Print for secure pick-up in enterprise environment using personal mobile device as token

A method and apparatus is provided for managing a secure print job. The method includes receiving a request for the secure print job. The request is received from a first device associated with a user. The method also includes receiving a document file associated with the secure print job. The method also includes sending a secure token to a second device. The method also includes receiving the secure token from a printer. The method also includes sending the document file to the printer.

TECHNICAL FIELD

The present application relates generally to secure printing and, more specifically, to a using a mobile device with a secure token to print a document file.

BACKGROUND

In an enterprise environment there are multiple networked printers distributed across each floor. Those printers are generally accessible by all employees in the same group, or same building, or even in the whole company globally. In addition, employees can print to those printers from home via VPN, or from a remote office.

In one method to retrieve printouts securely, a user can manually input credentials. The user types an identification and password at the printer each time they want to print. This is unacceptable to most people due to time involved and complexity.

Another method is to print from a smartphone at a printer. However, the typical business scenario is to print from a computer where the employee can fully view and edit the documents. When the document is in or accessible from the smartphone, this exposes a serious security hole and may not be allowed in many companies. Even when allowed, the smartphone may need to be secure, which can be a challenge. Many document formats also may not be supported on smartphone or not fully supported as on a traditional computer. In an enterprise environment, the document may be encrypted, so the smartphone may not even be able to open the document to print. In many instances, the document may need to be edited before printing, which is difficult on smartphone.

In yet another method of retrieving a printout, an authentication card or keycard can be used to authenticate the user for the print job. In such a solution, a central printing server holds the document sent to printer, until the user swipes the authentication card at the printer. Once authenticated, the document will be transmitted to the selected printer for the actual job. However, the credentials on a card are static, which is not secure. In addition, the card can only perform a single task of authentication.

SUMMARY

A method is provided for managing a secure print job. The method includes receiving a request for the secure print job. The request is received from a first device associated with a user. The method also includes receiving a document file associated with the secure print job. The method also includes sending a secure token to a second device. The method also includes receiving the secure token from a printer. The method also includes sending the document file to the printer.

An apparatus is provided for managing a secure print job. The apparatus includes a memory element and processing circuitry coupled to the memory element. The processing circuitry is configured to receive a request for the secure print job. The request is received from a first device associated with a user. The processing circuitry is also configured to receive a document file associated with the secure print job. The processing circuitry is also configured to send a secure token to a second device. The processing circuitry is also configured to receive the secure token from a printer. The processing circuitry is also configured to send the document file to the printer.

DETAILED DESCRIPTION

FIG. 1illustrates an example wireless network100according to this disclosure. The embodiment of the wireless network100shown inFIG. 1is for illustration only. Other embodiments of the wireless network100could be used without departing from the scope of this disclosure.

As shown inFIG. 1, the wireless network100includes an eNodeB (eNB)101, an eNB102, and an eNB103. The eNB101communicates with the eNB102and the eNB103. The eNB101also communicates with at least one Internet Protocol (IP) network130, such as the Internet, a proprietary IP network, or other data network.

The eNB102provides wireless broadband access to the network130for a first plurality of user equipments (UEs) within a coverage area120of the eNB102. The first plurality of UEs includes a UE111, which may be located in a small business (SB); a UE112, which may be located in an enterprise (E); a UE113, which may be located in a WiFi hotspot (HS); a UE114, which may be located in a first residence (R); a UE115, which may be located in a second residence (R); a UE116, which may be a mobile device (M) like a cell phone, a wireless laptop, a wireless PDA, or the like; a UE117, which may be a peripheral or wearable device (W) like a watch, and the like. The eNB103provides wireless broadband access to the network130for a second plurality of UEs within a coverage area125of the eNB103. The second plurality of UEs includes the UE115and the UE116. In some embodiments, one or more of the eNBs101-103may communicate with each other and with the UEs111-117using 5G, LTE, LTE-A, WiMAX, WiFi, or other wireless communication techniques, for example, peripheral wired/wireless networks, such as Wi-Fi Direct, Bluetooth, Ethernet, 802.11a/b/g/n, near field communication (NFC), or magnetic secure transmission (MST).

Depending on the network type, other well-known terms may be used instead of “eNodeB” or “eNB,” such as “base station” or “access point.” For the sake of convenience, the terms “eNodeB” and “eNB” are used in this patent document to refer to network infrastructure components that provide wireless access to remote terminals. Also, depending on the network type, other well-known terms may be used instead of “user equipment” or “UE,” such as “mobile station,” “mobile device,” “subscriber station,” “remote terminal,” “wireless terminal,” or “user device.” For the sake of convenience, the terms “user equipment” and “UE” are used in this patent document to refer to remote wireless equipment that wirelessly accesses an eNB, whether the UE is a mobile device (such as a mobile telephone or smartphone) or is normally considered a stationary device (such as a desktop computer or vending machine).

Dotted lines show the approximate extents of the coverage areas120and125, which are shown as approximately circular for the purposes of illustration and explanation only. It should be clearly understood that the coverage areas associated with eNBs, such as the coverage areas120and125, may have other shapes, including irregular shapes, depending upon the configuration of the eNBs and variations in the radio environment associated with natural and man-made obstructions.

Wireless network100can also include a printer (P)118that supports peripheral wired/wireless networks, such as Wi-Fi Direct, Bluetooth, Ethernet, 802.11a/b/g/n, near field communication (NFC), magnetic secure transmission (MST) and the like. In one example embodiment, the communication between the printer (P)118and the UEs111-117is performed through NFC. NFC is a contactless short-range wireless communication standard between electronic devices within a short distance of 10 cm with low power consumption by using a frequency of 13.56 MHz. A data transfer rate of NFC is 424 Kbps, and NFC has excellent security due to high proximity and encryption technology. NFC forgoes a complicated pairing process of recognition of devices but allows devices to recognize one another within a tenth of a second or less. In particular, NFC is a smart card type contactless wireless communication technology where radio frequency identification (RFID) technology is utilized. In addition, NFC builds upon RFID technology by allowing two-way communication whereas conventional smart cards only allow one-way communication. Furthermore, NFC has a relatively large memory storage space and offers more variety of services.

NFC is a wireless communication method in which data is directly exchanged between terminals, for example, between the printer (P)118and the UEs111-117, without using a communication network, and is a type of RFID method. A wireless communication method using RFID may be classified according to frequencies used. For example, RFID at 13.56 MHz is mainly used for smart cards, such as transit cards or entrance cards, and RFID at 900 MHz is used mainly for logistics. NFC corresponds to RFID, which like smartcards uses a frequency of 13.56 MHz. However, unlike smartcards, which allow only one-way communication, NFC allows two-way communication. NFC is different from smartcards, which function merely as a tag that stores particular information and transmit the same to a reader. NFC allows a tag function according to necessity but also supports a function of recording information on the tag, and may be used in peer-to-peer (P2P) data exchange between terminals in which NFC is set.

The current printing solutions do not solve scenarios where the user wants to pick up the printout securely, either by self or by delegate. The user can be referred to as an “originating user”. The originating user is the user who selects a document to be printed and controls a computer to send a print job to a printing server. The delegate can be referred to as a “delegate user”. The delegate user is the user who receives a secure token and/or instruction to retrieve a print job from a printer. One or more embodiments of this disclosure recognize and take into account that when using a keycard, there is no way to delegate the printing task to another person. Also, with a smartphone, a user can get status updates and control the printing. Instead of using the smartphone to carry the confidential data, embodiments of this disclosure use a smartphone as a mobile token for the printing tasks. Using the smartphone as a mobile token is completely secure and does not need any special security features on smartphone because the data is never exposed.

AlthoughFIG. 1illustrates one example of a wireless network100, various changes may be made toFIG. 1. For example, the wireless network100could include any number of eNBs and any number of UEs in any suitable arrangement. Also, the eNB101could communicate directly with any number of UEs and provide those UEs with wireless broadband access to the network130. Similarly, each eNB102-103could communicate directly with the network130and provide UEs with direct wireless broadband access to the network130. Further, the eNB101,102, and/or103could provide access to other or additional external networks, such as external telephone networks or other types of data networks.

FIG. 2illustrates an example UE116according to this disclosure. The embodiment of the UE116illustrated inFIG. 2is for illustration only, and the UEs111-115and117ofFIG. 1could have the same or similar configuration. However, UEs come in a wide variety of configurations, andFIG. 2does not limit the scope of this disclosure to any particular implementation of a UE.

As shown inFIG. 2, the UE116includes an antenna205, a radio frequency (RF) transceiver210, transmit (TX) processing circuitry215, a microphone220, and receive (RX) processing circuitry225. The UE116also includes a speaker230, a main processor240, an input/output (I/O) interface (IF)245, a keypad250, a display255, and a memory260. The memory260includes a basic operating system (OS) program261and one or more applications262.

The RF transceiver210receives, from the antenna205, an incoming RF signal transmitted by an eNB of the network100. The RF transceiver210down-converts the incoming RF signal to generate an intermediate frequency (IF) or baseband signal. The IF or baseband signal is sent to the RX processing circuitry225, which generates a processed baseband signal by filtering, decoding, and/or digitizing the baseband or IF signal. The RX processing circuitry225transmits the processed baseband signal to the speaker230(such as for voice data) or to the main processor240for further processing (such as for web browsing data).

The TX processing circuitry215receives analog or digital voice data from the microphone220or other outgoing baseband data (such as web data, e-mail, or interactive video game data) from the main processor240. The TX processing circuitry215encodes, multiplexes, and/or digitizes the outgoing baseband data to generate a processed baseband or IF signal. The RF transceiver210receives the outgoing processed baseband or IF signal from the TX processing circuitry215and up-converts the baseband or IF signal to an RF signal that is transmitted via the antenna205.

The main processor240can include one or more processors or other processing devices and execute the basic OS program261stored in the memory260in order to control the overall operation of the UE116. For example, the main processor240could control the reception of forward channel signals and the transmission of reverse channel signals by the RF transceiver210, the RX processing circuitry225, and the TX processing circuitry215in accordance with well-known principles. In some embodiments, the main processor240includes at least one microprocessor or microcontroller.

The main processor240is also capable of executing other processes and programs resident in the memory260. The main processor240can move data into or out of the memory260as required by an executing process. In some embodiments, the main processor240is configured to execute the applications262based on the OS program261or in response to signals received from eNBs or an operator. The main processor240is also coupled to the I/O interface245, which provides the UE116with the ability to connect to other devices such as laptop computers and handheld computers. The I/O interface245is the communication path between these accessories and the main processor240.

The main processor240is also coupled to the keypad250and the display unit255. The operator of the UE116can use the keypad250to enter data into the UE116. The display255may be a liquid crystal display or other display capable of rendering text and/or at least limited graphics, such as from web sites.

The memory260is coupled to the main processor240. Part of the memory260could include a random access memory (RAM), and another part of the memory260could include a Flash memory or other read-only memory (ROM).

AlthoughFIG. 2illustrates one example of UE116, various changes may be made toFIG. 2. For example, various components inFIG. 2could be combined, further subdivided, or omitted and additional components could be added according to particular needs. As a particular example, the main processor240could be divided into multiple processors, such as one or more central processing units (CPUs) and one or more graphics processing units (GPUs). Also, whileFIG. 2illustrates the UE116configured as a mobile telephone or smartphone, UEs could be configured to operate as other types of mobile or stationary devices.

In one example embodiment, a user wants to print a confidential document securely. In this example, the printer may be far away from the user. Another person may see the printout before the user reaches or retrieves the printout. So the user may have to run to the printer after printing from a computer to retrieve the printed document. In another example, the printer may be busy, so the user would need to wait at the printer or go back to the computer to cancel the current print job and print to another printer. In another example, there can be other people around the printer when the user is retrieving the printout and the user may not want the other people to see the printout. In another example, the user may forget about the printout and leave it sitting at the printer. In another example, the user may not want to pick up the printout immediately when reviewing and printing a batch of confidential docs and will pick up all in one trip. One or more embodiments of this disclosure recognize and take into account the above examples.

FIG. 3illustrates an example secure corporate intranet302according to this disclosure. The embodiment of the secure corporate intranet302illustrated inFIG. 3is for illustration only. However, a secure corporate intranet can come in a wide variety of configurations, andFIG. 3does not limit the scope of this disclosure to any particular implementation of a secure corporate intranet.

As shown inFIG. 3, the secure corporate intranet302includes User A desktop304, printing server306, printer X308, and printer Y310. The secure corporate intranet302is a computer network that uses Internet Protocol technology to share information, operational systems, or computing services within an organization or enterprise.

User A desktop304can be any generic computing device with a processor or processing circuitry. User A desktop304is associated with User A. User A uses desktop304to send a print job to printing server306. In one example, User A prints a confidential document on his PC to the printing server, by using the virtual printer. A virtual printer is a piece of computer software whose user interface and API resembles that of a printer driver, but which is not connected with a physical computer printer.

Printing server306is a device that connects printers to client computers over secure corporate intranet302. Printing server306accepts print jobs from the computers, such as user A desktop304or any computing devices associated with User A inside the secure corporate intranet302, then holds the print jobs until authorized by user A on one networked printer, and sends the print jobs to the authorized printer. The printing server306may queue the print jobs locally to accommodate the fact that work may arrive more quickly than the printer can actually handle. Printing server306is operable to receive document files that are documents to be printed, and send those document files as print jobs to printer X308, printer Y310, or other printers in the secure corporate intranet302. The printing server306receives the document and holds it. Then it generates a secure token.

Printing server306is also operable to manage secure tokens. Secure tokens can include the user's identification (ID), smartphone ID, the document ID, the printing task ID, and the like. In one example embodiment, the secure token is only meaningful for specific user equipment and printers in the secure corporate intranet302. The secure tokens are intrinsically secure. A secure token can be a software token that is a type of two-factor authentication security device that may be used to authorize the use of computer services. Software tokens are stored on a general-purpose electronic device such as a desktop computer, laptop, PDA, or mobile phone and can be duplicated. This is in contrast to hardware tokens, where the credentials are stored on a dedicated hardware device and therefore cannot be duplicated (absent physical invasion of the device). Security tokens are used to prove one's identity electronically. The token is used in addition to or in place of a password to prove that the user is who they claim to be. The token acts like an electronic key to access something. Some may store cryptographic keys, such as a digital signature, or biometric data, such as fingerprint.

In addition to the user's identity, the secure token can also be used to identify the user's mobile device by including and encrypting the device ID. This can prevent other unauthorized mobile devices from stealing the print jobs. The secure token can also include the document ID and the printing task ID which can be generated dynamically by the printing server306, such that the secure token is only meaningful for that specific print task and cannot be re-used. Optionally, the secure token may also include a time stamp and expiration time, so that it may expire if the user cannot pick up the print jobs within specified timeframe. Optionally, the secure token may also include the privilege restrictions for operating the print jobs, such as allowing canceling or delegating.

The secure token can be sent to user equipment112via push notification through push service312. Push service312can be accessed through wireless network100inFIG. 1. In one example, the user equipment112is a smartphone associated with User A. Once User A receives the secure token on user equipment112, the print job can be retrieved at any time, or until canceled or expired. User A can take the user equipment112, and find an idle printer, such as printer X308or printer Y310, to print the print job that includes the document file.

In one example embodiment, to print the print job, User A can tap the user equipment112to the printer X308. Through NFC or other short-distance communication methods, the secure token is dropped to the printer X308. The printer X308submits the secure token to the printing server306with the printer ID for printer X308. Printing server306is operable to verify the secure token and send the document file to the printer X308with other regular printing settings. Printer X308is operable to print the print job out immediately while User A is physically nearby. Once the print job is complete, expired or canceled, the secure token can be destroyed or invalidated immediately.

In another example embodiment, a user wants to print a document securely for a delegate to retrieve. This situation can occur when the user is not physically nearby or in a meeting and wants the delegate person to pick up the critical printout and bring it to the meeting. In this example, the user may not want to email that document to the delegate because it may be encrypted document that requires a password to open or the user does not want the delegate to be able to redistribute the document. To make sure the delegate can retrieve the printout securely, however, there are a series of inconveniences: the user A may have to use a printer physically near the delegate, add it to the list of printers available for use on user A's computer, and send the print job to the printer; then the user A has to notify the delegate that the printout is ready to pick up and the delegate may need to retrieve the printout immediately. If the user A has a batch of documents for the delegate to pick up during a period of time, the delegate may need multiple trips to the printer to retrieve the printout without anyone else seeing it. A fax would be too cumbersome to operate and won't solve all of the above problems, and would be difficult in a meeting. Even if the document is not that confidential and urgent, the user A may still want to know exactly whether the delegate has picked up the printout. Also, the user A might decide not to print the document and recall the print job if the delegate has not yet retrieved the printout.

FIG. 4illustrates an example secure corporate intranet302with sending a print job to a delegate user according to this disclosure. The embodiment of the secure corporate intranet302illustrated inFIG. 4is for illustration only. However, a secure corporate intranet can come in a wide variety of configurations, andFIG. 4does not limit the scope of this disclosure to any particular implementation of a secure corporate intranet.

As shown inFIG. 4, the secure corporate intranet302includes User A desktop304, printing server306, printer X308, and printer Y310. The secure corporate intranet302is a computer network that uses Internet Protocol technology to share information, operational systems, or computing services within an organization or enterprise.

User A desktop304can be any generic computing device with a processor or processing circuitry. User A desktop304is associated with User A. User A uses desktop304to send a print job to printing server306. In one example, User A prints a confidential document on his PC to the printing server, by using the virtual printer. In this example embodiment, User A sends a document file that is confidential to the printing server306, with the option to assign User B as a delegate to retrieve the print job. It is also possible to include other messages for User B, such as the subject, instructions (e.g. “pick up in 5 minutes and send to executive meeting”), and the like.

The printing server306receives the document and holds it. Then it generates a secure token. Printing server306is also operable to manage secure tokens. Secure tokens can include User A's identification (ID), User A's smartphone ID, User B's ID, User B's smartphone ID, document ID, the printing task ID, and the like.

This token will be pushed to both A and B's smartphone via push notifications. Alternatively, two different tokens can be used. User B can see receipt of the token and a message on user equipment116that indicates to retrieve the print job in five minutes. In some examples, the retrieval job is automatically confirmed, in other examples, User B can accept, decline, or wait for the print job. User A then receives the agreement on user equipment112when User B accepts or confirms the retrieval job.

The secure token can be sent to user equipment112and user equipment116via push notification through push service312. Push service312can be accessed through wireless network100inFIG. 1. In one example, the user equipment112is a smartphone associated with User A and user equipment116is a smartphone associated with User B. Once User A and User B receive the secure tokens, the print job can be retrieved at any time, or until canceled or expired. User B can take the user equipment116, and find an idle printer, such as printer X308or printer Y310, to print the print job that includes the document file. In one embodiment, the secure token sent to user equipment112is the same as the secure token sent to user equipment116. In another embodiment, the secure tokens are different, for example, the secure token for the delegate User B may authorize fewer privileges, such as not allowing further delegating the print jobs to a third user. In yet a further embodiment, the secure token is only sent to user equipment116.

In one example embodiment, to print the print job, User B can tap the user equipment116to the printer X308. Through NFC or other short-distance communication methods, the secure token is dropped to the printer X308. The printer X308submits the secure token to the printing server306with the printer ID for printer X308. Printing server306is operable to verify the secure token and send the document file to the printer X308with other regular printing settings. Printer X308is operable to print the print job out immediately while User B is physically nearby. User A can receive a receipt notification once the print job is complete. User A can additionally cancel, or update other pending tasks for User B before the task complete. Once the print job is complete, expired or canceled, the secure token can be destroyed or invalidated immediately.