Patent Grant
7576883
The following relates to the printing and sheet marking arts. It is described with example illustrated reference to methods and apparatuses for securing and accounting for print jobs sent via a wireless Internet service to a printing system. However, the following is amenable to other like applications.
Wireless Internet services are becoming increasingly prevalent. For example, 802.11-compliant WiFi-based wireless hotspots provide wireless Internet access to the public for free or on a fee basis. WiFi hotspots are typically at airports, hotels, cafes, and so forth. It is contemplated for whole cities and major metropolitan areas to-be covered by networks of wireless hotspots to provide ubiquitous wireless Internet service. Some cellular telephone companies are also entering the wireless Internet provider market with broadband wireless Internet access having wide geographical coverage and typically available on a contractual basis, for example by purchasing a two-year service contract payable in monthly installments providing the customer with unlimited broadband wireless Internet access. Publicly accessible wireless local area network (WLAN) systems with Internet connectivity are also known. In conjunction with the growth of wireless Internet services, most laptop computers sold today provide an 802.11-compliant or other wireless network card as standard equipment, enabling most laptop computer users to access the available wireless Internet services.
Users of a wireless Internet service can perform a wide variety of tasks, such as accessing email through a webmail server, browsing and interacting with sites on the world-wide web, transferring files (such as word processing files, digital images, and so forth), engaging in on-line shopping, downloading or streaming music or audio-video, and so forth. Many of these services are free, or are pre-paid, or are readily paid for at time-of-purchase or time-of-use through the use of credit cards, debit cards, or Internet pre-pay services such as PayPal®.
The user may also want to print via a wireless Internet service. To do so, the user knows of or locates an Internet-accessible printing device, and sends his or her print job to that printing device via the wireless Internet service. When the print job arrives, it is printed, and the user later visits the location of the printing device to pick up the print job, or alternatively the printed sheets are mailed, couriered, or otherwise delivered from the printing device to a pick-up location selected by the user who initiated the print job.
However, difficulties arise when attempting to perform printing via a wireless Internet service. The user typically must be authorized to print on the printing device. Obtaining such authorization typically involves transfer of money or its equivalent (such as a credit card transaction) from the user to the owner of the printing device. This is generally so because the cost of printing is substantial (including, for example, cost of paper, cost of toner usage, amortized cost of replacement of worn mechanical parts, and so forth) so that the owner of the printing device is unlikely to allow general use of the device for free.
One approach for accounting for the cost of printing is to employ a contractual arrangement between the user and the owner of the printing device. However, such a long-term contract is typically not satisfactory, since the user is then limited to printing at the one or few printing systems owned or controlled by the contracted owner. Such a limitation is contrary to the desired mobile freedom of wireless Internet. For example, if the user is a frequent traveler, he or she will want to be able to print in whatever city or country he or she happens to be in at any given time. Moreover, a contract allowing unlimited printing leaves the owner of the printing device open to losses due to excessive printing by the user.
Instead of or in addition to a long-term contract, another contemplated approach is a per-page or other usage-based fee charged at the time-of-purchase. For example, the user may pay for 100 printed pages using a credit card, debit card, PayPal®, or so forth at the time the print job is submitted. However, if the print job or a portion thereof fails for any reason (which is not uncommon considering the mechanical processes involved in printing, the possibility of running out of paper, toner, ink, or other printing consumables, or so forth) then the user must attempt to get a monetary refund for those sheets that did not print properly. This can be difficult if the user is on travel and will soon be leaving the locality of the printing system. Moreover, existing payment at time-of-purchase arrangements are susceptible to fraud or honest disputes. For example, a dishonest user may claim the print job failed when it actually printed, or an honest user may believe that a print job failed when in fact it executed properly but was inadvertently picked up by another user. In the latter case, it is unclear as between the user and the printing system owner who should be liable for the cost of the lost or misplaced printed sheets.
Other difficulties with attempting to perform printing via a wireless Internet service include inconvenience and security concerns. The Internet-accessible printing system typically receives print jobs via the Internet, and prints them in the order of receipt, unless an alternative priority is provided. The user arrives some time after the print job has executed, and must go through a stack or other collection of print jobs to locate the user's print job. During the time between printing and user pick-up, the printed pages are accessible to others, presenting a security risk. Yet another difficulty is identifying available printing resources at a given, unknown hotspot. For example, the user working at an airport while waiting for a flight may be unaware of what, if any, public printing resources are available at the airport.
The following U.S. patent applications are commonly assigned with the present application, and are incorporated herein by reference:
Ragnet et al., “Method and Apparatus for Controlling Document Service Requests from a Mobile Device,” U.S. patent application Ser. No. 10/605,874 filed 3 Nov. 2003, published as US 2004/0172586 A1 on Sep. 2, 2004, and relating generally at least to aspects of interaction between a mobile device and a wirelessly-equipped printing device, is incorporated by reference herein in its entirety;
Ragnet et al., “Multifunction Device with Secure Job Release,” U.S. patent application Ser. No. 11/013,323 filed 14 Dec. 2004 relating generally at least to aspects of secure printing employing wireless mobile devices, is incorporated by reference herein in its entirety;
Ciriza et al., “Mobile Device-Enabled Secure Release of Print Jobs,” U.S. patent application Ser. No. 11/348,423, filed Feb. 6, 2006 and relating generally at least to aspects of secure printing using a mobile device, is incorporated by reference herein in its entirety; and
Ciriza et al., “Mobile Device-Enabled Secure Release of Print Jobs Using Parallel Decryption,” U.S. patent application Ser. No. 11/348,422, filed Feb. 6, 2006 and relating generally at least to aspects of secure printing employing wireless mobile devices, is incorporated by reference herein in its entirety.
According to certain aspects illustrated herein, there is disclosed a printing method. At a user terminal operatively connected with a mobile device, a print job is formed into an incomplete print job envelope and completing data including at least print job accounting information. The completing data including at least the print job accounting information is stored on the mobile device. The incomplete print job envelope is transmitted to a printing device. The mobile device is operatively disconnected from the user terminal, and is operatively connected with the printing device. After the operative connecting, the print job is re-constructed at the printing device, and the re-constructed print job is printed using the printing device. A cost of the printing is accounted for based on the print job accounting information stored on the operatively connected mobile device.
According to certain aspects illustrated herein, there is disclosed a printing system comprising: a printing device including a network connection operatively connected with a digital network and a mobile device interface for operatively connecting a mobile device including non volatile storage; a print job reconstructor that reconstructs a print job from an incomplete print job envelope responsive to receiving completing data including at least print job accounting information via the mobile device interface, the reconstructed print job being executed by the printing device; and a printing device accountant that accounts for a cost of printing the reconstructed print job based at least on the print job accounting information.
According to certain aspects illustrated herein, there is disclosed a print job generator comprising: a user terminal operatively connectable with a digital network and operatively connectable with a mobile device; a print driver comprising instructions to generate page description language (PDL) data corresponding to a print job; an envelope generator comprising instructions to decompose the PDL data into an incomplete print job envelope sent to a printing device via the digital network and completing data that is stored on the mobile device, the incomplete print job envelope and completing data being configured to enable reconstruction of the PDL data at the printing device responsive to the mobile device on which the completing data is stored being operatively connected with the printing device; and a print job accounting information generator comprising instructions to generate print job accounting information including at least an identity of a user account and authorization to access the user account, the print job accounting information being stored on the mobile device, the printing device accounting for a cost of printing the print job based on the print job accounting information stored on the mobile device.
With reference to
The printing device 12 is typically located away from the user terminal 10. In
The user is typically located at the user terminal 10 when the user generates the print job. Accordingly, if the print job were to immediately print, a security risk would present itself as someone other than the user could view the printed sheets before the user visits the printing device 12 and picks the sheets up, or alternatively before the sheets are collected and mailed, couriered, or otherwise delivered to the user. Similarly, if the print job is queued for later printing (for example, if the printing device 12 has a backlog of print jobs to process from the user and from other users) then the user may again be elsewhere when the printing device 12 prints the print job. Another issue which may arise is selection of a printing device. If the user is operating in an unfamiliar hotspot, he or she may be unaware of the identities, locations, and capabilities of available printing devices. In one approach, a captive portal or other mechanism provides the user with identification of available printing devices, for example using a user-friendly format such as a picture, location, map, context, or other format. In another approach, the user sends the print job to a central spooler without initially deciding upon a printing device. Once the user chooses a printing device he or she walks to the chosen printing device and pulls the print job as described herein.
Moreover, there is the issue of accounting. When printing using a hotel printing device, airport printing device, a printing device located at a print shop, or so forth, the user will generally be expected to pay the cost of printing. To protect against uncompensated usage of the printing device, the cost of printing should be accounted for at the time of printing on a per-page or other usage-based fee framework. On the other hand, to protect the user from paying for services not rendered in the event that the print job does not execute due to equipment failure, overloading of the printing device, exhaustion of toner or another consumable of the printing device, or so forth, the cost of printing should not be accounted for until the print job actually executes.
To address these concerns, a mobile device 20 is operatively connected with the user terminal 10 during creation of the print job, and stores certain information generated in conjunction with the print job. The mobile device 20 is then operatively disconnected from the user terminal 10 and is operatively connected with the printing device 12. The printing device retrieves the print job-related information stored on the mobile device 20 and executes the print job, including accounting for the printing cost, based on the retrieved print job-related information.
The illustrated mobile device is a USB drive 20. However, in other embodiments the mobile device may be a memory card connected to a card-specific port of the computer, or a digital music player including non-volatile storage, or a personal data assistant (PDA), or a cellular telephone, or so forth. By “non-volatile storage” it is meant that the mobile device can store data and can retain the stored data when it is operatively disconnected from the user terminal 10. The USB drive 20 is a removable drive that is connected to the laptop computer 10 via one of a plurality of Universal Serial Bus (USB) ports 22 and, once connected, appears to the computer as a drive operatively similar to a hard disk drive, floppy disk drive, optical disk, or other storage drive. While the user terminal 10 includes three illustrated USB ports 22, the number of USB ports on the user terminal can be one, two, three, four, or more. The illustrated USB drive 20 is a USB drive which employs non-volatile flash memory storage or other solid state memory storage. In other embodiments, the USB drive may be a USB hard disk drive which employs a USB connector and rotating magnetic disk storage, an MP3 or other music player that includes a USB connector and non-volatile storage, or so forth. In some embodiments, the non-volatile storage may be a CMOS memory that is kept non-volatile by being powered by an on-board battery or other energy storage device disposed on or in the mobile device. If the mobile device is equipped with another type of connector instead of a USB connector, then the user terminal should include a compatible mobile device connector other than or in addition to the illustrated USB ports 22. For example, if the mobile device is a digital camera memory card, then the mobile device connector is suitably a memory card slot. In other embodiments, the mobile device may be a personal data assistant (PDA), cellular telephone, or other mobile device that is operatively connected with the user terminal 10 via a short-range wireless connection such as a Bluetooth or Near Field Communications (NFC) connection.
With particular reference to
In conventional printing, the PDL data is sent from the user terminal to the printing device, and the printing device operates its marking engine in accordance with the PDL data to produce printed sheets. If the printing device has a backlog, then the PDL data is stored or buffered at the printing device or elsewhere in the network until the printing device can perform the printing. However, this conventional printing raises certain security concerns, including potential production of the printed pages when the user is not present, and transmission and temporary storage of the unencrypted PDL data at the printing device or at another temporary storage connected with the network. Moreover, this approach can raise accounting concerns in settings in which the user is expected to pay for the printing on a per-sheet, per-print job, or other usage basis.
To address these concerns and others, an envelope generator 30 comprises instructions executing on the user terminal 10 as illustrated, or on another processor connected with the network 14, that decompose the print job into an incomplete print job envelope 32 that the envelope generator 30 sends to the printing device 12 via the wireless access point 15 and Internet 14 or other digital network, and completing data 34 that the envelope generator 30 stores on the mobile device 20. Optionally, some or all data of the incomplete print job envelope 32 is encrypted, and user credentials 36 assigned to the user or to the mobile device 20 by a certificate authority 38 and stored on the mobile device 20 is usable to decrypt the encrypted data. For example, the user credentials 36 may be used to create a public/private session key pair, the incomplete print job envelope 32 encrypted using the public session key, and the private session key needed for decryption stored as part of the completing data 34 on the mobile device 20. Similarly, the completing data 34 may also optionally be encrypted using a password-based encryption or so forth.
The incomplete print job envelope 32 that is sent to the printing system 12 via the wireless access point 15 and the Internet 14 or other digital network is incomplete in that it cannot be printed by the printing system 12 in the absence of the completing data 34 stored on the mobile device 20. In some embodiments, the incomplete print job envelope 32 is encrypted and cannot be decrypted without the user credentials 36 or other key or keys stored on the mobile device 20; hence, the incomplete print job envelope 32 cannot be printed without the completing information 34 including the decryption key or keys stored on the mobile device 20. In some embodiments, the incomplete print job envelope 32 incorporates less than all of the PDL data, and the completing data 34 incorporates at least a completing portion of the PDL data that is omitted from the incomplete print job envelope 32. Since the incomplete print job envelope 32 is missing some of the PDL data, the incomplete print job envelope 32 cannot be printed without the completing information 34 including the missing PDL data. In some embodiments, both encryption and splitting of the PDL data between the incomplete print job envelope 32 and the completing data 34 are used to ensure that the incomplete print job envelope 32 cannot be printed without the completing information 34 stored on the mobile device 20. Accordingly, the incomplete print job envelope 32 sent to the printing system 12 via the network 14 is stored in an internal buffer of the printing system 12 or in a spooler 39 or other buffer accessible to the printing system 12 via the network 14.
Additionally, print job accounting information 40 is generated by a user terminal accountant program 41 executing on the user terminal 10, and is stored on the mobile device 20. Although the print job accounting information 40 is shown in
In addition to user account identity and access authorization, the print job accounting information 40 may include other useful accounting-related information. For example, the print job accounting information 40 may include an estimate of the total cost of the print job, which is optionally displayed to the user by the user terminal 10 prior to sending the incomplete print job envelope 32 to the printing device 12. In this way, the user can confirm or, if desired, cancel the print job based on the user's assessment of the reasonableness of the cost. Additionally, the print job accounting information 40 may include confirmation that the user account 42 has sufficient funds to pay for execution of the print job. To do this, the user terminal accountant 41 accesses the user account 42 via the wireless access point 15 and Internet 14, and makes a check of the account balance. To provide security for the user account 42, this check may involve providing the user credentials 36 to verify that the funds check is authorized by the user. Still further, the print job accounting information 40 may include information for performing the accounting, such as a connection time-sheet cost equivalency factor in embodiments in which the user account 42 is a pre-paid wireless Internet connection time allocation. Similarly, the print job accounting information 40 may include a page cost quotation supplied to the user terminal 10 from the printing device 12 at the time the print job is created. This optional information enables the user to “lock-in” a page cost at the time the print job is created and sent to the printing device 12, so as to insulate against any page cost increases that may occur between the time of sending the print job and the time the print job is executed at the printing device 12.
If the print job accounting information 40 includes a user account identification, then security of this account information becomes an issue. Accordingly, the print job accounting information 40 is optionally encrypted, for example using the user credentials 36. Similarly, to ensure that the user account is valid and that the deductions or print cost charges are authorized, the print job accounting information 40 is optionally digitally signed using the user credentials 36. Optionally, the print job accounting information 40 is encrypted using the public key of the printing device 12 (this can be in addition to, or instead of, encrypting using a user-based key), so that the print job accounting information 40 is accessible only by the printing device 12 using the private key of the printing device.
In order to cause the printing system 12 to execute the print job, the user disconnects the USB drive 20 from the USB port 22 or otherwise operatively disconnects the mobile device from the user terminal 10, and carries it along a physical path P from the user terminal 10 to the printing system 12 (path diagrammatically indicated by a dashed connector in
Because the USB drive 20 or other mobile device has the completing data 34 stored in non-volatile memory, the completing data 34 remains stored on the mobile device when it is carried along the physical path P and is available to the printing system 12 upon operative connection of the mobile device 20 with the printing system 12. Moreover, the operative connection of the mobile device 20 with the printing system 12 by a physical connection or short-range wireless link provides assurance that the user is physically present at the printing system 12 at the time the operative connection is made. That is, the printing is a “pull” type printing in which the user triggers print job retrieval and execution at the end point, that is, at the printing device 12.
A print job reconstructor 46 executes on the printing system 12 or on another processor communicating with the printing system 12 via the network 14 or via another type of communication interface between the processor and the printing system 12. Operation of the print job reconstructor 46 can be initiated either by automatic detection of the mobile device 20 (for example, by an auto mount procedure operative on the USB port 44 in the case of the illustrated USB drive 20, or in response to the printing device detecting a wireless mobile device by Bluetooth polling, or so forth) or by user initiation (for example by user operation a touch-screen LCD display 48 or other user interfacing component of the printing system 12, or by user operation of an input of the mobile device such as a keypad of a PDA mobile device). The print job reconstructor 46 receives the incomplete print job envelope 32 and the completing data 34 and reconstructs the PDL data of the print job. If the incomplete print job envelope 32 is partially or wholly encrypted, then the reconstruction performed by the print job reconstructor 46 includes decrypting the data of the incomplete print job envelope 32 using the decryption key or keys recovered from the completing data 34. If the PDL data is split between the incomplete print job envelope 32 and the completing data 34 stored on the mobile device 20, then the print job reconstructor 46 recombines the split PDL data. The complete unencrypted PDL data is not available at the printing system 12 until after the user operatively connects the mobile device 20 with the printing system 12 and the print job reconstructor 46 reconstructs the unencrypted complete PDL data of the print job. Once the reconstruction is complete, the printing system 12 processes the PDL data to execute the print job. For example, if the PDL data is in Postscript, HPGL, PCL, or like format, then the printing system 12 rasters the PDL to generate rastered data for driving one or more marking engines to mark sheets of paper or another print medium. The reconstruction and rastering or other PDL data processing is typically relatively rapid, and so the sheets are printed relatively soon after the user operatively connects the mobile device 20 and optionally selects to execute the print job. Thus, assurance is provided that the user is physically present at the printing system 12 when the printed sheets are produced.
In some embodiments, it is contemplated for the incomplete print job envelope to be unencrypted and to include all PDL data for the print job, but to be incomplete in that the printing system is configured to not execute the print job until it receives completing data in the form of a print authorization token that is stored on the USB drive. The print authorization token may, for example, be a portion or all of the print job accounting information 40, in which case the completing data element 34 of
It is also desired to properly account for the cost of printing. Accordingly, a printing device accountant 49 applies the cost of printing to the user account 42 based on the print job accounting information 40 stored on the mobile device 20. To do this, the printing device accountant 49 may need to gain access to the user account 42 using the user credentials 36 and/or authorization information stored in the print job accounting information 40. To ensure that the user is not charged for portions of the print job that fail to execute due to operational failure of the printing device 12, the printing device accountant 49 optionally applies the cost of each printed sheet substantially concurrently with the printing of the sheet. Other operations optionally performed by the printing device accountant 49 may include, for example, verifying sufficiency of funds (or their equivalent, such as pre-paid Internet connect time allocation, page allocation, credit card charge limit, or so forth) in the user account 42 prior to printing, or generating a digitally signed receipt indicating the cost of printing, which digital receipt is suitably digitally signed using at least a user's certificate of the user credentials 36 stored on the mobile device 20.
With reference to
Additionally, the user terminal accountant 41 constructs the print job accounting information 40. Typically, the user terminal accountant 41 will estimate a cost of printing 66 which is used by an account sufficiency check 68 to check whether sufficient funds are available in the user account 42, and/or is used to notify the user of the estimated print job cost via the user terminal 10. The cost of printing 66 is suitably estimated from the PDL data stream 50, for example using a fixed price-per-sheet to be printed or using a more complex cost formula taking into account the type of printing (for example, color pages may cost more than black-and-white pages), the type of print media (for example, sheets to be printed on heavy-bond paper may cost more than sheets to be printed on lighter-weight paper), the usage of consumables (for example, the sheet cost may be dependent upon the marking page fill-fraction since this affects how much toner or ink is used to print the sheet), or so forth. The cost of printing estimate 66 is an estimate at least in that the print job may fail to execute (in which case there will be no actual printing and hence no actual cost of printing). Additionally, the parameters used in computing the estimate 66, such as the per-page printing cost, may or may not be known with certainty at the time the print job is created.
In some embodiments, the cost of printing estimate 66 may be omitted. For example, the user may wish to create the print job without yet knowing which printing device will be used for the printing. In such a case, the incomplete print job envelope 32 is suitably stored on the user terminal 10 or another accessible storage until a printer is selected, and the print job accounting information 40 may include limited information such as identity and authorization information for the user account 42. Another instance in which the cost of printing estimate 66 may be omitted is the situation in which the user terminal 10 does not have sufficient information to make a meaningful estimate of the cost of printing. For example, the user terminal 10 may not know a cost-per-page factor needed to estimate the printing cost.
With reference to
The PDL reconstructor 70 employs a decryption algorithm 76 to decrypt the PDL portions of the SDE of the incomplete print job envelope 32 and the completing SDE portion of the completing data 34. The decryption algorithm 76 suitably employs a decryption key or keys stored as part of the completing data 34 on the mobile device 20, or requests the user to enter a decryption password via the touch-screen LCD display 48, or employs a combination of decryption key and password protection. The decryption algorithm 76 is typically implemented as software executing on a processor or controller of the printing device 12; however, it is also contemplated to embody the decryption algorithm 76 partly or wholly as hardware of the printing device 12, for example as a decryption application-specific integrated circuit (ASIC). The output of the PDL reconstructor 70 is a PDL data stream 80 which should correspond to the PDL data stream 50 output by the print driver 28 (see
Additionally, the printing device accountant 49 performs accounting for the cost of printing of the executing print job based on the print job accounting information 40 stored on the operatively connected mobile device 20. In a suitable per-page accounting approach that reduces a likelihood of accounting discrepancies in the event of a printer device malfunction or exhaustion of the funds of the user account 42, a sheet cost applier 90 of the printing device accountant 49 monitors the print stream, for example by monitoring the raster stream 84 as illustrated, or monitoring upstream at the PDL data stream 80, or monitoring downstream at the marking engine 86. The sheet cost applier 90 applies the cost of each sheet to the user account 42 when the data for that sheet enters the raster stream 84 or other monitored portion of the print stream. The cost of each sheet is applied, for example, by deducting the sheet cost from a pre-paid user account, or by charging a credit card account of the user. Monitoring the PDL data stream 80 or raster stream 84 enables accounting for the cost of each printed sheet substantially concurrently with the printing of the sheet—at most, a discrepancy of one or a few sheets may occur if the printing device 12 malfunctions between the time the sheet data enters the PDL data stream 80 or raster stream 84 and the time of actual sheet marking. Monitoring the marking engine 86 substantially eliminates the possibility of accounting discrepancies, since the sheet cost is applied only once the sheet marking is completed. To ensure that the user account 42 is not overdrawn, the printing device accountant 49 suitably includes an account sufficiency check 92 that checks the sufficiency of funds in the user account 42 prior to the beginning of the print job and optionally as each sheet is printed and accounted for. In some embodiments, the account sufficiency check 92 triggers the print job priority reassignor 74 to initiate the print job once it determines that the user account 42 has sufficient funds to pay for the complete print job.
In some embodiments, the print job accounting information 40 includes a lifetime value for the print job. If the print job is not executed within the time specified by the lifetime value, then the print job expires and the incomplete print job envelope 32 is deleted from the print queue. In such embodiments, the printing device accountant 49 verifies that the lifetime value is satisfied before allowing print execution to continue. In some embodiments, the lifetime value is also linked and related with the issued certificate's validity period.
Optionally, the printing device accountant 49 further logs the cost of printing digitally signed using a user's certificate of the user credentials 36 and a certificate of the printing device 12. This ensures that the logging is verified by both parties: the user and the printing device. In other embodiments, the printing device accountant 49 produces a receipt 94 indicating the cost of printing that is digitally signed using the user's certificate, and optionally also using the printing device's certificate.
With returning reference to
With returning reference to
A more detailed illustrative example of operation of the secured document printing is now provided. In this example, the PDL data is generated as a file on the user terminal 10. Secured Document Envelope's skeleton building at the user's desktop. The SDE of the incomplete print job envelope 32 has a skeleton in which to place information about: job submitter, such as user name and public key; information about the printing system 12, such as device name, uniform resource indicator(URI) on the network 14, and the printing system's public key; information about the mobile device 20, such as device name or MAC address, device type (such as USB key) and the public key of the user credentials 36; and information about the document, such as the PDL data, encryption method information, and a sub-tree or other structural information about the encrypted elements including the document itself. The PDL data is chunked in accordance with the splitting algorithm 54 into two streams that are processed independently, and the multiplexing pattern is recorded in the multiplexing trace record 62. The first stream is encrypted using a first session key to generate the SDE 32 and spooled to the printing device 12, optionally via a print server, spooler 39, or other intermediary. The printing device 12 identifies the incoming job as a secure print request, suitably stores it in a “secure print” dedicated space, and registers it on the print queue with a suitable status field such as “Waiting for Release”. Additionally, the printing system 12 optionally checks the validity of any certificates associated to the incomplete print job envelope 32, in order to verify that none of the certificates associated with the identities used to submit or release the job are in a certificate revocation list issued by the certificate authority 38. Optionally, the printing system 12 employs the Online Certificate Status Protocol to check certificates in real time. Certificate checking is advantageous so as to counteract possible man-in-the-middle attacks. The first session key is suitably stored in the multiplexing trace record 62. The second stream is encrypted using a second session key to produce the SDE portion 60 which is stored along with the multiplexing trace record 62 on the USB drive 20. Additionally, the user terminal accountant 41 generates the print job accounting information 40 based on information stored on the mobile device 20, based on responses to user queries, such as a query for a credit card number or other identifying information about the user account 42, and/or based on responses to queries conveyed over the Internet 14, such as a credit limit check request. Optionally, the print job accounting information 40 is encrypted using a suitable session key, or is integrated with and encrypted with the SDE portion 60 that is stored on the USB drive 20.
When the USB drive 20 is plugged into the USB port 44 of the printing system 12, the printing system 12 mounts the USB drive's file system-to make the storage volume and its contents visible to the operating system of the printing system 12. The printing'system 12 searches on the USB drive's file system to find user credentials 36 (for example, in the form of a digital certificate file), the completing data 34 bearing a serial number or identifier corresponding to the serial number or identifier of the incomplete print job envelope 32 that is queued on the printing device 12, and the print job accounting information 40. The printing device 12 then prompts the user to release the job (for example, using the display of
In some situations, the identity of the printing system may not be known ahead of time. For example, a small business may have its printing done at a commercial copy shop. The specific printing system is not known prior to printing. (Indeed, the user may not even know which print shop he or she will use). In this case, the process for generating the incomplete print job envelope 32 and completing information 34 is as set forth previously, with the addition that the incomplete print job envelope 32 is not directly spooled to the printer, but rather is spooled to an Internet-accessible location (for example, suitably represented in
It will be appreciated that various of the above-disclosed and other features and functions, or alternatives thereof, may be desirably combined into many other different systems or applications. Also that various presently unforeseen or unanticipated alternatives, modifications, variations or improvements therein may be subsequently made by those skilled in the art which are also intended to be encompassed by the following claims.
| Number | Name | Date | Kind |
|---|---|---|---|
| 6378070 | Chan et al. | Apr 2002 | B1 |
| 20040172586 | Ragnet et al. | Sep 2004 | A1 |
| 20050138065 | Ciriza | Jun 2005 | A1 |
| 20060136726 | Ragnet et al. | Jun 2006 | A1 |
| Number | Date | Country | |
|---|---|---|---|
| 20070182984 A1 | Aug 2007 | US |
