Method and apparatus for the secure printing of a document

• US 6,977,745 B2
• Filed: 10/30/2001
• Issued: 12/20/2005
• Est. Priority Date: 10/30/2001
• Status: Expired due to Term

• Current Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Original Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Inventors: Sharma, Megha
• Primary Examiner(s): WALLERSON, MARK E
• Application Number:
  US10/022,462
• Publication Number:
  US 20030081247A1
• Time in Patent Office: 1,512 Days
• Field of Search: 358/1.12, 358/1.13, 358/1.14, 358/1.15, 358/401, 358/406, 358/407, 713/155, 713/165, 380/30
• US Class Current: 358/1.15
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A method for securely controlling the printing of a plaintext document generated by a first source includes the steps of receiving at a printer via a first communication channel a first key sent by the first source and obtaining at the printer a second key based on communication between the printer and a second source. The printer receives from the second source via a second communication channel an encrypted version of the plaintext document. The printer decrypts, using the first and second keys, the encrypted version of the plaintext document to obtain the plaintext document at the printer and then prints the plaintext document. A system incorporates the method.

Claims

1. A method for securely controlling the printing of a plaintext document generated by a first source, the method comprising the steps of:

receiving at a printer via a first communication channel a first key sent by the first source;

obtaining at the printer a second key based on communication between the printer and a second source;

receiving at the printer from the second source via a second communication channel an encrypted version of the plaintext document that cannot be decrypted at the second source to obtain the plaintext document;

decrypting at the printer using the first and second keys the encrypted version of the plaintext document to obtain the plaintext document at the printer; and

printing with the printer the plaintext document obtained at the printer via the decrypting at the printer of the encrypted version of the plaintext document; and

ensuring that the printer can only print a predetermined number of copies of the plaintext document obtained at the printer via the decrypting at the printer of the encrypted version of the plaintext document;

wherein the second communication channel is an electronic communication channel.

2. A method as recited in claim 1, wherein the second communication channel is a secure electronic communication channel.

3. A method as recited in claim 1, wherein the second communication channel is a non-secure electronic communication channel.

4. A method as recited in claim 1, wherein the predetermined number is one.

5. A method as recited in claim 4, further comprising storing in a memory in the printer the first and second keys, the encrypted version of the plaintext document, and the plaintext document obtained at the printer via the decrypting at the printer of the encrypted version of the plaintext document, and subsequent to the printing of the predetermined number of copies of the plaintext document obtained at the printer via the decrypting at the printer of the encrypted version of the plaintext document 1) deleting from the memory the plaintext document obtained at the printer via the decrypting at the printer of the encrypted version of the plaintext document and 2) deleting from the memory one of the first key, the second key, and the encrypted version of the plaintext document.

6. A method as recited in claim 1, further comprising obtaining electronically at the printer the predetermined number from the second source.

7. A method as recited in claim 1, wherein the second source maintains an audit record of the number of copies printed at the printer of the plaintext document obtained at the printer via the decrypting at the printer of the encrypted version of the plaintext document.

8. A method as recited in claim 1, further comprising printing the plaintext document obtained at the printer via the decrypting at the printer of the encrypted version of the plaintext document to include forensic evidence of the authenticity of the printed plaintext document.

9. A method for securely controlling the printing of a plaintext document generated by a first source, the method comprising the steps of:

receiving at a printer via a first communication channel a first key sent by the first source;

obtaining at the printer a second key based on communication between the printer and a second source;

receiving at the printer from the second source via a second communication channel an encrypted version of the plaintext document that cannot be decrypted at the second source to obtain the plaintext document;

decrypting at the printer using the first and second keys the encrypted version of the plaintext document to obtain the plaintext document at the printer; and

printing with the printer the plaintext document obtained at the printer via the decrypting at the printer of the encrypted version of the plaintext document; and

performing a first encryption operation on the plaintext document thereby creating an encrypted form of the plaintext document and subsequently performing a second encryption operation on the encrypted form thereby creating the encrypted version of the plaintext document;

wherein the second communication channel is an electronic communication channel.

10. A method as recited in claim 9, wherein the first encryption operation is performed at the first source, the encrypted form is sent electronically from the first source to the second source, the encrypted form is stored at the second source, the second source does not have the ability to decrypt the encrypted form, and the second source performs the second encryption operation on the encrypted form.

11. A method as recited in claim 10, wherein the second source is a server and the second key is generated at the server and sent to the printer via the second communication channel.

12. A method as recited in claim 10, wherein the second source and the printer communicate to mutually agree on the second key.

13. A system for securely transmitting and printing documents comprising:

a computer system that encrypts a plaintext document using a first key thereby creating an encrypted document, the computer system including means for electronically transmitting the encrypted document via a first communication channel;

a server connected to the first communication channel to receive the encrypted document from the computer system, the server including memory for storing the encrypted document, a processor for encrypting the encrypted document using a second key thereby creating a double-encrypted document, means for electronically transmitting the double-encrypted document via a second communication channel;

a printer connected to the second communication channel, the printer having means for communicating with the server via the second communication channel to determine the second key and to receive the double-encrypted document from the server, means for receiving the first key from the computer system upon request, means for decrypting the double-encrypted document using the first and second keys to obtain the plaintext document and means for printing a only a predetermined number of copies of the plaintext document obtained from the decrypting of the double-encrypted document by the printer;

wherein the server cannot decrypt the encrypted document to obtain the plaintext document.

14. A method for securely controlling the recording of an unencrypted digital content generated by a first source, the method comprising the steps of:

receiving at a recording device via a first communication channel a first key sent by the first source;

obtaining at the recording device a second key based on communication between the recording device and a second source;

receiving at the recording device from the second source via a second communication channel an encrypted version of the unencrypted digital content, the receiving device not being capable of decrypting the encrypted version of the unencrypted digital content;

decrypting at the recording device using the first and second keys the encrypted version of the unencrypted digital content to obtain the unencrypted digital content at the recording device; and

recording on a recording medium with the recording device the unencrypted digital content obtained at the recording device via the decrypting at the recording device of the encrypted version of the unencrypted digital content;

performing a first encryption operation on the unencrypted digital content thereby creating an encrypted form of the unencrypted digital content and subsequently performing a second encryption operation on the encrypted form thereby creating the encrypted version of the unencrypted digital content.

15. A method as recited in claim 14, wherein the seond communication channel is a secure electronic communication channel.

16. A method as recited in claim 14, wherein the seond communication channel is a non-secure electronic communication channel.