Scanning Workflow Using Mobile Key Transfer for Secure Scan Jobs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing scanning systems face security vulnerabilities as scanned documents are often transmitted unencrypted, allowing unauthorized access, and require additional hardware like card readers and signature cards, which are cumbersome to manage and have limited security.
Innovation Solution
Implement a method using asynchronous key pairs, where a scan job is encrypted with a public scan job key and the private key is transmitted to a computer device securely via a mobile user terminal, eliminating the need for card readers and signature cards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If documents are transmitted unencrypted in conventional scanning systems, then ease of operation is improved, but security is worsened allowing unauthorized access
Solution Approach 1:
The patent applies preliminary action by encrypting the scan job with the public key before transmission to the scan server. This encryption is performed in advance during the scanning process, ensuring that the document is protected before it enters the network transmission channel, thus preventing unauthorized access while maintaining operational simplicity.
Solution Approach 2:
The patent introduces an intermediary mechanism through the use of public-private key pairs and the scan server. The public key acts as an intermediary that enables encryption without requiring the private key holder to be involved in the transmission process. The scan server acts as an intermediary that stores and manages the encrypted scan jobs, facilitating secure transmission while simplifying user operations.
2Reliability
If signature cards and card readers are used to enhance security, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent extracts the security function from the physical signature card and card reader hardware and relocates it to the software层面 through public key infrastructure. The private key is stored in the user's computer rather than a physical card, and the encryption/decryption operations are performed through software applications. This extraction eliminates the need for additional hardware devices while maintaining security through cryptographic means.
Solution Approach 2:
The patent replaces the mechanical system of signature cards and card readers with an electronic/cryptographic system based on public-private key pairs. Instead of physically inserting a card into a reader to prove identity and authorization, the system uses cryptographic keys embedded in software to authenticate users and encrypt documents. This substitution eliminates mechanical hardware while achieving equivalent or superior security through mathematical cryptography.
3Reliability
If signature cards are distributed to users for security, then security is improved, but ease of operation is worsened due to management burden
Solution Approach 1:
The patent implements self-service by allowing users to automatically generate their own public-private key pairs through the scanning application. The system automatically manages the encryption and decryption processes without requiring users to manually handle physical signature cards or contact system administrators for card distribution. Users simply need to install the application, which automatically sets up their cryptographic credentials, eliminating the management burden associated with physical security tokens.
Data Source
AI summary
The application relates to a method for operating a scanning system with a scan server arrangement and a scanning device that can be connected to the scan server arrangement. The scanning system is configured to obtain a scan job encrypted with a public scan job key from a scanning device and to receive a private scan job key encrypted with a public computer device key from a mobile user terminal. The received encrypted private scan job key is subsequently sent to the computer device for further processing.