KR100581513B1 - User printing authority certification system - Google Patents

Abstract

A user authorization authentication printing system is disclosed. According to the present invention, in the user authorization authentication printing system, a host and a network printer are connected through a network. Here, the host pads and transmits a VLAN ID to a packet of data for printing, and the network printer includes a receiver for receiving a packet with a VLAN ID padded from the host, an authentication authority storage unit for storing authentication authority for data corresponding to the VLAN ID, A retrieval unit for retrieving the authentication authority of the data for printing from the authentication authority storage unit in response to the received packet, and a printing unit for printing the print data in accordance with the search result by the retrieval unit. As a result, the user authority authentication printing system does not need the user to remember the ID and password corresponding to his host, thereby preventing the print job from being blocked due to the loss of the ID and password.

Host, Network Printer, NIC, Authentication Authority, Packet, VLAN

Description

User printing authority certification system and method thereof

1 is a block diagram schematically showing a conventional cryptographic network printing system;

2 is a block diagram schematically showing an embodiment of a user authorization authentication printing system according to the present invention;

3 is a block diagram schematically showing another embodiment of a user authorization authentication printing system according to the present invention; and

4 is a flowchart illustrating a method for printing user rights authentication by the user rights authentication printing system of FIGS. 2 and 3.

Explanation of symbols on the main parts of the drawings

210, 220, 230, 310: Host 240, 340: Network

250, 350: network printer 251, 351: receiving unit

253, 353: authentication authority storage unit 255, 355: authentication authority search unit

257, 357: printing part

The present invention relates to a network printing system capable of authorization of a user and a method of printing the authorization. More specifically, the present invention relates to a network printing system capable of performing authorization without having to enter an ID or password for a user's computer. The authorization authentication printing method.

In general, in the case of a network printing system, a user can access a shared network printer through a network Internet Protocol (IP) and print a document. Therefore, the reality is that the company or government office is defenseless against the leakage of information assets, such as printing and leaking documents through a network printer.

In a typical network printing system, an IP is assigned and connected to a network printer. At this time, after installing the printer driver, the client sets the printer driver's port to the IP assigned to the network printer, and executes a document output command to match the setting value to the network printer. Is printed. Thus, according to the general printing method using a network printer, important client documents can be printed because any client personal computer that can access the print server can install the printer driver and print the document in a network environment accessible to the corresponding port. There is a problem that can not be prevented from leaking to the outside.

The encryption type network printing system was developed to solve this problem. 1 is a block diagram schematically illustrating a conventional cryptographic network printing system.

Referring to the drawing, in a network printing system, a client computer 100 is connected to a network printer 120 via a network 110. In this case, the computer 100 of the client includes a transceiver 101 and a password input unit 103. In addition, the network printer 120 includes a password storage unit 121, a password retrieval unit 123, and a printing unit 125.

The transceiver 101 of the client computer 100 transmits and receives data to and from the network printer 120 through the network 110. That is, the transceiver 101 transmits the document or image data created through the application program installed in the client computer 100 to the network printer 120.

At this time, each client computer 103 connected to the network printer 120 is assigned an ID and password. The password input unit 103 provides a means for allowing a user to input an ID and a password assigned to each computer 100 when printing a document or image data created and edited by an application program.

The password storage unit 121 of the network printer 120 stores the ID and password for each client computer 100 that has been slowed down through the network 110. In this case, the password storage unit 121 may store passwords classified by different printing rights according to the registered computer 100 of the client. That is, the password storage unit 121 is capable of printing the document or printing only the bibliography or summary of the document or printing the document according to the registered computer 100 of the client. Can be.

When printing data is received from the computer 100 of the client via the network 110, the password retrieving unit 123 stores the same ID and password as the ID and password received with the printing data for the password storage unit 121. Check if it is In this case, when the password storage unit 121 classifies and stores the printing authority corresponding to the computer 100 of the client, the printing unit may print the received printing data according to the result retrieved by the password retrieval unit 123. Control 125.

By the way, the password-type network printing system according to the prior art, the client should remember the ID and password for their computer, if the ID and password for their computer is lost by the application program There is a problem that the created and edited data cannot be printed.

The present invention was devised to solve the above problems, and an object of the present invention is to provide a user authorization authentication printing system and method capable of authorizing authorization without inputting an ID or password for a user's computer.

One embodiment of a user authentication authentication printing system according to the present invention for achieving the above object is a host for transmitting a VLAN (Virtual Local Area Network) ID to the packet of printing data, and the VLAN ID from the host A receiving unit for receiving the padded packet, an authentication authority storage unit storing authentication authority of the printing data corresponding to the VLAN ID, and retrieving authentication authority of the printing data from the authentication authority storage unit in response to the received packet. And a printer having a searching unit and a printing unit for printing the printing data according to the search result by the searching unit.

Here, the host preferably includes a NIC (Network Interface Card) supporting 802.1Q.

Another embodiment of the user authority authentication printing system according to the present invention for achieving the above object is a host for transmitting data for printing, a network intermediate unit for padding the VLAN ID in the packet of the data for printing transmitted by the host, And a receiving unit for receiving the packet with the VLAN ID padded by the network relay unit, an authentication authority storage unit storing authentication authority of the print data corresponding to the VLAN ID, and storing the authentication authority in response to the received packet. And a printer including a retrieving unit for retrieving the authentication authority of the printing data from the unit, and a printing unit for performing a printing operation on the printing data according to the search result by the retrieving unit.

On the other hand, the user authentication authentication printing system according to the present invention, (a) padding the VLAN ID to the packet of data for printing, (b) receiving the packet padded with the VLAN ID by the step (a) (c) retrieving the authentication authority of the packet received from the authentication authority storage unit in which the authentication authority of the printing data corresponding to the VLAN ID is stored, and (d) in the search result of step (c). According to the present invention, there is provided a user authority authentication printing method comprising performing a printing operation on the data for printing.

As a result, the user authority authentication printing system can authenticate the user's computer without having to enter an ID or password for the user's computer.

Hereinafter, with reference to the accompanying drawings will be described in detail the present invention.

Figure 2 is a block diagram schematically showing an embodiment of a user authorization authentication printing system according to the present invention. Referring to the drawings, the plurality of hosts 210, 220, 230 are connected to the network printer 250 through the network 240. Here, each of the hosts 210, 220, and 230 includes a network interface card (NIC) supporting 802.1Q. In addition, the network printer 250 includes a receiver 251, an authentication authority storage unit 253, an authentication authority search unit 255, and a printing unit 257.

802.1Q is a standard published by the Institute of Electrical and Electronics Engineers (IEEE), which presents a uniform model for virtual local area networks (VLANs).

VLANs are a means to simplify, logically and securely segment a network. In a typical LAN, workstations are connected to a repeater or hub, respectively. All data using the network must go through this device. If two users want to send information at the same time, there will be a data collision, and all the transmitted data will be lost. If a collision occurs, users of all networks connected to the hub or repeater should wait for a while and retransmit after the collision has been recovered. At this point, a bridge or switch is used to prevent forwarding of collisions to all workstations connected to the network, which allows broadcasting and multicasting to all users of the network. However, it does not forward the collision.

VLAN is a technology that allows users to be grouped into workgroups according to policy regardless of the location and location of user devices. The advantage of VLANs is that it simplifies the addition and removal of equipment, enables the efficient use of limited network addresses, and enables the secure transmission of messages only to specific users or workgroups.

Each of the hosts 210, 220, and 230 pads the VLAN ID in the packet of data for printing and transmits the VLAN ID to the network printer 250. At this time, in order to pad the VLAN ID for the packet of data for printing, each host (210, 220, 230) is preferably provided with a NIC card that supports 802.1Q. In addition, each host (210, 220, 230) stores the VLAN ID preset by the administrator of the user authorization printing system, and pads the stored VLAN ID to all packets of the print data transmitted to the network printer 250 It is preferable.

The reception unit 251 of the network printer 250 receives a packet of data for printing in which a VLAN ID is padded from each host 210, 220, or 230 through the network 240.

On the other hand, the authentication authority storage unit 253 stores the authentication authority for the data for printing corresponding to the VLAN ID of the data packet for printing received from each host (210, 220, 230). Examples of the authentication authority stored in the authentication authority storage unit 253 include a super group having the authority to print the entire range of data for printing, by the administrator of the user authority authentication printing system for the data for printing. And a user group capable of printing only a designated range, a deny group in which printing authority for printing data is denied, and the like.

The authentication authority retrieving unit 255 retrieves the authentication authority of the printing data stored in the authentication authority storage unit 253 corresponding to the VLAN ID padded in the received packet of printing data. When the authentication authority of the print data received from each host 210, 220, 230 is retrieved by the authentication authority retrieval unit 255, the printing unit 257 according to the search result by the authentication authority retrieval unit 255 Perform a print job on the data for printing. That is, in the case of the authentication authority described above, when the authentication authority of the printing data is found to be a supergroup by the authentication authority searching unit 255, the printing unit 257 prints the entire range of the printing data. In addition, if the authentication authority of the printing data is found to be a user group by the authentication authority retrieval unit 255, the printing unit 257 prints only the range preset by the administrator of the system. However, if the authentication authority of the printing data is found to belong to the printing irregularity group by the authentication authority retrieving unit 255, the printing unit 257 blocks the print process for the printing data.

Thus, the user of each host can remember the ID and password of their host, eliminating the inconvenience of having to enter the ID and password every time the print data is sent to the network printer.

Figure 3 is a block diagram schematically showing another embodiment of a user authorization authentication printing system according to the present invention. Referring to the drawings, the plurality of hosts 310 and 320 are connected to the network 340 through the network intermediary 330. In addition, the network printer 350 is connected to the network intermediary 330 through the network 340. Here, the network printer 350 includes a receiving unit 351, an authentication authority storage unit 353, an authentication authority searching unit 355, and a printing unit 357. At this time, the operation and operation of the receiving unit 351, the authentication authority storage unit 353, the authentication authority search unit 355, and the printing unit 357 is the receiver 251, the authentication authority storage unit 253, authentication Since the operations and operations are the same as those of the authority searching unit 255 and the printing unit 257, the description thereof will be omitted below.

Each host 310 or 320 transmits data for printing to the network intermediary 330 to which it is connected.

The network intermediary 330 pads the VLAN ID in the packet of printing data received from each of the hosts 310 and 320. Here, the network intermediary 330 is a repeater for receiving and amplifying a signal on an electromagnetic or optical transmission medium and retransmitting it to the next section of the medium, a router for connecting separate networks using the same transmission protocol, and from one or more directions. It includes a hub that collects incoming data in one place and delivers it in one or more directions.

Data for printing in which the VLAN ID is padded by the network intermediary 330 is transmitted to the network printer 350 through the network 340, and the network printer 350 performs a print job in the same manner as described above.

As a result, the authentication authority is automatically determined by the network printer for printing data in which the VLAN ID is padded by the network mediator, and a print job is performed according to the determined authentication result.

4 is a flowchart illustrating a method for printing user rights authentication by the user rights authentication printing system of FIGS. 2 and 3. Referring to the drawings, VLAN IDs are padded in the print data packet by the host (210, 220, 230) or the network intermediate unit 330 in the print data created and edited by the user (S401).

Receiving units 251 and 351 of the network printers 250 and 350 receive packets of printing data padded with VLAN IDs through the networks 240 and 340 (S403).

When a packet of data for printing is received through the network 240, 340, the authentication authority retrieving unit 255, 355 prints the data for printing from the authentication authority storage unit 253, 353 based on the VLAN ID padded in the packet of data for printing. Search for the authentication authority (S405).

The printing units 257 and 357 of the network printers 250 and 350 perform a print job according to the search result by the authentication authority searching unit 255 and 355.

Thus, the user does not need to remember the ID and password corresponding to his host, and the network printer can automatically determine the authentication authority for the data for printing and perform the print job.

According to the present invention, since the user authority authentication printing system does not need the user to remember the ID and password corresponding to his host, it is possible to prevent the phenomenon that the print job is blocked due to the loss of the ID and password.

In addition, the user authority authentication printing system may automatically determine the authentication authority of the user according to the group of the user and perform a print job, thereby increasing the convenience of the user.

Although the preferred embodiments of the present invention have been illustrated and described above, the present invention is not limited to the specific embodiments described above, and the present invention is not limited to the specific embodiments of the present invention without departing from the spirit of the present invention as claimed in the claims. Anyone skilled in the art can make various modifications, as well as such modifications are within the scope of the claims.

Claims (4)

A host that pads and transmits a virtual local area network (VLAN) ID to a packet of data for printing; And A receiving unit for receiving the packet padded with the VLAN ID from the host, an authentication authority storage unit storing authentication authority of the printing data corresponding to the VLAN ID, and the printing unit from the authentication authority storage unit in response to the received packet. And a printer having a retrieving unit for retrieving the authentication authority of the data, and a printing unit for performing a printing operation on the printing data according to the search result by the retrieving unit. The method of claim 1, wherein the host, A user authorization authentication printing system comprising a NIC (Network Interface Card) supporting 802.1Q. A host for transmitting data for printing; A network broker for padding a VLAN ID on the packet of data for printing transmitted by the host; And A receiving unit for receiving the packet with the VLAN ID padded by the network intermediary unit, an authentication authority storage unit storing authentication authority of the printing data corresponding to the VLAN ID, and storing the authentication authority corresponding to the received packet And a printer having a retrieving unit for retrieving the authentication authority of the data for printing from the printer, and a printing unit for performing a printing operation on the printing data in accordance with the search result by the retrieving unit. system. (a) padding a VLAN ID into a packet of data for printing; (b) receiving the packet with the VLAN ID padded by the step (a); (c) retrieving the authentication authority of the packet received from the authentication authority storage unit in which the authentication authority of the printing data corresponding to the VLAN ID is stored; And and (d) performing a printing operation on the data for printing according to the search result of step (c).

Images