Printed document security

Patent metadata

Field	Value
Publication number	US-9682590-B1
Application number	US-201314028180-A
Country	US
Kind code	B1
Filing date	Sep 16, 2013
Priority date	Sep 16, 2013
Publication date	Jun 20, 2017
Grant date	Jun 20, 2017

Abstract

A printed document includes encoded content. The at least some content of the printed document is acquired and securely communicated to a support service. Information received from the support service is used to present user-readable content on a display. One or more portions of the encoded content are decoded for inclusion with the user-readable content, in accordance with an authorization of the user. Printed documents having encoded content may be distributed without security concerns due to the machine-based, authorization-driven nature of respective methods and apparatus.

First claim

What is claimed is:

1. A user device configured to:
cause a printed document to be imaged using an image capture device of the user device, wherein the printed document includes encoded content, a first portion of the encoded content is represented by a first token associated with a first security level, a second portion of the encoded content is represented by a second token associated with a second security level, and the encoded content represents sensitive information;
identify the first token and the second token within the image of the printed document;
cause an authorization and the first token and the second token to be transmitted to at least one computing device configured to implement one or more services, wherein the one or more services are configured to use the authorization to verify that a user is privileged to access the sensitive information represented by the first token and the second token, and wherein the one or more services are further configured to retrieve a stored data value associated with the first token and the second token;
receive the stored data value associated with the first token and the second token;
generate user-readable content including content acquired from the image of the printed document and the stored data value; and
cause the user-readable content to be presented using a display associated with the user device.

2. The user device of claim 1 , wherein the encoded content is replaced with the stored data value during the generation of the user-readable content.

3. The user device of claim 1 , wherein:
the authorization includes a user security level equal to or greater than the first security level and lesser than the second security level.

4. The user device of claim 1 , wherein the user device is further configured to delete the stored data value and the user-readable content in response to either a predefined date, or a predefined number of presentations of the user-readable content.

5. A method performed at least in part by an apparatus, the method comprising:
causing content to be acquired from a printed document, wherein the printed document includes one or more encoded portions, the one or more encoded portions include a first portion associated with a first security level and a second portion associated with a second security level;
causing at least a portion of the acquired content and an authorization to be transmitted to at least one computing device configured to implement one or more services, wherein the one or more services are configured to use the authorization that includes a user security level that is equal to or greater than the first security level to verify that a corresponding user is privileged to at least access sensitive information represented by the first portion, and wherein the one or more services are further configured to access the sensitive information based on the acquired content;
receiving the sensitive information from the one or more services; and
causing user-readable content to be presented on a display, wherein the user-readable content is based at least in part on the received sensitive information and includes one or more user-readable portions corresponding to the encoded portions within the printed document.

6. The method of claim 5 , wherein the one or more encoded portions are represented by one or more tokens within the printed document, the method further comprising:
sending the one or more tokens to the one or more services;
receiving data values associated with respective ones of the one or more tokens from the one or more services; and
generating, using the data values, the user-readable content.

7. The method of claim 5 , wherein the one or more encoded portions are encrypted within the printed document, and wherein the printed document further includes a document identifier, the method further comprising:
sending the document identifier to the one or more services;
receiving, from the one or more services, one or more encryption keys associated with the one or more encoded portions; and
generating, using the one or more encryption keys, the user-readable content.

8. The method of claim 5 , further comprising:
sending an entire image of the printed document to the one or more services; and
receiving a decoded document from the one or more services, the decoded document including at least some of the user-readable content.

9. The method of claim 5 , wherein the one or more encoded portions are represented by respective encrypted portions within the printed document, the method further comprising:
sending the encrypted portions to the one or more services;
receiving data values associated with respective ones of the encrypted portions from the one or more services; and
generating, using the data values, the user-readable content.

10. The method of claim 5 , wherein the user-readable content is presented on the display during a viewing session, the method further comprising:
deleting, from the apparatus, the user-readable content and the sensitive information when the viewing session is ended.

11. The method of claim 5 , wherein causing the content to be acquired from the printed document comprises:
causing a microphone associated with the apparatus to acquire user speech input; or
causing an image capture device of the apparatus to acquire the printed document.

12. The method of claim 5 , wherein:
the one or more encoded portions are associated with a predefined security policy; and
the authorization includes the user security level equal to or greater than that required by the predefined security policy.

13. The method of claim 5 , wherein the user security level is lesser than the second security level, the method further comprising:
receiving a decoded version of the first portion from the one or more services; and
generating the user-readable content including the decoded version of the first portion, the user-readable content also including either an encoded version of the second portion or a placeholder.

14. A non-transitory computer-readable storage media including one or more instructions, the one or more instructions configured to cause one or more processors to:
cause first information to be sent to a support service, wherein the first information includes content acquired from a printed document, and wherein the printed document includes an encoded portion that defines at least a first encoded portion and a second encoded portion, and a non-encoded portion, and wherein the first encoded portion and the second encoded portion are associated with user security levels;
receive second information from the support service; and
cause, using the second information, user-readable content to be presented on a display, wherein the user-readable content includes the non-encoded portion of the printed document, and wherein the user-readable content includes a decoded version of the encoded portion of the printed document.

15. The non-transitory computer-readable storage media of claim 14 , the one or more instructions are further configured to cause the one or more processors to:
acquire, using a camera, an image of the printed document; and
include at least some of the image of the printed document with the first information.

16. The non-transitory computer-readable storage media of claim 14 , wherein the encoded portion is represented by a token within the printed document, the one or more instructions are further configured to cause the one or more processors to:
include the token with the first information; and
receive the decoded version of the

Assignees

• Amazon Tech Inc

Inventors

• Ramarao Pradeep

Classifications

• G06Q10/00

  Administration; Management · CPC title

• G06F3/1288

  in client-server-printer device configuration · CPC title

• B42D15/00 Primary

  Printed matter of special format or style not otherwise provided for · CPC title

• G06F3/1222 Primary

  Increasing security of the print job · CPC title

• G06Q10/10

  Office automation; Time management · CPC title