Imaging job authorization

• US 20050273852A1
• Filed: 05/24/2004
• Published: 12/08/2005
• Est. Priority Date: 05/24/2004
• Status: Active Grant

• Current Assignee: Sharp Kabushiki Kaisha (Hon Hai Precision Industry Co., Ltd.)
• Original Assignee: Sharp Laboratories of America Incorporated (Hon Hai Precision Industry Co., Ltd.)
• Inventors: Ferlitsch, Andrew Rodney
• Granted Patent: US 7,983,420 B2
• Time in Patent Office: Days
• US Class Current: 726/17
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

A system and method are provided for imaging job authorization. The method comprises: an authorization server receiving a request from a first node print subsystem to communicate an imaging job; in response to analyzing imaging job information, sending an access inquiry to a second node; the authorization server receiving an authorization, including a one-time use public encryption key, from the second node; sending a confirmation, including the public key, to the first node print subsystem; the first node encrypting the imaging job using the public key; sending the encrypted imaging job to the second node from the first node; and, the second node decrypting the imaging job using a private key corresponding to the public key. The analyzed imaging job information used for access control may include user ID, job content, first node ID, first node communication address, imaging job access control, time/date, imaging job size, or imaging job options.

Claims

1. A method for imaging job authorization, the method comprising:

at an authorization server, receiving a request from a first node print subsystem to communicate an imaging job;

in response to analyzing imaging job information, sending an access inquiry to a second node;

at the authorization server, receiving an authorization, including a one-time use public encryption key, from the second node;

sending a confirmation, including the public key, to the first node print subsystem;

at the first node, encrypting the imaging job using the public key; and

,

sending the encrypted imaging job to the second node from the first node.

2. The method of claim 1 further comprising:

at the second node, decrypting the imaging job using a private key corresponding to the public key.

3. The method of claim 2 wherein receiving a request from a first node print subsystem to communicate an imaging job includes receiving a request from a first node selected from the group including a client source and a printer source.

4. The method of claim 3 wherein sending the encrypted imaging job to the second node includes sending the encrypted imaging job to a second node selected from the group including a client destination and a printer destination.

5. The method of claim 2 wherein sending an access inquiry to a second node in response to analyzing imaging job information includes authorizing access to the second node in response to analysis of imaging job information selected from the group including document name, user ID, job content, first node ID, first node communication address, imaging job access control, time/date, imaging job size, digital signature, biometric data, and imaging job options.

6. The method of claim 1 wherein receiving a request from a first node print subsystem to communicate an imaging job includes receiving a request to communicate an imaging job type selected from the group including a print job, scan job, fax job, and document/image management job.

7. The method of claim 2 further comprising:

at the second node, creating a linkage between a job identifier and the private key; and

,

wherein decrypting the imaging job using a private key corresponding to the public key includes;

receiving the encrypted imaging job with the job identifier; and

,

cross-referencing the job identifier with the private key.

8. The method of claim 7 wherein creating a linkage between a job identifier and the private key includes storing the job identifier and corresponding private key in a second node record;

and,

the method further comprising;

following the decryption of the imaging job, purging the private key and job identifier from the record.

9. The method of claim 7 wherein creating a linkage between a job identifier and the private key includes using a job identifier selected from the group including a network (IP) address, a network (DNS) name, a network user name, a document name, a digital signature, biometric data, and a checksum.

10. The method of claim 2 wherein encrypting the imaging job using the public key includes using a process selected from the group including encrypting the entire job, encrypting just the imaging job control commands, encrypting just the imaging job data, and encrypting a portion of the imaging job.

11. The method of claim 2 further comprising:

prior to sending the one-time use public key to the authorization server, generating the one-time use public key and corresponding private key at the second node.

12. The method of claim 2 wherein sending an access inquiry to a second node includes sending imaging job information to the second node;

the method further comprising;

at the second node, analyzing the imaging job information; and

,

wherein receiving an authorization, including a one-time use public encryption key, at the authorization server, includes receiving the public key in response to the second node imaging job information analysis.

13. The method of claim 1 wherein receiving an authorization at the authorization server, including a one-time use public encryption key, includes receiving a plurality of one-time public encryption keys;

and,

wherein encrypting the imaging job using the public key at the first node includes encrypting the imaging job using the plurality of public keys.

14. The method of claim 13 wherein encrypting the imaging job using the plurality of public keys includes encrypting a plurality of imaging job portions using the plurality of public keys.

15. An imaging job authorization system, the system comprising:

a first node device including a print subsystem having an interface for sending a request to communicate an imaging job;

an authorization server having an interface for receiving the request from the first node print subsystem and an interface to send an access inquiry in response to analyzing imaging job information;

a second node device having a interface for receiving the access inquiry from the authorization server and for sending an authorization to the authorization server, including a one-time use public encryption key;

wherein the authorization server sends a confirmation, including the public key, to the first node device print subsystem; and

,

wherein the first node device print subsystem encrypts the imaging job using the public key and sends the encrypted imaging job to the second node.

16. The system of claim 15 wherein the second node device decrypts the imaging job using a private key corresponding to the public key.

17. The system of claim 16 wherein the first node device print subsystem is embedded in a device selected from the group including a client source and a printer source.

18. The system of claim 17 wherein the second node device is a device selected from the group including a client destination and a printer destination.

19. The system of claim 16 wherein the authorization server authorizes access to the second node device in response to analysis of imaging job information selected from the group including document name, user ID, job content, first node ID, first node communication address, imaging job access control, time/date, imaging job size, digital signature, biometric data, and imaging job options.

20. The system of claim 15 wherein the first node device sends a request to communicate an imaging job type selected from the group including a print job, scan job, fax job, and document/image management job.

21. The system of claim 16 wherein the second node device creates a linkage between a job identifier and the private key, and decrypts a received imaging job in response to receiving the job identifier and cross-referencing the job identifier with the private key.

22. The system of claim 21 wherein the second node device includes a memory for storing the job identifier and corresponding private key, the second node device purging the private key and job identifier from the memory following the decryption of the imaging job.

23. The system of claim 21 wherein the second node device generates a job identifier selected from the group including a network (IP) address, a network (DNS) name, a network user name, a document name, a digital signature, biometric data, and a checksum.

24. The system of claim 16 wherein the first node print subsystem encrypts the imaging job using a process selected from the group including encrypting the entire job, encrypting just the imaging job control commands, encrypting just the imaging job data, and encrypting a portion of the imaging job.

25. The system of claim 16 wherein the second node device further includes a key generation module for generating a one-time use public/private key pair, and an interface connected to the authorization server to supply the public key with the authorization.

26. The system of claim 16 wherein the second node device further includes an access control module, the access control module having an interface for receiving imaging job information from the authorization server with the access inquiry, and an interface to supply key authorization in response to analyzing the imaging job information.

27. The system of claim 16 wherein the second node device further includes a key generation module for generating a plurality of one-time use public/private key pairs, and an interface connected to the authorization server to supply the plurality of public keys with the authorization;

and,

wherein the first node print subsystem encrypts the imaging job using the plurality of public keys.

28. The system of claim 27 wherein the first node device print subsystem encrypts a plurality of imaging job portions using the plurality of public keys.