claim 2, wherein:

a size of the string corresponds to a quantity of the information;

the information source includes a configuration to decrypt the string using a private key corresponding to the public key; and

the information source includes a configuration to encrypt the information by performing an exclusive OR between the string and the information.

5. The system as recited in claim 4, wherein:

the imaging system includes a configuration to decrypt the encrypted information by performing an exclusive OR between the string and the encrypted information; and

the imaging system includes a configuration to form an image corresponding to the decrypted information if the first hash equals the second hash.

6. The system as recited in claim 1, wherein:

the data includes a public key and a private key corresponding to the public key; and

the imaging system includes a configuration to send the public key to the information source in response to a request to perform an imaging operation.

7. The system as recited in claim 6, wherein:

the information source includes a configuration to form the encrypted information using the public key; and

the imaging system includes a configuration to decrypt the encrypted information using the private key.

8. A method, comprising:

generating data with an imaging system in response to a request from an information source;

decrypting encrypted information received from the information source, using the imaging system and at least part of the data, to form decrypted information;

forming a second hash from the decrypted information using the imaging system; and

forming an image on media using the decrypted information if the second hash equals a first hash received from the information source.

9. The method as recited in claim 8, further comprising:

with the data including a string, encrypting the string with the imaging system using a public key received from the information source to form an encrypted string; and

sending the encrypted string to the information source.

10. The method as recited in claim 9, wherein:

the information source decrypts the encrypted string to recover the string using a private key corresponding to the public key;

the information source forms the encrypted information by applying symmetric encryption to information corresponding to the image using the string;

the information source forms the first hash using the information; and

the information source sends the encrypted information and the first hash to the imaging system.

11. The method as recited in claim 10, wherein:

the string includes a random string with respect to the information; and

decrypting the encrypted information includes using the random string used for symmetric encryption.

12. The method as recited in claim 9, wherein:

the request from the information source indicates a quantity of the information corresponding to the image;

generating the data includes generating the string having a length matching the quantity of the information;

the information source decrypts the encrypted string to recover the string using a private key corresponding to the public key;

the information source forms the encrypted information by performing an exclusive OR between the information and the string;

the information source forms the first hash using the information; and

the information source sends the encrypted information and the first hash to the imaging system.

13. The method as recited in claim 12, wherein:

the string includes a random string with respect to the information; and

decrypting the encrypted information includes performing an exclusive OR between the encrypted information and the string.

14. The method as recited in claim 8, further comprising:

with the data including a public key and a private key, sending the public key to the information source from the imaging system.

15. The method as recited in claim 14, wherein:

the information source forms the encrypted information from information corresponding to the image using the public key; and

the information source forms the first hash using the information.

16. The method as recited in claim 15, wherein:

decrypting the encrypted information includes using the private key.

17. The method as recited in claim 8, wherein:

the imaging system includes an imaging device configured to generate the data, decrypt the encrypted information, form the second hash, and form the image on the media.

18. The method as recited in claim 8, wherein:

the imaging system includes a computing device to generate the data, decrypt the encrypted information, and form the second hash; and

the imaging system includes an imaging device configured to form the image on the media.

19. An imaging device, comprising:

an interface arranged to receive encrypted data;

a memory configured to store the encrypted data and decrypted data;

a processing device operatively associated with the memory and configured to form the decrypted data from the encrypted data using a session identifier generated in response to a request to form an image, configured to form a first hash from the decrypted data, and configured to compare the first hash to a second hash formed from data used to form the encrypted data; and

an imaging mechanism coupled to the processing device and configured to form an image on media corresponding to the decrypted data.

20. The imaging device as recited in claim 19, wherein:

the session identifier includes a string;

the processing device includes a configuration to form the decrypted data from the encrypted data using the string used for symmetric encryption of the data with the string; and

the processing device includes a configuration to control the imaging mechanism to form the image on the media if the first hash equals the second hash.

21. The imaging device as recited in claim 19, wherein:

the request to form the image includes information indicating a quantity of the data;

the session identifier includes a string having a length matching the quantity of the data;

the processing device includes a configuration to form the decrypted data from the encrypted data by performing an exclusive OR between the encrypted data and the string; and

the processing device includes a configuration to control the imaging mechanism to form the image on the media if the first hash equals the second hash.

22. The imaging device as recited in claim 19, wherein:

the session identifier includes a public key and a private key;

the processing device includes a configuration to form the decrypted data using the private key; and

the processing device includes a configuration to control the imaging mechanism to form the image on the media if the first hash equals the second hash.

23. A system to form an image using data from an information source, comprising:

means for generating a session indicator in response to a request from the information source;

means for decrypting encrypted data received from the information source;

means for generating a second hash;

means for comparing a first hash formed by the information source to the second hash; and

means for forming the image on the media using the data if the first hash equals the second hash.

24. A system to receive transformed data related to an image from a first computing device, comprising:

a second computing device including a memory for storing the transformed data, where the transformed data includes encrypted data and a first hash formed from data used to form the encrypted data, and including a processing device configured to generate decrypted data from the encrypted data using a session indicator generated by the processing device, configured to determine a second hash using the decrypted data; and

an imaging device coupled to the second computing device and configured to form an image on media using the decrypted data sent from the second computing device if the first hash equals the second hash.

25. The system as recited in claim 24, wherein:

the session indicator includes a public key and a private key generated in response to a request by the first computing device to form the image; and

with the first computing device configured to generate the encrypted data from the data using the public key, the second computing device includes a configuration to generate the decrypted data using the private key and to compare the first hash to the second hash to determine if the first hash equals the second hash.

26. The system as recited in claim 24, wherein:

the session indicator includes a string generated in response to a request by the first computing device to form the image; and

with the first computing device configured to generate the encrypted data from the data with symmetric encryption using the string, the second computing device includes a configuration to decrypt the encrypted data with the string used for the symmetric encryption and to compare the first hash to the second hash to determine if the first hash equals the second hash.

27. The system as recited in claim 24, wherein:

the session indicator includes a string generated in response to a request by the first computing device to form the image, where a length of the string matches a quantity of the data; and

with the first computing device configured to generate the encrypted data from the data by performing an exclusive OR between the data and the string, the second computing device includes a configuration to decrypt the encrypted data by performing an exclusive OR between the encrypted data and the string and to compare the first hash to the second hash to determine if the first hash equals the second hash.

28. A storage device, comprising:

a computer readable medium; and

processor executable instructions stored on the computer readable medium and configured to generate data using an imaging system in response to a request from an information source, configured to decrypt encrypted information received from the information source, using the imaging system and at least part of the data, to form decrypted information, configured to form a second hash from the decrypted information using the imaging system, and configured to form an image on media using the decrypted information if the second hash equals a first hash received from the information source.

29. The storage device as recited in claim 28, wherein:

the data includes a string; and

the computer executable instructions include a configuration to encrypt the string with the imaging system using a public key received from the information source to form an encrypted string and send the encrypted string to the information source.

30. The storage device as recited in claim 29, wherein:

the computer executable instructions include a configuration to decrypt the encrypted information using the string used for symmetric encryption of the information.

31. The storage device as recited in claim 29, wherein:

the computer executable instructions include a configuration to generate the string having a length corresponding a quantity of the information and a configuration to decrypt the encrypted information by performing an exclusive OR between the encrypted information and the string.

32. The storage device as recited in claim 28, wherein:

the data includes a public key and a private key; and

the computer executable instructions include a configuration to send the public key to the information source and to decrypt the encrypted information using the private key.

33. A printer, comprising:

an interface arranged to receive encrypted data;

a memory configured to store the encrypted data and decrypted data;

a processing device operatively associated with the memory and configured to form the decrypted data from the encrypted data, using a random string generated in response to a request to print, by performing an exclusive OR operation between the random string and the encrypted data, where a size of the random string equals a quantity of data used to form the encrypted data, with the processing device configured to form a first hash from the decrypted data, and configured to compare the first hash to a second hash formed from the data; and

an imaging mechanism coupled to the processing device and configured to form an image on media corresponding to the decrypted data.