Security for mass storage devices in imaging devices

• US 20030234951A1
• Filed: 06/19/2002
• Published: 12/25/2003
• Est. Priority Date: 06/19/2002
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Gale, Thomas Stanley, Vaughn, Gregory Alton, Lewis, Johnny MacArthur
• Granted Patent: US 7,265,865 B2
• Time in Patent Office: Days
• US Class Current: 358/1.14
• CPC Class Codes: G06F 21/608 Secure printing

Abstract

Imaging devices can have mass storage devices associated with them. In a networked environment that allows mounting of a shared resource, these mass storage devices can be viewed or even altered by anyone who can connect to the imaging device. However, unrestricted access may be undesirable. The various embodiments provide methods and apparatus for securing these mass storage devices. Security is variable among different sets of users or external devices attempting access of the mass storage device.

Claims

1. A method of operating an imaging device containing a mass storage device, comprising:

receiving a first command object indicative of a desire to restrict access to the mass storage device; and

activating at least one protection for the mass storage device in response to the first command object.

2. The method of claim 1, further comprising:

receiving a second command object indicative of a desire to expand access to the mass storage device; and

removing at least some of the protections from the mass storage device in response to the second command object.

3. The method of claim 1, wherein activating at least one protection further comprises restricting communication with the mass storage device.

4. The method of claim 3, wherein restricting communication further comprises restricting communication between the mass storage device and at least one external device defined by the first command object.

5. The method of claim 4, wherein the at least one external device comprises all external devices.

6. The method of claim 4, wherein the at least one external device comprises a class of external devices.

7. The method of claim 6, wherein the class of external devices is any external device communicating with the imaging device through a communication port defined by the first command object.

8. A method of operating an imaging device containing a mass storage device, comprising:

restricting at least one of read privileges and write privileges to the mass storage device from at least one external device in response to receiving a first token; and

restoring, at least partially, a restricted privilege in response to receiving a second token.

9. The method of claim 8, wherein the at least one external device is a set of external devices as defined by the first token.

10. The method of claim 9, wherein the set of external devices comprises one or more classes of devices selected from the group consisting of each external device communicating with the imaging device through a specified communication port;

each external device communicating with the imaging device through a specified network bridge;

each external device communicating with the imaging device using a specified communication protocol; and

each external device that is not local to the imaging device.

11. The method of claim 8, wherein restricting at least one of read privileges and write privileges further comprises restricting different privileges for different sets of external devices.

12. An imaging device, comprising:

a formatter for rendering image data into a printable image;

a print engine for producing a tangible output image from a printable image;

a mass storage device for storing at least one of image data and printable images; and

a processor;

wherein the processor is adapted to recognize one or more access command objects and to respond to the access command objects by setting read and write privileges between the mass storage device and external devices.

13. The imaging device of claim 12, wherein setting privileges further comprises setting a first set of privileges for a first set of external devices and setting a second set of privileges for a second set of external devices different from the first set of privileges.

14. The imaging device of claim 12, wherein the access command objects must be accompanied by an authorization at least where an access command object seeks to expand read or write privileges.

15. An imaging device, comprising:

a formatter for rendering image data into a printable image;

a print engine for producing a tangible output image from a printable image; and

a mass storage device for storing at least one of image data and printable images;

wherein access to the mass storage device is controllable through the use of command objects passed to the imaging device through a communication port.

16. The imaging device of claim 15, wherein command objects for restoring access to the mass storage device must be accompanied by an authorization.

17. The imaging device of claim 16, wherein the authorization is a password.

18. The imaging device of claim 15, wherein controlling access further comprises limiting communication to the mass storage device to one or more communication ports specified by the command object.

19. The imaging device of claim 15, wherein controlling access further comprises limiting communication between the mass storage device and one or more classes of external devices specified by the command object.

20. A computer-usable media having computer-readable instructions stored thereon capable of causing a processor to perform a method, the method comprising:

recognizing a first command object indicative of a desire to restrict access to the mass storage device; and

activating at least one protection for the mass storage device in response to the first command object.

21. The computer-usable media of claim 20, wherein the method further comprises:

recognizing a second command object indicative of a desire to expand access to the mass storage device; and

removing at least some of the protections from the mass storage device in response to the second command object.

22. The computer-usable media of claim 20, wherein activating at least one protection further comprises restricting communication with the mass storage device.

23. The computer-usable media of claim 22, wherein restricting communication further comprises restricting communication between the mass storage device and at least one external device defined by the first command object.

24. A computer-usable media having computer-readable instructions stored thereon capable of causing a processor to perform a method, the method comprising:

restricting at least one of read privileges and write privileges to the mass storage device for at least one external device in response to receiving a first token indicating a desire to restrict access to the mass storage device; and

restoring, at least partially, a restricted privilege in response to receiving a second token indicating a desire to expand access to the mass storage device.

25. The computer-usable media of claim 24, wherein the at least one external device is a set of external devices as defined by the first token.

26. The computer-usable media of claim 25, wherein the set of external devices comprises one or more classes of devices selected from the group consisting of each external device communicating with the imaging device through a specified communication port;

each external device communicating with the imaging device through a specified network bridge;

each external device communicating with the imaging device using a specified communication protocol; and

each external device that is not local to the imaging device.

27. The computer-usable media of claim 24, wherein restricting at least one of read privileges and write privileges further comprises restricting different privileges for different sets of external devices.