# US 11,307,815 B2 · Information processing apparatus, method, and non-transitory computer-readable storage medium to encrypt search value for searching job log using first key and server performs search process

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,307,815 B2
- Document ID: US11307815B2
- Status: Granted
- Kind: B2
- Application number: 16/834,903
- Filed: 2020-03-30
- Published: 2020-10-08
- Granted: 2022-04-19
- Earliest claimed: 2019-04-04
- Assignees: Canon Kabushiki Kaisha
- Applicants: Canon Kabushiki Kaisha
- Inventors: Kosuke Nakashima
- Web page: https://patentgrep.com/patent/US11307815B2

## CPC

- G06F 3/1222: {Increasing security of the print job}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- G06F 3/1238: {Secure printing, e.g. user identification, user rights for device usage, unallowed content, blanking portions or fields of a page, releasing held jobs}
- G06F 3/1287: {via internet}
- G06F 3/1288: {in client-server-printer device configuration}
- G06F 21/602: {Providing cryptographic facilities or services}
- G06F 21/608: {Secure printing}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 9/3073: {involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing}
- G06F 3/1273: {Print job history, e.g. logging, accounting, tracking}
- H04L 9/0838: {Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these (network architectures or network communication protocols for key exchange in a packet data network H04L63/061)}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

An information processing apparatus communicates with a server via a network, the server configured to manage a plurality of job logs on which encryption processing is executed by an image processing apparatus using a first key. The information processing apparatus includes at least one memory storing instructions, and at least one processor executing the instructions causing the information processing apparatus to encrypt a value used for searching for a job log using another first key being a duplicate of the first key, transmit a search request including the encrypted value to the server via the network, acquire an encrypted job log based on a response from the server, and execute decryption processing for decrypting the encrypted job log. The server executes search processing using the encrypted value included in the search request without decrypting the plurality of job logs managed.

## Claims

### Claim 1

An information processing apparatus that communicates with a server via a network, the server configured to manage a plurality of job logs on which encryption processing is executed by an image processing apparatus using a first key, the information processing apparatus comprising:
at least one memory storing instructions; and
at least one processor executing the instructions causing the information processing apparatus to
encrypt a value used for searching for a job log using another first key being a duplicate of the first key,
transmit a search request including the encrypted value to the server via the network,
acquire an encrypted job log based on a response from the server, and
execute decryption processing for decrypting the encrypted job log,
wherein the server executes search processing using the encrypted value included in the search request without decrypting the plurality of job logs managed.

### Claim 2 (depends on 1)

The information processing apparatus according to claim 1,
wherein each of the plurality of job logs includes attribute information and image data output in a corresponding job,
wherein the instructions further cause the information processing apparatus to:
manage a pair of a public key and a secret key; and
import the public key into the image processing apparatus as a key to be used in encryption processing on the image data included in each of the plurality of job logs,
wherein the image data encrypted by the image processing apparatus is acquired as the encrypted job log, and
wherein in the decryption processing, the secret key is used in the decryption processing on the encrypted image data.

### Claim 3 (depends on 2)

The information processing apparatus according to claim 2,
wherein the image processing apparatus encrypts a second key using the public key, the second key used for encrypting the image data, and registers the encrypted image data and the encrypted second key in the server,
wherein, in a case where the encrypted job log is acquired, the encrypted image data and the encrypted second key are acquired, and
wherein in the decryption processing, the encrypted second key is decrypted using the secret key, and the encrypted image data is decrypted using the decrypted second key.

### Claim 4 (depends on 2)

The information processing apparatus according to claim 2, wherein the image processing apparatus encrypts the attribute information included in each of the plurality of job logs using the first key.

### Claim 5

A method for an information processing system including an information processing apparatus, an image processing apparatus, and a server, the method comprising:
executing, by the image processing apparatus, encryption processing on a job log using a first key;
registering, by the image processing apparatus, a plurality of job logs on which the encryption processing is executed, in the server;
encrypting, by the information processing apparatus, a value used for searching for the job log using another first key being a duplicate of the first key;
transmitting, by the information processing apparatus, a search request including the encrypted value to the server via the network;
executing, by the server, search processing by searching for data corresponding to the encrypted value included in the search request without decrypting the plurality of job logs registered and managed by the image processing apparatus;
transmitting, by the server, a response indicating a result of the search processing to the information processing apparatus;
acquiring, by the information processing apparatus, the encrypted job log based on the response from the server; and
executing, by the information processing apparatus, decryption processing for decrypting the encrypted job log.

### Claim 6 (depends on 5)

The method according to claim 5,
wherein each of the plurality of job logs includes attribute information and image data output in a corresponding job,
wherein the information processing apparatus manages a pair of a public key and a secret key, and imports the public key into the image processing apparatus as a key to be used in encryption processing on image data included in each of the plurality of job logs,
wherein the attribute information included in each of the plurality of job logs is encrypted using the first key,
wherein encryption processing using the public key is executed on the image data included in each of the plurality of job logs,
wherein in the search processing executed by the server, the encrypted attribute information is searched as data corresponding to the encrypted value included in the search request,
wherein the information processing apparatus acquires the encrypted image data as the encrypted job log based on the result of the search processing, and
wherein the information processing apparatus uses the secret key in the decryption processing.

### Claim 7

A method for an information processing apparatus that communicates with a server via a network, the server configured to manage a plurality of job logs on which encryption processing is executed by an image processing apparatus using a first key, the method comprising:
encrypting a value used for searching for a job log using another first key being a duplicate of the first key;
transmitting a search request including the encrypted value to the server via the network;
acquiring an encrypted job log based on a response from the server; and
executing decryption processing for decrypting the encrypted job log,
wherein the server executes search processing using the encrypted value included in the search request without decrypting the plurality of job logs managed.

### Claim 8

A non-transitory computer-readable storage medium having computer executable instructions stored thereon, wherein execution of the instructions by a computer causes the computer, as an information processing apparatus that communicates with a server via a network, the server configured to manage a plurality of job logs on which encryption processing is executed by an image processing apparatus using a first key, to:
encrypt a value used for searching for a job log using another first key being a duplicate of the first key;
transmit a search request including the encrypted value to the server via the network;
acquire an encrypted job log based on a response from the server; and
execute decryption processing for decrypting the encrypted job log,
wherein the server executes search processing using the encrypted value included in the search request without decrypting the plurality of job logs managed.