Patent Application
20050154884
The present application claims under 35 U.S.C. § 119, the benefit of European Patent Application No. 03078762.6 filed Nov. 27, 2003, the entire contents of which are herein fully incorporated by reference.
1. Field of the Invention
The invention relates to a method of secure transmission of digital data relating to a document between any of a scanner, a printer and a host computer such as a user workstation, interconnected by a digital network.
2. Discussion of the Background Art
Nowadays, the generating and printing of documents must comply with various different levels of security. Furthermore, various printing organizations/configurations exist that may introduce distances both in time and in space between the generating of the document and the printing proper thereof. Such distances may have various aspects, such as: generating a document at home and using the Internet for transferring to/printing at the Office; composing a document and putting it in a printing queue that resides in a Mailbox of a shared printer, e.g. Océ 3165™, such as through storing on a hard disk that is located therein; letting the electronic version of a printed document after actual printing thereof remain stored for a certain interval of time, such as twenty-four hours, in an intermediate storage facility that is more or less freely accessible, and various others.
In particular, European Patent Application Publication No. A1 0 929 023 discloses a secure printing approach wherein the document is encrypted with a session key and according to a bulk encryption algorithm, and furthermore the session key is encrypted with the intended recipient's public key (PUK). The complete print job is then transmitted to a document store. The recipient will use a so-called smart card containing his private key (PRK) for authentifying to the printer; the latter takes the identity from the card to search for documents intended for the recipient; these are then sent from the document store to the secure printer which first decrypts the session key using the recipient's PRK and then uses the decrypted session key to decrypt and print the document.
The method in the above-mentioned reference, although offering a certain degree of security, still is vulnerable to dedicated code-breaking techniques. The transmitted encrypted document file still includes information that can be used to decrypt it. In particular, the encrypted session key may be extracted from the transmitted file and, since it is relatively short, the session key may be decrypted by a massive trial-and-error attack.
Moreover, the method in the above-mentioned reference is less flexible on the basis of an individual document. For example, the recipient must have a smart card which requires physical transport thereof, but on the other hand, the recipient will then be able to view all documents intended for the assumed holder of the card. The above-mentioned reference does not provide for individual access to just one document. Furthermore, before transmitting of the document, the sender must know the intended recipient's identity, which is not always feasible.
Further, WO 02/41133 discloses a printing system including a print job source, such as a user PC including a print driver, a spooling server and a printer having a polling device. Print jobs are encrypted at the print job source, using an encryption key based on user-specified data, and transferred to the spooling server. In the spooling server the print job is decrypted and stored. The polling device in the printer may then poll the spooling server for any jobs intended for the printer. If there is such a print job at the spooling server, the latter re-encrypts the print job with the same key and sends the job to the printer polling device, where a user must input the same user-specified data. Based on those, the polling device forms a key, decrypts the print job and forwards it to the printer.
According to the disclosure of WO 02/411133, the print job is completely encrypted, and therefore becomes an unrecognizable block of data. It can therefore only be handled by a system that knows what it is beforehand, such as in point-to-point transfers, or decrypts it to get more information. Yet, intermediate decryptions decrease the job security and should therefore be avoided.
Likewise, US 2002/0078351 A1 discloses a system in which a file is encrypted for a point-to-point transfer, using a key that is entered both at the sending site and at the receiving site. The file itself can no longer be recognized once it is encrypted.
The inventor has recognized a need for enhanced security, so that unauthorized access to classified and other restricted print-ready information should be minimized, whilst remaining user friendly as much as possible. Also, other transmissions of data, in particular document-related data such as scan files generated by scanning a document and document files for storage in a database, must be secure in order to prevent eavesdroppers from getting access to the contents of certain secret or confidential documents.
In consequence, amongst other things, it is an object of the present invention to improve the security level of the schemes of the background art. Moreover, the invention provides a well balanced approach that trades off between smooth access and document managing functions on the one hand versus a high security level on the other hand.
Therefore, according to one of the aspects of the invention, the encrypting step at the sending station automatically leaves one or more specifying header items in the document file as unencrypted.
Where in the known prior art encrypted files are “blind” data blocks, they are according to the present invention still recognizable from the specifying header items that remain intelligible and can be used for handling. Examples of such specifying items may be the name of the owner, the name of the receiver, number of copies, number of pages.
Such information may effectively be used before the actual printing, such as for accounting or for other control purposes, such as the routing in a multi-printer system, possibly routing to a repro department.
Also, it may be used in so-called interactive printing as is implemented in, e.g., Océ 3165™ machine, according to which print files are never printed immediately upon reception at the printer, but rather are stored in a logical storage space in the printer memory dedicated to the owner of the print job, and presented for selection to a local operator and subsequent printing. A user may walk up to the printer, call up a list of print jobs he has sent on the local display and select one or more thereof. Then, upon actuation of the PRINT key on the operating panel, the jobs are printed. Normally, in interactive printing, the job names are specified in the displayed list.
However, in an embodiment of the present invention, the name of the job should preferably not be in the file header in unencrypted form, as such would give an unwanted party a first useful amount of information. As an alternative therefore, the name of the job may be changed into a non-informational character string or by a date/hour-compound, either by the owner himself or by the printer driver.
In a particular embodiment, the forming of a print job with encrypted and non-encrypted header items may be effected by (1) forming an additional file containing metadata relevant for the document file but not including any decryption clue, the additional file having a first part and a second part, and (2) encrypting only one of the first and second parts of the additional file using the same encryption key as was used for encrypting the document file, wherein in the step of forming a transmission file, the additional file is included in the transmission file.
In a further embodiment, the sending station splits a transmission file into two parts and first transmits only one part of the transmission file to the receiving station. The receiving station, upon an operator selection of such transmission file, sends a request to the sending station, to transmit the remaining part of the transmission file.
For example, the splitting may be done between header information and the rest of the file, or may be done through the whole file by taking a fixed section of each byte that must go to the receiver, such as the first half of every byte and sending only that part of each byte with the rest being retained.
The invention also relates to a method for secure transmission of files other than print files, such as scan files for storage at, e.g., the user's workstation. Further, the invention relates to a system of data processing devices, which system is adapted for secure transmission of digital data relating to a document between them.
These and other objects of the present application will become more readily apparent from the detailed description given hereinafter. However, it should be understood that the detailed description and specific examples, while indicating preferred embodiments of the invention, are given by way of illustration only, since various changes and modifications within the spirit and scope of the invention will become apparent to those skilled in the art from this detailed description.
These and further features, aspects and advantages of the invention will be discussed more in detail hereinafter with reference to the disclosure of preferred embodiments of the invention, and in particular with reference to the appended Figures wherein:
Referring to
The document source 20, such as the user's personal computer, is generally considered sufficiently safe to store the encrypted version of the document. Note that also a non-encrypted version may reside there. The PC in question will become somewhat more vulnerable as it will have an open communication port. Another variant can have the encrypted job plus ticket on a dedicated server.
Next to the print data, that is generally encrypted completely, a document will usually contain so-called metadata, which represent some description of the document or its intended use, such being included in what is colloquially called a document header. For example, the document header contains the name of the owner and of the intended user (which may be the same) without encryption, but does not contain any information of the encryption string, neither encrypted, nor in cleartext.
Preferably, the actual encryption key 28 used by the encryption algorithm is a function of the inputted encryption string entered by the operator. An elementary embodiment of such function is through concatenating the inputted encryption string with a standard string of characters, but more complex functions for this purpose are feasible as well. This latter feature implies that the inputting of a dummy encryption string or even omitting thereof will nevertheless ensure that no unencyphered data will be transmitted.
Now, various fields in the job-ticket or document header may be encrypted as well, but certain specifying fields of the header should better remain in cleartext, such as those that specify the number of copies and pages, respectively, of the document, since such fields may effectively be used before the actual printing, such as for accounting or for other control purposes, such as the routing in a multi-printer system. Such accounting functions may be effected on an intermediate server not shown in
Also, the unencrypted header items may be used in so-called interactive printing as is implemented in, e.g., Océ 3165™ machine, according to which print files are never printed immediately upon reception at the printer, but rather are stored in a logical storage space in the printer memory dedicated to the owner of the print job, and are presented for selection to a local operator and subsequent printing. A user may walk up to the printer, call up on the local display a list of print jobs he has sent and select one or more thereof. Then, upon actuation of the PRINT key on the operating panel, the jobs are printed.
Normally, in interactive printing, the job names are specified in the displayed list.
However, in the present invention, the name of the job should preferably not be in the file header in unencrypted form, as such would give an unwanted party a first useful amount of information. As an alternative therefore, the name of the job may be changed into a non-informational character string or by a date/hour-compound, either by the owner himself or by the printer driver.
According to a first embodiment of the invention, the job is encrypted (26) with the above function of the encryption key 28 (based on the operator-entered encryption string) and subsequently transferred to a mailbox 30 of the printer (e.g., 7, 8, in
The transfer of the decryption string may proceed in any appropriate manner, such as through carrying by the owner, or through any feasible communication outside connection 27, such as through a hatched connection 29. As shown, the relation between the encryption/decryption string and the document is immediate, in that no physical intermediate such as a smart card is necessary, which has the advantage that print files can be shared with other persons by simply spelling the encryption/decryption string out to them. Neither is a temporal intermediate present, such as an organizational delay between decrypting and printing other than associated to the printing operation itself.
The actual network transport of the encrypted file may be done through permutation of data blocks, such as through hashing the encryption string and possibly date and time. Furthermore, fake data blocks may be inserted into the data stream in a pseudo-random manner. The seed item for the pseudo-random generator may be based on the encryption string and/or date and time. Consequently, an eavesdropper will first have to correct the data sequence, followed by undertaking the decrypting, which greatly enhances the data security.
Immediately after decryption, the document is printed (38) and thus becomes available in hardcopy 40. If the wrong decryption string were entered, the printing procedure will only produce “garbage”, if at all the file would still be printable, but the decryption string itself will still not be checked. In consequence, the whole path from the sourcing of the document until the effective printing is protected by encryption, and no long-term exposure to malevolent inspection by an unwanted party remains. In other known organizations, such exposure could in fact amount to various hours, but even several seconds could already be detrimental to security.
According to a particular embodiment, the job ticket may include an encrypted code string or “signature”, encrypted by the same encryption algorithm, for faster checking if the entered decryption string is the correct one. In this way, only a small part of the file may be decrypted for on the basis thereof detecting that “garbage” is being produced, rather than decoding the bulk of the document. Of course, an appropriate diversification of the signature, such as between various destinations or customers, will improve security. The size of the signature string may lie in a range from 0.1 to 1 kilobyte, and thus be considerably smaller than the print file itself.
The above finding of “unable to print” could have some other cause than the entering of a wrong decryption string, or rather the decryption string could have been unintentionally in error. However, a particular threshold number of failing print undertakings could represent an intended fraud. Therefore, when the number of “misses” exceeds a predefined threshold number, the document is automatically deleted from the printer storage. This threshold number may be adjustable, and certain ones or all of such failed printings may be logged and/or reported.
Next to the advantages of the invention already discussed, the following can be listed as well. The document remains encrypted until immediately before printing. Therefore, even physically removing the printer's hard disk will not infringe security. The printing job may also be (re)routed to a different location for printing than originally intended without risk. Next to the features discussed supra, the application of so-called secure sockets may implement a further line of defence against infringers.
According to a second embodiment of the present invention, a still raised degree of security above the one(s) considered hereabove is attained by delaying the transmission of the encrypted print data of a print job at least in part until receiving an actual printing command. Advantageously, instead thereof a minimal ticket is transmitted which only comprises the user name and some document identification. Only if the user reports at the printer and selects the job, the document data and the remainder of the ticket will be fetched. This will further minimize the time interval spent by the document outside the trusted environment. Also, the document will not be stored persistently at the printer when the actual printing will for some reason be foregone. A minor disadvantage of this practice may be that the transfer of the document will somewhat delay the printing after the receiving of the printing command.
A variation on the above “Just In Time” procedure is that only a fraction, such as one half, of the encrypted document is transferred before receiving the actual printing command. The rest will then remain encrypted at the source facility. The way of choosing is such that the portion of the document so transferred does not present useful information to the imposter. According to an embodiment, the present inventor considers a very useful algorithm for implementing this choosing procedure to be taking a fixed section of each byte of the document that must go to the receiver, such as the first half of every byte, and sending only that part of each byte but retaining the rest. Even in possession of the encryption string, the document part located on the printer cannot be decyphered. This feature will lessen the transfer time when requesting to print, versus holding back the full document, by a factor of about 2. It is possible to hold back other fractions of the encoded document, each such choice causing a specific trade-off. The splitting of data may be done under control of an additional parameter that renders the split of each particular byte (or other information entity) seemingly unpredictable. In practice, an algorithm associated to the encryption string may produce a bit string, of which the one's would control the transfer, whereas the zero's would control holding back of a bit or fractional byte. An incidental advantage of the holding back is the lesser storage requirement at the printer.
A still further variation on sending the minimum ticket is to only signal the presence of a secure document at the source. In this case, each document will next to a encryption string need an identifier code. Upon requesting a print operation, first the identifier must be presented at the printer. Absence of the document at the source is logged to further protect the document name, at a price of requiring extra interaction between the printer and source.
As furthermore shown in
A particularly advantageous embodiment of the invention is to give the IT manager a central database which stores various aspects that specify the printer driver for a respective user. This may be implemented as a rule-based system which greatly reduces the interaction complexity for the IT manager. Now, the printer driver will, for every print job submission or periodically such as every morning, connect to the database to check its current configuration. As the driver pops up, it will adapt its User Interface and User Functionality according to current specification. If the server cannot be reached, either the actual settings of the printer driver will be used as a default, or alternatively, printing will be blocked for the time being. One of the advantages of this embodiment is that permissions may be changed real-time, even such as according to fixed hour/day time-schedules or upon instantaneous emergencies. The above database may be centralized, or alternatively be replicated on every printer or printer location.
The latter version can also involve the printer, in that the latter will check the actual job ticket for conformance to the permissions defined in the database. This will enforce a policy of the IT manager. In particular, when the security option is enforced, the printer may automatically delete any print file that is not encrypted.
When the encrypted print file is selected for printing at the printer location, the operator is requested, through a forced dialogue, to enter the decryption string (which is identical to the encryption string) at the operating panel. Next, the printer applies the decryption algorithm to the file, using the entered decryption string, and if the entered decryption string is correct, the decrypted file is usable and the printer can print it. If, however, the entered decryption string is not correct, the file will not be printable and the printer will indicate so on the local display. The user may then cancel and retry locally, or cancel printing completely.
The whole printing operation according to the second embodiment, starting from the source or workstation location, may be now summarized as follows:
In another embodiment, the user-defined character string used for forming the encryption string is not as such entered by the user, but is automatically derived from a biometric characteristic, such as a retina scan or a fingerprint scan, taken from the user. Both the user workstation and the printer include a device for measuring the biometric characteristic such as a fingerprint scanner, which measures and analyses the biometric data and derives a data string therefrom. The latter is then used for forming the encryption key.
The requirement that the user enter the character string is replaced by a requirement to have the relevant biometric characteristic scanned, such as putting his finger on a fingerprint scanner. Alternatively, the user workstation may store the biometric characteristic of the user (or the character string based on it) in a secure place in advance and use it for the encryption. This embodiment has an advantage in that the user is not required to memorize a character string for forming an encryption string.
The secure procedure described above can also advantageously be employed in other document-related file transfers, such as for scanning. Generally, scanning is performed in a networked system such as shown in
Then, the intended recipient may enter the encryption string 128 into the user interface of a decryption module 134 in the workstation, and in reaction, the encrypted document file is decrypted (134) into a ready-for-use document file 140.
In a first embodiment of the above scanner application, the encrypted scan file is automatically transmitted by the scanner to the destination workstation that has been specified by the scanner operator at the initialization of the scan job. A prerequisite is, in this embodiment, that the workstation should be operative and waiting for the scan file to arrive. An advantage is, that the encrypted document file is in the “public” domain for a short time only, because it is transmitted immediately after it has been generated.
In a second embodiment of the above scanner application, the encrypted scan file is stored on the scanner disk and waits there until it is fetched by the workstation. Web applications for connecting a workstation to a scan server, selecting a file in the scan server storage and transferring a selected file through a secure connection to the destination workstation are widely known. The transferred scan file may then be decrypted in the above-described way.
The processing steps of the present invention are implementable using existing computer programming language. Such computer program(s) may be stored in memories such as RAM, ROM, PROM, etc. associated with computers. Alternatively, such computer program(s) may be stored in a different storage medium such as a magnetic disc, optical disc, magneto-optical disc, etc. Such computer program(s) may also take the form of a signal propagating across the Internet, extranet, intranet or other network and arriving at the destination device for storage and implementation. The computer programs are readable using a known computer or computer-based device.
Now, the present invention has hereabove been disclosed with reference to preferred embodiments thereof. Persons skilled in the art will recognize that numerous modifications and changes may be made thereto without exceeding the scope of the appended claims. In consequence, the embodiments should be considered as being illustrative, and no restriction should be construed from those embodiments, other than have been recited in the claims.
| Number | Date | Country | Kind |
|---|---|---|---|
| 03078762.6 | Nov 2003 | EP | regional |
