Policy-Based Printing via Public Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing policy-based printing systems are limited to closed private domain environments, preventing users from accessing printing data outside the office, particularly for on-the-go professionals who need to print in public locations lacking support for policy-based printing operations.
Innovation Solution
A system that authenticates users on a mobile device to access a private server via a public server, applies policies to determine request validity, downloads documents, and sends codes to public servers for printing, enabling secure and policy-compliant printing across public networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If policy-based printing systems operate within a closed private domain environment, then security and policy control are maintained, but users cannot access printing data outside the office environment
Solution Approach 1:
A public server acts as an intermediary between the private domain printing system and public network users. The public server receives printing requests from mobile devices in public locations, forwards them to the private domain server for policy validation, and relays responses back. This mediator enables external access while preserving the security boundaries of the private domain, allowing users to print from public locations without compromising policy compliance or data security.
2Adaptability or versatility
If users access printing data from public locations, then mobility and flexibility are improved, but reliable access to printing data cannot be guaranteed
Solution Approach 1:
The system performs preliminary actions by pre-authenticating users and pre-validating printing policies before actual printing operations. When a user requests printing from a public location, the private domain server first verifies the user's authentication credentials and checks whether the printing request complies with organizational policies before making printing data available. This preliminary validation ensures that even in public locations with potentially unreliable networks, only authorized printing operations can proceed, guaranteeing data access reliability.
3Ease of operation
If public servers are used to enable printing in public locations, then accessibility is improved, but security risks increase
Solution Approach 1:
The printing system is segmented into distinct functional components: a public server interface for user interaction, a communication layer for request transmission, and a private domain server for policy enforcement and data storage. The public server handles only authentication and request forwarding, while the private domain server maintains security controls and printing data. This segmentation allows the system to be accessible from public locations through the public server while ensuring that security-critical operations remain isolated in the private domain, thereby reducing security risks associated with public network exposure.
Data Source
AI summary
A policy-based printing system is implemented to allow access to a private domain to print using a public domain. The private domain includes private servers that store documents. The public domain includes servers and a printing device. A public policy server uses a domain list and a protocol connection with a private authentication server to validate a user and identify which private domain to access. The public policy server receives requests from the printing device to process a print job of a document in the private domain. A mobile device is used to coordinate the retrieval and printing of the document using an application. A kiosk may be used to send the document to the printing device from the mobile device.