Private Server Policy Enforcement for Cross-Domain Printing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing policy-based printing systems are limited to closed private domain environments, preventing users who travel frequently from accessing printing data in public locations, as these locations often do not support policy-based printing operations.
Innovation Solution
A method and system that allow policy-based printing by using a private server to determine whether to allow document printing based on usage information from a ledger, enabling carryover or borrowed usage across periods, and updating the ledger accordingly, allowing printing in public domains through a public server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If policy-based printing is implemented in a closed private domain environment, then security and resource management are maintained, but users cannot access printing data in public locations
Solution Approach 1:
A public server acts as an intermediary between users in public locations and the private domain printing system. The public server receives printing requests from users, forwards them to the private server for policy verification, and relays responses back. This mediator approach enables public access while preserving the security boundary of the private domain, as the public server handles all external interactions without exposing internal policy mechanisms.
Solution Approach 2:
The printing system is segmented into distinct functional components: a public server handling external requests and a private server managing policy enforcement and ledger maintenance. This segmentation allows the system to simultaneously support public accessibility and private domain security, with each segment performing its specialized function while maintaining clear boundaries between public and private operations.
2Ease of operation
If usage limits are enforced strictly for each period, then resource management is optimized, but users cannot accommodate travel or variable usage patterns
Solution Approach 1:
The usage limit system transitions from static periodic enforcement to dynamic carryover mechanisms. Unused printing allowances from one period can be carried forward to subsequent periods, allowing the system to adapt to variable user needs during travel or periods of reduced usage. This dynamic approach maintains resource management while providing operational flexibility, as limits adjust based on actual consumption patterns rather than rigid periodic resets.
Solution Approach 2:
The system performs preliminary calculations of unused usage before period transitions occur. By proactively computing carryover amounts and updating the ledger in advance, the system prepares the usage state for the next period, ensuring seamless flexibility without requiring real-time adjustments during active printing operations. This preliminary action enables smooth transitions between periods while maintaining accurate resource tracking.
3Adaptability or versatility
If printing data is stored only within the private domain, then security is maintained, but users traveling to public locations cannot access their printing data
Solution Approach 1:
The public server serves as an intermediary that enables location-independent access without requiring data replication across domains. When users are in public locations, the public server receives their printing requests, authenticates them, and communicates with the private server to retrieve and process their printing data. This intermediary approach provides location independence while maintaining data security, as sensitive printing data remains in the private domain and is only accessed through controlled intermediary communication.
Solution Approach 2:
The private server implements universal functionality to handle both local private domain printing and remote public domain requests through the intermediary. By designing the private server to process requests from multiple sources (local devices and the public server), the system achieves multi-functionality without increasing data storage complexity. The same secure printing infrastructure serves both private and public users, eliminating the need for separate data copies while maintaining location independence.
Data Source
AI summary
A policy-based printing system is implemented to allow access to a private domain to print using a public domain. The private domain includes private servers that store documents. The public domain includes servers and a printing device. A public policy server uses a domain list and a protocol connection with a private authentication server to validate a user and identify which private domain to access. The public policy server receives requests from the printing device to process a print job of a document in the private domain. The private server processes the requests using the policy and a ledger to determine whether to allow the print job to the printing device. If a parameter of the policy is exceeded, then the private server allows usage to be carried over or borrowed from previous and subsequent periods.