Image forming apparatus, printing method, and storage medium

Patent metadata

Field	Value
Publication number	US-9230125-B2
Application number	US-201213594626-A
Country	US
Kind code	B2
Filing date	Aug 24, 2012
Priority date	Sep 1, 2011
Publication date	Jan 5, 2016
Grant date	Jan 5, 2016

Abstract

An image forming apparatus, for use in a printing system including a print client, a printer server, and an authentication server, enables a secure print setting according to received policy information specifying that printing is to be performed using a secure print protocol employing a certificate.

First claim

What is claimed is:

1. An apparatus for use in a printing system that includes a print client including a transmission unit configured to transmit a print request to a printer server, the printer server including a receiving unit configured to receive the print request, a print request transmission unit configured to transmit, using a secure print protocol employing a certificate having certificate information including attribute information, the received print request to the apparatus, and an inquiry unit configured to inquire of an authentication server about validity of the certificate, and the authentication server including a verification unit configured to verify, based on the certificate that has been registered, whether the certificate is valid, the apparatus comprising:
a policy receiving unit configured to transmit authentication information to the authentication server, and to receive policy information transmitted in response to authentication performed based on the authentication information;
an enabling unit configured to enable a secure print setting according to a specification in the received policy information indicating that printing is to be performed using the secure print protocol; and
a control unit configured to control, in response to the secure print setting becoming enabled, performing printing in a case where the print request is transmitted using the secure print protocol and the authentication server has verified that the certificate is valid after being notified by the policy receiving unit of the policy information,
where a number of attribute information increases, a data size of the certificate information increases, and
wherein the policy receiving unit, the enabling unit, and the control unit are implemented by a hardware processor and a memory.

2. The apparatus according to claim 1 , wherein the policy information includes information indicating whether the printing system is to be an environment that performs printing using the secure print protocol, and/or information indicating whether to register the certificate in the authentication server.

3. The apparatus according to claim 1 , further comprising a generation unit configured to generate, in a case where a certificate is not stored when registering the certificate in the authentication server before performing printing using the secure print protocol, a self-signed certificate,
wherein the generation unit is implemented by the processor and the memory.

4. An apparatus for use in a printing system that includes a print client including a transmission unit configured to transmit a print request to a printer server, the printer server including a receiving unit configured to receive the print request, a print request transmission unit configured to transmit, using a secure print protocol employing a certificate having certificate information including attribute information, the received print request to the apparatus, and an inquiry unit configured to inquire of an authentication server about validity of the certificate transmitted from the apparatus, and the authentication server including a verification unit configured to verify, based on the certificate of the apparatus that has been registered, whether the certificate transmitted according to an inquiry from the printer server is valid, the apparatus comprising:
a setting unit configured to, when both a secure print setting for performing printing using the secure print protocol employing the certificate and a normal print setting for performing printing using a print protocol employing plain text are enabled, and the printer server has transmitted, using the secure print control employing the certificate, the received print request to the apparatus, disable the normal print setting for performing printing using the print protocol employing plain text; and
a control unit configured to control, after the normal print setting has been disabled, performing printing when a print request is transmitted using the secure print protocol employing the certificate and the authentication server has verified that the certificate is valid after being notified by the policy receiving unit of the policy information,
where a number of attribute information increases, a data size of the certificate information increases, and
wherein the setting unit and the control unit are implemented by a hardware processor and a memory.

5. The apparatus according to claim 4 , wherein the policy information includes information indicating whether the printing system is to be an environment that performs printing using the secure print protocol, and/or information indicating whether to register the certificate in the authentication server.

6. The apparatus according to claim 4 , further comprising a generation unit configured to generate, in a case where a certificate is not stored when registering the certificate in the authentication server before performing printing using the secure print protocol, a self-signed certificate,
wherein the generation unit is implemented by the processor and the memory.

7. A method for controlling an apparatus for use in a printing system that includes a print client including a transmission unit configured to transmit a print request to a printer server, a printer server including a receiving unit configured to receive the print request transmitted from the print client, a print request transmission unit configured to transmit, using a secure print protocol employing a certificate having certificate information including attribute information, the received print request to the apparatus, and an inquiry unit configured to inquire of an authentication server about validity of the certificate transmitted from the apparatus, and an authentication server including a verification unit configured to verify, based on the certificate of the apparatus that has been registered, whether a certificate transmitted according to an inquiry from the printer server is valid, the method comprising:
transmitting authentication information to the authentication server, and receiving policy information transmitted in response to authentication performed based on the authentication information by a policy receiving unit;
enabling a secure print setting according to a specification in the received policy information indicating that printing is to be performed using a secure print protocol employing the certificate; and
controlling, in response to the secure print setting becoming enabled, to perform printing in a case where the print request is transmitted using the secure print protocol employing the certificate and the authentication server has verified that the certificate is valid after being notified by the policy receiving unit of the policy information,
where a number of attribute information increases, a data size of the certificate information increases.

8. The method according to claim 7 , wherein the policy information includes information indicating whether the printing system is to be an environment that performs printing using the secure print protocol, and/or information indicating whether to register the certificate in the authentication server.

9. The method according to claim 7 , further comprising generating, in a case where the certificate is not stored when registering the certificate in the authentication server before performing printing using the secure print protocol, a self-signed certificate.

Assignees

• Inoue Go
• Canon Kk

Inventors

• Inoue Go

Classifications

• G06F2221/2129

  Authenticate client device independently of the user · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• G06F21/44

  Program or device authentication · CPC title

• G06F21/608 Primary

  Secure printing · CPC title

• G06F2221/2115

  Third party · CPC title