The difro code is Copyright (c) 1998, Regents of the University of California. All rights reserved.

ELP can automatically decrypt and encrypt with a 64 bit algorithm:

  • print jobs,
  • stored macros/forms, (e.g. signatures on an USB key for signing important documents like checks)

Encrypted data steams arriving on any ELP enabled device are only automatically encrypted, if the proper key is provided in one of the following startup sections:

  • All devices: The rule GLOBAL (The only place the commands can be set within PPAdmin Control Center)
  • By hand: Printer name (Only Software)
  • By hand: User name (Only Software)
  • By hand: Port name(Only Software)

Those devices can decrypt data streams:

  • Another ELP Server
     
  • Ricoh printers equipped with IBS
  • AP-ELP Box (print server for LAN2USB and LAN2LAN service)

Encryption:

The outgoing data stream is automatically encrypted when the encryption number AND the key Encrypt=ON is provided. The following 2 keys are used:

 

Encrypt Once this key is set to ON (default OFF) AND an en-/decryption key is also provided, the outgoing data stream will be encrypted.
Encrypt_keys This key reflects the 64 bit encryption code. It is used to encrypt any received data stream and / or to decrypt the outgoing data stream The syntax is xxxxx xxxxx xxxxx xxxxx where xxxxx is any integer value. Examples below.

 

Notes:

  • The most value is reached if the printer decrypts, otherwise you can only decrypt between two PC/Servers.
  • If the job is also send to the archive or port as well as when the out_data.prn is generated with the DEBUG_OUTDATA=ON key, all those files will NOT be encrypted.
  • Once using the encryption, the keys must be safely used. So turn on the ini file encryption in PPAdmin as a first step. If needed the manufacturer can provide a version of PPAdmin, with a unique encrypted ini file!

Example for encryption:

Example:

[LaserJet 42000 with ELP DIMM]

; The outgoing data stream for this queue will be encrypted

Encrypt=ON

; using this key

Encrypt_keys=4712 4712 4713 4714

Beispiel Ende

 

Tip: Shrink and "encrypt" the data stream even more using an stethos own developed data stream compression and decompression function.

Decryption:

Is pretty easy, just set the correct decryption key in the rule GLOBALof the convert.ini file.

[Global]

encrypt_keys=4712 4712 4713 4714

Secure your forms:

PPAdmin allowes optionally to even encrypt the form files. For example signature forms can be stored on an USB stick. The signature will then only be inserted, if the stick is attached to the PC. And even then, if someone takes the stock in an unattended situation, because of the encryption, it can`t be used by anybody else.

This is a 2 step process:

 

Generate the encrypted form:

Ensure that encryption is enabled in convert.ini:

[GLOBAL]

Encrypt=ON

Encrypt_keys=4712 4712 4713 4714

When importing the macro make sure you tick the encryption checkbox:

If you want to store the mac file on an USB stick, move it over below into the WELP_Forms directory named 1000.mac.

 

Finally setup the new rule/section for using the encrypted form.

Example:

[if a check needs to be signed]

; The outgoing data stream for this queue will be encrypted

Search_Windows_New=Your Check printing trigger (maybe bank name or account number)

; use if needed this key for form decryption

Encrypt_keys=4712 4712 4713 4714

; and if needed the form is on another media directory WELP_Forms

WKDIR=F:\WELP_Forms

; Put on each page the signature forms 1000

ELP_COMMAND=C1F1000;

Beispiel Ende