Mobile device authenticated print

Patent metadata

Field	Value
Publication number	US-10423798-B2
Application number	US-201616079640-A
Country	US
Kind code	B2
Filing date	Jun 30, 2016
Priority date	Jun 30, 2016
Publication date	Sep 24, 2019
Grant date	Sep 24, 2019

Abstract

An authenticated print session allows a mobile device to authenticate an encrypted file for printing at a print device sent by a base computer. The base computer authorizes the mobile device to release printing when in close proximity to the print device. The authenticated print session uses the mobile device to authenticate the owner of the encrypted file, and to authorize the release of the file at the print device over a non-secure communication channel.

First claim

What is claimed is:

1. A print device, comprising:
a spooler to receive an encrypted file;
a verification module to receive a job release key for the encrypted file;
a wireless link to:
couple with a mobile device upon proximity,
establish an authenticated print session in which an authorization token encrypted with the job release key is sent to the mobile device by the verification module, and
receive from the mobile device a job release token encrypted by the job release key, the job release token processed by the verification module to verify and recover a job data key and a decrypted authorization token;

a decryption module to decrypt the job release token with the job release key and further to decrypt the encrypted file with the job data key; and
a print module to print the file if the decrypted authorization token matches the authorization token sent to the mobile device, wherein each of the verification module, decryption module and print module include associated circuitry.

2. The print device of claim 1 wherein the mobile device is not secured to the print device over the wireless link and the verification module is to, via the wireless link, communicate the authorization token to the mobile device.

3. The print device of claim 2 wherein the wireless link is a non-secure low-bandwidth communication link.

4. The print device of claim 2 wherein the wireless link is a non-secure Bluetooth Low Energy link.

5. The print device of claim 1 wherein the verification module is to invalidate the authorization token after one use.

6. The print device of claim 1 wherein the job data key is a PIN or passphrase and the print device allows the PIN or passphrase to be alternatively entered on a keypad on the print device.

7. The print device of claim 1 wherein the job release key is a symmetric key and the job data key is encrypted with the job release key and an initialization vector.

8. The print device of claim 1 wherein the job release key is received via a secure communication channel.

9. A non-transitory computer readable medium, comprising instructions that when executed by a processor in a computer cause the processor to:
receive a mobile device designation for an authenticated print session, a file to print, and a print device designation;
receive a job data key for encrypting the file, and a job release key;
encrypt the file with the job data key;
send the encrypted file and job release key to the print device designation; and
send the job data key, the print device designator, and the job release key to the mobile device designation.

10. The computer readable medium of claim 9 wherein the job data key and the job release key are sent to the mobile device via a secure communication channel.

11. The computer readable medium of claim 9 wherein the computer is paired securely with the mobile device and the mobile device is not paired securely with the print device, wherein the instructions further cause the processor to generate the job release key.

12. The computer readable medium of claim 9 wherein the instructions to receive a job release key includes to receive a public job release key and a private job release key and wherein the instructions are further to cause the processor to securely send the private job release key to the print device and to non-securely send the public job release key to the mobile device.

13. The computer readable medium of claim 9 , wherein the instructions further cause the processor to generate the job release key, the job release key being random or pseudo random.

14. The computer readable medium of claim 9 , wherein the instructions further cause the processor to generate the job release key, wherein the job release key is a symmetric key sent to the print device designation and the mobile device designation.

15. The computer readable medium of claim 9 , wherein the instructions further cause the processor to generate the job release key, the job release key is a private key sent to the print device designation and a public key sent to the mobile device designation.

16. A non-transitory computer readable medium, comprising instructions that when executed by a processor on a mobile device cause the processor to:
receive a job data key for decrypting an encrypted file at a print device, a print device designator, and a job release key from a computer;
establish a non-secure communication link with the print device when in close proximity;
receive an identifier from the print device associated with the print device designation;
receive an indication to print the encrypted file;
establish an authenticated print session over the non-secure communications link;
receive from the print device an authorization token encrypted by the job release key;
decrypt the authorization token with the job release key;
encrypt a job release token containing the authorization token and job data key; and
send the job release token to the print device to authenticate and release the encrypted file for printing.

17. The computer readable medium of claim 16 wherein the job data key is received over a secured communication channel from the computer.

18. The computer readable medium of claim 16 wherein the job release key is sent over a secured communications channel from the computer.

19. The computer readable medium of claim 16 wherein the instructions to encrypt a job release token include instructions to encrypt job credential information including a mobile device ID with the job release key.

20. The computer readable medium of claim 16 wherein the authorization token is invalidated after one use.

Assignees

• Hewlett Packard Development Co

Inventors

• Claiborne Steve
• Gunning Chris
• Adams Jim F

Classifications

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06K15/02

  using printers · CPC title

• G06F3/1292

  Mobile client, e.g. wireless printing · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• G06F3/1267

  Job repository, e.g. non-scheduled jobs, delay printing · CPC title