Preset security levels

• US 7,503,067 B2
• Filed: 02/02/2004
• Issued: 03/10/2009
• Est. Priority Date: 02/02/2004
• Status: Expired due to Fees

• Current Assignee: Toshiba Corporation, Toshiba Tec Corporation (Toshiba Corporation)
• Original Assignee: Toshiba Corporation, Toshiba Tec Corporation (Toshiba Corporation)
• Inventors: Shahindoust, Amir, Krishna, Girish R., Yeung, Mike
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): Khoshnoodi; Nadia
• Application Number:
  US10/770,985
• Publication Number:
  US 20050172146A1
• Time in Patent Office: 1,863 Days
• Field of Search: 713/200, 713/167, 713/166, 713/165, 726/22
• US Class Current: 726/17
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A preset security level system and a method for utilizing the preset security level system. The system includes a plurality of security levels, each of which enables a different level of security. Each of the security levels has associated therewith security features, such that low security level features are associated with a low security level, etc. The system and method enable a system administrator to select a desired security level, which selection automatically results in the activation of the associated security features, rather than manually activate each desired security feature.

Claims

1. A preset security level system for a document processing system comprising:

a memory, the memory configured for storing security level data representative of a plurality of nested security levels selectively available to multiple classes of users of an associated document processing system having a plurality of device functions, including copying, scanning and printing, the document processing system including security features adapted to provide secure operation thereof, wherein the security levels are hierarchically oriented from a lower security level to a higher security level, wherein each higher security level incorporates all security features of each security level lower thereto, and wherein,

a lower security level including selective enablement of the device functions, selective encryption of electronic data, and at least one of open ports, Telnet functionality, device feature activation and video transmission,

an intermediate security level including cryptographic communication protocol usage, user authentication, role-based access control, shared folder control, job logging, and secure data erasure, and

a higher security level including enabling at least one of session logging, activation of antiviral procedures, and auditing;

association means configured for associating each selectable security level with feature data representative of a plurality of security features, such that an activation of each security level causes activation of the plurality of security features associated therewith;

means configured for receiving, from an administrator, data representative of a selected security level for selective association with each of a plurality of users of the document processing system;

means, responsive to the received security level selection, configured for activating the selected security level;

means configured for receiving, from a user, operation instructions for operation of the document processing system;

means configured for limiting operation of the associated document processing system in accordance with a security level of each associated user;

means configured for receiving event data corresponding to completion of a preselected event, wherein the preselected event is at least one of completion of a document processing operation and passage of a selected time period; and

means configured for altering the selected security level in accordance with received event data.

2. The system of claim 1, wherein the at least one selectable security level comprises a first security level, and wherein the first security level has associated therewith at least one of a Telnet deactivation security feature, a keyboard deactivation security feature and a video services deactivation feature.

3. The system of claim 2, wherein the at least one security level further comprises a second security level, and wherein the second security level has associated therewith at least one of an SSL activation security feature, an authentication activation security feature, a role-based access control activation security feature, a shared folders minimizing security feature, a job log protection activation security feature, a secure erase enabling security feature and a user data encryption security feature.

4. The system of claim 3, wherein the at least one security level further comprises a third security level, and wherein the third security level has associated therewith at least one of a secure print security feature, a secure fax security feature, a secure scan security feature, a secure copy security feature and a PDF security feature.

5. The system of claim 4, wherein the at least one security level further comprises a fourth security level, and wherein the fourth security level has associated therewith at least one of a logging and auditing security feature, an antivirus protection enabling security feature, and an intrusion detection system activation security feature.

6. A method for using preset security levels in a document processing system comprising the steps of:

storing, in a document processing system having a plurality of device features, including copying, scanning, and printing, and including security features adapted to provide secure operation thereof, security level data representative of a plurality of nested security levels selectively available to multiple classes of users of an associated document processing system in an associated memory, wherein the security levels are hierarchically oriented from a lower security level to a higher security level, wherein each higher security level incorporates all security features of each security level lower thereto, and wherein

a lower security level including selective enablement of device functions, selective encryption of electronic data, and at least one of open ports, Telnet functionality, device feature activation and video transmission,

an intermediate security level including cryptographic communication protocol usage, user authentication, role-based access control, shared folder control, job logging, and secure data erasure, and

a higher security level including enabling at least one of session logging, activation of antiviral procedures, and auditing;

associating each selectable security level with feature data representative of a plurality of security features, such that an activation of each security level causes activation of the plurality of security features associated therewith;

receiving, from an administrator, data representative of a selected security level for selective association with each of a plurality of users of the document processing system;

responsive to the received security level selection, activating the selected security level;

receiving, from a user, operation instructions for operation of the document processing system;

controlling operation of the associated document processing system in accordance with a security level of each associated user; and

receiving event data corresponding to completion of a preselected event, wherein the preselected event is at least one of completion of a document processing operation and passage of a selected time period; and

altering the selected security level in accordance with received event data.

7. The method of claim 6, wherein the at least one security level comprises a first security level, and wherein the first security level has associated therewith at least one of a Telnet deactivation security feature, a keyboard deactivation security feature and a video services deactivation feature.

8. The method of claim 7, wherein the at least one security level further comprises a second security level, and wherein the second security level has associated therewith at least one of a SSL activation security feature, an authentication activation security feature, a role-based access control activation security feature, a shared folders minimizing security feature, a job log protection activation security feature, a secure erase enabling security feature and a user data encryption security feature.

9. The method of claim 8, wherein the at least one security level further comprises a third security level, and wherein the third security level has associated therewith at least one of a secure print security feature, a secure fax security feature, a secure scan security feature, a secure copy security feature and a PDF security feature.

10. The method of claim 9, wherein the at least one security level further comprises a fourth security level, and wherein the fourth security level has associated therewith at least one of a logging and auditing security feature, an antivirus protection enabling security feature, and an intrusion detection system activation security feature.

11. A computer-implemented method for using preset security levels in a document processing system comprising the steps of:

storing security level data representative of a plurality of nested security levels selectively available to multiple classes of users of an associated document processing system having a plurality of device functions, including copying, scanning, and printing, in an associated memory, the document processing system including security features adapted to provide secure operation thereof, wherein the security levels are hierarchically oriented from a lower security level to a higher security level, wherein each higher security level incorporates all security features of each security level lower thereto, and wherein

a lower security level including selective enablement of device functions, selective encryption of electronic data, and at least one of open ports, Telnet functionality, device feature activation and video transmission,

an intermediate security level including cryptographic communication protocol usage, user authentication, role-based access control, shared folder control, job logging, and secure data erasure, and,

a higher security level including enabling at least one of session logging, activation of antiviral procedures, and auditing;

associating each selectable security level with feature data representative of a plurality of security features, such that an activation of each security level causes activation of the plurality of security features associated therewith;

receiving, from an administrator, data representative of a selected security level for selective association with each of a plurality of users of the document processing system;

responsive to the received security level selection, activating the selected security level;

receiving from a user, operation instructions for operation of the document processing system;

controlling operation of the associated document processing system in accordance with a security level of each associated user; and

receiving event data corresponding to completion of a preselected event, wherein the preselected event is at least one of completion of a document processing operation and passage of a selected time period; and

altering the selected security level in accordance with received event data.

12. The method of claim 11, wherein the at least one security level comprises a first security level, and wherein the first security level has associated therewith at least one of a Telnet deactivation security feature, a keyboard deactivation security feature and a video services deactivation feature.

13. The method of claim 12, wherein the at least one security level further comprises a second security level, and wherein the second security level has associated therewith at least one of a SSL activation security feature, an authentication activation security feature, a role-based access control activation security feature, a shared folders minimizing security feature, a job log protection activation security feature, a secure erase enabling security feature and a user data encryption security feature.

14. The method of claim 13, wherein the at least one security level further comprises a third security level, and wherein the third security level has associated therewith at least one of a secure print security feature, a secure fax security feature, a secure scan security feature, a secure copy security feature and a PDF security feature.

15. The method of claim 14, wherein the at least one security level further comprises a fourth security level, and wherein the fourth security level has associated therewith at least one of a logging and auditing security feature, an antivirus protection enabling security feature, and an intrusion detection system activation security feature.