Source: https://patents.google.com/patent/US9513857B2/en
Timestamp: 2018-05-23 22:35:20
Document Index: 599200665

Matched Legal Cases: ['Application No. 07121257', 'Application No. 07121257', 'application No. 09164263', 'application No. 07', 'application No. 08', 'application No. 09']

US9513857B2 - Approach for processing print data using password control data - Google Patents
Approach for processing print data using password control data Download PDF
US9513857B2
US9513857B2 US12059916 US5991608A US9513857B2 US 9513857 B2 US9513857 B2 US 9513857B2 US 12059916 US12059916 US 12059916 US 5991608 A US5991608 A US 5991608A US 9513857 B2 US9513857 B2 US 9513857B2
US12059916
US20090244595A1 (en )
A printing device includes a locked print module that is configured to examine print data received by the printing device and determine whether the print data should be processed as locked print data. If so, then the print data is stored on the printing device and not immediately processed for printing. The locked print module also authenticates a user and allows the user to request printing of the print data. The user is queried for a password and if successfully verified, the locked print module determines a password type of the password associated with the print data and identifies password control data stored on the printing device that corresponds to the password type. The locked print module processes the print data based upon the password control data to generate processed print data and causes the processed print data to be printed at the printing device.
This application is related to U.S. patent application Ser. No. 12/059,836 entitled APPROACH FOR PRINTING POLICY-ENABLED ELECTRONIC DOCUMENTS USING LOCKED PRINTING, filed Mar. 31, 2008; U.S. patent application Ser. No. 12/059,986 entitled APPROACH FOR PRINTING POLICY-ENABLED ELECTRONIC DOCUMENTS USING LOCKED PRINTING AND A SHARED MEMORY DATA STRUCTURE, filed Mar. 31, 2008; U.S. patent application Ser. No. 12/166,741 entitled LOCKED PRINT AND DOCUMENT POLICY MANAGEMENT SYSTEM, filed Jul. 2, 2008; U.S. patent application Ser. No. 11/439,796 entitled REMOTE STORED PRINT JOB RETRIEVAL, filed May 23, 2006; U.S. patent application Ser. No. 11/411,248 entitled APPROACH FOR IMPLEMENTING LOCKED PRINTING WITH REMOTE UNLOCK ON PRINTING DEVICES, filed Apr. 25, 2006; U.S. patent application Ser. No. 11/346,479 entitled APPROACH FOR IMPLEMENTING LOCKED PRINTING ON PRINTING DEVICES, filed Feb. 1, 2006; U.S. patent application Ser. No. 11/656,592 entitled FAULT TOLERANT PRINTING SYSTEM, filed Jan. 22, 2007; U.S. patent application Ser. No. 11/788,517 entitled APPROACH FOR IMPLEMENTING LOCKED PRINTING WITH UNLOCK VIA A KEYPAD, filed Apr. 20, 2007; and U.S. patent application Ser. No. 11/880,359 entitled APPROACH FOR PROCESSING PRINT JOBS ON PRINTING DEVICES, filed Jul. 20, 2007, the contents all of which are incorporated by reference in their entirety for all purposes as if fully set forth herein.
The proliferation of communications networks, and in particular the Internet, has raised growing concerns about the security of information transmitted over networks. Numerous protection schemes have been implemented to secure electronic documents transmitted over the Internet, ranging from simple passwords to strong encryption. Some printing devices are configured with a feature known as “locked printing” to provide control over the printing of electronic documents. When a printing device is configured with a locked printing feature and print data is sent to the printing device, a printed version of an electronic document reflected in the print data is not generated until a password is verified at the printing device. Typically a user enters a password through an operation panel on the printing device. The printing device verifies the password and if the password is successfully verified, allows the user to access and print stored print data.
In addition to locked printing, some electronic documents are also password protected. For example, when a user creates an electronic document using an application program, the user may protect the electronic document using a password. The print data is encrypted based upon the password and transmitted to the printing device. After accessing locked print jobs and selecting particular print data, the user is queried for the password associated with the particular print data. If the user enters the correct password, the print data is processed and the electronic document contained in the print data is printed.
Policy-based solutions have also been developed that allow business organizations to control access to electronic documents. An electronic document for which the access thereto is controlled using a policy is referred to hereinafter as “policy-enabled document.” A policy defines the conditions under which a user is granted access to an electronic document. For example, a policy might specify that particular users are allowed access to the electronic document. Alternatively, the policy might specify that all users on a particular project, or all users at a specified level or higher within a business organization, may access the electronic document.
One of the issues with password protecting documents is that printing devices must be capable of processing the protected print data into a form so that the electronic document can be printed. For example, the printing device may decrypt encrypted print data to recover original print data that can be processed. The processing required to successfully process a protected document varies depending upon the application that was used to protect the electronic document. For example, a word processing application may use one type of encryption while a spreadsheet application may use a different type of encryption. The printing device must be capable of using both types of decryption. Furthermore, the type or version of encryption used by an application program may change over time. Thus, in some situations a printing device must support multiple types of encryption and multiple versions of each type of encryption.
An approach is provided for processing print data at a printing device. A printing device includes a user interface and a locked print module. The user interface is configured to display information to users and receive user input from the users. The locked print module is configured to examine print data received by the printing device and determine whether the print data should be processed as locked print data. This may include determining whether the print data includes any password commands. If a determination is made that the print data is to be processed as locked print data, then the print data is stored on the printing device and not immediately processed for printing. The locked print module is further configured to authenticate a user via the user interface and upon successful authentication of the user, allow the user to request printing of the print data via the user interface. In response to detecting a user request to print the print data, the user is queried for a password associated with the print data. If the password received from the user via the user interface matches the password associated with the print data, then the locked print module determines a password type of the password associated with the print data and identifies password control data stored on the printing device that corresponds to the password type and indicates how print data associated with the password type is to be processed. The locked print module processes the print data based upon the password control data to generate processed print data and causes the processed print data to be printed at the printing device.
FIG. 1 is a block diagram that depicts an arrangement for processing print data using password control data according to an embodiment of the invention.
FIG. 2A is a block diagram that depicts an example implementation of locked print module, according to one embodiment of the invention.
FIG. 2B depicts example password control data, according to one embodiment of the invention.
FIG. 2C depicts an example implementation of a password control block, according to one embodiment of the invention
FIG. 3A is a flow diagram that depicts an approach for processing print data using password control data, according to one embodiment of the invention.
FIG. 3B is a flow diagram that depicts determining whether print data should be processed as locked print data, according to one embodiment of the invention.
FIG. 4 is a block diagram that depicts an example implementation of a printing device configured to support processing of print data using password control data, according to one embodiment of the invention.
II. ARCHITECTURE FOR PROCESSING PRINT DATA USING PASSWORD CONTROL DATA
III. PASSWORD CONTROL DATA
IV. PROCESSING PRINT DATA USING PASSWORD CONTROL DATA
This approach allows print data to be printed remotely but manages the print data on printing devices as locked print data to provide improved control. The use of password control data provides support for multiple types of passwords, including legacy and new password types and password hierarchies. Furthermore, the approach is compatible with existing locked printing solutions.
FIG. 1 is a block diagram that depicts an arrangement 100 for processing print data using password control data according to an embodiment of the invention. Arrangement 100 includes a printing device 102, a client device 104, a policy server 106 and an authentication server 108, communicatively coupled via a network 110.
Printing device 102 may be implemented by any type of device that is capable of processing print data and generating printed versions of electronic documents reflected in the print data. In example arrangement 100, printing device 102 includes a user interface 116, a print process 118, a locked print module 120 and storage 122. Printing device 102 may be configured with other mechanisms, processes and functionality, depending upon a particular implementation, and the approach described herein for printing policy-enabled documents on a printing device using locked printing is not limited to any particular type of printing device 102. For example, printing device 102 may be a multi-function peripheral (MFP) that includes any combination of printing, copying, facsimile and scanning capability, etc.
Print process 118 may be implemented by one or more processes for processing print data received from client device 104 and for generating a printed version of an electronic document reflected in the print data. Print process 118 and locked print module 120 may be implemented as resident processes on printing device 102. Alternatively, print process 118 and locked print module 120 may be made available to printing device 102 on a removable media or may be implemented at a remote location with respect to printing device 102. Locked print module may be implemented by one or more processes for providing locked print services on printing device 102.
FIG. 2A is a block diagram that depicts an example implementation of locked print module 120, according to one embodiment of the invention. In this example, locked print module 120 includes a job capture and store module 200, a user interface and PSM client module 202 and a Web configuration module 204. Job capture and store module 200 determines whether print data received by printing device 102 is designated as a locked print job. This may include examining the contents of the print data and/or a header associated with the print data to detect the presence of data that indicates that the print data is a locked print job. If print data received by printing device 102 is not designated as a locked print job, then the print data is processed in the order in which it was received. If print data received by printing device 102 is designated as a locked print job, then job capture and store module 200 causes the print data to be stored on storage 122 instead of being immediately processed for printing. To print an electronic document that has been designated for locked print, a user enters user credentials, e.g., a user ID and password, into user interface 116. The locked print module 120 authenticates the user ID and password, either locally or remotely, and if successful, displays a list of locked print jobs associated with that user that are stored on storage 122. The user may select one or more of the locked print jobs for printing and the locked print module 120 causes the selected print jobs to be processed.
Storage 122 may be implemented by any type of storage, including volatile storage, non-volatile storage, or any combination of volatile and non-volatile storage. Examples of storage 122 include, without limitation, random access memory (RAM) and one or more disks. In the present example, storage 122 includes print data 124 and password control data 126. The password control data 126 is used by the locked print module 120 to process print data as described in more detail hereinafter.
User interface 116, print process 118, locked print module 120 and storage 122 may be implemented in hardware, software, or any combination of hardware or software, depending upon a particular implementation.
Password control data 126 may be generated and maintained using a wide variety of techniques, depending upon a particular implementation. For example, password control data 126 may be generated and maintained using a password control data management application that may reside on the printing device 102. An administrator uses the password control data management application to generate, edit and delete password control data. For example, when a new application is introduced, a password control block may be generated for the new application. As another example, new password control blocks for a particular password may be appended to existing password control blocks for the particular password.
FIG. 2B depicts example password control data 250, according to one embodiment of the invention. In this example, password control data 250 includes a set of password control blocks that include password control block 1 252, password control block 2 254 through password control block N 256. Each password control block is associated with a password type and is used by the locked print module 120 to process associated print data. The password control blocks may be maintained in any format or data structure, depending upon a particular implementation. For example, the password control blocks may be maintained as a link list. FIG. 2C depicts an example implementation of a password control block, according to one embodiment of the invention. In this example implementation, a password control block includes a password type 258, a size 260, an encryption type 262, a priority 264 and a status 266. The password type 258 indicates the type of password and may also indicate the type of application that generated the password. The size 260 field indicates the size, e.g., number of bytes, of the password or encoding data used to encrypt or encode the print data. The encryption type 262 indicates the type of encryption or encoding used to encrypt or encode the print data. The priority 264 indicates an access level of the password for the user's access rights. The status 266 indicates the status of the password, e.g., whether the password is an old password, a modified password, a new password or a removed password.
FIG. 3A is a flow diagram 300 that depicts an approach for processing print data using password control data, according to one embodiment of the invention. In step 302, a user initiates printing of a policy-enabled document. For example, a user of client device 104 initiates printing of an electronic document via application 112. The electronic document may have been designated, for example via application 112, as a policy-enabled document at the time of creation or at a later time.
In step 306, the client device 104 transmits the print data to the printing device 102 over network 110. To cause the print data to be processed by locked print module 120, the print data may be transmitted to a particular port. For example, the printing data may be transmitted to a particular Transport Control Protocol (TCP) port, such as port 9100 or 515 as two possible examples, to cause locked print module 120 to receive and process the print data. Alternatively, the print data may simply be sent to the printing device 102 and an operating system routine or other routine forwards the print data to locked print module 120 for processing.
In step 308, at the printing device, a determination is made whether the print data should be processed as locked print data. According to one embodiment of the invention, the locked print module 120 examines the print data to determine whether the print data electronic document reflected in the print data is a policy-enabled electronic document. This may be determined, for example, by the presence of one or more password commands or codes in the print data. The password codes may be contained in a header portion of the print data, in the body portion of the print data, or any combination of a header portion and body portion of the print data. For example, in some implementations, the application that generates the print data in conjunction with a print driver may create a header that is appended to the print data and the header contains one or more password commands. For example, the print data may include an APSPASSWORD command indicating that the electronic document contained in the print data is a policy-enabled electronic document. As another example, the print data may include a PDFPASSWORD command indicating that the electronic document contained in the print data is a password protected PDF document. As yet another example, the print data may include a password command indicating that the electronic document contained in the print data is a locked print document protected by a password.
In step 310, if a determination is made that the print data is to be processed as locked print data, then the print data is stored on the printing device and not immediately processed for printing. According to one embodiment of the invention, the print data is stored on storage 122 and managed as locked print data. If the print data is not to be processed as a locked print data, then the print data is processed normally.
FIG. 3B is a flow diagram 350 that depicts an example implementation of steps 308, 310 in more detail. In step 352 print data is evaluated to identify secure data information. In step 354 a determination is made whether the print data includes an APSPASSWORD command. If so, then in step 356, a determination is made whether the print data includes an APSUSERNAME command. If so, then as indicated by step 358, the electronic document contained in the print data is a policy-enabled document. In step 360, the print data is processed as locked print data and is stored on storage 122 and not immediately processed.
Returning to step 354, if the print data does not contain an APSPASSWORD command, then in step 362, a determination is made whether the print data contains a PDFPASSWORD command. If so, then as indicated in step 364, the electronic document contained in the print data is a PDF password protected document. In step 360, the print data is processed as locked print data and is stored on storage 122 and not immediately processed.
If, in step 362 a determination is made that the print data does not contain a PDFPASSWORD command, then in step 366, a determination is made whether the print data contains a secure job command. One example of a secure job command is a command that indicates locked printing. If so, then the secure job command is evaluated to determine whether it matches any known command types. For example, in step 368 a determination is made whether the secure job command is a JOBPASSWORD3 command. In step 370 a determination is made whether the secure job command is a JOBPASSWORD2 command. In step 372, a determination is made whether the secure job command is a JOBPASSWORD1 command. If the secure job command is any of these types of commands, then as indicated in step 378, the print data represents a locked print job and in step 380 the print data is stored on storage 122 and not immediately processed. In this example, the JOBPASSWORD1 may represent an original locked print password, JOBPASSWORD2 may represent an updated locked print password and JOBPASSWORD3 a new locked print password. The password control data 250 may be used to determine whether the print data should be processed as locked print data.
If, in step 356 the print data does not include an APSUSERNAME command, or if in step 366 the print data does not include a secure job command, then as indicated in step 374, the data is processed as a normal print job and in step 376 is either printed or aborted.
Returning to FIG. 3A, in step 312, a user requests access to locked print jobs stored on the printing device and is authenticated. For example, a user may select a locked print jobs button or icon on user interface 116 to request access to locked print jobs stored on printing device 102. Then the user is queried for user credential data, such as a user ID and password. The user credential data is authenticated. For example, locked print module 120 may be configured to authenticate the user credential data based upon data stored locally on storage 122. This may include, for example, comparing a user ID and password pair specified in the user credential data to a list of verified user ID/password pairs. As another example, a one-way hash function may be used to generate a result based upon the user ID/password pair specified in the authentication data. The result may then be compared to a list of verified results. These are just two examples of how authentication of the user credential data may be performed and the invention is not limited to any particular authentication mechanism or approach. Instead of authenticating the user credential data locally on printing device 102, the user credential data may be authenticated remotely with respect to printing device 102. For example, locked print module 120 may cause the user credential data to be transmitted to another location, e.g., authentication server 108 over network 110, for authentication. Locked print module 120 receives a return indication from the other location indicating whether the authentication data was verified.
In step 316, the user selects print data to be processed and one or more actions to be performed on the print data. In the present example, the user selects print data for printing.
In step 318, steps are performed to allow the selected print data to be processed. This may include various steps, depending upon the particular print data being processed. For example, suppose that the electronic document contained in the selected print data is a PDF password protected or a locked print document. In this situation, the user is queried for a password via the user interface 116. The password entered by the user is compared to a password for the protected document. If the passwords match, then the print data is allowed to be processed. As another example, if the electronic document contained in the print data is determined to be a policy-enabled document, then the locked print module 120 consults with policy server 106 to determine whether the user is authorized to make this determination. This may include, for example, the locked print module 120 transmitting to policy server 106 data that identifies the policy-enabled electronic document selected for printing by the user, along with at least part of the user credential information, for example a user ID. According to one embodiment of the invention, the user interface and PSM client module 202 acts as a policy client with respect to the policy server 106 and provides the interaction with the policy server 106. The policy server 106 determines, based upon one or more policies, whether the user associated with the user ID is authorized to access the policy-enabled electronic document. The policy applied to make this determination may be specific to the printing of electronic documents, i.e., a print-specific policy, or may be a more general policy applied to any type of access to electronic documents. For example, a particular user may be authorized to have read-only access to a particular electronic document, but not print access.
The policy server 106 then returns to the locked print module 120 data that indicates whether the user associated with the user ID is authorized to access the policy-enabled electronic document. The locked print module 120 may also provide the full user credential data to policy server 106 to allow the policy server 106 to perform authentication in conjunction with authentication server 108.
In step 320, the print data is printed if the user is allowed to print the print data. This may include decrypting the print data using a decryption key received from policy server 106, or another source. According to one embodiment of the invention, the password control data 250 is used to decrypt the print data to generated decrypted print data. For example, suppose that the print data includes a JOBPASSWORD2 command. The locked print module 120 accesses the password control block in password control data 250 that corresponds to the JOBPASSWORD2 command to determine how to decrypt the print data. This may include traversing a linked list of password control blocks to locate a particular password control block that corresponds to the password command. The decrypted print data is then printed. Once successfully printed, the print data may be deleted from storage 122 or retained for further processing. If the user is not allowed to print the print data, then other action may be taken. For example, a message may be displayed on the user interface 116 of printing device 102 to inform the user that the user is not authorized to print the print data.
FIG. 4 is a block diagram that depicts an example implementation of a printing device 400 configured to support processing of print data using password control data, according to one embodiment of the invention. Printing device 400 includes a network module 402 for receiving print jobs over a communications link. Network module 402 includes a print daemon module 404. Received print jobs are processed by a print application 406. A locked print job capture module 408 processes print jobs and determines whether the print jobs are normal print jobs, locked print jobs, or policy-enabled print jobs. Locked print job capture module 408 may make this determination, for example, by examining the headers of received print jobs and determining whether the headers contain commands that indicate the type of print job. Locked print job capture module 408 is configured to cause locked print jobs to be stored on storage 410, that may be any type of volatile storage, non-volatile storage, or combination of volatile and non-volatile storage. A PDF2PS module 412 is configured to convert print jobs between PDF and postscript formats and accesses a shared memory 414. A locked print UI module and PSM client 416 provides UI functionality and also interacts as a policy server client with a policy server. The locked print UI module and PSM client 416 also has a local connection to the print daemon module 404. A Web configuration module 418 allows a user, such as an administrator, to configure locked print functionality on printing device 400. Thus, in the example depicted in FIG. 4, a locked print application includes the locked print job capture module 408, the locked print UI module and PSM client 416 and the Web configuration module 418.
The approach described herein for processing print data using password control data may be implemented using Web Services. For example, printing device 102 may be a Web Services enabled device and support discovery, metadata exchange and event processing functionality.
The approach described herein for printing print data using password control data may be implemented on any type of computing platform or architecture. For purposes of explanation, FIG. 5 is a block diagram that depicts an example computer system 500 upon which embodiments of the invention may be implemented. Computer system 500 includes a bus 502 or other communication mechanism for communicating information, and a processor 504 coupled with bus 502 for processing information. Computer system 500 also includes a main memory 506, such as a random access memory (RAM) or other dynamic storage device, coupled to bus 502 for storing information and instructions to be executed by processor 504. Main memory 506 also may be used for storing temporary variables or other intermediate information during execution of instructions to be executed by processor 504. Computer system 500 further includes a read only memory (ROM) 508 or other static storage device coupled to bus 502 for storing static information and instructions for processor 504. A storage device 510, such as a magnetic disk or optical disk, is provided and coupled to bus 502 for storing information and instructions.
a user interface configured to display information to users and receive user input from the users; and
a locked print module configured to:
examine print data received by the printing device and determine whether the print data should be processed as locked print data based upon whether the print data includes one or more password commands that indicate that an electronic document represented in the print data is a policy-enabled electronic document, a PDF password protected document or a locked print document,
in response to determining that the print data should be processed as locked print data based upon the print data including one or more password commands that indicate that an electronic document represented in the print data is a policy-enabled electronic document, a PDF password protected document or a locked print document, then cause the print data to be stored at the printing device instead of being processed for printing,
authenticate a user via the user interface and upon successful authentication of the user, allow the user to request, via the user interface, printing of the print data,
in response to detecting a user request to print the print data, querying the user via the user interface for a password for the print data,
if the password received from the user via the user interface matches the password for the print data, then
determining one or more password command types of the one or more password commands that are contained in the print data and that indicate that an electronic document represented in the print data is a policy-enabled electronic document, a PDF password protected document or a locked print document,
processing the print data based upon the one or more password command types of the one or more password commands that are contained in the print data and that indicate that an electronic document represented in the print data is a policy-enabled electronic document, a PDF password protected document or a locked print document, and
causing the processed print data to be printed at the printing device.
2. The printing device as recited in claim 1, wherein the locked print module is further configured to in response to determining that the one or more password command types indicate that the electronic document represented in the print data is a policy-enabled electronic document, obtaining from a policy server data that indicates whether the user is authorized to access the electronic document.
3. The printing device as recited in claim 1, wherein the locked print module is further configured to:
identify password control data stored on the printing device that corresponds to the one or more password types and that indicates how print data associated with the one or more password types is to be processed, and
process the print data based upon the one or more password command types of the one or more password commands that are contained in the print data and that indicate that an electronic document represented in the print data is a policy-enabled electronic document, a PDF password protected document or a locked print document includes processing the print data based upon the password control data to generate processed print data.
4. The printing device as recited in claim 3, wherein:
the password control data indicates how the print data is to be decrypted, and
processing the print data based upon the password control data to generate processed print data includes decrypting the print data to generate decrypted print data.
5. The printing device as recited in claim 3, wherein the printing device is configured to update the password control data with new password control data that indicates how print data associated with a new password type is to be processed.
6. The printing device as recited in claim 1, further comprising a print process configured to process print data and cause a printed version of an electronic document contained in the print data to be generated by the printing device.
7. A computer-implemented method for processing print data at a printing device, the computer-implemented method comprising:
displaying information to users and receiving user input from the users;
examining print data received by the printing device and determine whether the print data should be processed as locked print data based upon whether the print data includes one or more password commands that indicate that an electronic document represented in the print data is a policy-enabled electronic document, a PDF password protected document or a locked print document;
in response to determining that the print data should be processed as locked print data based upon the print data including one or more password commands that indicate that an electronic document represented in the print data is a policy-enabled electronic document, a PDF password protected document or a locked print document, then causing the print data to be stored at the printing device instead of being processed for printing;
authenticating a user via the user interface and upon successful authentication of the user, allowing the user to request, via the user interface, printing of the print data;
in response to detecting a user request to print the print data, querying the user via the user interface for a password for the print data; and
determining one or more password command types of the one or more password commands that are contained in the print data and that indicate that an electronic document represented in the print data is a policy-enabled electronic document,
8. The computer-implemented method as recited in claim 7, further comprising in response to determining that the one or more password command types indicate that the electronic document represented in the print data is a policy-enabled electronic document, obtaining from a policy server data that indicates whether the user is authorized to access the electronic document.
9. The computer-implemented method as recited in claim 7, further comprising:
identifying password control data stored on the printing device that corresponds to the one or more password types and that indicates how print data associated with the one or more password types is to be processed, and
processing the print data based upon the one or more password command types of the one or more password commands that are contained in the print data and that indicate that an electronic document represented in the print data is a policy-enabled electronic document, a PDF password protected document or a locked print document includes processing the print data based upon the password control data to generate processed print data.
10. The computer-implemented method as recited in claim 9, wherein:
the computer-implemented method further comprises decrypting the print data to generate decrypted print data.
11. The computer-implemented method as recited in claim 9, further comprising updating the password control data with new password control data that indicates how print data associated with a new password type is to be processed.
12. The computer-implemented method as recited in claim 7, further comprising processing print data and causing a printed version of an electronic document contained in the print data to be generated by the printing device.
13. A non-transitory computer-readable medium for processing print data at a printing device, the non-transitory computer-readable medium storing instructions, the execution of the instructions by one or more processors causing:
14. The non-transitory computer-readable medium as recited in claim 13, further comprising additional instructions which, when processed by the one or more processors, causes in response to determining that the one or more password command types indicate that the electronic document represented in the print data is a policy-enabled electronic document, obtaining from a policy server data that indicates whether the user is authorized to access the electronic document.
15. The non-transitory computer-readable medium as recited in claim 13, further comprising additional instructions which, when processed by the one or more processors, causes:
processing the print data based upon the one or more password command types of the one or more password commands that are contained in the print data and that indicate that an electronic document represented in the print data is a policy-enabled electronic document, a PDF password protected document or a locked print document includes processing the print data based upon the password control data to generate processed print data, determining whether the print data includes one or more password commands that indicate that an electronic document contained in the print data is a policy-enabled electronic document, a PDF password protected document or a locked print document.
16. The non-transitory computer-readable medium as recited in claim 15, wherein:
the computer-readable medium further comprises additional instructions which, when processed by the one or more processors, causes decrypting the print data to generate decrypted print data.
17. The non-transitory computer-readable medium as recited in claim 15, further comprising additional instructions which, when processed by the one or more processors, causes updating the password control data with new password control data that indicates how print data associated with a new password type is to be processed.
18. The non-transitory computer-readable medium as recited in claim 13, further comprising additional instructions which, when processed by the one or more processors, causes processing print data and causing a printed version of an electronic document contained in the print data to be generated by the printing device.
US12059916 2008-03-31 2008-03-31 Approach for processing print data using password control data Active 2033-06-29 US9513857B2 (en)
US12059916 US9513857B2 (en) 2008-03-31 2008-03-31 Approach for processing print data using password control data
JP2009083638A JP5332814B2 (en) 2008-03-31 2009-03-30 Printing apparatus, processing method and a computer program
EP20090156641 EP2107453A1 (en) 2008-03-31 2009-03-30 Approach for processing print data using password control data
US20090244595A1 true US20090244595A1 (en) 2009-10-01
US9513857B2 true US9513857B2 (en) 2016-12-06
ID=40547507
US12059916 Active 2033-06-29 US9513857B2 (en) 2008-03-31 2008-03-31 Approach for processing print data using password control data
US (1) US9513857B2 (en)
EP (1) EP2107453A1 (en)
JP (1) JP5332814B2 (en)
JP6152814A (en)
WO2000068817A1 (en) 1999-05-12 2000-11-16 Hewlett-Packard Company Generalized resource server
JP2002312146A (en) 2001-04-10 2002-10-25 Fuji Xerox Co Ltd Client device and network printing system
US20030065404A1 (en) 2001-09-20 2003-04-03 Bhatti Kristen L. Apparatus and method for controlling stored jobs
EP1367814A2 (en) 2002-05-27 2003-12-03 Océ-Technologies B.V. Processing of a digital mixed colour document
US20040117389A1 (en) 2002-09-05 2004-06-17 Takashi Enami Image forming system that can output documents stored in remote apparatus
JP2004221979A (en) 2003-01-15 2004-08-05 Kyocera Mita Corp Image forming device
US20040156068A1 (en) 2003-02-10 2004-08-12 Sharp Kabushiki Kaisha Data processing apparatus
US20040165216A1 (en) 2003-02-20 2004-08-26 Nauta Gadze C. System for processing print jobs in a network
US20040169884A1 (en) 1999-08-31 2004-09-02 Brother Kogyo Kabushiki Kaisha Printing system including a printer and client devices connected by a network
US20050100378A1 (en) 2003-11-12 2005-05-12 Canon Kabushiki Kaisha Print apparatus, print system, print method, job processing method, storage medium, and program
JP2005196741A (en) 2003-12-10 2005-07-21 Canon Inc Information processing device, method, and program
JP2005225099A (en) 2004-02-13 2005-08-25 Oki Data Corp Printing device
US6965449B2 (en) 2001-12-26 2005-11-15 Canon Kabushiki Kaisha Printing system, information processor, and authenticating method
US20050254086A1 (en) 2004-05-14 2005-11-17 Hiroki Shouno Job display control method
US20060028672A1 (en) 2004-08-04 2006-02-09 Canon Kabushiki Kaisha Process control system, process control server and process control method
US20060044607A1 (en) 2004-08-31 2006-03-02 Canon Kabushiki Kaisha Document providing system and document management server
US20060112021A1 (en) 2004-11-25 2006-05-25 Canon Kabushiki Kaisha Printing apparatus, control method thereof, and recording medium
US20060170947A1 (en) 2005-01-26 2006-08-03 Kazuhiro Kurabayashi Device driver and recording medium
JP2006260245A (en) 2005-03-17 2006-09-28 Ricoh Co Ltd Print control device, control method of print control device, print control program and storage medium
JP2006297624A (en) 2005-04-15 2006-11-02 Sharp Corp Image output apparatus and printer driver
US20060244998A1 (en) 2005-04-28 2006-11-02 Xerox Corporation Systems and methods for highlighting print jobs in a print queue
US7136176B2 (en) 2001-12-25 2006-11-14 Canon Kabushiki Kaisha Printing management system and method, program product used in printing management, and authentication method
US20060268287A1 (en) 2005-05-25 2006-11-30 Xerox Corporation Automated promotion of monochrome jobs for HLC production printers
US20060285141A1 (en) 2005-06-21 2006-12-21 Samsung Electronics C. Ltd. Printing control device and method thereof
JP2006341404A (en) 2005-06-07 2006-12-21 Sharp Corp Image forming apparatus
US20070019224A1 (en) 2005-07-20 2007-01-25 Hideyuki Okada Printing system, job processing method, printing apparatus, storage medium, and program
US20070041045A1 (en) 2005-08-05 2007-02-22 Tomoya Sato Information processing apparatus, information processing method, and program
JP2007087305A (en) 2005-09-26 2007-04-05 Fuji Xerox Co Ltd Device, device processing history storage system, and device processing history storage method
US20070091360A1 (en) 2005-10-26 2007-04-26 Canon Kabushiki Kaisha Information processing apparatus and print control method
JP2007140916A (en) 2005-11-18 2007-06-07 Fuji Xerox Co Ltd Printing system; and processing method and program of electronic document in this system
US20070127055A1 (en) 2005-12-01 2007-06-07 Canon Kabushiki Kaisha Information processing apparatus and information processing method
JP2007176082A (en) 2005-12-28 2007-07-12 Ricoh Co Ltd Image formation apparatus and image formation method
JP2007188477A (en) 2005-12-12 2007-07-26 Canon Inc Data processing device, image processor, print job generation method, print job output method, program, and storage medium
JP2007203736A (en) 2006-02-01 2007-08-16 Ricoh Co Ltd Method for executing locked printing in printing device
US7271925B2 (en) 2000-09-14 2007-09-18 Minolta Co., Ltd. Recording medium for recording printing programs and printing system for confidential printing
JP2007241939A (en) 2006-03-13 2007-09-20 Ricoh Co Ltd Image forming apparatus
US20070234400A1 (en) 2006-03-20 2007-10-04 Hideki Yanagi Information processing apparatus, processing apparatus, computer program product, and recording medium
US20070247660A1 (en) 2006-04-25 2007-10-25 Jayasimha Nuggehalli Approach for implementing locked printing with remote unlock on printing devices
JP2007304931A (en) 2006-05-12 2007-11-22 Kyocera Mita Corp Print system, print method and print processing program
US20070273925A1 (en) 2006-05-23 2007-11-29 Jiang Hong Remote stored print job retrieval
US20070279671A1 (en) 2006-06-06 2007-12-06 Canon Kabushiki Kaisha Port monitor program, data processing method, information processing apparatus, and storage medium
US20080037052A1 (en) 2006-08-09 2008-02-14 Konica Minolta Business Technologies, Inc. Electronic document management device, electronic document management method, recording medium recording electronic document management program, and recording medium recording program for creating electronic document
JP2008040981A (en) 2006-08-09 2008-02-21 Fuji Xerox Co Ltd Program for printing, electronic equipment and control method of electronic equipment
JP2008097075A (en) 2006-10-06 2008-04-24 Fuji Xerox Co Ltd Restricted printing system
JP2008102783A (en) 2006-10-19 2008-05-01 Konica Minolta Business Technologies Inc Recycling system, recycling method and control program
JP2008103867A (en) 2006-10-18 2008-05-01 Fuji Xerox Co Ltd Image processor and program
US20080117452A1 (en) 2006-11-22 2008-05-22 Computer Engineering & Consulting, Ltd. Secure Printing System and Method for the Same
US20080180723A1 (en) 2007-01-26 2008-07-31 Ricoh Company Ltd. Print driver with processed print data management capability
US20080259380A1 (en) 2007-04-20 2008-10-23 Ricoh Company Limited Approach for implementing locked printing with unlock via a keypad
US20090097059A1 (en) 2007-09-27 2009-04-16 Oki Data Corporation Electronic file approval management system
US20090207439A1 (en) 2008-02-20 2009-08-20 Canon Kabushiki Kaisha Printing system, printing method and printer
US20090244596A1 (en) 2008-03-31 2009-10-01 Seiichi Katano Approach for printing policy-enabled electronic documents using locked printing and a shared memory data structure
US20090244594A1 (en) 2008-03-31 2009-10-01 Jayasimha Nuggehalli Approach For Printing Policy-Enabled Electronic Documents Using Locked Printing
US20090316181A1 (en) 2005-03-29 2009-12-24 Science Park Corporation Printing control program and program recording media
US20100002248A1 (en) 2008-07-02 2010-01-07 Jayasimha Nuggehalli Print Driver For Printing Policy-Enabled Electronic Documents Using Locked Printing
US20100014110A1 (en) 2008-07-17 2010-01-21 Sharp Kabushiki Kaisha Image forming system having use restriction function based on document format to be printed and use restriction method in the system
US7660803B2 (en) 2004-09-20 2010-02-09 Samsung Electronics Co., Ltd. Policy-based management method and system for printing of extensible markup language (XML) documents
US20100333183A1 (en) 2009-06-24 2010-12-30 Konica Minolta Business Technologies, Inc. Image forming system, image forming apparatus and recording medium
US20130083363A1 (en) 2007-01-22 2013-04-04 Ricoh Company, Ltd. Fault tolerant printing system
JP4400144B2 (en) * 2003-08-27 2010-01-20 カシオ計算機株式会社 Printing apparatus and a printing system
JP4522314B2 (en) * 2005-04-27 2010-08-11 キヤノン株式会社 The information processing apparatus and a color / monochrome determination method, and program
JP2007018230A (en) * 2005-07-07 2007-01-25 Canon Inc Network printing device
JP2002199153A (en) 2000-12-05 2002-07-12 Oce Technologies Bv Scan and print processing in network system having a plurality of devices
US7382487B2 (en) 2001-01-22 2008-06-03 Ricoh Company, Ltd. Printing system and method restricting functions of printers, usable by each user
EP1566719A2 (en) 2004-02-18 2005-08-24 Ricoh Company Ltd. Image forming apparatus, information processing apparatus, information processing system, authentication method and computer-readable storage medium
US8130392B2 (en) 2004-08-31 2012-03-06 Canon Kabushiki Kaisha Document providing system and document management server
JP2007290396A (en) 2006-04-25 2007-11-08 Ricoh Co Ltd Printing device having locked printing process
US20120140264A1 (en) 2007-04-20 2012-06-07 Jayasimha Nuggehalli Approach For Implementing Locked Printing With Unlock Via A User Input Device
US20130169991A1 (en) 2007-04-20 2013-07-04 Ricoh Company, Ltd. Approach For Implementing Locked Printing With Unlock Via A User Input Device
US20120127504A1 (en) 2008-07-02 2012-05-24 Jayasimha Nuggehalli Print Driver For Printing Policy-Enabled Electronic Documents Using Locked Printing
Claims, Application No. 07121257.5-1228, 9 pages.
European Patent Office, "European Search Report", Application No. 07121257.5-1228, dated Mar. 31, 2008, 6 pages.
European Patent Office, "European Search Report", application No. EP 09 15 6660, dated Jul. 6, 2009, 7 pages.
European Patent Office, "European Search Report", application No. EP 09156641, dated Jul. 2, 2009, 8 pages.
European Patent Office, "European Search Report", European patent application 07250426.9-1245, dated Jun. 12, 2008, 19 pages.
European Patent Office, "European Search Report", European patent application EP 08 16 0705, dated Nov. 12, 2008, 10 pages.
European Patent Office, "European Search Report", in application No. 09164263.7, dated May 4, 2012, 6 pages.
European Patent Office, "Office Action" in application No. 07 252 112.3-1959, dated Nov. 28, 2013, 5 pages.
European Patent Office, "Partial European Search Report", European patent application 07250426.9-1245, received Mar. 10, 2008, 5 pages.
European Patent Office, "Search Report" in application No. 08 153 757.3-1870, dated Mar. 22, 2016, 4 pages.
European Patent Office, "Search Report" in application No. 09 156 660.4, dated Sep. 18, 2013, 6 pages.
U.S. Appl. No. 11/411,248, filed Apr. 25, 2006, Final Office Action, Oct. 27, 2010.
U.S. Appl. No. 11/439,796, filed May 23, 2006, Office Action, Jan. 15, 2010.
U.S. Appl. No. 11/656,592, filed Jan. 22, 2007, Final Office Action, Nov. 22, 2010.
U.S. Appl. No. 11/656,592, filed Jan. 22, 2007, Notice of Publication, Jul. 24, 2008.
U.S. Appl. No. 11/788,517, filed Apr. 20, 2007, Notice of Allowance, Oct. 3, 2011.
U.S. Appl. No. 12/059,836, filed Mar. 31, 2008, Office Action, Mar. 25, 2013.
U.S. Appl. No. 12/059,986, filed Mar. 31, 2008, Notice of Allowance, Dec. 31, 2015.
U.S. Appl. No. 12/059,986, filed May 31, 2008, Advisory Action, Dec. 6, 2012.
U.S. Appl. No. 12/166,741, filed Jul. 2, 2008, Notice of Allowance, Sep. 22, 2011.
U.S. Appl. No. 12/166,999, filed Jan. 29, 2016, Decision on Appeal, Jan. 29, 2016.
U.S. Appl. No. 12/166,999, filed Jul. 2, 2008, Advisory Action, Mar. 18, 2013.
U.S. Appl. No. 12/166,999, filed Jul. 2, 2008, Final Office Action, Jan. 3, 2013.
U.S. Appl. No. 12/166,999, filed Jul. 2, 2008, Notice of Allowance, Apr. 12, 2016.
U.S. Appl. No. 13/363,144, filed Jan. 31, 2012, Notice of Allowance, Feb. 1, 2013.
U.S. Appl. No. 13/363,144, filed Jan. 31, 2012, Office Action, Oct. 17, 2012.
U.S. Appl. No. 13/633,046, filed Oct. 1, 2012, Final Office Action, Aug. 22, 2014.
US20090244595A1 (en) 2009-10-01 application
JP2009241602A (en) 2009-10-22 application
EP2107453A1 (en) 2009-10-07 application
JP5332814B2 (en) 2013-11-06 grant
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:KIM, SEONG;KATANO, SEIICHI;NUGGEHALLI, JAYASIMHA;REEL/FRAME:020738/0044