Secure Job Release via Hybrid Encryption for Multifunction Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for secure release of job requests at multifunction devices do not effectively support asynchronous encryption from mobile computing devices, lacking comprehensive confidentiality, integrity, and authenticity measures.
Innovation Solution
A method involving a document processing system with a private and public key pair, where a job request is encrypted using a symmetric key, and the symmetric key is decrypted using the private key after being encrypted with the public key, allowing secure initiation of services like printing or scanning, with additional encryption for recipient identifiers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If existing secure release solutions are used at multifunction devices, then print jobs can be held until password is entered, but the system cannot effectively support asynchronous encryption from mobile computing devices
Solution Approach 1:
The job request is divided into multiple parts: a first part containing job information encrypted with a symmetric key, a second part containing the symmetric key encrypted with the recipient's public key, and optionally a third part with job/recipient identifier. This segmentation allows the system to handle encryption and release operations asynchronously without compromising security.
Solution Approach 2:
A symmetric key acts as an intermediary between the job data and the public key infrastructure. The symmetric key encrypts the job information for efficiency, while being itself encrypted with the recipient's public key for secure transmission. This intermediary enables asynchronous operation while maintaining security.
2Reliability
If public key infrastructure is used for secure print requests, then confidentiality and integrity can be ensured, but the complexity of key management and encryption operations increases
Solution Approach 1:
The encryption operation is segmented into two distinct steps: first encrypting the job information with a symmetric key, then encrypting the symmetric key with the recipient's public key. This segmentation simplifies the overall process by separating the bulk data encryption from the key exchange, making the system more manageable while maintaining security.
Solution Approach 2:
The symmetric key serves as a temporary, single-use encryption key for the job data. After the job is processed, the symmetric key is discarded. This approach avoids the complexity of long-term key management while ensuring that only the intended recipient can access the job information.
3Adaptability or versatility
If synchronous communication is used for job release, then the release process is straightforward, but asynchronous operations from mobile devices cannot be effectively supported
Solution Approach 1:
The job request is prepared in advance with all necessary encryption operations performed before transmission. The symmetric key is encrypted with the recipient's public key and attached to the job request, allowing the recipient to decrypt and process the job asynchronously without requiring synchronous communication with the sending device.
Solution Approach 2:
The encrypted job request contains all necessary information for the recipient to process the job independently. The symmetric key encrypted with the recipient's public key enables the recipient to decrypt the job information without requiring additional authentication steps or synchronous communication, making the system self-sufficient for asynchronous operations.
Data Source
AI summary
A secure release of a job request is managed at a document processing system that has been issued a private key and a public key. In one embodiment, the job request includes a first part specifying job information that is encrypted using a symmetric key, and a second part specifying the symmetric key that is encrypted with a recipient's public key. The document processing system begins release of the job request upon receipt of the symmetric key encrypted using its public key. The document processing system uses its private key to decrypt the encrypted symmetric key. The decrypted symmetric key is then used to decrypt the first part of the job request, thereby permitting the document processing system to complete performance of the job request.