Policy-Based Printing via Public Server Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing policy-based printing systems are limited to closed private domain environments, preventing users from accessing printing data outside the office, particularly for on-the-go professionals who need to print in public locations lacking support for policy-based printing.
Innovation Solution
A method and system that enables policy-based printing by using a corporate personal identification number (PIN) to authenticate and authorize print jobs across public and private servers, allowing documents to be printed on multiple devices through the generation and use of public PINs, ensuring compliance with printing policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If policy-based printing is implemented in a closed private domain environment, then security and policy compliance are maintained, but users cannot access printing data outside the office environment
Solution Approach 1:
A public server acts as an intermediary between the private domain printing system and public printing devices. The public server receives print requests from mobile devices in public locations, communicates with the private server to verify policies and corporate PINs, and relays authentication tokens to public printing devices. This intermediary enables external access while maintaining the security boundary of the private domain.
Solution Approach 2:
The printing system is segmented into multiple components: a private server for policy management and document storage, a public server for request coordination, mobile applications for user interaction, and public printing devices for document output. This segmentation allows different parts of the system to operate in their appropriate domains (private or public) while maintaining overall security and policy compliance.
2Ease of operation
If printing is performed at public locations, then user flexibility and accessibility are improved, but the printing devices may not support policy-based printing
Solution Approach 1:
The public server serves as an intermediary that handles the complex policy verification and authentication processes, shielding public printing devices from this complexity. Public printing devices only need to communicate simple print requests and receive authentication tokens, while the public server manages the intricate interactions with the private domain policy system.
Solution Approach 2:
The system creates a simplified copy of the private domain printing functionality in the public domain through the public server. Instead of requiring public printing devices to implement full policy-based printing capabilities, the public server replicates the necessary authentication and authorization functions, allowing simple printing devices to participate in the secure printing system.
3Reliability
If corporate PIN authentication is used across public and private servers, then security is maintained, but the system requires multiple servers and increased infrastructure
Solution Approach 1:
The public server combines multiple functions into a single system: it acts as an API gateway, policy verification intermediary, authentication token manager, and print job coordinator. By merging these functions into one server, the system reduces infrastructure complexity compared to having separate dedicated servers for each function, while still maintaining security through the corporate PIN authentication mechanism.
Data Source
AI summary
A policy-based printing system is implemented to allow access to a private domain to print using a public domain. The private domain includes private servers that store documents. The public domain includes servers and a printing device. A public policy server uses a domain list and a protocol connection with a private authentication server to validate a user and identify which private domain to access. The public policy server receives requests from the printing device to process a print job of a document in the private domain. The public server may associate a public personal identification number (PIN) with a corporate PIN for the printing operations. In the event of split printing, the public server generates another public PIN for use with another printing device.