Implementing a policy controlling data output/printing using identifier based encryption

摘要

Data to be output to a removable storage medium, (paper, disk) is encrypted for sending to an output device, (printer, disk drive) (30) by an encryption process (IBE) based on encryption parameters comprising public data public key of a trusted party (60) and an encryption key string comprising a policy for allowing the output of the data. The trusted party (60) provides a decryption key to the output device (30) but only after being satisfied that the policy has been met. The decryption key is generated in dependence on the encryption key string and private data private key of the trusted party (60). The output device (30) uses the decryption key in decrypting the data to be output. Embodiments are provided that involve multiple policies and trusted parties. The system may use identifier based encryption (IBE).