Patent Application
20220107768
The present invention relates to methods of using a system of private and public servers that implement policy-based printing operations. The system includes a public and private network that supports the policy used for printing operations, wherein the policy is implemented using a private server in the private network after printing is done in the system when the private server is not available.
Existing policy-based printing systems mostly operate within a closed private domain environment. Print data submitted by users may be only accessible within a single domain environment. Some users, such as on-the-go users including insurance and real estate agents, sales executives, lawyers, and company executives, require the capability to access printing data beyond an office environment. These users travel extensively and find themselves needing to print in public locations, such as convenience stores, libraries, airports, copy and printing service stores, and the like. At these locations, the users may not reliably access the printing data. Further, these public locations may not support policy-based printing.
A method for a printing system is disclosed. The method includes printing a document at a printing device. The method also includes determining a cost for the printed document. The method also includes generating a cost reimbursement data file according to the cost using a mobile application on a mobile device. The method also includes receiving the cost reimbursement data file at a public server. The method also includes submitting the cost reimbursement data file to a private server when connected to the public server. The method also includes associating the cost reimbursement data file to a ledger at the private server. The ledger corresponds to a policy for using the printing device. The method also includes applying the policy to the cost reimbursement data file based on information from the ledger. The policy is stored on the private server. The method also includes determining a payment for printing the document according to the policy.
A method for a printing system is disclosed. The method includes printing a document at a printing device. The method also includes determining a cost for the printed document. The method also includes receiving the cost using a mobile application on a mobile device. The method also includes sending the cost to a public server. The method also includes generating a cost reimbursement data file according to the cost at the public server. The method also includes submitting the cost reimbursement data file to a private server when connected to the public server. The method also includes associating the cost reimbursement data file to a ledger at the private server. The ledger corresponds to a policy for using the printing device. The method also includes applying the policy to the cost reimbursement based on information from the ledger. The policy is stored on the private server. The method also includes determining a payment for printing the document according to the policy.
A method for using a policy-based printing system is disclosed. The method includes generating a request to print a document at a printing device. The method also includes receiving the request at a public server. The method also includes determining that a private server to process the request is not available. The method also includes printing the document at the printing device. The method also includes determining a cost for the printed document. The method also includes receiving the cost using a mobile application on a mobile device. The method also includes generating a cost reimbursement data file according to the cost. The method also includes submitting the cost reimbursement data file to the private server when connected to the public server. The method also includes associating the cost reimbursement data file to a ledger at the private server. The ledger corresponds to a policy for using the printing device. The method also includes applying the policy to the cost reimbursement data file based on information from the ledger. The policy is stored on the private server. The method also includes determining a payment for printing the document according to the policy.
A method for a printing system is disclosed. The method includes determining a cost for the printed document. The method also includes generating a cost reimbursement data file according to the cost. The method also includes receiving the cost reimbursement data file at a public server. The method also includes submitting the cost reimbursement data file to a private server when connected to the public server. The method also includes associating the cost reimbursement data file to a ledger at the private server. The ledger corresponds to a policy for printing the printed document. The method also includes applying the policy to the cost reimbursement based on information from the ledger. The method also includes determining a payment for printing the document according to the policy.
Various other features and attendant advantages of the present invention will be more fully appreciated when considered in conjunction with the accompanying drawings.
Reference will now be made in detail to specific embodiments of the present invention. Examples of these embodiments are illustrated in the accompanying drawings. Numerous specific details are set forth in order to provide a thorough understanding of the present invention. While the embodiments will be described in conjunction with the drawings, it will be understood that the following description is not intended to limit the present invention to any one embodiment. On the contrary, the following description is intended to cover alternatives, modifications, and equivalents as may be included within the spirit and scope of the appended claims. Numerous specific details are set forth in order to provide a thorough understanding of the present invention.
The disclosed embodiments use an authentication server, a policy server, a file server, a network enabled printing device, and a public domain server. At the printing device, a user may provide authentication information, such as a username or password. The authentication information is transmitted from the device to a public domain server that processes the username for domain information. The domain information is matched to a domain on record and a private server is identified that can handle the domain authentication. The public domain server, through a direct connection to the private server, will go through a series of steps to obtain an authentication token, a policy applicable to the user, a job list of the user, and the job binary data for printing a print job on the printing device.
System 100 include public domain 110 and private domains 120 and 130. Public domain 110 may represent a collection of public servers and devices linked to network 102. In some embodiments, these servers are cloud servers. Public domain 110 also may be known as a public network of the public servers. Public domain 110 is accessible by printing device 104. Additional printing devices may connect to public domain 110, such shown by printing device 105. The printing devices may be located in public places, such as convenience stores, libraries, printing and copying stores and kiosks, and the like. Users may access the printing devices and, in turn, the servers within public domain 110. The users may need to validate their ability to access public domain 110 through a connected printing device.
Public domain 110 includes public policy server 112. Public policy server 112 interacts with private domains 120 and 130 as well as printing devices 104 and 105. Public policy server 112 may act as the middle man between public domain 110 and the private domains. Public policy server 112 may generate and store tokens used to implement the policy-based operations disclosed below. It also may store and allow access to a policy 142 received from a private domain, upon request. Policy 142, disclosed in greater detail below, outlines what a user can and cannot do when printing to printing device 104 from a private domain.
Public file server 114 is connected to public policy server 112. Public file server 114 may store or host binary data 140 for print job from a private domain. Printing device 104 may retrieve binary data 140 securely for a print job. In some embodiments, printing device 104 does so through public policy server 112. Public file server 114 also may receive binary data 140 from a server in a private domain, as disclosed below.
System 100 includes private domains 120 and 140. System 100 may include additional private domains, not shown here. Each private domain may include a plurality of private servers that are protected by a firewall from access from network 102. For example, private domain 120 includes firewall 122. Firewall 122 may be a software or hardware device that filters data and information coming over network 102 to private domain 120 for malicious or unauthorized access. If an incoming packet of data is flagged by the filters in firewall 122, then it is not allowed through to private domain 120. Firewall 132 may serve the same function for private domain 130.
Private domain 120 includes private authentication server 124, private job server 126, and private policy server 128. Private domain 130 includes private authentication server 134, private job server 126, and private policy server 128. The servers for private domain 120 are disclosed below, but their functionality may apply to the servers in private domain 130.
Further, additional servers may be in a private domain and used securely to exchange information over network 102.
Private authentication server 124 is a private domain server that will provide authentication and authorize a user to prove his/her identify. Private authentication server 124 may be the main server that connects the private and public domain information exchange. In some embodiments, private authentication server 124 establishes a protocol connection 144 with public policy server 112 to provide a domain list 146 for access to private domain 120. Private authentication server 124 also verifies a user trying to access private domain 120 using public policy server 112.
Private job server 126 is a private domain server that stores all the binary data for the job files, or print jobs. When a user wants to print out a job file at printing device 104, private job server 126 should be queried in order to retrieve binary data 140 to generate the print job. Private job server 126 may forward binary data 140 to public file server 114 according to policy 142.
Private policy server 128 is a private domain server that hosts or stores all the policies, such as policy 142, related to a user. When printing device 104 attempts to perform any function, it should request private policy server 128 determine whether the user is allowed to do so. Private policy 128 may do the determination via public policy server 112.
The disclosed embodiments allow access to private servers from a public domain or to print on printing device 104 within a public network. An intranet application may do the authentication and job spooling so users need to authenticate printing device 104 before use. A policy may be associated with where a user can print, what kind of paper, number of pages, and the like. For example, some users may want to print from a public location, such as a convenience store, and want to access a private server that stores the print jobs. They would need access from network 102.
In some embodiments, public policy server 112 is a cloud server. Public policy server 112 may not be able to do accounting policy management to determine whether a user is allowed to print at printing device 104. Private domains 120 and 130 can operate over the cloud. Public policy server 112 may enforce the rules of the policy but management of the policy is still at a private server. Public policy server 112 also needs to distinguish between the private servers and private domains. Thus, if a user is outside the private network for a private domain, public policy server 112 will find the correct private domain to connect. That private domain will validate the user and access or use of the print job.
Printing device 104 includes a computing platform 201 that performs operations to support these functions. Computing platform 201 includes a computer processing unit (CPU) 202, an image forming unit 204, a memory unit 206, and a network communication interface 210. Other components may be included but are not shown for brevity. Printing device 104, using computing platform 201, may be configured to perform various operations, such as scanning, copying, printing, receiving or sending a facsimile, or document processing. As such, printing 104 may be a printing device or a multi-function peripheral including a scanner, and one or more functions of a copier, a facsimile device, and a printer. To provide these functions, printing device 104 includes printer components 220 to perform printing operations, copier components 222 to perform copying operations, scanner components 224 to perform scanning operations, and facsimile components 226 to receive and send facsimile documents. CPU 202 may issue instructions to these components to perform the desired operations.
Printing device 104 also includes a finisher 211 and one or more paper cassettes 212. Finisher 211 includes rotatable downstream rollers to move papers with an image formed surface after the desired operation to a tray. Finisher 211 also may perform additional actions, such as sorting the finished papers, binding sheets of papers with staples, doubling, creasing, punching holes, folding, and the like. Paper cassettes 212 supply paper to image the various components 220, 222, 224, and 226 to create the image formed surfaces on the papers. Paper cassettes 212 may include papers having various sizes, colors, composition, and the like. Paper cassettes 212 may be removed to refill as needed.
Document processor input feeder tray 230 may be the physical components of printing device 104 to receive papers and documents to be processed. A document is placed on or in document processor input feeder tray 230, which moves the document to other components within printing device 104. The movement of the document from document processor input feeder tray 230 may be controlled by the instructions input by the user. For example, the document may move to a scanner flatbed for scanning operations. Thus, document processor input feeder tray 230 provides the document to scanner components 220. As shown in
Memory unit 206 includes memory storage locations 214 to store instructions 215. Instructions 215 are executable on CPU 202 or other processors associated with printing device 104, such as any processors within components 220, 222, 224, or 226. Memory unit 206 also may store information for various programs and applications, as well as data specific to printing device 104. For example, a storage location 214 may include data for running an operating system executed by computing platform 201 to support the components within printing device 104. According to the disclosed embodiments, memory unit 206 may store the tokens and codes used in performing the authentication operations for printing device 104.
Memory unit 206 may comprise volatile and non-volatile memory. Volatile memory may include random access memory (RAM). Examples of non-volatile memory may include read-only memory (ROM), flash memory, electrically erasable programmable read-only memory (EEPROM), digital tape, a hard disk drive (HDD), or a solid-state drive (SSD). Memory unit 206 also includes any combination of readable or writable volatile memories or non-volatile memories, along with other possible memory devices.
Computing platform 201 may host one or more processors, such as CPU 202. These processors are capable of executing instructions 215 stored at one or more storage locations 214. By executing these instructions, the processors cause printing device 104 to perform various operations. The processors also may incorporate processing units for specific purposes, such as application-specific integrated circuits (ASICs) and field programmable gate arrays (FPGAs). Other processors may be included for executing operations particular to components 220, 222, 224, and 226. In other words, the particular processors may cause printing device 104 to act as a printer, copier, scanner, and a facsimile device.
Printing device 104 also includes an operations panel 208, which may be connected to computing platform 201. Operations panel 208 may include a display unit 216 and an input unit 217 for facilitating interaction with a user to provide commands to printing device 104. Display unit 216 may be any electronic video display, such as a liquid crystal display (LCD). Input unit 217 may include any combination of devices that allow users to input information into operations panel 208, such as buttons, a touch screen, a keyboard or keypad, switches, dials, and the like. Preferably, input unit 217 includes a touch-screen digitizer overlaid onto display unit 216 that senses touch to receive inputs from the user. By this manner, the user interacts with display unit 216. Using these components, one may enter an identification code 138 generated by mobile application 110 into printing device 104.
Printing device 104 also includes network communication processing unit 218. Network communication processing unit 218 may establish a network communication, such as a wireless or wired connection with one or more other image forming apparatuses and a server in an image forming system. CPU 202 may instruct network communication processing unit 218 to transmit or retrieve information over a network using network communication interface 210. As data is received at computing platform 201 over a network, network communication processing unit 218 decodes the incoming packets and delivers them to CPU 202. CPU 202 may act accordingly by causing operations to occur on printing device 104. CPU 202 also may retrieve information stored in memory unit 206, such as settings for printing device 104.
Printing device 104 also includes engine 106. Engine 106 may be a combination of hardware, firmware, or software components that act accordingly to accomplish a task. For example, engine 106 is comprised of the components and software to print a document. It may receive instructions from computing platform 201 after user input via operations panel 208. Alternatively, engine 106 may receive instructions from other attached or linked devices.
Engine 106 manages and operates the low-level mechanism of the printing device engine, such as hardware components that actuate placement of toner onto paper. Engine 106 may manage and coordinate the half-toner, toner cartridges, rollers, schedulers, storage, input/output operations, and the like. Raster image processor (RIP) firmware 290 that interprets the page description languages (PDLs) would transmit and send instructions down to the lower-level engine 106 for actual rendering of an image and application of the toner onto paper during operations on printing device 104.
The processes disclosed by flow diagram 300 seek to solve the problem of how to authenticate a user in one location, such as a convenience store with printing services, that he/she is within an organization that has a policy applicable to the user. Further, the policy is stored in a private domain not readily accessible from the printing device at the convenience store. The printing device is connected to a public network and may be part of a public domain, such as public domain 110. The disclosed embodiments enable the user and the organization to implement the policy, which is applicable to the private domain, within the public domain of the printing device located in the convenience store.
Operation 302 executes by private authentication server 124 sending an initialization request to public policy server 112. As disclosed above, private authentication server 124 is within private domain 120 and public policy server 112 is within public domain 110. To send the initialization request, an administrator enter information about public policy server 112. Such information may include server network address, location, server capabilities, and the like. Once the information is entered, private authentication server 124 generates a verification token 502 which verifies that public policy server 112 is acceptable to receive information and communicate with the private authentication server.
Operation 304 executes by returning acceptance of the initialization request and establishing a protocol connection 144 between private authentication server 124 and public policy server 112. Protocol connection 144 may stay established as long as public policy server has verification token 502. Verification token 502 may be stored on public policy server 112 and presented whenever verification is required by private authentication server 124. Protocol connection 144 provides a persistent connection between private authentication server 124 and public policy server 112 that allows the servers to send data at any time. Protocol connection 144 preferably may be known as a WebSocket connection, which provides a full-duplex communication channel over a single connection. Preferably, protocol connection 144 uses a secure protocol.
Operation 306 executes by providing a domain list 400 from private authentication server 124 to public policy server 112. This operation also may include providing the information about the private authentication server. Action 308 executes by setting domain list 400 at public policy server 112 to include domain information for private authentication server 124. Public policy server 112 may refer to domain list 400 whenever a user attempts to print from a private domain. Public policy server 112 may use information provided by the user to determine which domain to obtain policy 142. For example, public policy server 112 may be connected to more than one private domain. Domain list 400 determines which private domain applies to a user trying to print.
As can be seen, companies, firms, and colleges have an interest in keeping their network domains private. Further, these entities may wish to limit use of printing devices within public domains according to a policy. Domain list 400 also may include an entry for a public domain, such as public domain X. In some instances, a public domain also may include policies to limit capabilities of a user on a printing device 104. These policies, however, may not be within a private domain and available for retrieving through a public network connection. An email domain of “@website.com” may direct public policy server 112 to a public domain for the associated policy 142. Referring back to
Operation 312 executes when a user wants to print a document at printing device 104 coupled to public policy server 112. Authentication information 504 is provided from public policy server 112 to private authentication server 124. In some embodiments, the user enters a username and password that is captured by public policy server 112. For example, the user may enter this information at printing device 104 which forwards it to public policy server 112. Alternatively, the user may connect to public policy server 112 through an application on a mobile device or the like to provide authentication information 504.
In other embodiments, the user may enter a code, such as a personal identification number (PIN), that retrieves this information to provide it to public policy server 112. Public policy server 112 receives the code and matches the user information when the code is provided. Other embodiments may use a graphical code or identification card having a number that provides this information. Operation 312 sends this authentication information 504, such as username, password and PIN, to private authentication server 124.
Action 314 executes by authenticating the user with authentication information 504. Thus, user information is not stored on public policy server 112. Authentication still occurs in private domain 120 behind firewall 122. If the user is authenticated, then action 314 also includes private authentication server 124 generating authentication token 506. Operation 316 executes by indicating that the user has been validated and providing authentication token 506 to public policy server 112. Public policy server 112 may assign authentication token 506 to the user. Using the PIN example, the entered PIN may be associated with authentication token 506.
Private authentication server 124 also may provide an email address or the email domain, such as email domains 402-412 shown in
Once validated, public policy server 112 now retrieves a policy 142 from private policy server 128. Operation 318 executes by getting policy 142. The email domain is compared against domain list 400 to determine which private domain to query for the policy. In this example, user@example1.com is the email provided to public policy server 112. It compares the email to domain list 400 to determine the applicable policy is within private domain 120. Public policy server 112 sends determined domain 508, such as example1.com, along with authentication token 506 to private policy server 128 in operation 318. If the next user has an email domain of @company.com, then public policy server 112 determines that domain 508 is company.com and that the applicable policy is located in private domain 130.
Action 320 executes by identifying policy 142 as being applicable to the user based on domain 508. Authentication token 506 may be associated with the user and this information provided from private authentication server 124. Policy 142 may be a file having flags or other information to indicate what the user can do within a public network. For example, limitations may be set as to what type of printing can be done, the number of pages may be printed, and the like.
Policy 142 may include policy information 448. Policy information 448 may include a title of the policy, document information, and private domain information. Policy 142 includes data, such as flags, that indicates what can and cannot be performed in public domain 110. This data may be known as parameters in policy 142. Examples of parameters that limit printing operations are shown in
Color parameter 450 may indicate whether the user can do color printing in public domain 110. If no, then the user may be limited to only black and write printing. The user may be allowed to do color printing at printing devices in private domain 120 but not allowed to do so in a public domain setting.
Pages parameter 452 may set a limit on the number of pages that a user can print. The administrators of private domain 120 do not want unlimited printing to occur outside the private domain. Pages parameter 452 may limit the number of pages printed per day, week, month, hour, year, and the like. Alternatively, pages parameter 452 may cap the number of pages printed to have the user check with the administrators of public domain 120 to reset this parameter. Once the user hits a limit, he/she requests that the number of pages printed be reset to allow further operations. Costs parameter 454 may be similar to pages parameter 452 except to limit the amount of fees that the user may incur before printing is stopped. Costs parameter 454 helps prevent the user from running up large bills at a convenience store. It also may cap the amount of costs incurred on a periodic basis or as a total cost.
Security level parameter 456 may indicate that the user can only access documents from a job list provided from private job server 126 having a certain security or access level. Security level parameter 456 may help prevent accidental or intentional printing of sensitive documents at printing device 104. Further, the user may have access to sensitive documents when printing within private domain 120 but not so when printing using public domain 110. Policy 142 may limit exposure to such documents.
Location parameter 458 may indicate whether the user can print at certain locations. Policy 142 may place geographic or other limitations on where the user can print using a public domain. Location parameter 458 also may indicate the type of locations to allow printing operations. For example, the administrators of private domain 120 may not allow printing in a convenience store but may allow printing in a library. Device parameter 460 may act similar to location parameter 458 except limit printing on certain devices. For example, policy 142 may not allow printing on a printing device 104 that does not have legal sized paper capability or stores the data from the job file in a memory on the device. Device parameter 460 also may limit printing operations to known printing devices having a serial number or IP address.
Operation 322 executes by providing policy 142 to public policy server 112. Public policy server 112 may configure policy 142 to determine whether the user can print using public domain 110 and what limits on the printing operations may be enforced. Policy 142 may apply to all users of private domain 120. Alternatively, policy 142 may treat users differently. Some users may have unlimited printing privileges according to parameters 452 or 454 while others are prevented from exceeding a cap set forth by these parameters. Public policy server 112 configures the determinations using policy 142 accordingly.
Using the parameters within policy 142, operation 324 executes by getting a job list from private job server 126. Public policy server 112 may generate a job token 510. Job token 510 is presented to private job server 126 to obtain a job list 511 of print jobs available to the user. In some embodiments, job token 510 may include data that specifies what print jobs can be added to job list 511 based on the parameters set forth in policy 146. Job list 511 includes those print jobs that meet the specifications of policy 146. For example, color print jobs will not be included in job list 511 of policy 146 does not allow color printing for the user in a public domain. Action 326 executes by generating job list 511 in response to job token 510. Operation 322 executes by sending the print jobs in job list 511 to public policy server 112 from private job server 126.
The user then may select a print job from job list 511. The user may select from an interface provided on printing device 104 that is then communicated to public policy server 112. Alternatively, an application may execute on a device of the user that presents the job list and allows for selection from the list. The selection is sent to public policy server 112. Operation 330 executes by sending a command to private job server 126 to prepare a selected print job along with a uniform resource locator (URL) address from public policy server 112. The URL address is one associate with public policy server 112 and accessible from public domain 110.
Action 332 executes by retrieving and preparing the data for the print job. Preferably, the data is binary data that represents the document for the print job. This may be shown as binary data 140 in
Operation 334 executes by uploading binary data 140 to the URL address provided in operation 330. Thus, private job server 126 puts the data for the print job outside private domain 120 for the first time at this point. The URL address may be valid for only a specified period of time, such as two hours, one day, a week, and the like. After that point, the URL address may expire. The URL address to download binary data 140 for the print job is provided to public file server 114.
Public policy server 112 now retrieves binary data 140 and sends the data to printing device 104. Before that occurs, however, the disclosed embodiments may confirm whether the user has enough funds to pay for processing and completing the print job. Operation 336 executes by generating a confirmation token 514 at public policy server 112 once it is confirmed that the user or user's account has enough money to cover expenses to print. Public policy server 112 may compare the funds available to the cost to complete the print job. If there are enough funds, then confirmation token 514 is generated and sent to public file server 114. If not, then the user may be alerted to add more funds to his/her account.
Action 338 executes by obtaining uploaded binary data 140 from the URL address. Public file server 114 may send a call to the URL address which then sends binary data 140 to the public file server. Public file server 114 may store binary data 140 until confirmation token 514 is received. If a confirmation token 514 is not received within a specified time frame, then binary data 140 may be deleted from public file server 114. This feature prevents print jobs from private domain 120 from being stored indefinitely in public domain 110. Other factors may be used to determine when to delete any stored files of binary data.
Operation 340 executes by sending binary data 140 for the print job from public file server 114 to public policy server 112. Operation 342 executes by sending binary data 140 from public policy server 112 to printing device 104. Printing device 104 may process the print job accordingly. The user's account for printing on public domain 110 may be charged accordingly as well. In some embodiments, public file server 114 may send binary data 140 to printing device 104.
The disclosed embodiments allow a private domain, or network, to print to a public domain using a policy applicable to the public domain. Internal policies to the private domain are not material to printing in the public domain. Further, job data is kept private as long as possible. The data for the print job is provided to the public domain when requested by the user and approved according to the policy. This feature allows the user to print anywhere. The print job is not automatically sent outside the private domain or from the private servers until printing actually occurs. The disclosed embodiments provide greater flexibility for companies and users to access documents in a secure, private location and use devices and resources in a public setting.
Step 602 executes by establishing a protocol connection 144 between private authentication server 124 and public policy server 112. The protocol connection allows communication between the servers, one in private domain 120 and another one in public domain 110. Step 604 executes by providing a domain list 146 from private authentication server 124 to public policy server 112. Domain list 146 may include applicable private domains and associated email domains that are accessible by public policy server 112. Step 606 executes by entering user data 504 within public network 110 and providing the data to public policy server 112. Step 608 executes by sending user data 504 to private authentication server 124.
Step 610 executes by validating the user at private authentication server 124. Private authentication server 124 checks the provided user data 504 against its stored authentication records for the user. If the user is validated, then step 612 executes by generating authentication token 506. Step 614 executes by receiving authentication token 506 at public policy server 112. Step 616 executes by determining the applicable private domain for the user according to domain list 146. Preferably, public policy server 112 uses the email address for the user to determine which private domain to access for the policy for the user.
Step 618 executes by retrieving policy 142 from private policy server 128 based on the receipt of authentication token 506 and domain 508 from public policy server 112. Private policy server 128 is identified according to the applicable domain 508 and queried by public policy server 112. Once verified, private policy server 128 sends policy 142 to public policy server 112.
Step 620 executes by determining the parameters for policy 142. This process is disclosed above. As shown in
Step 624 executes by determining whether the user is allowed to access printing device 104 using public domain 110 according to the policy. Further, step 624 determines what print jobs are available to the user according to policy 142. The determination also may include reviewing policy 142 for allowing other operations on printing device 104 such as scanning, editing, faxing, and the like. If no, then step 626 executes by sending a message to the user or public policy server 112 that the operation on printing device 104 is not allowed.
If step 624 is yes, then step 628 executes by retrieving the print job from private job server 126. A job list 511 may be provided. The print job is selected from job list 511. Job token 510 is generated by public policy server 112. Public policy server 112 sends job token 510 to private job server 126 to obtain job list 511. Upon selection of the print job, private job server 126 uploads binary data 140 for the print job to a location accessible by public file server 114. Step 630 executes by confirming access to binary data 140 for the print job by checking to see if the user has enough money to pay for using printing device 104. Other restrictions also may be checked, such as time of day, location, and the like, to confirm whether the print job should be released to printing device 104.
Step 632 executes by sending binary data 140 to printing device 104 upon confirmation in step 630. Public policy server 112 generates a confirmation token 514 to confirm that the user is allowed to print. Public policy server 112 may send confirmation token 514 to public file server 114. Upon receipt of the confirmation token, public file server 114 may forward binary data 140 for the print job to public policy server 112, which provides the data file to printing device 104.
As disclosed above, public policy server 112 may interact with a plurality of private domains. Public policy server 112 may retrieve and implement more than one policy for printing or processing print jobs in public domain 110. In some embodiments, public policy server 112 may implement policies for a plurality of public domains as well. Further, a plurality of printing devices may be connected to public policy server 112. Flowchart 700 discloses some embodiments that have public policy server 112 interacting with more than one private domain.
Step 702 executes by validating users within public domain 110 at private authentication server 124. As disclosed above, a protocol connection may be established between public policy server 112 and private authentication server 124 to exchange user information to perform the validation.
Step 704 executes by determining a private policy server for each user according to a domain for the user at public policy server 112. The domains for each user are private domains. Preferably, the email domain for each user indicates the applicable private domain for that user. With two or more users, different email domains may indicate more than one private domain. Step 706 executes by retrieving a policy 142 for each user according to the respective domain from private policy server 128.
Step 708 executes by determining the parameters for each policy 142. All of the policies are received at public policy server 112. Public policy server 112 configures the treatment of printing requests for each private domain according to the corresponding policy. The policy sets forth the parameters for printing from the private domain via the public domain. For example, the parameters for one policy may only allow 100 pages to be printed per user a month from private domain 120 while the parameters for another policy may only allow 20 pages to be printed per user from private domain 130. Public policy server 112 is configured accordingly.
Step 710 executes by determining whether the user is allowed to print according to the applicable policy. If no, then step 712 executes by sending an alert to public policy server 112 or to the user. No printing operations using public domain 110 are allowed. If yes, then step 714 executes by receiving a job list according to the applicable policy from private job server 126. Step 716 executes by making the print jobs in the job list available to the user. Step 718 executes by selecting a print job from the job list. Binary data 140 for the selected print job is retrieved from private job server 126 and made available to public file server 114.
Step 720 executes by confirming whether the print job may be sent to printing device 104. Public policy server 112 confirms that the user has enough funds or credits to perform the request task on printing device 104. If yes, then step 722 executes by sending the print job as binary data 140 to printing device 104. If no, then step 724 executes by denying the print job. The user may be prompted to provide additional funds or credits to perform the requested task.
Step 802 executes by generating authentication token 506 at private authentication server 124. This step occurs once private authentication server 124 validates a user attempting to print using public domain 110. Public policy server 112 sends user information 504 including an email address, username, password, or PIN to private authentication server 124. Private authentication server 124, being in private domain 120, may securely store this information for the user. The secure user information is not made available in public domain 110. Authentication token 506 indicates that the user may access private domain 120. Step 804 executes by sending authentication token 506 to public policy server 112.
Step 806 executes by sending authentication token 506 and domain 508 to private policy server 128. Public policy server 112 sends authentication token 506 and domain 508 after the domain is determined using domain list 146. An email address may indicate an email domain that is used as domain 508. Domain 508 indicates which private domain to access for the applicable policy. For example, referring to
Step 808 executes by retrieving policy 142 from private policy server 128. Authentication token 506 confirms that the user corresponds to the policy. Authentication token 506 may include data provided by private authentication server 124 that identifies the user as able to use private domain 120 and, therefore, policy 142 for the private domain should be used in printing on public domain 110. Private policy server 128 sends policy 142 to public policy server 112. Public policy server 112 then configures itself to apply the parameters of the policy to using public domain for the user.
Step 810 executes by generating job token 510 at public policy server 112 after applying the parameters of policy 142. The parameters may detail what the user can do using public domain 110. These parameters may not necessarily correspond to what the user can do using private domain 120. Limitations are placed on the user on how he/she can use printing device 104. Job token 510 may reflect the parameters to compile the job list of print jobs available to the user according to policy 142.
Step 812 executes by sending job token 510 to private job server 126. Private job server 126 may store the print jobs available to the user or to users in private domain 120. In some embodiments, a plurality of print jobs may be available such that a job list 511 is generated based on the parameters for the user in using public domain 110. Job token 510 may be used in generating job list 511 in that it includes information to select the appropriate print jobs to include in the print job list.
Step 814 executes by providing print job list 511 to public policy server 112. The user may select a print job from print job list 511. Alternatively, the desired print job may already be selected such that public policy server 112 receives data for the selection, such as from an application on a mobile device, that corresponds to the print job in job list 511. Public policy server 112 then requests the print job data from private job server 126. Step 816 executes by sending job binary data 140 for the selected print job from private job server 126 to public file server 114.
Step 818 executes by confirming whether the user may print or process the print job at printing device 104. For example, public policy server 112 may confirm that the user has enough funds in an account to pay for printing on printing device 104. If step 818 is no, then step 820 executes by sending an alert to the user or to public policy server 112 that printing operations are to be stopped until the condition is met. Using the above example, the user may be asked to provide additional funds to his/her account to print the document.
If step 818 is yes, then step 822 executes by generating confirmation token 514 by public policy server 112. Confirmation token 514 indicates that the processing of binary data 140 at printing device 104 may proceed. Step 824 executes by sending confirmation token 514 to public file server 114 to obtain binary data 140, which is stored thereon. Public file server 114 may send binary data 140 to public policy server 112 upon receipt of confirmation token 514.
Step 826 executes by providing binary data 140 to printing device 104. Public policy server 112 may send binary data 140 once a connection is established with printing device 104. Public policy server 112 may have to wait until printing device 104 is available before forwarding binary data 140. Thus, the data from private job server 126 is not made available on printing device 104 until the operations are ready to commence. Although the current embodiments discuss printing on printing device 104, other operations also may occur, such as scanning, editing, faxing, and the like.
As disclosed above, different policies apply to different to users and prints jobs from different private domains. One private domain may not allow color printing while another private domain may not allow unlimited printing. Thus, public policy server 112 configures itself to resolve the different requirements set forth in a plurality of policies from various private policy servers. Further, public policy server 112 may manage different job lists and print jobs from the plurality of private domains. Alternatively, a private domain may have different domains related to it, such as example1.com and example2.com for private domain 120 shown in
Step 902 executes by generating verification token 502 at private authentication server 124. Private authentication server 124 receives information about public policy server 112 in order to establish a protocol connection. Verification token 502 helps to establish a connection between private authentication server 124 and public policy server 112. Private authentication server 134 also may generate a verification token 502 to establish protocol connection to public policy server 112.
Step 904 executes by sending verification token 502 to public policy server 112. Step 906 executes by storing verification token 502 at public policy server 112. As long as public policy server 112 can present verification token 502 when requested or when submitting a print request for a user, the connection is established with private authentication server 124. Step 908 executes by providing domain list 146 from private authentication server 124 to public policy server 112. Domain list 146 may include information pertaining to a plurality of domains for a plurality of private domains, as disclosed by
Step 910 executes by generating a first authentication token 506. Step 912 executes by generating a second authentication token 506. The first authentication token may be generated in response to a first user providing user information at public policy server 112. The second authentication token may be generated in response to a second user providing user information at public policy server 112. Public policy server 112 may access the appropriate private authentication server to validate the user information for each user. In some embodiments, private authentication server 124 may validate both users and generate both authentication tokens. Alternatively, private authentication server 124 may generate the first authentication token while private authentication server 134 may generate the second authentication token. Public policy server 112 may have instructions when to use the different private authentication servers.
Step 914 executes by sending the first authentication token and a first domain to a first private policy server. Step 916 executes by sending the second authentication token and a second domain to a second policy server. Public policy server 112 determines which private domain is applicable to each user. The determination of the private domain may be based on the email address for each user. In some embodiments, public policy server 112 may send this data to a single private policy server, which stores different policies for different domains that use a single private domain. Alternatively, the authentication tokens and domains may be sent to separate private policy servers. For example, the first authentication token and first domain are sent to a first private policy server, such as private policy server 128. The second authentication token and the second domain are sent to a second private policy server, such as private policy server 138.
Flowchart 900 proceeds to steps A1 and A2 for steps 914 and 916, respectively. Steps A1 and A2 then proceed to steps 918 and 920, respectively. Step 918 executes by retrieving a first policy, such as policy 142, in response to the first authentication token and the first domain. Step 920 executes by retrieving a second policy, such as policy 142, in response to the second authentication token and the second domain. In some embodiments, the first policy is stored on private policy server 128 and the second policy is stored on private policy server 138. Alternatively, both policies may be stored on private policy server 128 or 138. The first policy may apply to the first user and the second policy may apply to the second user.
Step 922 executes by receiving the first and second policies at public policy server 112. Step 924 executes by determining access to a first print job according to the first policy and access to a second print job according to the second policy. Public policy server 112 may configure the parameters of each policy to determine what type of print jobs may be made available to each user. For example, the first print job may not be available to the second user according to the second policy. The determination of access may relate to what print jobs are available to the users over public domain 110.
Step 926 executes by generating first and second job tokens, such as job token 510, based on the first and second policies at public policy server 112. A first job token is generated for the first policy and a second job token for the second policy. In some embodiments, the first job token may be sent to private job server 126 and the second job token may be sent to private job server 136. The different private job servers are in separate private domains. Alternatively, the job tokens may be sent to private job server 126 or 136.
Step 928 executes by retrieving a first job list, such as job list 511, based on the first policy and the received first job token and retrieving the second job list, such as job list 511, based on the second policy and the received second job token. The applicable private job server or servers provide the job lists to public policy server 112. The first user may select a first print job from the first print job list. The second user may select a second print job from the second print job list. These requests are communicated back to the application private job server or servers. The binary data for the first and second print jobs are sent to public file server 114.
Step 930 executes by generating confirmation tokens, such as confirmation token 514, at public policy server 112 to indicate that the print jobs may be processed at printing device 104. Public policy server 112 may confirm that each user has enough funds in his/her account to perform operations on printing device 104, as disclosed above. A first confirmation token for the first print job is presented to public file server 114. A second confirmation token for the second print job is presented to public file server 114. Public file server 114 provides the binary data for each print job to public policy server 112. Step 932 executes by sending the binary data for the first and second print jobs to printing device 104.
In some embodiments, it may be desired to not provide the policy to the public domain, either in a public domain server or the printing device. The policy could include details that are sent to many components within the system. Some servers and devices may not be able to implement the policy effectively. A policy may be a complex concept.
Whenever policy data arrive at the device, the data may need to be parsed correctly and applied correctly when a print job is sent to the device. These operations may impose a heavy burden on the development and maintenance of the device. Preferably, the printing system would like the printing device, for example, to focus on what it does, such as printing, scanning, or copying.
On the private server, a ledger may exist that records all the actions performed by all end user who are printing, copying, scanning, and the like within system 1000. The users may utilize printing devices and servers in a public domain such that they perform actions outside the normal corporate environment. A public server may serve as a gateway to the private domain. It may have open websocket bi-directional communication with the private server, as disclosed above. The printing device is connected to the public network and also is connected to the public server to whether it can do a simple action on behalf of the user in processing a document.
Public server 1004 may refer to any of the servers in the public domain, such as public file server 114 and public policy server 112 of public domain 110 shown in
Printing device 1006 may receive documents from public server 1004 as well as other sources to print, copy, store, modify, and the like. The features of printing devices according to the disclosed embodiments are disclosed above. Printing device 1006 may include device identification 1018 that indicates a unique identifier within system 1000. In some embodiments, device identification 1018 may be a number, alphanumeric characters, or a combination thereof. Public server 1004 may send documents and files to printing device 1006 based on device identification 1018.
Mobile device 1008 may be a mobile device, tablet, and the like. Mobile device 1008 may move between the private domain and the public domain, as separated by firewall 1011. It also may access private server 1002 as well as public server 1004. A user may send and receive data from the servers at mobile device 1008. Mobile device 1008 also may send instructions 1014 to printing device 1006 to print, copy, scan, and the like stored documents from private server 1002. Mobile device 1008 is disclosed in greater detail in
Private server 1002 may upload document 1012. Document 1012 may be similar to the print jobs disclosed above. Document 1012 includes data and information that is transmitted to devices within the private domain. The user of mobile device 1008 may upload document 1012 within the private domain. Document 1012, however, may be processed and printed at devices outside the public domain and not necessarily at devices connected to private server 1002. Policy 1010 also may be used to determine how and if document 1012 is used within system 1000 outside the private domain.
The user may authenticate mobile device 1008 to public server 1004 according to the disclosed embodiments. For example, mobile device 1008 may provide verification data, such as a user/account name and password, to verify the user to public server 1004. This process may be disclosed above with regard to verification between public policy server 112 and private authentication server 124. Alternatively, the verification data may be a token used by user device to authenticate the user in a public domain. Upon authentication, websocket connection 1005 may be established to allow open bi-directional communication between private server 1002 and public server 1004.
In some embodiments, printing device 1006 receives instructions 1014 from mobile device 1008 to process document 1012. An electronic copy of document 1012 may be sent to printing device 1006 to process and print, copy, scan, and the like. The user also may modify the electronic copy. In summary, a document stored on private server 1002 is made available on a public printing device.
Before receiving document 1012, printing device 1006 in conjunction with public server 1004 and private server 1002 may determine whether any action on behalf of the user is allowed at the printing device. An action by printing device 1006 is a simple operation of print, copy, scan, and the like. It may be measured in the smallest scale possible, such as a single page at a time. Thus, printing device 1006 may send request 1016 to public server 1004, which is then forwarded to private server 1002. Request 1016 may be generated at mobile device 1008 or printing device 1006. Printing device 1006 merely has to determine whether it can perform an operation or not. Printing device 1006 does not do any analysis of policy 1010.
Public server 1004 receives request 1016 pertaining to the user instructions to printing device 1006 to process document 1012. Public server 1004 may forward request 1016 without further processing. Upon receipt of responses from private server 1002, public server 1004 may forward document 1012 or provide further instructions to printing device 1006. Public server 1004 also may check to determine if private server 1002 is available to receive request 1016. If not, then public server 1004 may store request 1016 and resubmit it when connection 1005 is available. Other operations also may occur, as disclosed below.
Private server 1002 receives request 1016 from public server 1004 via websocket connection 1005. If no websocket connection exists, then private server 1002 may not receive the request and public server 1004 responds to printing device 1006 with an alert that printing, copying, scanning, and the like for request 1016 is denied. In some embodiments, public server 1004 may allow printing device to proceed with printing document 1012. Upon receipt of request 1016, private server 1002 analyzes policy 1010 to determine whether the action is allowed for the user on printing device 1006. Private server 1002 also compiles or accesses ledger 1003 to determine if the action is allowed. Ledger 1003 may be a record or file of all fine grained action within system 1000 that provides the status of the account for the user. For example, ledger 1003 may indicate how many pages that the user has printed in the policy-set period, costs incurred, and other statistics of actions limited by policy 1010.
Update 1020 also may be received at private server 1002 that impacts policy 1010 and ledger 1003. Update 1020 may change the parameters of interest to policy 1010 or provide temporary adjustments to the policy. For example, the user may exceed his/her printing page limit by a specified number of pages for a 24 hour period. The user is attending an important off-site meeting or conference that would provide a good reason to exceed the daily printing limit. Update 1020, however, is not meant to be permanent. In the disclosed embodiments, update 1020 may be implemented in a more efficient manner by keeping policy 1010 at private server 1002 as opposed to having it stored on public server 1004. Private server 1002 does not need to update policies in the public domain or on different devices because all policy analysis and determinations may be performed at the private server. In some embodiments, update 1020 may modify policy 1010 to allow unused usage from a previous period or borrow usage from a future period for a current period.
Depending on the results of the determination, private server 1002 sends response 1022 to public server 1004. Response 1022 may include a copy of document 1012 for printing. Response 1022 may include more than one response, but is shown as a single response for brevity. Public server 1004 may analyze the response to ensure it is appropriate. Public server 1004 forwards response 1022 to printing device 1006, which acts accordingly. In some embodiments, public server 1004 also may send response 1022 or a message associated thereto to mobile device 1008. The response sent to mobile device 1008 also may include statistics or information regarding the status of the user's account based on ledger 1003 and policy 1010.
System 1000 shows mobile device 1008 sending instructions 1014 to printing device 1006. In some embodiments, the user may interact directly with printing device 1006 to process document 1012 thereon. Use of a mobile device 1008 is not required to print, copy, or scan a document at printing device 1006 or within the public domain.
Public server 1004 receives request 1016 from mobile device 1008 or printing device 1006 to print document 1012. Private server 1002, however, is not connected or available to receive data or communications from public server 1004. In some embodiments, public server 1004 may instruct printing device 1006 to print document 1012 directly. Alternatively, public server 1004 may send a response to mobile application 1130 on mobile device 1008 that private server 1002 is not available. Mobile application 1130 may enable printing operations using mobile device 1008 within system 1000. For example, mobile application 1130 may generate request 1016 to print document 1012 then send instructions 1014 to print document 1012 to printing device 1006.
Mobile application 1130 may indicate that the user of mobile device 1008 is allowed to print under these circumstances and submit the resulting cost for reimbursement. The disclosed embodiments, however, remove the need for the user to physically submit any receipts or materials for reimbursement. Further, policy 1010 may be applied to determine whether the user is entitled for reimbursement. For example, the print job for document 1012 may exceed the limits set by the parameters of policy 1010. The company of the user may decline to reimburse for this printing or the user may be required to submit additional materials for reimbursement. If the user is allowed to print the document according to the policy, then payment may be issued without further requirements.
Printing device 1006 prints document 1012 as instructed by public server 1004 or mobile device 1008. Document 1012 may be stored on public server 1004 or, in some instances, on mobile device 1008. Private server 1002 may have made document 1012 available in response to an earlier request but the user did not print it yet. Alternatively, public server 1004 may store some documents for remote printing. For example, public server 1004 may store in memory 1111 those documents that have been printed by the user recently. If the user is printing documents to be handed out at a conference, then update 1020 may allow an overage situation to temporarily exceed the limits invoked by policy 1010. The document is stored on public server 1004 to allow quick access without repeated approval from private server 1002. Private server 1002 may place a limit on the access on public server 1004.
After printing, printing device 1006 issues a receipt 1108. Receipt 1108 may be a physical item, such as a piece of paper. Alternatively, receipt 1108 may be a data file encoding the payment information. The user pays for the print job at the location of printing device 1006. For example, the user may pay at a kiosk attached to printing device 1006 or a cashier serving the location of the printing device. Receipt 1108 then is captured or received by mobile application 1130. Mobile application 1130 may use camera or scanner 1104 to capture an image of receipt 1108. Mobile application 1130 then may analyze the image to determine the cost for printing document 1012. Alternatively, the user may enter the amount into mobile application 1130 using mobile device 1008. In other embodiments, receipt 1108 may be scanned or captured by printing device 1106 and forwarded to mobile application 1130. Receipt 1108 also may be received in an email from the printing device. The user may input an email address or number for mobile device 1008 to receive a text message with receipt 1108.
Once the cost is determined from receipt 1108, the amount for cost reimbursement may be determined. In some embodiments, the actual cost of printing may be the amount. Alternatively, other costs may be applied to the printing cost, such as taxes, per use fees, and the like. A cost reimbursement data file 1110 is generated by mobile application 1008. Cost reimbursement data file 1110 is compatible within system 1000 for public server 1004 and private server 1002 to receive and process. Further, an entry may be made in mobile application 1130 that data file 1110 is created and submitted. Preferably, cost reimbursement data file 1110 differs from receipt 1108 in that receipt 1108 may be a captured image while the data file includes a specified format with data entries to be retrieved when applying policy 1010. In some embodiments, however, receipt 1108 may be used as a cost reimbursement data file.
Public server 1004 receives cost reimbursement data file 1110. Mobile application 1130 may send data file 1110 corresponding to the cost set forth in receipt 1108. Public server 1004 confirms the validity of cost reimbursement data file 1110 and that the user of mobile application 1130 is allowed to submit receipts for reimbursement. Public server 1004 also may match information within the data file to records on print jobs sent to printing device 1006 to confirm that document 1012 is printed. This feature may prevent receipts not related to printing operations from being submitted. Public server 1004 stores cost reimbursement data file 1110 in memory 1111.
In some embodiments, public server 1004 may generate cost reimbursement data file 1110. Mobile application 1130 forwards receipt 1108 in electronic form, as captured or received by mobile device 1008. Alternatively, printing device 1006 may send receipt 1108 directly to public server 1004. Application 1109 executes on public server 1004 to identify the cost of the printing operations to generate cost reimbursement data file 1110, as disclosed above. This feature may alleviate the need for different mobile applications to generate data files that may have differing formats and information. Application 1109 can generate data files in a common format acceptable to private server 1002. Further, an update to the process of identifying information for the cost reimbursement may be done once for application 1109 as opposed to a plurality of mobile applications 1130. Application 1109 may identify the possible cost figure by scanning receipt 1108 to identify money designations, such as or Y. Then, it may identify numbers after such symbols to obtain the cost for the printing operations.
Public server 1004 stores cost reimbursement data file 1110 in memory 1111. At some point, private server 1002 reconnects with public server 1004. Private server 1002 may come back on-line to system 1000 or is made available to exchange data within the system. Public server 1004 may periodically test connection 1005 to determine that private server 1002 is available. Public server 1004 may send a test message to private server to confirm availability. Once confirmed, public server 1004 may send a cost reimbursement request including cost reimbursement data file 1110, much like request 1016 disclosed above.
Private server 1002 receives cost reimbursement data file 1110 from public server 1004 now that connection 1005 is established. Private server 1002 applies policy 1010 along with information from ledger 1003 to determine whether the cost from printing document 1012 is approved. Ledger 1003 includes entries 1120 and 1122. Private server 1002 may instruct ledger 1003 to determine the status of account 1123 for the user of mobile device 1002. Entry 1120 may represent the account status before receipt of the cost reimbursement request, such as when private server 1002 went off-line. For example, entry 1120 may relate to the total cost of pages printed by the user during the week. Entry 1120 also may represent multiple entries of actions taken by the user during the printing period. Entry 1122 may represent the status of account 1123 after applying the cost or numbers from receipt 1108 as set forth in cost reimbursement data file 1110. Entry 1122 also may include the number of pages printed at printing device 1006.
Policy 1010 is applied to the updated entry of ledger 1003 to determine if the parameters of the policy have been exceeded or breached. For example, account 1123 for the user may allow a total cost for printing of S20 per week, as set forth in policy 1010. Cost reimbursement data file 1110 includes a cost of S5. Entry 1120 may include an accumulated cost of S17 for printing during the current week. Adding the S5 cost to entry 1120 would cause entry 1122 to exceed the S20 limit. Thus, the cost reimbursement request may be denied or extra information required for approval. In some embodiments, update 1020 may allow the user to exceed the S20 limit and policy 1010 approves the submission.
If the cost reimbursement request is allowed, then private server 1002 may instruct payment 1112 be provided to the user. Alternatively, the cost set forth in cost reimbursement data file 1110 may be credited to account 1123 for the user. If the request is denied, then message 1114 may be sent to mobile device 1008 indicating the denial. Further, message 1114 may include a request for additional information in order to approve the submission. The user may need to consult with an administrator to provide an update 1020 to account 1123 and allow the reimbursement. Message 1114 also may be sent for an approval of the reimbursement request as well. Message 1114 may be received in mobile application 1130.
Ledger 1003 also may include an accumulated cost 1124 that is used to deny cost reimbursement requests based on a corporate or organization level as opposed to an individual account. For example, the total costs for printing operations of user's organization is limited so that unplanned costs are not absorbed by the organization. The user may be reimbursed but at a later date. Private server 1002 may use entry 1122 of account 1123 to determine if the total costs exceed a set limit. Accumulated cost 1124 may be updated with all costs submitted through the disclosed processes. If it exceeds the limit for the organization, then payment may be denied and message 1114 sent to mobile application 1130.
Memory 1290, such as random access memory (RAM), a flash memory, or other type of memory, is accessible by processor 1210. In some embodiments, memory 1290 may be partially comprised of read-only memory (ROM). Memory 1290 may be configured to store an operating system (OS) 1230, data 1220, and applications 1240. Applications 1240 include client agents, mobile applications, and mobile location-enabled applications that may provide location-based services to the user. Data 1220 may include data received from the other entities in system 1000, such as private server 1002, public server 1004, and printing device 1006.
Processor 1210 may be coupled, either directly or via appropriate intermediary hardware, to a display 1250 and to one or more input/output (I/O) devices 1260, such as a keypad, a touch panel sensor, a microphone, and the like. Processor 1210 also may be coupled to transceiver 1225 that interfaces with an antenna 1275 to send and receive data within system 1000. Transceiver 1225 may be configured to transmit and receive cellular network signals, wireless data signals, or other types of signals via antenna 1275. Mobile device 1008 may be configured by an application 1240 to receive and transmit specific types of signals. Mobile device 1008 also may include a port or connection through I/O devices 1260 to communicate with a device connected by a wire or other physical connection. In some embodiments, a global positioning system (GPS) receiver 1280 also may make use of antenna 1275 to receive GPS signals.
Mobile device 1008 also includes camera 1104. Camera 1104 may capture images for use by applications 1240. Specifically, camera 1104 may act as a scanner to capture images, graphical codes, video, or other visual data. The captured data may be used in mobile application 1130. Mobile application 1130 may upload the captured data as document 1012 to private server 1002. The appropriate application within applications 1240 may control camera 1104.
Each of camera 1104, display 1250, transceiver 1225, GPS receiver 1280, processor 1210, memory 1290, I/O devices 1260, and antenna 1275 may be connected to interconnect 1295. Alternatively, the components of mobile device 1008 may be connected directly or indirectly to one or more of each other. Interconnect 1295 may be one or more mobile device communications systems such as a bus or other hardware to enable communication between the components of mobile device 1008.
Applications 1240 include mobile application 1130 to enable policy-based printing within system 1000. Mobile application 1130 on mobile device 1008 may be used to authenticate the user with private server 1002 and to select a print job to print at a printing device outside the private domain. The disclosed embodiments may allow the user to authenticate with private server 1002 with mobile application 1130. The user may not want to do authentication again so the disclosed embodiments allow printing operations to proceed without repeated authentication information submissions.
Policy-based printing with mobile application 1130 also may allow printing to occur on a printing device that does not work with private server 1002 or public server 1004. Mobile device 1008 may act as the “printing device” to these components within system 1000. Private server 1002 applies policy 1010 to a print job request and makes document 1012 available to mobile device 1008 using mobile application 1130. The document is sent to public server 1004. Mobile application 1130 may download the document from public server 1004. Mobile application 1130 may send document 1012 to printing device 1006 to print the document.
Mobile device 1008 may store receipt 1108 in memory 1290. Receipt 1108 may be sent by printing device 1006 to mobile device 1008. Alternatively, receipt 1108 may be captured as an image using camera 1104. Receipt 1108 is stored as data. Mobile application 1130 may access receipt 1108 when launched. Mobile application 1130 identifies features within receipt 1108 to determine cost, number of pages printed, user information, printing device information, and the like. After the desired information is identified, cost reimbursement data file 1110 is generated. It also may be stored in memory 1290 until forwarded to public server 1004. Preferably, data files may have a common format whereas receipts may come in a variety of formats and types.
In some embodiments, the features of mobile application 1130 disclosed above are executed by application 1109 on public server 1004. Mobile application 1130 may just forward receipt 1108 to public server 1004, which identifies the cost and other information in the receipt to submit in the cost reimbursement request. Mobile application 1130 may keep a log with entries of print jobs processed and sent to public server 1004.
According to the disclosed embodiments, when mobile application 1130 is launched on mobile device 1008, the mobile device become a special purpose device to enable policy-based printing operations and reimbursement submissions. Processor 1210 is configured to perform the operations to obtain and receive a document to print from private server 1002. Mobile application 1130 controls the other components of mobile device 1008 to perform the operations disclosed in
Step 1302 executes by generating request 1016 to print document 1012 at printing device 1006. Request 1016 may be generated by mobile application 1130 or printing device 1006. The user may select document 1012 to print. Step 1304 executes by receiving request 1016 at public server 1004. Mobile application 1130 or printing device 1006 may send the request. These steps occur as disclosed above.
Step 1306 executes by determining that private server 1002 is not available. Private server 1002 may be off-line or the network connection is not working. Public server 1004 determines that request 1016 will not be considered for printing document 1012. Public server 1004 may send a message back to mobile application 1130 or printing device 1006 requesting that the user indicate if he/she would still like to print the document and pay the costs. This feature allows the user to not print the document if he/she does not want to pay for the print job. The user may indicate that document 1012 is to be printed using mobile application 1130 or operation panel 208 on printing device 1006.
Presuming the user wants to print the document, step 1308 executes printing document 1012 at printing device 1006. The pages are printed and collected by the user. The user may acknowledge that he/she is done printing. Step 1310 executes by determining the cost for printing document 1012. Cost may include a price per page or the price for a single print job. The total cost is calculated and the user pays in the appropriate manner. The user may pay at printing device 1006 or a kiosk associated with the printing device. Step 1312 executes by generating receipt 1108 based on the cost. Receipt 1108 may be a paper receipt that is printed out or may be an electronic data file with the information. Depending on the type of receipt, step 1314 or 1318 is executed.
Step 1314 executes by scanning receipt 1108 using camera 1104 of mobile device 1008. As disclosed above, the image captured by camera 1104 may be stored on mobile device 1008. Alternatively, the user may enter data from receipt 1108 into mobile application 1130. Step 1316 executes by analyzing the image of receipt 1108 or the entered data to determine the costs incurred, number of pages printed, and other information. Mobile application 1130 may use optical character recognition to determine this information. Alternatively, application 1109 of public server 1004 may perform these functions based on the scanned image of receipt 1108.
Step 1318 executes if receipt 1108 is data generated by printing device 1006. As the data is already in an electronic format, receipt 1108 does not need to be scanned. Further, a scanned image may not need to be analyzed to determine the cost information. Thus, step 1318 proceeds to step 1320, which executes by generating cost reimbursement data file 1110. Again, this step may be performed using mobile application 1130 or application 1109 on public server 1004. Cost reimbursement data file 1110 is in a format readable by private server 1002. Data file 1110 includes the cost to print document 1012 as well as other parameters of the print job, such as number of pages printed, the printing device location, and the like.
Step 1322 executes by storing cost reimbursement data file 1110 at public server 1004. If public server 1004 generates data file 1110, then it is stored in memory 1111. If mobile application 1130 generates data file 1110, then it may be received at public server 1004 and stored in memory 1111. Cost reimbursement data file 1110 may stay stored until sent by public server 1004 to private server 1002. The storage of data file 1110 may be updated to be removed if the user personally submits the reimbursement request.
Step 1324 executes by determining private server 1002 is back on-line or available. Connection 1005 is re-established with public server 1004. Public server 1004 may authenticate connection 1005 with private server 1002 as disclosed above. Step 1326 executes by submitting cost reimbursement data file 1110 to private server 1002. Data file 1110 may include information indicating that the reimbursement request is from the user. For example, mobile application 1130 may add information to receipt 1108 or data file 1110 sent to public server 1004 that identifies the user as requesting payment. Using the user information, private server 1002 determines the appropriate policy to determine whether to reimburse the user.
Step 1328 executes by applying policy 1010 on private server 1002 to the cost reimbursement request of data file 1110. This step is disclosed in greater detail in
Step 1402 executes by receiving cost reimbursement data file 1110 at private server 1002. Private server 1002 may verify data file 1110 in that it is an adequate request for reimbursement. For example, data file 1110 may be analyzed to determine if it includes cost information or user information that allows it to be adequately processed. Step 1404 executes by associating policy 1010 with cost reimbursement data file 1110. Private server 1002 may identify the user submitting the request and retrieve the associated policy to apply.
Step 1406 executes by updating entries within ledger 1003 with the information from cost reimbursement data file 1110. As disclosed above, entry 1120 may represent the accumulated cost or pages printed for the period specified by policy 1010. The information provided in data file is added to this amount to produce entry 1122. The data of entry 1122 is compared against the parameters of policy 1010, as disclosed above. Step 1408 executes by determining whether policy 1010 allows the reimbursement of the print job for printing document 1012 at printing device 1006. If one of the policy's parameters is exceeded, then the user may not be reimbursed for the cost of printing. The disclosed embodiments also may take into account any update 1020 to policy 1010 that allows for overage conditions under certain circumstances.
In some embodiments, policy 1010 may indicate that some costs are reimbursed while others are not. For example, a print job at printing device may cost S5. Entry 1120 indicates that the user already used S17 in printing costs for the period, such as a week. Policy 1010 sets forth a parameter to limit printing costs per week as S20. Thus, the user may be reimbursed for S3 according to policy 1010. In other embodiments, update 1020 may allow printing costs up to S25 for the day that document 1012 was printed. Policy 1010 allows the full cost to be reimbursed.
If step 1408 is yes, then step 1410 executes by analyzing accumulated cost 1124 to determine if it exceeds a cost limit imposed on the organization that employs or allows the user to print. There may be a total cost for users in the organization or group that is not be exceeded. This feature may place a limit on updates 1020 or changes allowed to the printing parameters of policy 1010. Step 1412 executes by determining whether to allow the cost reimbursement based on accumulated cost 1124. If yes, then step 1414 executes by accepting the cost reimbursement request and issuing payment or credit to the user. Step 1416 executes by updating ledger 1003 accordingly. Entry 1122 becomes the entry with the latest information for account 1123 and accumulated cost 1124 is increased accordingly.
If step 1408 or step 1412 is no, then step 1418 executes by denying the cost reimbursement request. As disclosed above, a message 1114 may be sent to the user. The disclosed embodiments also may send a message to an administrator to see if and update 1020 can be issued to allow reimbursement. Step 1418 also may request that the cost reimbursement request be resubmitted.
Thus, the disclosed embodiments allow a flexible policy to be applied that permits the user to pay at the store or printing location when the policy cannot validate the print request. The mobile application or the public server automatically generates the cost reimbursement request. The public server submits the request to the user's company to process the accounting and reimbursement of the cost. This feature may be desirable when the user is traveling extensively and cannot submit receipts at the company. Further, real time tracking of printing accounts may be realized so that costs are contained and updated.
As will be appreciated by one skilled in the art, the present invention may be embodied as a system, method or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment (including firmware, resident software, micro-code, etc.) or an embodiment combining software and hardware aspects that may all generally be referred to herein as a “circuit,” “module” or “system.” Furthermore, the present invention may take the form of a computer program product embodied in any tangible medium of expression having computer-usable program code embodied in the medium.
Any combination of one or more computer usable or computer readable medium(s) may be utilized. The computer-usable or computer-readable medium may be, for example but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, device, or propagation medium. More specific examples (a non-exhaustive list) of the computer-readable medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a transmission media such as those supporting the Internet or an intranet, or a magnetic storage device. Note that the computer-usable or computer-readable medium could even be paper or another suitable medium upon which the program is printed, as the program can be electronically captured, via, for instance, optical scanning of the paper or other medium, then compiled, interpreted, or otherwise processed in a suitable manner, if necessary, and then stored in a computer memory.
Computer program code for carrying out operations of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C++ or the like and conventional procedural programming languages, such as the “C” programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet Service Provider).
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.
The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used herein, the singular forms “a,” “an” and “the” are intended to include plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms “comprises” and/or “comprising,” when used in this specification, specific the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.
Embodiments may be implemented as a computer process, a computing system or as an article of manufacture such as a computer program product of computer readable media. The computer program product may be a computer storage medium readable by a computer system and encoding a computer program instructions for executing a computer process. When accessed, the instructions cause a processor to enable other components to perform the functions disclosed above.
The corresponding structures, material, acts, and equivalents of all means or steps plus function elements in the claims below are intended to include any structure, material or act for performing the function in combination with other claimed elements are specifically claimed. The description of the present invention has been presented for purposes of illustration and description, but is not intended to be exhaustive or limited to the invention in the form disclosed. Many modifications and variations will be apparent to those of ordinary skill without departing from the scope and spirit of the invention. The embodiment was chosen and described in order to best explain the principles of the invention and the practical application, and to enable others of ordinary skill in the art to understand the invention for embodiments with various modifications as are suited to the particular use contemplated.
One or more portions of the disclosed networks or systems may be distributed across one or more multi-functional printer (MFP) systems coupled to a network capable of exchanging information and data. Various functions and components of the MFP system may be distributed across multiple client computer platforms, or configured to perform tasks as part of a distributed system. These components may be executable, intermediate or interpreted code that communicates over the network using a protocol. The components may have specified addresses or other designators to identify the components within the network.
It will be apparent to those skilled in the art that various modifications to the disclosed may be made without departing from the spirit or scope of the invention. Thus, it is intended that the present invention covers the modifications and variations disclosed above provided that these changes come within the scope of the claims and their equivalents.
| Number | Date | Country | |
|---|---|---|---|
| Parent | 16838313 | Apr 2020 | US |
| Child | 17551657 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 16452038 | Jun 2019 | US |
| Child | 16838313 | US | |
| Parent | 16451913 | Jun 2019 | US |
| Child | 16452038 | US | |
| Parent | 16452041 | Jun 2019 | US |
| Child | 16451913 | US |
