|
If you need to control access to hp
Multifunction Printers (MFPs), Digital Senders and printers in your organization and
your employees are equipped with a supported smartcard,
install SecureJet Auth-SC. Employees will then use their corporate
smartcard to get access to the device functions such as email,
fax, copy, scan or secure mobile printing. No more login/password to type on the MFP
or digital sender front
panel, and secure user authentication on printers!
1 Million users&smartcards per device
 SecureJet Auth-SC is a sophisticated
smartcards reader directly
connected to the hp LaserJet printer, MFP or DigitalSender motherboard, combined with a
software running inside the printer. It supports most standard
smartcards, with X509 certificates, LDAP, CRL and OCSP validation
and repudiation.
Up to 1 million users can be
recognized per device. The smartcard contains all user
information in a X509 certificate. That can be the user name, email
address and login. It is also possible to read a user PID (unique
identifier) from a X509 certificate inside the smartcard and validate it live against
a LDAP or Active
Directory server to obtain the user profile.
Thanks to its double factor
security concept (one thing you have plus one thing you know), SecureJet Auth-SC offers the
most secure
and most flexible user authentication at the best price.
*: Live LDAP/AD validation requires
SecureJet Print-PS
The authentication
process is very simple:
On MFPs and
Digital Senders, upon
activation of an applicable function (copy, fax, email, secure printing etc) the
SecureJet Auth-SC reader beeps and the MFP screen prompts the user
to insert his smartcard in reader, and enter his card PIN code
(numeric or alphanumeric). The user does so, the X509 certificate is
decoded by SecureJet Auth-SC who verifies its repudiation against a
CRL and validates it against ActiveDirectory, LDAP or SLAP.
Once the user is
validated, SecureJet Auth then grants the access to the MFP function
and supplies to the MFP the following user information:
- User full name
- User login
- User email address
That information will
be reused by MFP functions such as hp Autostore or email
On MFPs the user name then
shows up on the top left of the screen.
On printers, just insert the smartcard in the reader, enter
its numeric PIN code on the built-in keypad, then select the job
release or job deletion option on the same keypad.
User authentication using the smartcard X509 certificates
SecureJet Auth-SC uses X509 Certificates loaded in the smartcards:
-
SecureJet can optionally verify the repudiation of the certificate
against an OCSP server or a CRL, providing a state of the art secure
authentication.
-
SecureJet can perform on-line validation of the user identity
against LDAP and ActiveDirectory, using
SecureJet Print-PS as validation
gateway. A user information from the smartcard X509 certificate
(ie: employee number or
email address) is submitted to one or more LDAP and Active Directory
servers through
SecureJet Print-PS, to find the user record matching
that information. Active Directory or LDAP then returns the full
user information such as his email address, login, full name,
department name, domain etc. This solution is the best when there is
a LDAP/AD database which can be accessed live and is fast as it
allows to instantly repudiate a user using ActiveDirectory or LDAP.
-
 Users
information such as email address, full name, department and login
can be extracted
directly from the X509 Certificate (if it in the certificate) and
used directly for authentication. This solution is the
fastest and best when there is a LDAP/AD database which cannot be
accessed live due
to bandwidth or security reasons. On the other hand, repudiating the
smartcard requires is only possible by reprogramming or destroying
it.
Authenticate for MFP applications
 The administrator can define for what MFP functions users must
use their smartcard to get access. Upon smartcard validation, the
MFP knows about the user name, login and email address. That
information is then used by the MFP application such as email
sending (FROM field), copy tracking or secure printing to reclaim
the user print jobs.
Billing codes / matter codes to charge back the MFP usage
A billing code (also
known as matter code) can also be entered during authentication on
MFPs to
bill-back the operation i.e. to a project or client. That entry can be
made mandatory by including a list of numeric billing codes (4 to 19
digits each) in the SecureJet configuration. Up to 1 million
predefined billing codes can be included in that list, per device.
Authenticate for Secure Printing
On printers and MFPs, Authentication can apply to SecureJet
Secure Mobile Printing. Users can reclaim their print jobs stored on
the printer/MFP disk or on remote servers, by authenticating using their
smartcard . This feature requires the
SecureJet Print-SMP module on
the printer or MFP. Server-based retention requires additionally the
SecureJet Print-PS server software. You will find more details about
Secure Printing in the
SecureJet Print-SMP and
Print-PS information
pages.
On MFPs, usable with all manageable functions
Authentication on MFPs can authenticate users for:
-
Monochrome copy
-
Color copy
-
Fax sending
-
Email sending
-
Print jobs
release (requires SecureJet Print SMP)
-
Scan to folder
-
hp DSS Workflow
TM
-
Autostore TM
-
Omtool AccuRoute
TM
-
Job tracking
-
and any other
MFP function managed by the hp Authentication manager
Protecting email sending on MFPs by forcing the FROM field
information
When
SecureJet Auth is used to control MFP email sending, the FROM field
is automatically filled with the user name and email address and
cannot be edited. This ensure no spoofing is done when sending
emails from MFPs.
Usage on single
function printers
Authentication on single function printer can be used for:
Supported Smartcards
Please contact your
Jetmobile certified VAR for any smartcards project to verify the
compatibility with your smartcard. SecureJet-SC supports most
Gemplus / Axalto / Gemalto, ActivIdentity and Siemens smartcards. Other
smartcards may be supported, please contact us.
The
Intelligent SecureJet smartcard readers is designed and
manufactured by Jetmobile. This guarantees a great look that fits
well the printer and MFP design, plus availability, support and
maintenance for multi-years support packs.
Simple to install
 SecureJet Auth-SC readers connect directly inside the MFP without
needing any external box or
interface. All the software is running inside the reader and printer or
MFP and is stored on a memory card inserted inside the device. One
some old printers, that memory card is a DIMM board. On some other,
it is a CompactFlash card. On the most recent devices it is a host
USB plug, similar to the USB plug on a PC. Unlike on a PC, that
printer and MFP USB plug accepts a very limited number of devices
and Jetmobile has developed a reader especially for the hp printing
and imaging products.
System requirements
SecureJet Auth-SC supports most hp LaserJet printers, hp LaserJet MFPs, printers and Digital
Senders.
Please read the
SecureJet white paper for all information on
pre-requirements
and special features
The SecureJet
Auth-SC package includes
SecureJet Auth-SC reader
Cable routing adhesive brackets
MFP/printer internal memory card
Power supply (except for USB readers)
Setup guide
Regulation and
compliance
CE and FCC Certified
WEEE and RoHS compliant
Part number: SJSC00**
|
