Method and apparatus to add machine-readable codes to limit reproduction of documents

Abstract

To provide an apparatus and method to generate a machine-readable code that can be added to a document by a multi-function device (MFD) when the document is generated.SOLUTION: In a network 100, an MFD 102 includes: a communication interface to establish a communication path with an authentication server 110; a user interface to receive document control information for a document to be generated; a processor; and a non-transitory computer-readable medium storing a plurality of instructions. The instructions when executed by the processor cause the processor to generate a machine-readable code that contains the document control information for the document and print the machine-readable code on the document that is printed by the MFD 102.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present disclosure generally relates to document security, and more particularly, to a method and apparatus for generating a machine-readable code to add to a document to restrict reproduction of the document.

Background Art

[0002] A document can be generated by an author. The document may include a working document, a report, a literary work, an image, and the like. Usually, a user who has obtained the document or anyone can reproduce the document using a multi-function device (MFD). For example, the document can be copied or scanned on the MFD.

[0003] Some documents may be valuable or contain confidential information. For example, the document may include personal information or corporate transaction secrets. As a result, some users may wish to protect the document to control unauthorized reproduction of the document.

Summary of the Invention

[0004] According to an aspect shown herein, a multi-function device (MFD) and a method for generating a machine-readable code for restricting reproduction of a document are provided. One disclosed feature of an embodiment is a communication interface for establishing a communication path with an authentication server, a user interface for receiving document control information of a document to be generated, a processor, and a non-transitory computer-readable medium storing a plurality of instructions. When the instructions are executed by the processor, the processor is caused to generate a machine-readable code including the document control information of the document and to print the machine-readable code on the document printed by the MFD.

[0005] Another disclosed feature is a method for generating machine-readable code to restrict the reproduction of a document. The method performed by the MFD's processor includes receiving document control information for a document generated on the MFD, generating machine-readable code containing the document control information for the document, and printing the machine-readable code on the document to be printed by the MFD. [Brief explanation of the drawing]

[0006] The teachings of this disclosure can be easily understood by considering the embodiments for carrying out the following invention in conjunction with the following accompanying drawings. [Figure 1] An exemplary network block diagram is shown in this disclosure document, including a multifunction device (MFD) for generating and adding machine-readable code. [Figure 2] An illustrative block diagram of the MFD of this disclosure is shown. [Figure 3] An exemplary block diagram of a document having machine-readable code that restricts the reproduction of the document in this disclosure is shown. [Figure 4] A flowchart shows a method for generating machine-readable code that restricts the reproduction of the documents in this disclosure. [Figure 5] A flowchart shows a method for reproducing a document that has machine-readable code that restricts the reproduction of this disclosure. [Figure 6] This specification shows an exemplary high-level block diagram of a computer suitable for use when performing the functions described herein.

[0007] To facilitate understanding, whenever possible, the same reference number is used to indicate the same element common to the drawings. [Modes for carrying out the invention]

[0008] This disclosure broadly discloses methods and apparatus for adding machine-readable code to documents to restrict their reproduction. As mentioned above, some documents may contain valuable or confidential information. For example, a document may contain personal information or trade secrets. As a result, some users may want to add protection to documents to control unauthorized reproduction.

[0009] Some security features may include adding watermarks or other visual markers to documents where having an original copy may be important. For example, a watermark may indicate that the document is a "copy" when it is reproduced.

[0010] Other security features may include passwords or encryption of electronic files. However, these passwords or encryptions cannot be applied to a document once it has been printed.

[0011] This disclosure provides an apparatus and method for generating machine-readable code that can be added to a document by an MFD when the document is generated. The machine-readable code may include authentication information, playback restrictions, playback trackers, authentication server address information, and the like.

[0012] In one embodiment, the machine-readable code may be generated electronically via an endpoint device or the MFD itself. The machine-readable code can then be printed onto a document created by the MFD.

[0013] In one example, the MFD may be modified to include software that recognizes machine-readable codes. The MFD may scan the document for machine-readable codes. If no machine-readable codes are found, the document may be reproduced without restriction. If machine-readable codes are found, the MFP may contact an authentication server to authorize the reproduction of the document. If reproduction is permitted, the MFP may send reproduction information (e.g., the number of copies, the number of scans, the number of emails with the document attached, etc.) to the authentication server for tracking purposes.

[0014] Figure 1 shows an exemplary network 100 of the present disclosure. In one embodiment, the network 100 may include a device 102, an Internet Protocol (IP) network 108, an authentication server 100, and a database (DB) 112. The device 102 may be a multifunction device (MFD). For example, the device 102 may perform printing, copying, faxing, scanning, and email document functions.

[0015] In one embodiment, the IP network 108 may be any type of communication network capable of transferring data using the Internet Protocol. The IP network 108 may be, for example, the Internet. The device 108 has been simplified for the sake of clarity and may include additional network elements not shown. For example, the IP network 108 may include firewalls, gateways, switches, boundary elements, access networks, and the like.

[0016] In one embodiment, the device 102 may include a document control machine-readable code generator 104 and a document control machine-readable code reader 106. For example, the device 102 may include hardware and / or software that generates machine-readable codes that can be printed on a document in order to control the reproduction of the document. The reproduction of the document may include copying the document, printing the document, scanning the document, or electronically transmitting the document from the device 102.

[0017] In one embodiment, the user may restrict how the document can be reproduced when it is generated on the device 102. In another example, document control information may be provided from an endpoint device (not shown) communicably coupled to the device 102. The device 102 may use the received document control information to generate a machine-readable code via a document control machine-readable code generator 104.

[0018] In one embodiment, the machine-readable code may be associated with a specific user and / or document. For example, a unique document number or file name of the document, as well as a username and password, may be provided to the device 102 to generate the machine-readable code. Once the machine-readable code is generated, the document control information within the machine-readable code is also registered with the authentication server 110 and can be stored in the DB 112.

[0019] In one embodiment, a machine-readable code may be used to provide document control information and address information to the authentication server 110. The device 102 may run a document control machine-readable code reader 106 to scan the document and detect the machine-readable code. The address information of the authentication server 110 may be read to enable the device 102 to connect to the authentication server 110 and retrieve the document control information associated with the document.

[0020] In one embodiment, the authentication server 110 may be a remote server including a processor. The authentication server 110 may be communicatively coupled to DB 112. DB 112 may contain authentication information and document control information associated with a specific user and / or document.

[0021] The document control information can be compared with the information stored in DB112 to determine whether the document is permitted to be reproduced and / or whether a user is permitted to reproduce the document. If the document is permitted to be reproduced, the authentication server 110 may return an authentication signal or notification to the device 102 indicating that the reproduction job may be executed. The authentication signal may include document control information such as what reproduction functions can be performed (e.g., print only, copy only, scan only, or any combination thereof), the number of copies that can be reproduced, and the expiration date and / or time (e.g., expires in 4 days for users who have been granted reproduction rights).

[0022] FIG. 2 shows a block diagram of an example of apparatus 102. In one embodiment, apparatus 102 may include a processor 202, a memory 204, a communication interface 208, a user interface 210, and an optical scanner 212. The processor 202 may be communicatively coupled to the memory 204, the communication interface 208, the user interface 210, and the optical scanner 212. The processor 202 may control operations for controlling playback of a document and / or transmit / receive data via the communication interface 208, the user interface 210, and / or the optical scanner 212.

[0023] In one embodiment, the communication interface 208 may establish a communication path between the apparatus 102 and the authentication server 110 via the IP network 108. For example, the communication interface 208 may be a wireless or wired communication interface. For example, the communication interface 208 may be WiFi wireless, Ethernet® connection, fax via an IP connection using an RJ-11 connection, cellular wireless, etc.

[0024] In one embodiment, the user interface 210 may be a graphical user interface (GUI). The user interface 210 may be a touch screen interface or a GUI that receives input via a keyboard, mouse, track pad, etc. The user interface 210 may provide prompts and / or data fields for a user to provide document control information used to generate machine-readable code. As described above, the document control information may include an authorized user name and password, an acceptable playback job type (e.g., copy, print, scan, fax, email, etc.), an authorized number of playbacks per acceptable job type (e.g., 500 copies, 500 pages printed, 10 email transmissions, 1 scan, etc.), an expiration timer (e.g., the permission expires in 1 hour, 7 days, 1 month, etc.), or any other document control information.

[0025] In one embodiment, the document may be scanned using an optical scanner 212. The optical scanner 212 may be used to scan the document for machine-readable codes. If machine-readable codes are found in the document, the reproduction of the document may be controlled according to the document control information found in the machine-readable codes. If no machine-readable codes are found in the document, the document may be reproduced without restriction.

[0026] In one embodiment, memory 204 may be any type of non-temporary computer-readable medium. For example, memory 204 may be a hard disk drive, a solid-state drive, random-access memory, read-only memory, etc. Memory 204 may store instructions 206.

[0027] In one embodiment, instruction 206 may be executed by a processor 202 to perform the functions described herein, generate machine-readable code to restrict the reproduction of a document, and control the copying of a document having machine-readable code. Instruction 206 may also be used to execute a document-controlled machine-readable code generator 104 and a document-controlled machine-readable code reader 106. For example, instruction 206 may cause the processor to perform the operation of method 400, shown in Figure 4 and described in more detail below, and the operation of method 500, shown in Figure 5 and described in more detail below.

[0028] Figure 3 shows an example of a document 300 that includes a machine-readable code 306 for controlling or restricting the reproduction of the document 300. The document 300 may also include text 302 and text or images 304. The machine-readable code 306 may be printed on the document 300. In one example, the machine-readable code 306 may be printed separately in the footer or header of the document 300. In other words, the machine-readable code 306 may be relatively small and minimally conspicuous on the document 300.

[0029] In one embodiment, the machine-readable code 306 may be a barcode or a quick-response (QR) code. If multiple pages are printed, the machine-readable code 306 may be printed on each page of the document 300.

[0030] As described above, document 300 may be printed by device 102. The user may provide document control information to device 102 via the user interface 210 or an endpoint device (e.g., a mobile device, laptop computer, desktop computer, etc.) communicably coupled to device 102. The document control information may be converted into a machine-readable code 306. In other words, the machine-readable code 306 may include all of the document control information provided by the user to control or restrict further reproduction of document 300.

[0031] After document 300 has been printed, the user may later attempt to perform a replay job request by placing document 300 on the platen glass of device 102. The optical scanner 212 may scan document 300 and detect the machine-readable code 306. The processor 202 may analyze the machine-readable code 306 and extract all of the provided document control information.

[0032] In one embodiment, the machine-readable code 306 may include the address of the authentication server 110. The device 102 may establish a communication session with the authentication server 110. The device 102 may transmit the username and password provided by the user when submitting a replay job request. The machine-readable code 306 may also provide a document identifier for document 300.

[0033] Next, the authentication server 110 may determine whether the user is permitted to generate a reproduction of document 300. The authentication server 110 may also determine what types of reproduction job requests the user can perform. The authentication server 110 may provide authentication information to device 102. The authentication information may include what types of reproduction can be performed, the number of copies for each job type, and so on.

[0034] In one embodiment, the user interface 210 may gray out or block buttons associated with unauthorized playback types. For example, a user may be permitted to copy document 300 but not to scan it. Therefore, the scan button on the user interface 210 may be hidden or grayed out to prevent scanning of document 300.

[0035] In one embodiment, the user interface 210 may provide a notification message if an excessive number of copies are attempted. For example, the user may be allowed to make 50 or fewer copies of document 300. If the user attempts to make 100 copies, the user interface 210 may notify the user of the number of copies that are prohibited and the number of remaining copies that are allowed.

[0036] A replay job request may be executed according to the document control information. The executed job may be provided to the authentication server 110 to update the document control information. For example, suppose a user has copied document 300 20 times. Therefore, the authentication server may update the document control information to indicate that 30 acceptable copies remain.

[0037] In one embodiment, document control information may be tracked locally by device 102. For example, a user may be authorized by authentication server 110. However, limitations on the number of playback types and / or allowed playback types can be controlled locally by device 102.

[0038] In one embodiment, if the authentication server 110 cannot be reached to authorize the user, the job request may be deleted. For example, the communication interface 208 may be malfunctioning, or the IP network 108 may be down. As a result, the device 102 may not be able to send the authentication request to the authentication server 110. If the authentication server 110 cannot be reached, any job requests submitted by the user may be deleted from the queue. A notification indicating that authentication could not be completed and the job request could not be completed may be presented to the user on the user interface 210.

[0039] Accordingly, this disclosure provides a machine-readable code which may include document control information for restricting or controlling the reproduction of a document. Users may provide desired document control information and register that information with an authentication server. The machine-readable code may be printed on a document which is generated and used to control the reproduction of a printed document (e.g., a paper copy of a document).

[0040] The MFD can be modified to generate and detect machine-readable code. Job requests cannot be executed on the MFD unless the user's right to reproduce the document is authenticated based on the document control information contained in the machine-readable code. This may provide an additional layer of security to printed documents to protect confidential documents and copyrights.

[0041] Figure 4 shows a flowchart of an exemplary method 400 for generating machine-readable code that restricts the reproduction of the documents of this disclosure. In one embodiment, method 400 may be performed by apparatus 102 or by apparatus such as apparatus 600, illustrated in Figure 6 and discussed below.

[0042] In one embodiment, method 400 begins in block 402. In block 404, method 400 receives document control information for a document generated on the MFD. For example, the user may provide information on how the document can be reproduced (e.g., copy, print, fax, email, scan, etc.), how many times each type of reproduction can be performed (e.g., 500 copies, 50 prints, 1 email, 25 scans, etc.), time limits or expiration dates of limits (e.g., permission expires in one week), and usernames and passwords of authorized users who can perform reproduction. The document control information may also include the document identification of the document (e.g., file number or name). Thus, each machine-readable code may be associated with a specific document.

[0043] In block 406, method 400 generates a machine-readable code that includes document control information for the document. For example, the document control information may be part of a barcode or QR code (registered trademark) that can be printed on the document. The machine-readable code may also include the address of an authentication server or a remotely located server (e.g., a web address or IP address).

[0044] Therefore, when a document containing machine-readable code is later placed on the MFD, the MFD can scan the document for the machine-readable code to access document control information. The MFD can automatically establish a communication session with an authentication server to authenticate any playback job requests for the document via the MFD.

[0045] In block 408, method 400 prints machine-readable code on a document to be printed by the MFD. When the document is complete, the MFD may print the document with the machine-readable code. The machine-readable code may be printed inconspicuously in the header, footer, or any other part of the document's margins. If the document has multiple pages, the machine-readable code may be printed on each page of the document. In block 410, method 400 ends.

[0046] Figure 5 shows a flowchart of an exemplary method 500 for reproducing a document having a machine-readable code to restrict the reproduction of the present disclosure. In one embodiment, method 500 may be performed by apparatus 102 or by apparatus such as apparatus 600 illustrated in Figure 6 and discussed below.

[0047] In one embodiment, method 500 begins in block 502. In block 504, method 500 receives a document to be reproduced on the MFD. For example, a printed document may be placed inside the MFD (e.g., on a platen glass or an automated document feeder tray). The user may enter a username and password, as well as a request for a document reproduction job. For example, the user may request that the MFD generate 50 copies of the document.

[0048] In block 506, method 500 scans a document to find machine-readable codes containing document control information that controls the reproduction of the document. For example, the MFD may scan the document using an optical scanner. In one embodiment, if there are multiple pages, the MFD may scan all pages of the document to find machine-readable codes on each page.

[0049] The scan may be used to obtain document control information of the document and to perform additional error scans before executing a replay job request. For example, if there are multiple pages, an initial scan of the machine-readable code on each page can detect whether pages from different documents have been mistakenly mixed into the document. If an invalid page is detected in the document, the MFD may notify the user that page x of y is not part of this document and may require the user to remove the page before authentication is performed for the replay job request.

[0050] The MFD may obtain the authentication server address from the document control information within the machine-readable code. The MFD may establish a communication session with the authentication server. The MFD may send the user's username and password, as well as the document control information, to the authentication server.

[0051] The authentication server may determine whether the username and password match a list of usernames and passwords permitted for the identified document. The authentication server may also determine the acceptable type and amount of replay for the permitted user. The authentication server may also, if applicable, check the expiration date against an internal clock to ensure that the replay right has not expired.

[0052] If the user is authorized, the authentication server may send a notification to the MFD indicating that the user is authorized and providing playback rights information. The MFD may then compare the playback job request (e.g., 50 copies) with the acceptable playback types and limits (e.g., the user may be allowed to make 100 copies).

[0053] In one embodiment, the MFD may perform user authorization via an authentication server, or it may process document control information locally. For example, the MFD may read machine-readable code and know that a document can only be copied 100 times.

[0054] In block 508, method 500 executes a job to reproduce a document based on document control information contained in a machine-readable code. For example, it can execute a reproduction job request to generate 50 copies of a document.

[0055] In one embodiment, the MFD may send the executed jobs to the authentication server. For example, the MFD may send how many copies were made for a print job, or how many times the document was scanned for a scan job. The authentication server may then update the user's reproduction rights. For example, if a user is permitted to make 100 copies, the authentication server may update the user's rights to make the remaining 50 copies.

[0056] In one embodiment, the MFD may update the machine-readable code after the job has been executed. For example, the MFD may annotate the machine-readable code (e.g., print additional machine-readable code on the document) to indicate the updated document control information (e.g., indicating that the user can reduce the number of copies from 100 to 50 copies of the document). When the user's replay limit for the document is reached, any additional replay jobs requested for the document on the MFD may be rejected. In block 510, method 500 terminates.

[0057] Figure 6 depicts a high-level block diagram of a computer dedicated to performing the functions described herein. As shown in Figure 6, the computer 600 includes one or more hardware processor elements 602 (e.g., a central processing unit (CPU), a microprocessor, or a multicore processor), memory 604, such as random access memory (RAM) and / or read-only memory (ROM), a module 605 for generating machine-readable code to restrict document reproduction, and various input / output devices 606 (e.g., but not limited to tape drives, floppy disk drives, hard disk drives, or compact disk drives, receivers, transmitters, speakers, displays, speech synthesizers, output ports, input ports, and user input devices (keyboards, keypads, mice, microphones, etc.)). Note that although only one processor element is shown, a computer may employ multiple processor elements.

[0058] It should be noted that this disclosure may be implemented in software and / or in combination of software and hardware, for example, using computer-readable instructions that may be used to configure a hardware processor to perform the steps, functions, and / or operations of the disclosed method, including, for example, an application-specific integrated circuit (ASIC), a programmable logic array (PLA) including a field-programmable gate array (FPGA), or a state machine, computer, or any other hardware equivalent deployed on a hardware device. In one embodiment, instructions and data for the module or process 605 (e.g., a software program including computer-executable instructions) for generating machine-readable code to restrict the reproduction of a document may be loaded into memory 604 and executed by a hardware processor element 602 to implement the steps, functions, or operations discussed above. Furthermore, when a hardware processor executes instructions and performs an "action," this may include the hardware processor performing the action directly and / or facilitating, directing, or cooperating with another hardware device or component (such as a coprocessor) to perform an action.

[0059] A processor that executes computer-readable instructions or software instructions related to the above method may be recognized as a programmed processor or a specialized processor. Thus, Module 605 (including related data structures) for generating machine-readable code to restrict the reproduction of the documents of this disclosure may be stored in tangible or physical (broadly non-temporary) computer-readable storage devices or media, such as volatile memory, non-volatile memory, ROM memory, RAM memory, magnetic or optical drives, devices, or diskettes. More specifically, a computer-readable storage device may comprise any physical device that provides the ability to store information such as data and / or instructions accessed by a processor or computing device such as a computer or application server.

[0060] It will be understood that variations of those disclosed above, as well as other features and functions, or substitutes thereof, may be combined into many other different systems or applications. Various currently unforeseen or unprecedented substitutes, modifications, variations, or improvements may subsequently be made by those skilled in the art, and these are also intended to be covered by the following claims.

Claims

1. A multifunction device (MFD), comprising: a communication interface for establishing a communication path with an authentication server; a user interface for receiving document control information for a document to be printed; a processor; A non-transitory computer-readable medium storing a plurality of instructions that, when executed by the processor, cause the processor to: generating a machine-readable code for the document including the document control information, the document control information including an address of the authentication server; printing the machine-readable code on a printed copy of the document printed by the MFD. a non-transitory computer-readable medium; an optical scanner that detects the machine-readable code on the printed copy of the document when a user attempts to reproduce the printed copy of the document on the MFD; Equipped with The instructions further cause the processor to establish a communications session with the authentication server in response to detecting the machine-readable code using the address found in the machine-readable code to determine whether the user is authorized to reproduce the printed copy of the document; The instructions further cause the processor to modify available play buttons on a user interface of the MFD based on authentication information for playback of the printed copy of the document received from the authentication server. Multifunction Device (MFD).

2. The instructions further cause the processor to: The MFD of claim 1 , further configured to receive authorization to reproduce the printed copy of the document.

3. The instructions further cause the processor to: receiving a reproduction restriction associated with the printed copy of the document; The MFD of claim 1 , wherein the MFD allows a user to select playback options according to the playback restrictions associated with the printed copy of the document.

4. The instructions further cause the processor to: receiving an indication that the user is not authorized to reproduce the printed copy of the document; notifying the user that they are not authorized to reproduce the printed copy of the document; The MFD of claim 1 , wherein the MFD causes any job associated with the printed copy of the document to be deleted before the job is executed.

5. The MFD of claim 1 , wherein the document control information includes a username and password associated with the printed copy of the document.

6. The MFD of claim 1 , wherein the document control information includes the number of permitted reproductions of the printed copy of the document.

7. The MFD of claim 1 , wherein the document control information includes types of reproduction of the printed copy of the document that are permitted.

8. The MFD of claim 1 , wherein the document control information includes an expiration date and time for the printed copy of the document being reproduced.

9. 1. A method comprising: receiving, via a processor of a multifunction device (MFD), document control information for a document to be printed; generating, by the processor, machine-readable code for the document including the document control information, the document control information including an address of an authentication server; printing, by the processor, the machine-readable code on a printed copy of the document printed by the MFD; receiving, by the processor, the printed copy of the document along with the machine-readable code; detecting, by the processor, the machine-readable code before a playback job is executed by the MFD; establishing, by the processor, a communications session with the authentication server in response to detecting the machine-readable code using the address found in the machine-readable code to determine whether the user is authorized to reproduce the printed copy of the document; modifying available play buttons on a user interface of the MFD based on authentication information for playback of the printed copy of the document received from the authentication server; A method comprising:

10. Once the machine-readable code is generated by the processor, establishing a communication session with an authentication server and registering the document control information with the authentication server; The method of claim 9 further comprising:

11. Receiving, by the processor, authorization to reproduce the printed copy of the document; The method of claim 9 further comprising:

12. receiving, by the processor, a reproduction restriction associated with the printed copy of the document; allowing a user to select a playback option according to the playback restrictions associated with the printed copy of the document; The method of claim 11 further comprising:

13. Receiving, by the processor, an indication that the user is not authorized to reproduce the printed copy of the document; notifying, by the processor, that the user is not authorized to reproduce the printed copy of the document; deleting, by the processor, any jobs associated with the printed copy of the document before execution of the jobs; The method of claim 9 further comprising:

14. The method of claim 9 , wherein the document control information includes a username and password associated with the printed copy of the document.

15. The method of claim 9 , wherein the document control information includes the number of reproductions of the printed copy of the document that are permitted.

16. A multifunction device (MFD), comprising: a user interface for receiving document control information for a machine-readable code to be printed on a printed document, the document control information including a user name and password, allowable types of reproduction, and an allowable number of reproductions for each allowable type of reproduction; an optical scanner that detects the machine-readable code on a printed copy of the document after the document having the machine-readable code is printed by the MFD when the MFD receives a job request to reproduce the printed copy of the document; a communications interface for registering the document control information when the machine-readable code is generated and for establishing a communications path with an authorization server responsive to the job request for authorizing the job request to reproduce the printed copy of the document when the machine-readable code on the printed copy of the document is detected; a processor; a non-transitory computer-readable medium storing a plurality of instructions; wherein the instructions, when executed by the processor, cause the processor to: generating the machine-readable code including the document control information for the printed copy of the document, the document control information further including an address of the authentication server; printing the machine-readable code onto the printed copy of the document printed by the MFD; establishing a communications session with the authentication server using the address found in the machine-readable code to authorize the job request based on the document control information read from the machine-readable code; The instructions further cause the processor to modify available playback buttons on a user interface of the MFD based on authentication information for playback of the printed copy of the document received from the authentication server.

Images