IPP Scan Directory Service for Secure Push Scan URI Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Internet Printing Protocol (IPP) Push Scan method lacks a centralized directory service for managing and distributing destination systems or hosts, leading to security risks and inaccuracies in providing destination Uniform Resource Identifiers (URIs) and access credentials to IPP clients.
Innovation Solution
A directory service system that hosts a database of destination URIs and access credentials for IPP clients, allowing authorized clients to retrieve and manage lists of destinations using IPP vendor extension operations, ensuring secure communication via IPP or IPPS protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized directory service is implemented to manage destination URIs and credentials, then security and accuracy in destination management are improved, but system complexity increases
Solution Approach 1:
The patent introduces a directory service as an intermediary component between IPP clients and destination systems. This directory service stores and manages destination URIs and access credentials centrally, providing a controlled interface for clients to retrieve authorized destinations. The intermediary approach improves security by centralizing credential management and improving accuracy through a single source of truth, while the added complexity is confined to this dedicated management layer rather than propagating throughout the entire system.
2Reliability
If destination URIs and credentials are distributed through a centralized directory service, then access control and security are improved, but information retrieval time increases
Solution Approach 1:
The directory service performs preliminary actions by pre-establishing and storing authorized destination URIs and credentials for each IPP client before actual scan operations occur. During runtime, clients can quickly retrieve their pre-configured destination lists without performing complex authentication or discovery operations at the moment of scanning. This preliminary organization of access information maintains strong access control while minimizing retrieval time during operational phases.
3Ease of operation
If a database of destination URIs and credentials is hosted for multiple IPP clients, then centralized management and security are improved, but device complexity and storage requirements increase
Solution Approach 1:
The directory service database is designed to serve multiple IPP clients simultaneously with a single centralized storage system. Rather than maintaining separate credential stores for each client, the universal database structure efficiently organizes destination URIs and credentials by client identifier, allowing one database instance to fulfill the management needs of numerous clients. This multi-functional approach achieves centralized management benefits while avoiding the storage overhead of duplicating the entire credential set for each client.
Data Source
AI summary
A method, a system, and a non-transitory computer readable medium are disclosed containing a computer program having computer readable code embodied to carry out a method of providing Uniform Resource Identifiers for Push Scan jobs pursuant to an Internet Printing Protocol (IPP), which includes hosting a database of IPP clients and destination Uniform Resource Identifiers (destination-uris) for each of the IPP clients, the database of destination-uris defining each of the destination-uris in which each of the IPP clients are authorized to send Push Scan jobs; receiving a request from an IPP client for at least one Uniform Resource Identifier (URI) for a Push Scan job; checking the database to determine if the IPP client is authorized to send the Push Scan job to the at least one URI; and sending the destination-uris to the IPP client upon determination that the IPP client is authorized to send the Push Scan job.