Gateway-Based Security Certificate Enrollment for Public Printers

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Publicly accessible printers connected to networks face security challenges when handling cloud-based documents, as they often lack valid security certificates, making transactions insecure and vulnerable to interception.

Innovation Solution

A method and system that automatically install a gateway between remote public printer stations and a Simple Certificate Enrollment Protocol (SCEP) server, obtaining and installing security certificates to ensure secure connections for on-demand printing services.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If publicly accessible printers are connected to cloud-based networks for on-demand printing services, then printing accessibility and convenience are improved, but security vulnerability increases due to lack of valid security certificates

Engineering Contradiction:
Improveprinting accessibilityVSAvoidtransaction security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary actions by automatically enrolling printers with security certificates before any printing transactions occur. The enrollment process is triggered when a printer is first detected on the network, ensuring security credentials are in place before actual use. This prevents the security vulnerability from existing in the first place.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system enables self-service by allowing printers to automatically enroll themselves with the certificate authority without manual intervention. The printer initiates the enrollment process, receives its certificate, and configures itself securely, eliminating the need for administrators to manually secure each device while maintaining high security standards.

Inventive Principle:
Principle #25Self-service

2Reliability

If manual security certificate installation is implemented for public printers, then transaction security is improved, but administrative complexity and time consumption increase

Engineering Contradiction:
Improvetransaction securityVSAvoidcertificate installation time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system enables self-service by allowing printers to automatically enroll themselves with the certificate authority without manual intervention. The printer initiates the enrollment process, receives its certificate, and configures itself securely, eliminating the need for administrators to manually secure each device while maintaining high security standards.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system replaces the mechanical manual process of certificate installation with an automated electronic enrollment system. Instead of administrators physically visiting each printer to install certificates, the system uses network-based automated enrollment protocols to deliver certificates electronically, dramatically reducing time and effort requirements.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Productivity

If automated gateway installation is implemented between printers and SCEP servers, then security certificate deployment efficiency is improved, but system complexity increases

Engineering Contradiction:
Improvecertificate deployment efficiencyVSAvoidsystem architecture complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system achieves universality by designing a standardized automated enrollment process that works across different printer models and manufacturers. The gateway and enrollment mechanism serve multiple functions: discovering printers, authenticating them, enrolling them with certificates, and managing their security credentials. This multi-functional approach simplifies the overall system rather than adding complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11159513B1Systems, apparatus, and computer program products for installing security certificates in publicly accessible printer stations through gateway
Publication Date: 2021.10.26 KYOCERA DOCUMENT SOLUTIONS INC
  • US11159513B1 patent drawing
  • US11159513B1 patent drawing
  • US11159513B1 patent drawing

AI summary

Embodiments facilitate the management of security certificates for printers that are used in public locales. The system communicates with and manages the printers with the benefits of security certificate protocols on-demand as a user requests to print documents with any particular printer. Once a document is requested to be printed at a printer, the system registers the printer with the network. At registration, a gateway is automatically installed. the gateway requests a security certificate which is stored on the printer or its associated computer. Aspects thus solve an online service's need to install and manage certificates for any printer accessible to the network.