|Publication number||US6971007 B1|
|Application number||US 09/641,929|
|Publication date||Nov 29, 2005|
|Filing date||Aug 17, 2000|
|Priority date||Aug 17, 2000|
|Also published as||CA2419554A1, CN1470121A, DE60115252D1, DE60115252T2, EP1310076A2, EP1310076B1, WO2002015516A2, WO2002015516A3|
|Publication number||09641929, 641929, US 6971007 B1, US 6971007B1, US-B1-6971007, US6971007 B1, US6971007B1|
|Inventors||Kevin G. Currans|
|Original Assignee||Hewlett-Packard Development Company, L.P.|
|Export Citation||BiBTeX, EndNote, RefMan|
|Patent Citations (27), Referenced by (12), Classifications (34), Legal Events (4)|
|External Links: USPTO, USPTO Assignment, Espacenet|
The present invention relates generally to secure document printing. In particular, the present invention relates to a method and apparatus for establishing that a document represented by a computer file that was sent via a data network, was paid for and successfully printed from a remote printing device.
The present application is related to patent applications concurrently filed herewith, the respective teachings of which are incorporated by reference. These related applications are U.S. patent application Ser. No. 09/641,615 by Currans et al., titled “Method and Apparatus For Insuring Output Print Quality” (hereinafter “Guaranteed Print”), and Ser. No. 09/641,618 by Currans, entitled “Serialized Original Print” (hereinafter “Serialized Print”). As of the filing date of this application and these related applications, all rights, title and interests are commonly owned by the Hewlett Packard Company.
The Internet, and in particular the World Wide Web, has enabled the instantaneous transfer of electronic files between computers that might be located anywhere in the world so long as the computers are coupled to the Internet. Because these files routinely represent documents, photographs, or perhaps bank account, credit card account numbers, all of which have economic value, the speed at which intellectual property and money can be transferred is now nearly instantaneous.
While the ease and speed with which documents and value can be transferred can be a boon to business it can also be a liability when the distribution of an electronic file needs to be controlled. By way of example, if a valuable work of art such as a photograph, is digitized (i.e. converted into an electronic file), uncontrolled reproduction and distribution of the electronic file that represents the art work will eventually render the work valueless. Electronically transferring files that have any sort of economic value is problematic because of the likelihood that economic value will be taken by those who are unscrupulous.
With the advent of electronic commerce, and the accompanying worldwide distribution of documents and other valuable information, a way of discerning that a document has been delivered to, and printed by, an intended recipient might prevent or reduce instances of fraud enabled by the ease with which electronic files can be reproduced and distributed.
The present invention provides a method and apparatus for controlling printing of a document delivered via a computer network. A first portion of a document is encrypted using at least a first encryption key, thereby creating a partially encrypted file. The partially encrypted file is transmitted via the computer network. A second portion of the transmitted partially encrypted file is printed and a t least a serialized print number is returned. In response, the first encryption key is received. The first portion of the partially encrypted file is then decrypted and printed.
Briefly stated, the present invention provides a method and apparatus for verifying that a document was printed from an electronic file that was transmitted to and printed from a remote print mechanism. The exemplary method disclosed herein enables a document or file distributor to control re-distribution by conclusively determining whether a document printed from a file was printed in whole or in part. In a preferred embodiment, the process includes the steps of encrypting a document and/or parts thereof that is to be transferred electronically, transmitting the encrypted document to an intended party via a data network, such as the Internet, partially decrypting the document using a first decryption key so as to enable the document to be verified that it was properly received, and printing part of the document up to a point at which a second decryption key is required.
If the document is successfully printed down to the point where a second encryption key is required, the recipient of the document returns to the sender, an indicia, such a serial number of the document, which has been physically printed on the document at the time, that the document had started to print successfully. Receipt of the partial-printing proof by the document sender triggers the transmission to the document recipient (i.e., the printer and not the user's browser), the second decryption key by which the remaining portion of the document can be decrypted and printed by the recipient (i.e., the printer and not the user's browser). Receipt of the indicia that the document was at least partially printed is created by the recipient's printer or print mechanism using a method disclosed and claimed in “Serialized Print”.
Upon the document sender's receipt of the indicia that the document was at least partially printed, the document recipient will thereby have provided to the document sender, conclusive proof that the entire document was received successfully. By using the “Guaranteed Print” technology, the accuracy of the document that was printed can be determined and a numerical indicia of output print quality generated such that a document sender provided with the print quality indicia can know whether the document that was printed was in fact a reasonably facsimile of the document that was electronically sent. Using the indicia of printing that was received by the sender, as well as an objective indicia of the output print quality documents that are sent electronically but which do not reasonable resemble their original condition as sent by the sender can be selectively retransmitted by the document sender at the document sender's discretion.
Document transfers between document senders and receivers are enabled by way of a network like the Internet but as set forth above, such transfers also might be accomplished using a local area network, a wide area network, an Ethernet network as well as the plain old telephone system sometimes referred to as the public switched telephone network. In instances where the data network 102 is the World Wide Web of the Internet, a web browser program executing on a subscribers computer 108 provides access to “web sites” that are embodied by other computers 104 coupled to the web, including the computer(s) of a document provider, identified in
By way of example, a subscriber's computer 108 might request the computer of a content provider 110 to transfer to it, some sort of electronic file 112, embodying a document that might include a work of art, a memorandum, or perhaps a negotiable instrument or airline tickets for example. Upon being printed, such a document has economic value to either the sender (not shown) or the recipient of the document (not shown).
Using the Internet 102, an intended recipient of a document, considered herein to be a document requester, can request from a sender's computer 110, the transmission of a file 112 from the sender's computer 110 via the Internet 102 to the recipient's computer 108. If the recipient's computer 108 has the requisite application program by which the transmitted file 112 can be opened and printed, printing the document 114 that was embodied as an electronic file 112 is readily accomplished using an appropriate printer 116 coupled to the recipient's computer 108.
In the preferred embodiment of this invention, the recipient's computer 108 and the printer 116 are equipped with, and capable of using, the method and apparatus disclosed in “Serialized Print.” As such, the printer 116 is a printer that is capable of generating serialized output as described in “Serialized Print”. The disclosure and teachings of the “Serialized Print,” by which the generation of serialized output is taught, is incorporated herein by reference. Using that novel method for generating serialized printed output, the printer 116 generates a unique serial number, bar code or encoded data (hereafter, serial number) for the document 114 in the course of printing the file 112. The serial number generated by the printer 116 is of paramount importance in verifying to a document sender that the file 112 was received at the computer 108 and at least partially printed.
Information about the X.509 standard is available from a variety of sources, including the National Institute of Standards and Technology web site, the URL of which is: http://csrc.ncsl.nist.gov/. An X.509 certificate serves as an electronic credential over the Internet for individuals and computer services (Web sites). X.509 certificates are used in the same way as birth certificates, passports or drivers' licenses to validate the identity of individuals for Web site access, communication and electronic commerce.
An individual wishing to send an encrypted message applies for a digital certificate from a Certificate Authority (CA). The CA issues an encrypted digital certificate containing the applicant's public key and a variety of other identification information. The CA makes its own public key readily available through print publicity or perhaps on the Internet.
The recipient of an encrypted message uses the CA's public key to decode the digital certificate attached to the message, verifies it as issued by the CA and then obtains the sender's public key and identification information held within the certificate. With this information, the recipient can send an encrypted reply. The most widely used standard for digital certificates is X.509 which is the technology used by this merchant.
The X.509 is currently believed to be the most widely used standard for defining digital certificates. The X.509 standard for digital certificates binds the identity of a person or organization to an electronic identification key. The digital certificate contains information about its owner, its issuer, issue and expiration date stamps, and information for verifying the integrity of the certificate that can be used for digital IDs, digital signatures and electronic fingerprints.
By executing an HTTP (hypertext transfer protocol) “GET” command, the user's web browser (e.g. Internet Explorer™ or Netscape™) running on the user's computer (i.e. the second computer) requests verification of the printer's public key from a security key issuer, which then posts the answer of authenticity of the printer's public key using a “PUT” in step 207. In
In an alternate embodiment, only part of a document is encrypted prior to transmission and using only one key. By encrypting only part of a document (i.e. up to a predetermined point) prior to transmission, at least the unencrypted portion of the document can be printed at the destination, without a decryption key, thereby establishing recognition-of-value by the purchaser before transferring funds. In such an embodiment, a decryption key eventually needs to be provided. By holding back the decryption key pending receipt of payment—and perhaps ascertaining proof that at least part of the document was satisfactorily printed using for example the “Guaranteed Print” teachings—a document vendor can protect its interest in the document by withholding the key until payment has been received by an entity associated with the document, for example, the vendor or a credit agency for the vender.
In step 214, the document buyer's computer (i.e. the second computer 108) optionally retrieves the URL of a credit agency and performs a secure hypertext transfer protocol transfer providing payment information to a financial organization or other credit provider effectuating the transfer of funds for the payment of the file from the vendor. A credit approval transfer form 216 is optionally returned to the buyer and enables the buyer to populate the form with pertinent credit information by which the credit provider can make payment to the vendor in step 218, shown in
The document vendor can electronically verify with a credit provider, e.g. www.cybercash.com, in step 224 that the document purchaser has funded, or can otherwise pay for the transaction and, in response thereto, the credit provider can provide an appropriate acknowledgement 226 to the vendor, as shown in
As the printer 116 continues following the instructions from the computer 108 to generate output, eventually the printer 116 or the computer 108 encounters information in the file 112 that is encrypted with the vendor's second key. Upon determining that further printing will be inhibited absent the other decryption key, the printer, using the “Serialized Print” methodology, requests the second key in step 236 from the user's computer,
Upon receipt of the original serial print number generated in step 232 by the vendor's computer 110 in step 238, the vendor can assume that at least part of the document file 112 was printed from the printer 116 and was fully and successfully received by the computer 108. The vendor can record the serialized print number in a database for billing purposes or for billing credit purposes.
The vendor can also optionally submit the transaction complete signal in step 240,
In order to complete the printing job, the vendor's computer 110 needs to return to the purchaser's computer 108, the second decryption key in step 242 or a session key, that the printer can use for decrypting the content The second key is encrypted so only the printer can decrypt it. This is generally done using the printer's public key and the vendor's private key. Upon receipt of the second key, the browser running on the purchaser's computer 108 passes the second encryption key to the printer in step 244, which enables the printer to decrypt the key and finish the print job it started in step 230 by decrypting the document and printing it. In step 246, the printer sends status information back to the browser of the purchaser's computer 108 informing the purchaser's computer 108 and possibly the browser of whether or not the entire print job was successful.
By using the methodology disclosed in the inventor's “Guaranteed Print” technology, the printer 116 can provide an objective measurement of the output print quality. A printer employing the “Guaranteed Print” technology is referred to herein as a printer that is capable of guaranteeing output print quality.
Using the “Guaranteed Print” technology, the printer 116 depicted in
If output print quality was determined to be unsatisfactory or failed altogether, the printer 116 can send an appropriate error message to the vendor or the vendor's computer 110 informing the vendor that the output print quality was defective. In the event that an output print job did not successfully complete in its entirety, or was otherwise disturbed or defective, the vendor can impede retransmission of the file 112 until it physically receives all of the output that was printed by the printer 116.
By way of data recovered using the method and apparatus for insuring output print quality, the vendor knows precisely how much of the document file 112 was actually printed 114 and refuse to provide another copy of the document until physical receipt of the output print material is received in hand that has the serial number, bar code or encoded data in step 234.
Public and private encryption key technologies are well known to those skilled in the art. Alternative embodiments of the invention would include using proprietary keys of both the purchaser and the vendor. By using a publicly available key however, it is possible for the document sender to encrypt a file with a public key enables the document recipient to decrypt it using his private key. Commercially available public/private encryption software is readily available.
It should be apparent that by using the methodologies disclosed herein, that valuable documents can be transferred via data networks with some sense of security and with some sense that unauthorized reproduction of a document will be impeded. Similarly, valuable content for which value was received need not be retransmitted absent proof by the sender that the intended output was not successfully realized.
|Cited Patent||Filing date||Publication date||Applicant||Title|
|US4404649 *||Nov 3, 1980||Sep 13, 1983||Recognition Equipment Incorporated||Document processing system|
|US5398283 *||Nov 3, 1993||Mar 14, 1995||Krypto Fax Partners L.P.||Encryption device|
|US5432618||Aug 18, 1992||Jul 11, 1995||Gemplus Card International||Method and device for the certification of messages sent by facsimile transmission|
|US5784460 *||Oct 10, 1996||Jul 21, 1998||Protocall Technolgies, Inc.||Secured electronic information delivery system having a three-tier structure|
|US5861619||Dec 13, 1996||Jan 19, 1999||Oki Electric Industry Co., Ltd.||Method of and apparatus for embedding data into an electronic document by modulating spaces between words|
|US5889860 *||Nov 8, 1996||Mar 30, 1999||Sunhawk Corporation, Inc.||Encryption system with transaction coded decryption key|
|US5917996||Oct 15, 1997||Jun 29, 1999||Xerox Corporation||System for printing tamper-resistant electronic form characters|
|US5923763||Mar 21, 1996||Jul 13, 1999||Walker Asset Management Limited Partnership||Method and apparatus for secure document timestamping|
|US5974548||Jul 12, 1996||Oct 26, 1999||Novell, Inc.||Media-independent document security method and apparatus|
|US5999622 *||Nov 22, 1995||Dec 7, 1999||Microsoft Corporation||Method and apparatus for protecting widely distributed digital information|
|US6011905||Nov 8, 1996||Jan 4, 2000||Xerox Corporation||Using fontless structured document image representations to render displayed and printed documents at preferred resolutions|
|US6015087||Oct 4, 1996||Jan 18, 2000||First Data Corporation||Apparatus and method for leasing documents of value|
|US6041316 *||Jul 25, 1994||Mar 21, 2000||Lucent Technologies Inc.||Method and system for ensuring royalty payments for data delivered over a network|
|US6119108 *||Oct 1, 1998||Sep 12, 2000||Aires Systems Corporation||Secure electronic publishing system|
|US6279112 *||Oct 29, 1996||Aug 21, 2001||Open Market, Inc.||Controlled transfer of information in computer networks|
|US6363357 *||Dec 29, 1999||Mar 26, 2002||Pitney Bowes, Inc.||Method and apparatus for providing authorization to make multiple copies of copyright protected products purchased in an online commercial transaction|
|US6373587 *||May 19, 2000||Apr 16, 2002||Pitney Bowes Inc.||Method for printing electronic tickets|
|US6378070 *||Jan 8, 1999||Apr 23, 2002||Hewlett-Packard Company||Secure printing|
|US6385596 *||Feb 6, 1998||May 7, 2002||Liquid Audio, Inc.||Secure online music distribution system|
|US6446051 *||Feb 11, 1999||Sep 3, 2002||Hewlett-Packard Company||Document transfer systems|
|US6711677 *||Jul 12, 1999||Mar 23, 2004||Hewlett-Packard Development Company, L.P.||Secure printing method|
|US20020019937 *||Jun 6, 2001||Feb 14, 2002||Edstrom Trevor W.||Secure document transport process|
|US20020048039 *||May 29, 1998||Apr 25, 2002||Yoko Nishikawa||Output control method and apparatus|
|US20020071559 *||Dec 8, 2000||Jun 13, 2002||Christensen Jakob Hjorth||Method and apparatus for providing electronic data|
|EP0665486A2||Jan 18, 1995||Aug 2, 1995||AT&T Corp.||Method of protecting electronically published materials using cryptographic protocols|
|EP0929023A1||Dec 23, 1998||Jul 14, 1999||Hewlett-Packard Company||Secure printing|
|WO1998033293A1||Jan 24, 1997||Jul 30, 1998||Intel Corp||Apparatus and method for preventing disclosure through user-authentication at a printing node|
|Citing Patent||Filing date||Publication date||Applicant||Title|
|US7305556 *||Dec 5, 2001||Dec 4, 2007||Canon Kabushiki Kaisha||Secure printing with authenticated printer key|
|US7383335 *||May 29, 2003||Jun 3, 2008||Hewlett-Packard Development Company, L.P.||Method and apparatus for securing a print job|
|US7508939 *||Nov 18, 2004||Mar 24, 2009||Canon Kabushiki Kaisha||Image processing system and method for processing image data using the system|
|US7925043||Dec 20, 2006||Apr 12, 2011||Xerox Corporation||Tactile security feature for document and signature authentication|
|US8073781 *||Jul 25, 2005||Dec 6, 2011||Deutsche Post Ag||Method and device for franking postal deliveries|
|US20030105963 *||Dec 5, 2001||Jun 5, 2003||Slick Royce E.||Secure printing with authenticated printer key|
|US20030229705 *||May 29, 2003||Dec 11, 2003||Matsuno Yohichiroh||Computer networking system, method of document retrieval in document management system, document management program and media for document management|
|US20040205017 *||Apr 19, 2004||Oct 14, 2004||Sun-Chang Lin||System and method for performing duty exemption and duty drawback for products purchased through bidding online|
|US20040243669 *||May 29, 2003||Dec 2, 2004||Green Brett A.||Method and apparatus for securing a print job|
|US20050105722 *||Nov 18, 2004||May 19, 2005||Canon Kabushiki Kaisha||Image processing system and method for processing image data using the system|
|US20070276761 *||Jul 25, 2005||Nov 29, 2007||Deutsche Post Ag||Method And Device For Franking Postal Deliveries|
|US20080151310 *||Dec 20, 2006||Jun 26, 2008||Xerox Corporation||Tactile security feature for document and signature authentication|
|U.S. Classification||713/165, 380/285, 358/1.15, 713/161, 705/77, 358/1.11, 358/1.14, 705/52, 380/277, 380/55, 705/60, 713/150, 358/1.12, 358/1.13, 380/51, 705/62, 726/10, 713/151|
|International Classification||G06F3/12, H04L29/06, B41J5/30, B41J29/00, G06F17/21, G06F21/00|
|Cooperative Classification||G06F21/31, H04L63/0442, H04L63/123, G06Q20/085, G06F21/608|
|European Classification||G06F21/31, G06F21/60C2, H04L63/04B2, G06Q20/085, H04L63/12A|
|Nov 6, 2000||AS||Assignment|
Owner name: HEWLETT-PACKARD COMPANY, COLORADO
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:CURRANS, KEVIN G.;REEL/FRAME:011247/0277
Effective date: 20000815
|Sep 30, 2003||AS||Assignment|
Owner name: HEWLETT-PACKARD DEVELOPMENT COMPANY L.P.,TEXAS
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:HEWLETT-PACKARD COMPANY;REEL/FRAME:014061/0492
Effective date: 20030926
|May 29, 2009||FPAY||Fee payment|
Year of fee payment: 4
|Mar 8, 2013||FPAY||Fee payment|
Year of fee payment: 8