Print Gateway Server Mediator for Remote Desktop Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing remote desktop printing systems face security risks due to direct communication between the remote desktop server and the printer, which can lead to potential attacks from malicious programs.

Innovation Solution

A printing system that includes a location registration equipment for user authentication, a remote desktop server for operating office terminals, and a printing device that transmits location information and printing data through a network, ensuring that the printer and client terminal do not communicate directly, thereby enhancing security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the remote desktop server and printer communicate directly, then printing functionality is achieved, but security risks increase due to potential attacks from malicious programs

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a print gateway server as an intermediary component between the remote desktop server and the printer. The print gateway server receives printing requests from the remote desktop server, processes them through location information matching, and forwards them to the appropriate printer. This mediator architecture prevents direct communication between the remote desktop server and printer, thereby blocking potential attack paths while maintaining printing functionality through the controlled gateway interface.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If location information is added to printing data through a gateway server, then security is enhanced, but system complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidsystem architecture
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The print gateway server is designed to perform multiple functions within a single system component: it acts as a security gateway, a location information manager, a request router, and a communication bridge. By consolidating these functions into one multi-functional server, the patent reduces overall system complexity compared to having separate dedicated components for each function, while still achieving enhanced security through location-based access control.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If direct communication is prevented between printer and client terminal, then security is improved, but communication efficiency may decrease

Engineering Contradiction:
ImprovesecurityVSAvoidprinting speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary actions by pre-registering location information for various workspaces and pre-establishing the print gateway server's routing rules before actual printing operations. When a printing request arrives, the gateway server can quickly match the client's location information against pre-stored data and forward the request accordingly, minimizing processing delays. This preliminary preparation maintains security while reducing the impact on printing speed.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11922080B2Transmission of printing data to which location information has been added and retaining location information
Publication Date: 2024.03.05 NEC CORP
  • US11922080B2 patent drawing
  • US11922080B2 patent drawing
  • US11922080B2 patent drawing

AI summary

A printing system including: a location registration equipment (11) that performs user authentication of a user who operates a client terminal (14) at a workspace (100); a remote desktop server (12) that enables a desktop screen of an office-installed terminal to be operated through the client terminal (14); and a printing device (13) that outputs printing data in accordance with a printing request, wherein the location registration equipment (11) transmits location information of a user for whom it has performed user authentication to the printing device (13), and the printing device (13) transmits, when it receives a printing request from the remote desktop server (12), printing data to which the location information is added to the location registration equipment (11).