Network resource control system

• US 7,249,188 B2
• Filed: 12/16/2005
• Issued: 07/24/2007
• Est. Priority Date: 03/01/2000
• Status: Expired due to Term

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Spicer Corporation (Open Text Corporation)
• Inventors: Pidduck, Patrick, Lehan, Tim, Martin, Christopher, Spicer, Steven, Onischke, Mark, Coutts, Steven, Grassick, Clayton, Kuhl, Larry, Hollander, Brian, Von Hatten, Philip
• Primary Examiner(s): Vaughn; William
• Assistant Examiner(s): MESFIN, YEMANE
• Application Number:
  US11/303,015
• Publication Number:
  US 20060168258A1
• Time in Patent Office: 585 Days
• Field of Search: 709/203, 709/217, 709/219, 709/220, 709/223, 709225-229, 709/233, 726 2- 4, 726/11, 726/12, 726/17, 726/21
• US Class Current: 709/229
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/32 Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level

Abstract

A network resource control system allows network terminals to communicate with network resources, and includes a resource registry, an authorization server and an administration server. The resource registry includes resource records which are associated with the network resources and define at least a user access level for each network resource. The authorization server is in communication with the resource registry and controls network access to the network resources in accordance with the resource records. The administration server is in communication with the resource registry and provides controlled access to the resource records. The administration server receives user access control data from administrators of the network resources for incorporation into the resource records. Depending upon the user access control data received, the authorization server configures the network terminals for communication with the network resources.

Claims

1. A print control system for facilitating communication of a data package via a polling server between a network terminal and a network printing device over a network, the data package configured for authorized data processing by the network printing device, the print control system comprising:

a resource registry including resource records associated with the network printing device, the resource records defining at least a user access level for each said network printing device;

a polling server configured for obtaining the data package from a proxy server across a firewall in response to a poll request to the proxy server, the data package including print data for processing by the network printing device, an authorization password associated with the network printing device and the print data, and a destination address for directing the data package over the network, the polling server further including an input interface for receiving the data package, an extraction module for extracting the destination address from the data package, and an output interface for communicating at least the print data and the authorization password to the destination address such that the authorization password is configured for controlling access to the print data by the printing device; and

an administration server in communication with the resource registry for providing controlled access to the resource records.

2. A print control system for facilitating communication of a data package via a polling server between a network terminal and a network printing device over a network, the data package configured for authorized data processing by the network printing device, the system comprising:

a resource registry including resource records associated with the network printing device, the resource records defining at least a user access level for each said network printing device;

a polling server configured for obtaining the data package from a proxy server across a firewall in response to a poll request to the proxy server, the polling server comprising;

an input interlace for receiving the data package, the data package including print data for processing by the network printing device, an authorization password associated with the network printing device and the print data, and a destination address for directing the data package over the network, the authorization password for allowing access of the print data by the network printing device;

an extraction module for extracting the destination address from the data package; and

an output interface for communicating at least the print data and the authorization password to the destination address; and

an administration server n communication with the resource registry for providing controlled access to the resource records.

3. The system according to claim 2, wherein the destination address includes a pseudo-name for identifying a group of the network printing devices to facllitate communication between the network terminal and the group of the network printing devices.

4. The system according to claim 2, wherein the destination address identifies the network address for the network printing device.

5. The system according to claim 2 further comprising a print server coupled to the network printing device, such that the destination address identifies the address of the print server.

6. The system according to claim 5 further comprising the print server configured to confirm validity of the authorization password before forwarding said print data to the network printing device.

7. The system according to claim 2 further comprising the network printing device having the user access level definition associated therewith, a user access level definition defining a type of authorized access allowed to the network printing device, the authorized access type including one or both of either a per-user or per-group basis.

8. The system according to claim 7 further comprising storage having resource records including the user access level definition for the network printing device.

9. The system of claim 7, wherein the authorization password is included in the user access level definition.

10. The system according to claim 8, wherein the user access level definition is updatabte.

11. The system according to claim 10 further comprising the administrator server configured for updating the user access level definition in the resource records on behalf of the network printing device.

12. The system according to claim 6 further comprising the polling server configured for sending a notification to the network terminal associated with the data package when the print data as successfully transmitted to the network printing device after validation of the authorization password.

13. The system according to claim 4, wherein the network printing device is selected from the group comprising:

a printer; and

a facsimile machine.

14. A method for facilitating communication of a data package via a polling sewer between a network terminal and a network printing device over a network, the data package configured for authorized data processing by the network printing device, the method comprising the acts of:

providing controlled access to resource records of a resource registry in communication with an administration server;

defining at least a user access level for each said network printing device in at least one of the resource records of the resource registry;

sending a poll request to a proxy server across a firewall;

receiving the data package in response to the poll request, the data package including print data for processing by the network printing device, an authorization password associated with the network printing device and the print data, and a destination address for directing the data package over the network, the authorization password for allowing access of the print data by the network printing device;

extracting the destination address from the data package; and

communicating at least the print data and the authorization password to the extracted destination address.

15. The method according to claim 14 further comprising the act of confirming the validity of the authorization password before forwarding said print data to the network printing device.

16. The method according to claim 14, wherein the authorized user access level definition is associated with the network printing device, the user access level definition configured for defining a type of authorized access allowed to the network printing device, the authorized access type including one or both of either a per-user or per-group basis.

17. The method according to claim 16, wherein the authorization password is included in the definition of the user access level.

18. The method according to claim 15 further comprising the act of notifying the network terminal associated with the data package when the print data is successfully transmitted to the network printing device after validation of the authorization password.

19. The method according to claim 14, wherein the network printing device is selected from the group comprising:

a printer; and

a facsimile machine.

20. The method according to claim 14 further comprising the act of specifying an archive period for the data package.

21. The method according to claim 20 further comprising the act of transmitting the archived data package to multiple printing devices.

22. The method according to claim 20 further comprising the act of periodically reviewing transmission dates and times for each archive data package sent to the printing devices.