Granted Patent B2

US 8,924,709 · App. 13/731,496 · Granted Dec 30, 2014

Abstract

Claims (18)

1. A system for securely transmitting an output data having metadata to an output device, comprising:

a client device; and

a server having a server public key, the server operatively interposed between the client device and the output device on a network;

wherein the client device generates a random symmetric session key and encrypts the output data using the random symmetric session key, the client device encrypts the random symmetric session key using an asymmetric user public key, the client device encrypts the encrypted random symmetric session key and the metadata using the server public key, and the client device sends the encrypted output data, the first double-encrypted random symmetric session key and the encrypted metadata to the server.

2. The system of claim 1 , wherein the client device generates an output job by combining the encrypted metadata, the first double-encrypted random symmetric session key and the encrypted output data.

3. The system of claim 1 , wherein the server decrypts the metadata using a server private key.

4. The system of claim 3 , wherein the server sends the decrypted metadata to a job tracking software.

5. The system of claim 1 , wherein the server encrypts the metadata using an output device public key prior to transmitting the metadata to the output device.

6. The system of claim 1 , wherein the server generates a second double-encrypted random session key by encrypting the encrypted random symmetric session key using an output device public key prior to transmitting the second double-encrypted random symmetric session key to the output device.

7. The system of claim 6 , wherein the output device generates the encrypted random symmetric session key by decrypting the second double-encrypted random symmetric session key using an output device private key.

8. The system of claim 7 , wherein the output device decrypts the encrypted random symmetric session key using the asymmetric user private key.

9. The system of claim 8 , wherein a third cryptographic module uses the decrypted random symmetric session key to decrypt the encrypted output data.

10. A method, comprising:

receiving, by a client device, an output data;

encrypting, by a client device, the output data with a randomly-generated symmetric session key;

generating, by a client device, a session key header by encrypting the randomly-generated symmetric session key using an asymmetric user public key; and

encrypting, by a client device, using a server public key, the session key header and a metadata associated with the output data, wherein a server decrypts the encrypted session key header and the encrypted metadata using the server private key and wherein the server encrypts the session key header using an output device public key.

11. The method of claim 10 , further comprising generating, by the client device, an output job by appending the encrypted session key header and the encrypted metadata to the output data.

Assignments (8)