Split Encryption for Print Data Confidentiality and Server Modification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing printing system cannot decrypt print data on the print server, making it difficult to change print settings while maintaining confidentiality, as the data is encrypted using user-specific key information, preventing modification on the server.

Innovation Solution

The system separates print data into a print setting information part and a drawing data part, encrypting each with different methods, allowing the print server to decrypt and change the setting information part while keeping the drawing data confidential.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If print data is encrypted using user-specific key information on the terminal, then confidentiality of print data is secured on the print server, but the ability to change print settings on the print server is lost

Engineering Contradiction:
Improveconfidentiality of print dataVSAvoidability to change print settings
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent segments print data into two distinct parts: a setting information part (containing print settings) and a drawing data part (containing confidential content). Each part is encrypted with different encryption keys - the setting information part uses a key manageable by the print server, while the drawing data part uses user-specific key information. This segmentation allows the print server to decrypt and modify settings without accessing the confidential drawing data, thus resolving the contradiction between maintaining confidentiality and enabling setting changes.

Inventive Principle:
Principle #1Segmentation

2Object-affected harmful factors

If print data is fully encrypted with user key information, then information security is improved, but operational flexibility for setting modifications deteriorates

Engineering Contradiction:
Improveinformation securityVSAvoidoperational flexibility
Core Design Contradiction:
Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The patent applies different encryption qualities to different parts of the print data. The setting information part is encrypted with a weaker encryption that the print server can decrypt and modify, while the drawing data part is encrypted with stronger user-specific key information that cannot be decrypted by the server. This local differentiation of encryption strength allows the print server to operate on settings while the user maintains security control over confidential content, resolving the contradiction between information security and operational flexibility.

Inventive Principle:
Principle #3Local quality

Data Source

PatentEP3217276B1Information processing system, job processing method, data storage apparatus, information device, and carrier means
Publication Date: 2022.08.31 RICOH CO LTD
  • EP3217276B1 patent drawingFigure 1
  • EP3217276B1 patent drawingFigure 2
  • EP3217276B1 patent drawingFigure 3

AI summary

An information processing system (100) includes a terminal apparatus (110), a data storage apparatus (140), and an information device (170). The terminal apparatus (110) includes a selector (214) for selecting different encryption processings to be respectively performed on a setting information part of job data and a substantive data part of the job data, and a notifying unit (218, 220) for notifying information indicating the encryption processing performed on the setting information part of the job data. The data storage apparatus includes (140) includes a storage unit (246) for storing the job data received from the terminal apparatus, and a determiner (244) for determining, based on the notified information indicating the encryption processing, whether or not a setting indicated by the setting information part of the received job data can be changed by the data storage apparatus (140). The information device (170) includes a receiver (272) for receiving the job data from the data storage apparatus, a decrypting unit (274) for decrypting the received job data, and an integration unit (276) for integrating a setting information part and a substantive data part of the received job data.