Workgroup Printers offer decryption feature.
Press Release Summary:
Available on Infoprint® 1120, 1125, 1130, 1140, 1145, 1226, 1332, 1352, and 1372 printers, decryption feature allows encrypted files to be sent over TCP/IP network to printer. Once there, files are decrypted within printer for maximum security, ensuring that files cannot be printed on wrong or unsecured printers. Feature uses Rijndael encryption algorithm and supports session keys. It is supported by various IBM drivers.
Original Press Release:
New Decryption Feature Adds Security to Your Workgroup Printers
Overview
Information security is a high priority for business these days. To meet this need, IBM is pleased to announce a decryption feature for most of its workgroup printers.
The decryption feature allows encrypted files to be sent over a TCP/IP network to the printer. There the files are decrypted within the printer, offering maximum security. This helps assure that an encrypted file cannot be printed on the wrong printer or an unsecured printer.
This feature uses the Rijndael encryption algorithm selected by the National Institute of Science and Technology as the Advanced Encryption Standard (AES). The AES is a symmetric algorithm supporting key lengths of 128, 192, and 256 bits for encryption.
The decryption feature is available on the IBM Infoprint® 1120, 1125, 1130, 1140, 1145, 1226, 1332, 1352, and 1372 printers.
Key Prerequisites
The Decryption Card requires an Infoprint 1120, 1125, 1130, 1140, 1145, 1226, 1332, 1352, or 1372 printer with a standard Ethernet connection (N or DN models). The Infoprint 1120 must have at least 32 MB of memory installed.
Planned Availability Dates
April 25, 2003
Infoprint 1372 feature - August 15, 2003
At a Glance
A Decryption Card for increased security when sending confidential files to the printer is now available for most of IBM's workgroup printers. Benefits include:
o This card performs decryption at the printer to minimize security exposure.
o It uses the highly secure Rijndael encryption algorithm, which makes it extremely difficult for eavesdroppers to decrypt intercepted messages.
o Encrypted files cannot be printed on an unsecured printer.
o With a unique key, print jobs cannot print on other printers even if they have a Decryption Card.
o Unencrypted print jobs will not be affected by the Decryption Card and will print normally.
For ordering, contact:
Your IBM representative, an IBM Business Partner, or the Americas Call Centers at M800-BM-CALL Reference: YE001
IBM United States
IBM is a registered trademark of International Business Machines Corporation.
Description
Encryption Overview
This feature offers an encryption solution for print output on hosts such as a mainframe, UNIX® server, MicrosoftTM Windows® PC, or Apple workstation that connect over a TCP/IP network to the IBM workgroup printer. The Decryption Card is installed in the printer and decryption takes place at the printer for maximum security.
This decryption solution is based on Federal Information Processing Standard (FIPS-197) for the Advanced Encryption Standard (AES). This standard specifies Rijndael as the encryption algorithm. AES is the new encryption standard that replaces DES, the old standard. AES is a symmetric algorithm supporting key lengths of 128, 192, and 256 bits for encryption. A symmetric algorithm uses a single key for both encryption and decryption. A key length of 256 bits provides 1.1 times 10 to the power of 77 possible combinations, which makes it extremely difficult for eavesdroppers to decrypt intercepted print jobs.
The decryption feature also supports session keys.
Session keys are used during a specific host session with the printer. The key is different for every session, providing maximum security. Most competitive decryption solutions don't support session keys.
Connectivity Requirements for Decryption Feature
The printer must be connected to an Ethernet network using TCP/IP. This feature works only on printer models with a standard Ethernet port. It will not work with any of the optional Ethernet print server features. The Decryption Card plugs into the firmware slot in the printer and is mutually exclusive with the application solution features such as IPDSTM, Bar Code, and ImageQuick. Other data streams such as PostScript, PCL, and PDF are supported by this feature.
Unique TCP/IP port numbers are used for encrypted print jobs. The Decryption Card decrypts and prints information appropriate for the port.
This feature is supported on the following IBM drivers:
o Sun Solaris 7, 8, 9
o HP-UX 11
o IBM AIX® 4.3, 5.0
o Linux (Red Hat, Caldera, SuSE, TurboLinux)
o Windows 98/Me/NT 4.0/2000/XP
o Mac OS X
Trademarks
IPDS is a trademark of International Business Machines Corporation in the United States or other countries or both. Infoprint and AIX are registered trademarks of International Business Machines Corporation in the United States or other countries or both. Microsoft is a trademark of Microsoft Corporation. Windows is a registered trademark of Microsoft Corporation. UNIX is a registered trademark of the Open Company in the United States and other countries. Other company, product, and service names may be trademarks or service marks of others.
