Secure Print Job Release Using Mobile Key Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing printing systems face security issues as documents can be accessed by unauthorized users due to the use of user-related signature cards, requiring additional hardware and complex maintenance, with a low security level when secret keys are compromised.
Innovation Solution
A method using asynchronous key pairs, involving a public print job key and a private print job key, where the private key is transmitted to a mobile user terminal and encrypted with a public printing device key, ensuring secure printing by authorized users without the need for signature cards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user-related signature cards with secret keys are used to secure printing, then security is improved, but device complexity increases due to additional hardware requirements
Solution Approach 1:
The patent extracts the secret key functionality from physical signature cards and hardware card readers, moving it entirely to software implementation on mobile devices. The mobile device's operating system and application store and manage cryptographic keys without requiring external hardware tokens, thereby eliminating the hardware complexity while maintaining security through software-based asymmetric cryptography.
Solution Approach 2:
The mobile device serves multiple functions: it acts as the signature card (storing private keys), the card reader (reading public keys and codes), and the authentication server (verifying codes and managing print jobs). This multi-functionality eliminates the need for separate dedicated hardware components, reducing device complexity while maintaining security through a unified software-based system.
2Reliability
If signature cards and card readers are deployed for secure printing, then security is improved, but ease of operation deteriorates due to regular certificate updates and revocation list maintenance
Solution Approach 1:
The system implements self-service through automated code generation and verification. The mobile device automatically generates time-limited print codes, and the printing device automatically verifies these codes against the stored public key without requiring manual certificate updates or revocation list maintenance by users. The cryptographic system manages its own security lifecycle automatically.
Solution Approach 2:
The public key is pre-configured in the printing device before operation begins. This preliminary setup eliminates the need for ongoing certificate distribution and revocation list maintenance during operation. The system is prepared in advance with the necessary cryptographic materials, simplifying ongoing operation while maintaining security.
3Adaptability or versatility
If personal secret keys are used for encryption, then user authentication is enabled, but security level remains low because compromised keys allow unauthorized access
Solution Approach 1:
The patent implements asymmetric cryptography where the private key remains secret on the mobile device while the public key is stored on the printing device. This asymmetric key structure provides stronger security than symmetric personal keys because the public key can be freely shared for verification without compromising the private key. Even if the public key is compromised, the private key remains secure on the mobile device, preventing unauthorized access.
Solution Approach 2:
The system performs preliminary authentication by verifying the print code against the pre-stored public key before allowing print job execution. This preliminary verification ensures that only authenticated users can initiate printing, and the time-limited nature of the codes provides ongoing security even if one code is compromised, as each code is valid only for a specific time window.
Data Source
AI summary
The application relates to a method for operating a printing system with a printing server and a printing device that can be connected to the printing server. The printing system is configured to obtain a print job encrypted with a public print job key from a computer connected to the printing server and to receive a private print job key encrypted with a public printing device key from a mobile user terminal. The received encrypted print job is subsequently sent to the printing device for printing.