Document imaging system with identity-based encryption
View Patent ↗A system is provided in which document imaging equipment is used to acquire a document image from a printed document. The document image may be processed using an optical character recognition application implemented on the document imaging equipment. A user may supply identifier information. The identifier information may be used in constructing an identity-based-encryption (IBE) public key. Identity-based-encryption public parameter information and the IBE public key may be used in encrypting the document image. The IBE-encrypted document image may be stored in storage or sent to a recipient in a message. A user receiving the IBE-encrypted document image may obtain an IBE private key from a key server that is used in decrypting the IBE-encrypted document.
1. A method for using identity-based encryption (IBE) to secure document images produced by document imaging equipment, comprising:
at the document imaging equipment, acquiring a document image with an image acquisition device, wherein the document imaging equipment is a scanner and wherein acquiring the document image comprises scanning a printed document with the image acquisition device;
with input-output circuitry in the scanner, obtaining an identifier from a user;
at the document imaging equipment, constructing an IBE public key from the identifier;
with a rules engine implemented on the document imaging equipment, analyzing a graphics version of the acquired document image to determine whether the acquired document image contains a feature selected from the group consisting of color, handwriting, and lines from computer-aided-design drawings;
determining whether to encrypt the acquired document image based on whether the acquired document image contains the feature; and
with an IBE encryption engine at the document imaging equipment, if it has been determined by the rules engine to encrypt the acquired document image, encrypting the acquired document image to produce an IBE-encrypted document image wherein encrypting the acquired document image comprises encrypting the acquired document image using the IBE public key.
2. The method defined in claim 1 further comprising:
storing the IBE-encrypted document image in storage in the scanner.
3. The method defined in claim 1 further comprising:
storing the IBE-encrypted document image in removable storage connected to the scanner.
4. The method defined in claim 1 wherein the scanner is connected to a network, the method further comprising:
storing the IBE-encrypted document image in a network folder maintained on a networked storage device in the network.
5. The method defined in claim 1 further comprising:
with a communications application implemented on the scanner, sending the IBE-encrypted document image to a recipient over a network.
6. The method defined in claim 1 further comprising:
with an email application implemented on the scanner, sending the IBE-encrypted document image to a recipient over a network in an email.
7. The method defined in claim 1 further comprising:
storing IBE public parameter information in storage in the scanner.
8. The method defined in claim 1 further comprising:
receiving the IBE-encrypted document image from the scanner;
obtaining an IBE private key from an IBE private key server; and
decrypting the IBE-encrypted document image using the IBE private key.
9. The method defined in claim 8 wherein receiving the IBE-encrypted document image from the scanner comprises receiving the IBE-encrypted document image over a network.
10. The method defined in claim 8 wherein receiving the IBE-encrypted document image from the scanner comprises:
at the scanner, storing the IBE-encrypted document image in a removable storage device; and
at computing equipment remote to the scanner, retrieving the stored IBE-encrypted document image from the removable storage device.
11. The method defined in claim 1 wherein encrypting the acquired document image comprises encrypting the acquired document image using an IBE public key entered into the scanner by a user.
12. The method defined in claim 1 further comprising:
with an optical character recognition application running on the scanner, extracting text from the acquired document image to produce a text version of the acquired document image, wherein encrypting the acquired document image comprises encrypting the text version of the acquired document image.
13. The method defined in claim 1 wherein the identifier comprises a folder name, the method further comprising:
storing the IBE-encrypted document image in storage in the scanner.
14. The method defined in claim 1 wherein the identifier comprises a reference name, the method further comprising:
storing the IBE-encrypted document image in removable storage connected to the scanner.
15. The method defined in claim 1 wherein the identifier comprises a reference name and wherein the scanner is connected to a network, the method further comprising:
storing the IBE-encrypted document image in a network folder maintained on a networked storage device in the network.
16. The method defined in claim 1 wherein the identifier comprises a username, the method further comprising:
with a communications application implemented on the scanner, sending the IBE-encrypted document image to a recipient over a network.
17. The method defined in claim 1 further comprising:
storing IBE public parameter information in storage in the scanner, wherein encrypting the acquired document image comprises encrypting the acquired document image using the stored IBE public parameter information.
18. A method for using identity-based encryption (IBE) to secure document images produced by document imaging equipment, comprising:
at the document imaging equipment, acquiring a document image with an image acquisition device, wherein the document imaging equipment is a scanner and wherein acquiring the document image comprises scanning a printed document with the image acquisition device;
with a rules engine implemented on the document imaging equipment,
determining whether to encrypt the acquired document image based on whether the acquired document image contains a feature selected from the group consisting of color, handwriting, and lines from computer-aided-design drawings; and
with an IBE encryption engine at the document imaging equipment, encrypting the text version of the acquired document image to produce an IBE-encrypted document if it has been determined by the rules engine to encrypt the acquired document image.
19. The method defined in claim 18 , further comprising determining whether to encrypt the acquired document image based on an identity of a user.
20. The method defined in claim 18 , further comprising determining whether to encrypt the acquired document image based on manual input from a user.
21. The method defined in claim 18 , further comprising determining whether to encrypt the acquired document image based on date information.