Method and system for automated cryptographic signing for mfp-generated document

Abstract

To provide a method and system for generating a signed digital document from a document generated by a multifunction printer.SOLUTION: A method includes: displaying, by a multifunction printer, a third-party screen for a third-party scan or fax workflow; switching to a multifunction printer vendor signing screen and obtaining signing settings for generation of a signed digital document; calculating a document hash of the generated document using a cryptographic hashing algorithm; sending a digital signing request to a signing server, the digital signing request including the document hash of the generated document and an authenticated account ID of a user; receiving a digital signature and a public digital signing certificate for the user from the signing server; generating the signed digital document by embedding the digital signature and the public digital signing certificate of the user into the generated document; and switching to the third-party screen for the workflow.SELECTED DRAWING: Figure 5

Description

[Technical field]

[0001] The present disclosure relates to methods and systems for automatic cryptographic signing of multifunction printer-generated (MFP-generated) documents, and more particularly, to methods and systems for automatic, secure and efficient cryptographic signing of multifunction printer-generated (MFP-generated) documents by an authenticated user during a third-party scan or fax workflow using biometric and multi-factor authentication (MFA). [Background technology]

[0002] Businesses looking to enhance the document management capabilities of their multifunction printers may choose third-party applications to enhance the basic multifunction printer workflow. For example, a third-party application can provide a scanning workflow and optimize it for each user. This provides each user with individual preferred default options when initiating a scan job, such as the document type (e.g., Portable Document Format (PDF) or XPS) used to store the scanned document. Users can then use their preferred settings to quickly complete the scan when scanning paper documents to a multifunction printer (MFP), such as a job to PDF, and proceed to transfer the scanned digital file from the multifunction printer or share the scanned digital file with other users.

[0003] For secure scanning workflows, digital files can also be cryptographically signed before the document is sent. This allows other users receiving the document to cryptographically verify that the document was created by the intended user and has not been altered since the intended user signed it. Using the scanning user's digital certificate to digitally sign scanned documents can meet this need. The signing process typically requires as input a document hash calculated from the scanned document and the user's private key embedded within the user's digital certificate, and then outputs a digital signature using a cryptographic hash algorithm. However, typical approaches to obtaining the user's private key to initiate a signing operation on a multifunction printer can be difficult, non-scalable, unintuitive, and / or insecure.

[0004] For example, in a multifunction printer setup, the digital certificates of all users are installed on each multifunction printer in the organization, or a physical PKI (Public Key Infrastructure) card is distributed to each user, and the PKI card stores the user's digital certificate with the private key. The first case of installing the digital certificates of all users requires the administrator to do it every time a new multifunction printer is introduced, so the maintenance cost is relatively high. In addition, when the multifunction printer is transferred outside the organization, there is a risk that the administrator will neglect to erase the data on the multifunction printer or will introduce a security risk by distributing the internal user data outside the organization. Therefore, it is best not to distribute the user's digital certificates on multiple multifunction printers.

[0005] The PKI card case increases the cost and management burden on the administrator of the PKI cards, requires the possession of a PKI card to realize digital signatures, and requires additional costs for the management and issuance of each PKI card, as the PKI card may be lost or misplaced. Summary of the Invention [Problem to be solved by the invention]

[0006] Currently, these burdens are not adequately addressed by typical base multifunction printer capabilities, nor by third-party applications that provide advanced scanning workflows. The above approach solves a security challenge in that it avoids the transmission over a network where a user's private key contained in a digital certificate can be intercepted and potentially compromised. In particular, the transmission over a network of a user's private key contained in a digital certificate is considered a security risk to the user's identity and must be avoided.

[0007] Therefore, a solution that allows the private key to be kept off the network and still digitally sign documents generated by a multifunction printer is desirable. [Means for solving the problem]

[0008] According to an exemplary embodiment, a secure scanning system is disclosed that seamlessly integrates with third-party applications and seamlessly adds document signing capabilities to enable secure scanning workflows for users and organizations. Furthermore, the method and system do not require users to have additional devices to achieve digital signatures, nor do the method and system require each multifunction printer to store, configure, or manage user certificates. For example, there is no need to issue devices such as PKI care for each user, further reducing management costs and risks.

[0009] Additionally, the disclosed method and system can avoid transmitting the user's private key (embedded within the user's digital certificate) over the network to maintain the security of the user's identity, and as a result, the ease of use, manageability, and security of the private key also enables organizations to use third-party scan management applications to enable document signing and secure scanning workflows.

[0010] According to one aspect, a method for generating a signed digital document from a document generated by a multifunction printer (MFP), the method comprising: displaying, by the multifunction printer, a third party screen for a third party scan or fax workflow; switching, by the multifunction printer, to a multifunction printer vendor signature screen and obtaining signature settings for generation of a signed digital document; calculating, on the multifunction printer, a document hash of the document generated by the multifunction printer using a cryptographic hash algorithm; sending, by the multifunction printer, a digital signature request to a signing server including the document hash of the document generated by the multifunction printer and an authenticated account ID of a user; receiving, by the multifunction printer, a digital signature and a public digital signature certificate of the user from the signing server; generating, by the multifunction printer, the signed digital document by embedding the digital signature and the public digital signature certificate of the user in a document generated by the multifunction printer; and switching, by the multifunction printer, to a third party screen for the third party scan or fax workflow.

[0011] According to another aspect, a non-transitory computer readable medium (CRM) storing computer program code executed by a computer processor that executes a process for generating a signed digital document from a document generated by a multifunction printer (MFP), the process comprising: displaying, by the multifunction printer, a third party screen for a third party scan or fax workflow; switching, by the multifunction printer, to a multifunction printer vendor signature screen and obtaining signature settings for generation of the signed digital document; calculating, on the multifunction printer, a document hash of the document generated by the multifunction printer using a cryptographic hash algorithm; 11. A non-transitory computer-readable medium comprising: a multifunction printer sending a digital signature request to a signing server, the digital signature request including the document hash of the document generated by the multifunction printer and an authenticated account ID of a user; receiving, by the multifunction printer, a digital signature and a public digital signature certificate of the user from the signing server; generating, by the multifunction printer, the signed digital document by embedding, by the multifunction printer, the digital signature and the public digital signature certificate of the user in the document generated by the multifunction printer; and switching, by the multifunction printer, to a third party screen for the third party scan or fax workflow.

[0012] According to another aspect, a multifunction printer comprising a processor, the processor configured to display a third-party screen for a third-party scan or fax workflow, switch to a multifunction printer vendor signature screen, obtain signature settings for generation of the signed digital document, calculate a document hash of the document generated by the multifunction printer using a cryptographic hash algorithm, send a digital signature request to a signing server including the document hash of the document generated by the multifunction printer and an authenticated account ID of a user, receive from the signing server a digital signature and a public digital signature certificate of the user, generate the signed digital document by embedding the digital signature and the public digital signature certificate of the user in the document generated by the multifunction printer, and switch to a third-party screen for the third-party scan or fax workflow.

[0013] It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention as claimed. [Brief description of the drawings]

[0014] The accompanying drawings are included to provide a further understanding of the invention, and are incorporated in and constitute a part of this specification. The drawings illustrate embodiments of the invention and, together with the description, explain the principles of the invention. [Figure 1] FIG. 1 is a diagram of a system for automatic cryptographic signing of multifunction printer-produced (MFP-produced) documents, according to an exemplary embodiment. [Diagram 2] FIG. 2 is a diagram illustrating a signed digital document generated by MFP generation according to an embodiment. [Diagram 3] FIG. 3 is a diagram illustrating verification of a signed digital document generated by an MFP according to an embodiment. [Figure 4]FIG. 4 is a flow diagram illustrating a method for completing a scan job with a digital signature as presented on a user interface of a multifunction printer, according to an embodiment. [Diagram 5] FIG. 5 is a flow chart illustrating a method for generating a signed digital document from a multifunction printer (MFP) generated document, according to an exemplary embodiment. [Figure 6] FIG. 6 is an exemplary diagram of the hardware architecture of an embodiment of a computer system. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A preferred embodiment of the present invention will now be described in detail with reference to the accompanying drawings, in which: Wherever possible, the same reference numbers are used in the drawings and the description to refer to the same or like parts.

[0016] FIG. 1 is a diagram of a system 100 for automated cryptographic signing of multifunction printer-generated (MFP-generated) documents. As shown in FIG. 1, the system 100 can include a multifunction printer 120, one or more servers or computers 130, 140, 150, 160, such as an authentication server 130, a third-party application server 140, a signature service (or signature server) 150, and a personal computer 160. The system 100 can also include a user 110 and an optional biometric authentication device, such as a client device 112, an external biometric authentication device or reader 114, or a biometric authentication device 126 that is part of the multifunction printer 120, such as a user interface 128 of the multifunction printer 120 that can be a reader for obtaining biometric data. The client device 112 can also be configured to send resources to the multifunction printer 120 and / or as an authentication device, such as for two-factor authentication (2FA) or multifactor authentication (MFA).

[0017] The client device 112, the multifunction printer 120, and the one or more servers 130, 140, 150, 160 may be configured to communicate with each other via a communications network or network 170. The communications network or network 170 may be a public telecommunications line and / or network (such as a LAN or WAN). Examples of communications network 170 may include telecommunications or telephone lines, the Internet, an intranet, a local area network (LAN) as shown, a wide area network (WAN), and / or a wireless connection using radio frequency (RF), infrared (IR) transmission, or Bluetooth technology, and / or other communications lines and / or networks consistent with the disclosed embodiments.

[0018] The multifunction printer 120 may include a scanner engine (or scanner) 122, a facsimile (fax) engine 124, a biometric authentication device 126, and a user interface or graphical user interface (GUI) 128 (i.e., a display device or user interface screen). According to an exemplary embodiment, the user interface 128 may include a high-definition multimedia interface (HDMI), a digital visual interface (DVI), a video graphics array (VGA), or the like. The display user interface 128 may be any type of display suitable for displaying data, such as a cathode ray tube (CRT) display, a liquid crystal display (LCD), a light emitting diode (LED) display, a capacitive touch display, a thin film transistor (TFT) display, or the like.

[0019] Multifunction printer 120 (e.g., printer or printing device) may also include a network interface (I / F) connected to communications network (or network) 170, a processor or central processing unit (CPU), and one or more memories for storing software programs, such as firmware and data (e.g., files to be printed) for the multifunction printer. For example, the software programs may include a printer controller and a tray table. The processor or CPU executes the instructions of the computer programs to operate and / or control at least a portion of the functionality of multifunction printer 120. Multifunction printer 120 may also include a printer engine, multiple paper trays, and a colorimeter.

[0020] The colorimeter is an in-line colorimeter (ICCU) (or spectrophotometer) that measures the printed color patches to generate a color profile. For example, the colorimeter (or spectrophotometer) can be one or more color sensors or colorimeters, such as an RGB scanner, a spectral scanner with a photodetector or other such sensing device known in the prior art, one that can be embedded in the path of the printed paper, and an optional finishing device or device. The multifunction printer 120 can also include an operating system (OS) that manages the computer hardware and provides common services to efficiently run various software programs. According to an exemplary embodiment, it can be within the scope of the disclosure for a multifunction printer to be a copier and a scanner.

[0021] For example, according to an exemplary embodiment, an image processing unit in the multifunction printer 120 can perform various image processing under the control of a print controller or CPU and send the processed print image data to a print engine. The image processing unit can include a scanner unit (scanner engine) for optically reading a document, such as an image recognition system. The scanner unit receives an image from the scanner engine and converts it into a digital image. The print engine forms an image on a print medium (or a recording sheet) based on the image data sent from the image processing unit. The central processing unit (CPU) (or processor) and memory can include a program for RIP processing (raster image processing), which is a process of converting print data included in a print job into raster image data used by a printer or print engine. The CPU can include a printer controller configured to process data and job information received, for example, via a network connection unit and / or an input / output unit (I / O unit).

[0022] The CPU may also include an operating system (OS), which acts as an intermediary between software programs and hardware components within the multifunction printer. The operating system (OS) manages the computer's hardware and provides common services for efficiently running various software applications. According to an exemplary embodiment, the printer controller may process data and job information received from, for example, client device 112 and generate print images.

[0023] According to an exemplary embodiment, the network I / F transfers data to and from, for example, one or more servers 130, 140, 150, 160, and / or client device 112. The printer controller can be programmed to process data and control various other components of the multifunction printer to perform various methods described herein. According to an exemplary embodiment, operation of the printer unit is initiated when the printer unit receives a page description from client device 112 over the network I / F in the form of a print job data stream and / or a fax data stream. The page description may be in any type of page description language (PDL), such as PostScript® (PS), Printer Control Language (PCL), Portable Document Format (PDF), XML Paper Specification (XPS), etc. Examples of multifunction printer 120 consistent with the disclosed exemplary embodiments include, but are not limited to, a multifunction printer or multifunction peripheral (MFP), a laser beam printer (LBP), an LED printer, a multifunction laser beam printer including a copy function, and the like.

[0024] According to an exemplary embodiment, the client device 112 may be a security identification and authentication device that uses an automated method to verify or recognize the identity of a living person based on physiological or behavioral characteristics. Thus, the user 110 does not need to manually enter a password into the multifunction printer 120. Methods for recognizing the user 10 may include, for example, fingerprint, electrocardiogram (ECG or EKG) information, face image, iris, and voice recognition. For example, according to an exemplary embodiment, an external biometric authentication device (or reader) 114 or an internal biometric authentication device 126 including an interface, for example, an input / display configured to detect the fingerprint of the user 110 may be used. Alternatively, the wearable device 116 may obtain biometric data of the user 110 using, for example, a Nymi® band, where the detection of the user 110 is based on an electrocardiogram (ECG) and its unique characteristics, i.e., the electrical activity of the wearer's heartbeat.

[0025] According to an exemplary embodiment, the wearable device 116 of the user 110 can communicate with a client device 112, such as a mobile client, tablet, or personal computer, where Bluetooth or Near Field Communication (NFC) or other protocols are available for the transfer and / or receipt of biometric data, access codes, and / or temporary codes as disclosed herein. For example, the client device 112 may include a display or graphical user interface accessible, for example, to a web browser in the memory of the client device 112. The client device 112 also includes an operating system (OS) that manages the computer's hardware and provides common services for efficiently running various software programs.

[0026] According to one embodiment, user 110 may present an authenticator, e.g., a biometric identifier, to multifunction printer (MFP) 120, e.g., via mobile device 112. MFP 120 receives the biometric identifier and compares the biometric identifier to those biometric identifiers stored in biometric device 126. If the biometric identifier of user 102 is stored in biometric device 126, multifunction printer 120 authenticates user 120 and issues an authentication token (which may include, e.g., a user ID and an authentication cookie) that user 110 and MFP 120 can use to retrieve resources, e.g., managed print service 142 from third-party application server 140, custom multifunction printer workflows and screens.

[0027] Alternatively, if the biometric identifier of the user 110 received by the multifunction printer (MFP) 120 is not included within the multifunction printer (MFP) 120, the multifunction printer 120 can forward the biometric identifier of the user 110 to an authentication provider 130 (e.g., an identity provider (ldP)) that can authenticate the biometric identifier of the user 110 via a user database 132. If the biometric identifier of the user 110 is included within the database 132, the authentication server 130 can send an authentication token (e.g., which can include a user ID and an authentication cookie) to the multifunction printer (MFP) 120 for the user 110 to access a managed print service 142 hosted on a third-party application server 140. For example, the third-party application server 140 can include a third-party application that can provide a scanning workflow that can be optimized for each user, and each user is provided with individual preferred default options when initiating a scan job, including the document type (e.g., PDF or XPS) used to store the scanned document.

[0028] The authentication server 130 and corresponding database 132 may be an identity provider (IdP) configured to store and manage digital identities for one or more users 110. The identity provider (IdP) may authenticate the user 110 based on, for example, biometric information (or biometric data), and if the biometric information (biometric data) is verified based on the user database 132 and biometric data 134 of the authentication server 130, the authentication server 130 may grant the user 110 access to one or more applications or managed print services hosted, for example, on a third-party application server 140.

[0029] The method and system for automated cryptographic signature of multifunction printer generated (MFP generated) documents may include a third party application 142 with scan management functionality. The third party application 140 with the scan management functionality installed may not support a digital signature option. According to one embodiment, a user 110 of a multifunction printer (MFP) 120 is first prompted to authenticate with the third party application 140, and then the user 110 can use the third party application 140 to select scan settings and initiate one or more scan jobs. Similar to selecting scan settings on a user interface screen 128 of the multifunction printer 120, the user 110 can select a digital document format that supports embedding of a digital signature, such as PDF or XPS, and initiate a scan job by placing one or more sheets or documents on the reader of the multifunction printer 120.

[0030] Once the scan job is complete and the digital document is available, instead of, for example, a PKI card tap to create a digital signature using a user certificate stored on the PKI card or a user certificate pre-installed on the multifunction printer (MFP) 120, by switching the user interface (or MFP user screen) 128 from the third-party scan application to a multifunction printer (MFP) vendor screen, the user 110 can sign by authenticating with a biometric identifier obtainable from the user's client device 112, a biometric device 114 connected to the multifunction printer (MFP) 120, such as a fingerprint reader, or a biometric device 126 associated with the user interface 128 of the multifunction printer (MFP) 120. Obtaining a biometric identifier from the user 110 can avoid the need to distribute a PKI card to each user 110 and can also provide a "physical trigger" for the document signing operation similar to a physical action, such as, for example, physically signing a document with a pen. Additionally, because the client device 112, biometric device 114, or biometric device 126 associated with the user interface 128 of the multifunction printer 120 do not contain a user digital certificate to provide the private key required for the signing operation, the disclosed method and system avoids the need to store the user's 110 private key on the multifunction printer (MFP) 120 or to transmit the user's 110 private key over the network 170.

[0031] After the user 110 is authenticated, for example by touching a finger to a fingerprint authentication device or by authenticating with the client device 112, the biometric authentication device 114 or biometric authentication device 126 associated with the user interface 128 captures biometric information (biometric data) of the user 110. The multifunction printer 120 securely transfers the biometric information (i.e., biometric data) of the user 110 to the authentication server 130 over the network 170, for example using a secure Transport Layer Security (TLS) connection. The authentication server 130 can identify the user 110 as an authenticated user (i.e., authenticate the user 110) based on the biometric information of the user 110 and notify the multifunction printer (MFP) 120 by providing the multifunction printer (MFP) 120 with a token (i.e., a user token) that uniquely represents the successful authentication of the user 110 via the biometric identifier.

[0032] According to one embodiment, the multifunction printer 120 may calculate a document hash from the scanned document using a cryptographic hash algorithm, such as SHA-256, in preparation for signing the scanned document. The multifunction printer 120 securely requests the authentication server 130 to sign the document hash. The multifunction printer 120 may provide the document hash and a token (e.g., a user token) to the authentication server 120. The authentication server 120 verifies that the user token is valid and can initiate a signing request to the signing service (or signing server) 150. The authentication server 130 provides the document hash and the authenticated account ID of the user 110 to the signing service 150.

[0033] The signature service 150 verifies that the authentication server 130 is a trusted identity provider. For example, the verification of the signature service 150 as a trusted identity provider of the authentication server 130 may be performed, for example, using single sign-on (SSO) technology, according to one embodiment, or, if the signature service 150 is maintained by a different organization than the authentication server 130, the verification of the authentication server 130 may be performed, for example, using a federated identity management (FIM) technology, such as SAML, OAuth, OpenID, etc.

[0034] The signature service 150 provides the user's 110 account ID and the document hash to a module, such as the signature service's 150's internal hardware security module 154 (HSM), and requests a signing operation. The HSM 154 looks up the user's existing digital signature certificate or generates a new digital signature certificate with a public / private key pair, extracts the private key, and initiates the signing operation on the document hash. The HSM 154 provides the resulting digital signature (e.g., the signed document hash) to the signature service 150 and the user's public digital certificate, which contains the user's public key. The resulting digital signature does not include the user's 110 private key. The exclusion of the user's 110 private key helps to ensure that the user's private key is not transmitted over the network 170.

[0035] According to one embodiment, the user's public digital signature certificate can be issued by a certificate authority (CA) 152 of the signing service 150. In order for the recipient 111 (e.g., the recipient's 111 computer 160) to verify the digital signature, the signing service's CA 152 certificate must be trusted by the document recipient 111, which can be achieved by installing the signing service's 150 CA certificate in the recipient's 111 computer 160 trusted certificate store 162. The signing service 150 forwards (or provides) the resulting digital signature and public signature certificate of the user 110 to the authentication server 130. The authentication server 150 forwards (or provides) the user's 110 digital signature and public signature certificate to the multifunction printer 120. The multifunction printer 120 embeds the digital signature together with the user's 110 public signature certificate into a digital document (e.g., a PDF or XPS file) to generate a signed digital document 230 (FIGS. 2 and 3). The multifunction printer 120 can then return screen control (i.e., the user interface screen 128) to the third party scanning application. The multifunction printer 120 can notify the third party scanning application that the signed digital document 230 is ready. The third party scanning application can display the remaining third party screens required to complete the scanning workflow.

[0036] According to one embodiment, upon completion, the signed digital document 130 can be provided to the user 110, for example, at a location specified in the user scan settings of the multifunction printer 120. For example, the location specified in the user scan settings of the multifunction printer 120 can be the user's 110 email, computer or server, such as the recipient's 111 computer 160, a folder, hard drive or thumb drive. For example, the user 110 can distribute the signed digital document 130 to the recipient's 111 computer 160. According to one embodiment, the recipient's 111 computer 160 can include a trusted certificate authority (CA) configured to store, for example, the user's 110 public digital signature certificate 164. The recipient's 111 computer 160 can be configured to verify the user's 110 public digital signature certificate of the signed digital document 230, as disclosed herein.

[0037] According to one embodiment, once a user 110 and corresponding recipient 111 receive a signed digital document 230 as shown in Figures 2 and 3, the disclosed method and system can use a cryptographic approach to verify the public digital signature certificate of user 110. For example, using a cryptographic approach, the method and system for automated cryptographic signing of multifunction printer generated (MFP generated) documents can keep costs relatively low.

[0038] Figure 2 is a diagram of a method 200 for automated cryptographic signing of a multifunction printer generated (MFP generated) document. As shown in Figure 2, a cryptographic hash algorithm 212 is applied to document data 210 to generate a document hash 214 of the document data 210. A sender's (or user 110's) private key is applied to the document hash 214 using a cryptographic hash algorithm 218 to generate a digital signature 320 of a signed digital document 230. The signed digital document 230 includes the document data 210, the digital signature 220, and the sender's (i.e. user 110's) public key / certificate.

[0039] Figure 3 is a diagram of a method 300 for verifying a signed digital document 220. As shown in Figure 3, for example, a recipient 111, e.g., a recipient's computer 160, obtains the sender's public certificate and verifies it with a recipient's trusted certificate authority 320. For example, the recipient-trusted certificate authority 320 can be a trusted certificate storage 162 on the recipient's 111's computer 160.

[0040] According to one embodiment, signature verification of the signed digital document 230 can be performed using a process in which the recipient's 111 computer 160 is configured with a trusted certificate authority (CA) 162 that stores the certificate of the certificate authority (CA) that issued the public digital signature certificate of the user (i.e., sender) 110. According to one embodiment, the certificate authority (CA) certificate 162 can be pre-installed by the operating system (OS) vendor or can be obtained from the signature service 150. The recipient 111 can receive the signed digital document 230 (e.g., PDF or XPS) and open the signed digital document 230 using an appropriate viewer (or application). The viewer (application) extracts the sender's (or user's 110) digital signature and the public signature certificate from the digital document. The viewer (or application) also calculates a document hash from the signed digital document 230 using the same algorithm used to sign the document, e.g., SHA-256.

[0041] The viewer then provides the document hash and the sender's public key from the sender's public signature certificate to a digital signature verification algorithm (e.g., Digital Signature Algorithm (DSA) or Elliptic Curve Digital Signature Algorithm (ECDSA)). The viewer receives the results from the digital signature verification algorithm and informs the recipient 111 whether the signature is valid.

[0042] According to one embodiment, instead of prompting the user (or sender) 110 to perform only biometric authentication, the user 110 may be provided with the option to prompt for an authenticator, for example, using a PIN (personal identification number) to enable two-factor authentication (2FA) or multi-factor authentication (MFA).

[0043] According to another embodiment, instead of prompting the user (or sender) 110 to perform biometric authentication when the scanned document is ready, if the user 110 has previously been authenticated, the prompt can be skipped and, for example, the multifunction printer 120 and / or third party application server 140 can access custom composite workflows and screens including scan management or fax management applications (e.g., iFax). For example, a facsimile management application on the multifunction printer 120 can send a facsimile (FAX) directly to a server, e.g., the personal computer 160 of the recipient 111.

[0044] According to a further embodiment, the multifunction printer 120 can directly send a digital document signing request (ie, document data 210) to the signature service 150 instead of requesting a digital document signing from the authentication server 130.

[0045] According to the disclosed embodiments, the method and system for automatic cryptographic signing of multifunction printer generated (MFP generated) documents can transparently enable document signing for third party scanning applications without modifying the third party applications. For example, new screens can be inserted into the third party scanning workflow as needed to prompt the user to perform biometric authentication to trigger the signature, and allow the user (or sender) 110 to sign the document without having to carry a PKI card to the MFP or store user certificates on multiple MFPs. Furthermore, secure signing can be triggered and performed in a manner that triggers signing through a natural biometric approach and enables connections that perform signing without distributing the user's private key over a network. Furthermore, the recipient 111 can verify the document signature rather easily using existing tools and simple methods such as adding the signing service's CA certificate to the recipient's trusted CA store. Functionality can be expanded to enable secure scanning workflows while minimizing administrative and maintenance costs.

[0046] According to one embodiment, the method and system for automated cryptographic signature of multifunction printer generated (MFP generated) documents can include a third-party fax workflow in addition to a scan workflow. For example, similar to PDF and XPS, the method and system for automated cryptographic signature of multifunction printer generated (MFP generated) documents can be a facsimile (FAX) format such as iFax that supports embedded signatures.

[0047] FIG. 4 is a flow diagram illustrating a method 400 of completing a scan job with an electronic signature as shown on the user interface 128 of the multifunction printer 120, according to an embodiment. As shown in FIG. 4, the multifunction printer 120 may include a third party application screen 410 and a multifunction vendor secure screen 420 for performing the process of generating a digital signature as disclosed herein. A user may initiate the process on the third party application screen in step 412 by placing a paper in the scanner of the multifunction printer 120. In step 414, the user 110 may set scan options, such as the resolution of the scanned image, the type of scanned image, such as PDF, XPS file, where to save the scanned image, etc. In step 416, the user 110 initiates the scan job. In step 418, the multifunction printer 120 scans the paper and creates an output, such as a PDF or XPS file. In step 420, the user interface screen 128 switches to a screen 430 of the vendor or manufacturer of the multifunction printer 120, such as Konica Minolta®, for example.

[0048] According to one embodiment, multifunction printer 120 vendor or manufacturer screen 430 is preferably a secure scan screen and, in step 432, prompts user 110 to authenticate with a biometric identifier and optional multi-factor authentication (MFA). For example, the biometric identifier may be one or more physiological characteristics of user 110, where the one or more physiological characteristics may be selected from one or more of a fingerprint, palm vein, facial recognition, DNA (deoxyribonucleic acid), palm print, hand geometry, iris recognition, retina, and / or odor / fragrance.

[0049] In step 434, the user 110 provides a biometric identifier to one or more of the client device 112, an external biometric device 114 associated with the multifunction printer 120, or a biometric device 126 associated with the user interface 128 of the multifunction printer 120, and is authenticated by the disclosed authentication server 130. In step 436, the multifunction printer 120 can digitally sign the created output without the user's 110 private key being transferred over the network 170. In step 438, the vendor screen 430 switches to the third party application scan screen 410. In step 442, the multifunction printer 120 notifies the third party application that the output file is available. In step 444, the user 110 can continue with the remaining scan workflow screens.

[0050] FIG. 5 is a flow chart illustrating a method 500 for generating a signed digital document from a document generated by a multifunction printer (MFP) 120, according to an exemplary embodiment. As shown in FIG. 5, in step 502, the multifunction printer 120 displays a third-party screen for a third-party scan or fax workflow. In step 504, the multifunction printer 120 switches to a multifunction printer vendor signature screen to obtain signature settings for generating a signed digital document. In step 506, the multifunction printer 120 calculates a document hash of the document generated by the multifunction printer 120 using a cryptographic hash algorithm. In step 508, the multifunction printer 120 sends a digital signature request to a signature server. The digital signature request may include the document hash of the document generated by the multifunction printer 120 and the authenticated account ID of the user 110. In step 510, the multifunction printer 120 receives the digital signature and the public digital signature certificate of the user 110 from the signature server. In step 512, the multifunction printer 120 generates a signed digital document by embedding the digital signature and public digital signature certificate of the user 110 in the document generated by the multifunction printer 120. In step 514, the multifunction printer 112 displays a third-party screen for a third-party scan or fax workflow. The document generated by the multifunction printer 120 may be a scanned document or a facsimile (FAX). Furthermore, the cryptographic hash algorithm may be, for example, SHA-256.

[0051] According to one embodiment, the signature settings obtained by the multifunction printer 120 to generate a signed digital document may include, for example, prompting the user 112 to authenticate with a biometric identifier and an optional multi-factor authenticator to obtain an authenticated account ID of the user 110. Additionally, the signature settings may include input from the user 110 regarding the settings of the digital signature 220 of the signed document 230, including the type of output file being digitally signed (e.g., scanned or faxed), the type or number of digital signatures to be generated, e.g., more than one digital signature 220 (i.e., from more than one user 110) that may be included on the signed document 230, and other adjustments or modifications to the settings of the signature service 150 that may be applied in generating the digital signature 220 of the signed document 230.

[0052] According to one embodiment, the authenticated account ID of user 110 may include authenticating user 110 with a biometric identifier on multifunction printer 120, receiving by multifunction printer 120 a user token from authentication server 130 indicating successful authentication of user 110's biometric identifier, and sending by multifunction printer 120 to a signature server the user token from authentication server 130 along with a digital signature request. Further, the authenticated account ID of the user 110 can further include receiving, by the signing server, a user token from the authentication server 130 along with a digital signature request from the multifunction printer 120, by the signing server 140, verifying that the authentication server 120 is a trusted identity provider, and providing, from the authentication server 130, a request for a signing operation based on the verification by the signing server 140 that the authentication server 130 is a trusted identity provider, the request for the signing operation including the account ID of the user 110 and a document hash of the document generated by the multifunction printer 120, by the security module 154 of the signing server 140, retrieving or generating a digital signature certificate including the user's public key / private key pair, and retrieving or generating, by the security module 154 of the signing server 140, a public digital signature certificate that excludes the private key from the user's public key / private key pair of the digital signature certificate.

[0053] According to one embodiment, signing server 140 can generate or create a new key pair (i.e., a public / private key pair) for each signing request for user 110. Alternatively, instead of generating or creating a new key pair for each signing request for user 110, signing server 140 can use a previously generated key pair (i.e., a public / private key pair) for user 110.

[0054] According to one embodiment, the authenticated account ID of user 110 may include authenticating user 110 with a biometric identifier on multifunction printer 120, receiving by multifunction printer 120 a user token from authentication server 130 indicating that the biometric identifier of user 110 has been successfully authenticated, and sending by multifunction printer 120 to authentication server 130 the user token from authentication server 130 along with a digital signature request and forwarding the digital signature request to the signature server.

[0055] According to one embodiment, the method may include forwarding the signed digital document by the multifunction printer 120 to the server 160, obtaining the signed digital document from the server 160 by the electronic signature verification program, and opening the signed digital document with the electronic signature verification program. The method may include extracting, by the electronic signature verification program, the user's electronic signature and public electronic signature certificate from the signed digital document received from the multifunction printer 120, calculating, by the electronic signature verification program, a recipient document hash of the signed digital document received from the multifunction printer 120, comparing, by the electronic signature verification program, the calculated recipient document hash of the signed digital document received from the multifunction printer 120 with the document hash of the document generated by the multifunction printer 120, and verifying, by the electronic signature verification program, the signed digital document if the calculated recipient document hash of the signed digital document received from the multifunction printer 120 matches the document hash of the document generated by the multifunction printer 120. According to one embodiment, the electronic signature verification program may be, for example, Adobe Acrobat Reader.

[0056] According to one embodiment, a server, for example a personal computer 160, may act as a file transfer server to receive the signed digital document and deliver the digital document from the multifunction printer 120 to another recipient 111 via email, a file sharing server, or the like.

[0057] According to another embodiment, the method may include the multifunction printer 120 providing the authentication server 130 with a document hash of the document and an authentication token received from the authentication server 130, and the multifunction printer 120 requesting that the authentication server 130 initiate an electronic signature request to the signing server 140 for the document hash of the document.

[0058] According to a further embodiment, a method may include displaying a screen on a display panel of the multifunction printer 120 prompting the user 110 for a biometric identifier, receiving by the multifunction printer 120 a biometric identifier from the user 110 from a biometric device, the biometric device including one or more of a sensor, a scanning device, or an electronic reader, the biometric identifier of the user 110 being one or more physiological characteristics of the user 110, the one or more physiological characteristics being selected from one or more of a fingerprint, a palm vein, a facial recognition, a DNA (deoxyribonucleic acid), a palm print, a hand shape, an iris recognition, a retina, and / or an odor / fragrance, and authenticating the user 110 with the biometric identifier on the multifunction printer 120. Additionally, the method may include requesting, by the multifunction printer 120, an authenticator providing multi-factor authentication (MFA) in addition to the biometric identifier of the user 110.

[0059] According to one embodiment, one or more new screens can be inserted by a multifunction printer vendor into a third party scan or fax workflow of a third party screen. For example, the one or more new screens can request or prompt a user to submit a biometric identifier as disclosed herein.

[0060] According to one embodiment, the method can include authenticating the user 110 with each signed digital document by the multifunction printer 120. The method can also include authenticating the user 110 with the multifunction printer (MFP) 120 prior to commencing the method of generating the signed digital document from the document generated by the multifunction printer 120. The method can further include authenticating the user 110 with the signed digital document by the multifunction printer 120 and implementing user authentication request timing from one or more external servers used in generating the signed digital document from the document generated by the multifunction printer 120.

[0061] 6 illustrates a representative computer system 600 in which embodiments of the present disclosure, or portions thereof, may be implemented as computer readable code executed on hardware. For example, one or more computer systems 130, 140, 150, 160 associated with the methods and systems for generating signed digital documents from documents generated by the client device 112, multifunction printer 120, and multifunction printer (MFP) as disclosed herein may be implemented in whole or in part by the computer system 600 using hardware, software executing on the hardware, firmware, non-transitory computer readable media having instructions stored thereon, or a combination thereof, and may be implemented in one or more computer systems or other processing systems. The hardware, software executing on the hardware, or a combination thereof may implement the modules and components used to perform the methods and steps of the presently described methods and systems.

[0062] Where programmable logic is used, such logic may be executed on a commercially available processing platform configured by executable software code and may be a special purpose computer or special purpose device (e.g., programmable logic array, application specific integrated circuit, etc.). Those skilled in the art will appreciate that embodiments of the disclosed subject matter may be practiced in a variety of computer system configurations including multi-core multiprocessor systems, minicomputers, mainframe computers, computers linked or clustered with distributed functionality, and pervasive or miniature computers that may be embedded in virtually any device. For example, the foregoing embodiments may be implemented using at least one processor device and a memory.

[0063] A processor unit or device as described herein may be a single processor, multiple processors, or a combination thereof. A processor device may have one or more processor "cores." As used herein, the terms "computer program medium," "non-transitory computer-readable medium," and "computer usable medium" are generally used to refer to tangible media, such as removable storage device 618, removable storage device 622, or a hard disk installed in hard disk drive 612.

[0064] Various embodiments of the present disclosure are described with respect to this representative computer system 600. After reading this specification, it will be apparent to one skilled in the relevant art how to implement the present disclosure using other computer systems and / or computer architectures. Although operations are described as sequential processes, in reality some operations are performed in parallel, concurrent, and / or distributed environments, with program code stored locally or remotely for access from single-processor or multi-processor machines. Also, in some embodiments the order of operations may be rearranged without departing from the spirit of the disclosed subject matter.

[0065] The processor device 604 may be a processor device specially configured to perform the functions described herein. The processor device 604 may be connected to a communication infrastructure 606, such as a bus, a message queue, a network, a multi-core message passing scheme, or the like. The network may be any network suitable for performing the functions disclosed herein, and may include a local area network ("LAN"), a wide area network ("WAN"), a wireless network ("wi-fi"), a mobile communication network, a satellite network, the Internet, fiber optics, coaxial cable, infrared, radio frequency ("RF"), or a combination thereof. Other suitable network types and configurations will be apparent to those skilled in the relevant art. The computer system 600 may include a main memory 608 (e.g., random access memory, read-only memory, etc.) and may also include a secondary memory 610. The secondary memory 610 may include a hard disk drive 612 and a removable storage drive 614, such as a floppy disk drive, a magnetic tape drive, an optical disk drive, a flash memory, or the like.

[0066] The removable storage drive 614 can read from and / or write to the removable storage device 618 in a well-known manner. The removable storage device 618 can include a removable storage medium that is read from and written to by the removable storage drive 614. For example, if the removable storage drive 614 is a floppy disk drive or a universal serial bus port, the removable storage device 618 can be a floppy disk or a portable flash drive, respectively. In one embodiment, the removable storage device 618 can be a non-transitory computer-readable recording medium.

[0067] In some embodiments, secondary memory 610 may include alternative means for allowing computer programs and other instructions to be loaded into computer system 600, such as, for example, a removable storage device 622 and interface 620. Examples of such means may include program cartridges and cartridge interfaces (e.g., as found in video game systems), removable memory chips (e.g., EEPROM, PROM, etc.) and associated sockets, and other removable storage devices 622 and interfaces 620 as would be apparent to one of ordinary skill in the relevant art.

[0068] Data stored in computer system 600 (e.g., stored in main memory 608 and / or secondary memory 610) may be stored on a suitable computer-readable medium, such as an optical storage device (e.g., a compact disc, digital versatile disc, Blu-ray disc) or a magnetic storage device (e.g., a hard disk drive). The data may be organized in any type of suitable database configuration, such as a relational database, a Structured Query Language (SQL) database, a distributed database, an object database, etc. Suitable configurations and storage types will be apparent to those skilled in the relevant art.

[0069] Computer system 600 may also include a communications interface 624. Communications interface 624 may be configured to allow software and data to be transferred between computer system 600 and external devices. Exemplary communications interface 624 may include a modem, a network interface (e.g., an Ethernet card), a communications port, a PCMCIA slot and card, and the like. The software and data transferred via communications interface 624 may be in the form of signals, which may be electronic, electromagnetic, optical, or other signals apparent to those skilled in the relevant art. The signals may be communicated over communications path 626, which is configured to transmit signals and which may be implemented using wire, cable, fiber optics, a telephone line, a cellular phone link, a radio frequency link, and the like.

[0070] The computer system 600 may further include a display interface 602. The display interface 602 may be configured to allow data to be transferred between the computer system 600 and an external display 630. Exemplary display interfaces 602 may include a high-definition multimedia interface (HDMI), a digital visual interface (DVI), a video graphics array (VGA), and the like. The display 630 may be any type of display suitable for displaying data transmitted through the display interface 602 of the computer system 600, such as a cathode ray tube (CRT) display, a liquid crystal display (LCD), a light-emitting diode (LED) display, a capacitive touch display, a thin film transistor (TFT) display, and the like. The computer program medium and computer usable medium may refer to memories, such as the main memory 608 and the secondary memory 610, which may be memory semiconductors (such as DRAMs). These computer program products may be means for providing software to the computer system 600. Computer programs (e.g., computer control logic) may be stored in the main memory 608 and / or the secondary memory 610. Computer programs may also be received via the communication interface 624. Such computer programs, when executed, may enable the computer system 600 to perform the present methods as described herein. In particular, the computer programs, when executed, may enable the processor device 604 to perform the methods illustrated in Figures 1 to 5 as described herein. Such computer programs may therefore represent controllers of the computer system 600. If the present disclosure is implemented using software executed on hardware, the software is stored in a computer program product and loaded into the computer system 600 using the removable storage drive 614, the interface 620, and the hard disk drive 612, or the communication interface 624.

[0071] The processor device 604 may be comprised of one or more modules or engines configured to perform the functions of the computer system 600. Each module or engine may be executed using hardware, and in some cases may utilize software executed on the hardware, such as corresponding to program code and / or programs stored in the main memory 608 or the secondary memory 610. In such a case, the program code may be compiled by the processor device 604 (e.g., by a compilation module or engine) before being executed by the hardware of the computer system 600. For example, the program code may be source code written in a programming language that is translated into a lower level language, such as assembly language or machine code, to be executed by the processor device 604 and / or additional hardware components of the computer system 600. The process of compilation may include the use of lexical analysis, preprocessing, syntactic analysis, semantic analysis, syntax-directed translation, code generation, code optimization, and other techniques suitable for translating the program code into a low level language suitable for controlling the computer system 600 to perform the functions disclosed herein. It will be apparent to those skilled in the relevant art that the computer system 600 will be a computer system 600 specially programmed to perform the functions described above.

[0072] According to an exemplary embodiment, the method and process as disclosed can be implemented on a non-transitory computer-readable medium. The non-transitory computer-readable medium may be a magnetic recording medium, a magneto-optical recording medium, or any other recording medium developed in the future, all of which are considered to be applicable to the present invention as well. Copies of such media, including primary and secondary duplicate products, etc., are undoubtedly considered equivalent to the above-mentioned media. Furthermore, even if the embodiment of the present invention is a combination of software and hardware, it does not deviate from the spirit of the invention. The present disclosure may be implemented such that the software portion thereof is written into the recording medium in advance and is read as needed during operation.

[0073] As used herein, elements or steps referred to in the singular and preceded by the words "a" or "an" should be understood as not excluding a plurality of elements or steps, unless such exclusion is expressly stated. Furthermore, references to "an example embodiment" or "one embodiment" of the present disclosure are not intended to be interpreted as excluding the existence of additional examples that also incorporate the recited features.

[0074] The patent claims at the end of this document are not intended to be construed under 35 U.S.C. § 112(f) unless traditional means-plus-function language, e.g., "means for" or "step for," is expressly recited.

[0075] According to an exemplary embodiment, the method and process as disclosed can be implemented on a non-transitory computer-readable medium. The non-transitory computer-readable medium may be a magnetic recording medium, a magneto-optical recording medium, or any other recording medium developed in the future, all of which are considered to be applicable to the present invention as well. Copies of such media, including primary and secondary duplicate products, etc., are undoubtedly considered equivalent to the above-mentioned media. Furthermore, even if the embodiment of the present invention is a combination of software and hardware, it does not deviate from the spirit of the invention. The present invention may be implemented such that the software portion thereof is written in advance into the recording medium and is read as needed during operation.

[0076] It will be apparent to those skilled in the art that various modifications and variations can be made to the structure of the present invention without departing from the scope or spirit of the invention. In view of the foregoing, it is intended that the present invention cover modifications and variations of this invention provided they come within the scope of the following claims and their equivalents.

Claims

1. 1. A method for generating a signed digital document from a document generated by a multifunction printer (MFP), the method comprising: displaying, by the multifunction printer, a third-party screen for a third-party scan or fax workflow; switching, by the multifunction printer, to a multifunction printer vendor signature screen and obtaining signature settings for generation of a signed digital document; calculating, on the multifunction printer, a document hash of a document generated by the multifunction printer using a cryptographic hash algorithm; sending, by the multifunction printer, a digital signature request to a signing server, the digital signature request including the document hash of the document generated by the multifunction printer and an authenticated account ID of a user; receiving, by the multifunction printer, a digital signature and a public digital signature certificate of the user from the signature server; generating, by the multifunction printer, the signed digital document by embedding the digital signature and the public digital signature certificate of the user in a document generated by the multifunction printer; switching, by the multifunction printer, to a third party screen for the third party scan or fax workflow.

2. the document produced by the multifunction printer, Scanning a document with the multifunction printer; or and generating, by the multifunction printer, a facsimile (FAX).

3. The authenticated account ID of the user, authenticating the user on the multifunction printer with a biometric identifier; receiving, by the multifunction printer, from an authentication server, a user token indicating that the biometric identifier of the user has been successfully authenticated; 2. The method of claim 1, comprising transmitting, by the multifunction printer, to the signature server, the user token from the authentication server along with the digital signature request.

4. receiving, by the signature server, the user token from the authentication server along with the digital signature request from the multifunction printer; verifying, by the signing server, that the authentication server is a trusted identity provider; providing a request for a signing operation from the authentication server based on confirmation by the signing server that the authentication server is a trusted identity provider, the request for the signing operation including an account ID of the user and the document hash of the document generated by the multifunction printer to a security module within the signing server; retrieving or generating, by the security module of the signing server, a digital signature certificate including a public / private key pair for the user; 4. The method of claim 3, comprising: retrieving or generating, by the security module of the signing server, the public digital signature certificate that excludes a private key from a public / private key pair of the user of the digital signature certificate.

5. The authenticated account ID of the user, authenticating the user on the multifunction printer with a biometric identifier; receiving, by the multifunction printer, from an authentication server, a user token indicating that the biometric identifier of the user has been successfully authenticated; 2. The method of claim 1, comprising: transmitting, by the multifunction printer, to the authentication server, the user token from the authentication server along with the digital signature request for the authentication server and forwarding the digital signature request to the signature server.

6. transmitting, by the multifunction printer, the signed digital document to a server; obtaining the signed digital document from the server by an electronic signature verification program; The method of claim 1 , further comprising: opening the signed digital document with the electronic signature verification program.

7. extracting, by the electronic signature verification program, an electronic signature and a public electronic signature certificate of the user from the signed digital document received from the multifunction printer; calculating, by the electronic signature verification program, a recipient document hash of the signed digital document received from the multifunction printer; comparing, by the electronic signature verification program, the calculated recipient document hash of the signed digital document received from the multifunction printer with the document hash of the document generated by the multifunction printer; 7. The method of claim 6, further comprising: verifying, by the electronic signature verification program, the signed digital document if the calculated recipient document hash of the signed digital document received from the multifunction printer matches the document hash of the document generated by the multifunction printer.

8. providing, by the multifunction printer, to the authentication server, the document hash of the document and an authentication token received from the authentication server; 2. The method of claim 1, further comprising: requesting, by the multifunction printer, that the authentication server initiate the electronic signature request to the signing server of the document hash of the document.

9. inserting, by the multifunction printer, a screen into the third party scan or fax workflow that prompts the user for a biometric identifier; receiving, by the multifunction printer, a biometric identifier from the user from a biometric device, the biometric device including one or more of a sensor, a scanning device, or an electronic reader, the biometric identifier of the user being one or more physiological characteristics of the user, the one or more physiological characteristics being selected from one or more of a fingerprint, a palm vein, a facial recognition, a DNA (deoxyribonucleic acid), a palm print, a hand geometry, an iris recognition, a retina, and / or an odor / fragrance; The method of claim 1 , further comprising: authenticating the user on the multifunction printer with the biometric identifier.

10. 10. The method of claim 9, further comprising: requiring, by the multifunction printer, the user to provide an additional authentication factor for multi-factor authentication (MFA) in addition to the user's biometric identifier.

11. The method of claim 1 , further comprising inserting one or more new screens into the third-party scan-to-fax workflow by a multifunction printer vendor.

12. The method of claim 1 , further comprising authenticating, by the multifunction printer, the user with each signed digital document.

13. 10. The method of claim 1, further comprising authenticating the user by a multifunction printer (MFP) prior to commencing the method of generating the signed digital document from the document generated by the MFP.

14. authenticating, by the multifunction printer, the user with the signed digital document; 2. The method of claim 1, further comprising: implementing, by the multifunction printer, timing of a user authentication request from one or more external servers used in generating the signed digital document from the document generated by the multifunction printer.

15. A non-transitory computer readable medium (CRM) storing computer program code executed by a computer processor for executing a process for generating a signed digital document from a document generated by a multifunction printer (MFP), the process comprising: displaying, by the multifunction printer, a third-party screen for a third-party scan or fax workflow; switching, by the multifunction printer, to a multifunction printer vendor signature screen and obtaining signature settings for generation of the signed digital document; calculating, on the multifunction printer, a document hash of the document generated by the multifunction printer using a cryptographic hash algorithm; sending, by the multifunction printer, a digital signature request to a signing server, the digital signature request including the document hash of the document generated by the multifunction printer and an authenticated account ID of a user; receiving, by the multifunction printer, a digital signature and a public digital signature certificate of the user from the signature server; generating, by the multifunction printer, the signed digital document by embedding the digital signature and the public digital signature certificate of the user in the document generated by the multifunction printer; switching, by the multifunction printer, to a third party screen for the third party scan or fax workflow.

16. The authenticated account ID of the user, authenticating the user on the multifunction printer with a biometric identifier; receiving, by the multifunction printer, from an authentication server, a user token indicating that the biometric identifier of the user has been successfully authenticated; 16. The computer-readable medium of claim 15, further comprising transmitting, by the multifunction printer, to the signing server, the user token from the authentication server along with the digital signature request.

17. receiving, by the signature server, the user token from the authentication server along with the digital signature request from the multifunction printer; verifying, by the signing server, that the authentication server is a trusted identity provider; providing a request for a signing operation from the authentication server based on confirmation by the signing server that the authentication server is a trusted identity provider, the request for the signing operation including an account ID of the user and a document hash of the document generated by the multifunction printer to a security module within the signing server; retrieving or generating, by the security module of the signing server, a digital signature certificate including a public / private key pair for the user; 20. The computer-readable medium of claim 16, further comprising: retrieving or generating, by the security module of the signing server, the public digital signature certificate that excludes a private key from a public / private key pair for the user of the digital signature certificate.

18. The authenticated account ID of the user, authenticating the user on the multifunction printer with a biometric identifier; receiving, by the multifunction printer, from an authentication server, a user token indicating that the biometric identifier of the user has been successfully authenticated; 17. The computer-readable medium of claim 16, further comprising: transmitting, by the multifunction printer, to the authentication server, the user token from the authentication server along with the digital signature request for the authentication server and forwarding the digital signature request to the signature server.

19. A multifunction printer comprising a processor, The processor, Display third-party screens for third-party scan or fax workflows, Switch to a multifunction printer vendor signature screen and obtain signature settings for generating said signed digital document; calculating a document hash of a document generated by the multifunction printer using a cryptographic hash algorithm; sending a digital signature request to a signing server, the request including the document hash of the document generated by the multifunction printer and an authenticated account ID of the user; receiving a digital signature and a public digital signature certificate of the user from the signature server; generating the signed digital document by embedding the digital signature and the public digital signature certificate of the user in the document generated by the multifunction printer; A multifunction printer configured to switch to a third party screen for said third party scan or fax workflow.

20. The processor, authenticating the user with a biometric identifier; receiving a user token from an authentication server indicating that the biometric identifier of the user has been successfully authenticated; 20. The multifunction printer of claim 19, configured to transmit to the signature server the user token from the authentication server along with the digital signature request.

Images