Canon Creates Keyword-Based DRM For Copy Machines?
from the can't-copy-this dept
In an attempt by Canon to help plug the analog hole when it comes to physically copying documents, apparently its new scanner/copier machine has a feature, named Uniflow 5, which will use some optical character recognition (OCR) tech to stop you from copying/scanning anything with specific keywords:The latest version of Uniflow has a keyword-based security system. Once configured by an administrator, the system can prevent a user from attempting to print, scan, copy or fax a document containing a prohibited keyword, such as a client name or project codename.You can certainly see why some paranoid organizations might like this, but it seems like just another form of DRM which will likely only serve to piss off legitimate users.
The server will email the administrator a PDF copy of the document in question if a user attempts to do so.
The system can optionally inform the user by email that their attempt has been blocked, but without identifying the keyword in question, maintaining the security of the system.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: copy machine, drm
Companies: canon
Reader Comments
Subscribe: RSS
View by: Time | Thread
A scary thought
[ link to this | view in chronology ]
Re: A scary thought
[ link to this | view in chronology ]
Re: Re: A scary thought
... ah, the joy of unintended consequences.
[ link to this | view in chronology ]
unintended consequences
There are plenty of point-haired bosses out there who are going to think this is the greatest invention since sliced bread. The good news is that when they try to come up with words to block, they will mainly think of words that they use all the time, and so they will be most likely to inconvenience themselves.
[ link to this | view in chronology ]
I can see plenty of organizations liking this, but I can also see them turning the feature off because the boss' email account was flooded with PDFs.
[ link to this | view in chronology ]
I just love that part, it will send the documents that nobody should be copying to an administrator or someone posing as one that is priceless LoL
[ link to this | view in chronology ]
[ link to this | view in chronology ]
I think Mike makes keywords for copy machines based on DRM
[ link to this | view in chronology ]
Re: I think Mike makes keywords for copy machines based on DRM
[ link to this | view in chronology ]
Re: Re: I think Mike makes keywords for copy machines based on DRM
"ä½ æ˜¯ä¸€ä¸ªå‚»ç“œ"
[ link to this | view in chronology ]
Another Challange for the Innovative Hacker
Not only that, what about the administrative overhead of maintaining a list of authorized/prohibited words. The first group to get aggravated would probably be the lawyers photocopying their infringement letters and lawsuits.
[ link to this | view in chronology ]
Re: Another Challange for the Innovative Hacker
When I left the firm 4 years later I checked, and sure enough, no passwords or alternate ports on the webserver. Printers were under their radar.
Did I mention that this was a paranoid investment firm?
Now give someone the ability to automatically have PDF's sent to them when certain keywords (SSN, CC#) are present, and put it in the same environment. Unless these things have a hardware switch to turn this feature off, they are creating a Microsoft-style security hole which is guaranteed to allow massive breaches in corporate security.
[ link to this | view in chronology ]
no one ever heard of......
[ link to this | view in chronology ]
"What? my document didn't print...I wonder if it was the word 'requirement'
...[runs and prints out a document with just the word 'requirement']
...no, that printed. Maybe it was the reference to the 'flux capacitor' [runs and prints out paper with just the word 'flux capacitor']
No, that printed as well...
Ah! maybe it was..."
I love it when they try to make my work day more interesting.
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
One word foils this scheme
[ link to this | view in chronology ]
The "Legitimate user" aka the Boss is the person setting the controls. That is his right. This is NOT similar to DRM, because DRM is set by the manufacturer/distributor.
This is no different then the a homeowner adding an extra lock to his house. He can give away the keys, leave that lock unlocked, or keep the key for himself. The house or lock manufacturer is not restricting what keys or locks you can use.
Also, if you were not aware, copiers and printers already have "DRM" built in. Color printers actually print microscopic codes into all graphic documents, and will not print money.
[ link to this | view in chronology ]
Re:
I think the microscopic codes are mainly on laser printers. EFF has an article about this.
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
However, in most large firms, the copiers ARE the laserprinters, scanners, etc. These are the machines most likely to have this "DRM" technology installed, at the moment.
[ link to this | view in chronology ]
DRM?
From the linked article...
"the system can prevent a user from attempting to print, scan, copy or fax a document containing a prohibited keyword, such as a client name or project codename."
There are some environments, such as law firms or other highly regulated industries, where I think this would be quite handy. If you don't want some temp making a copy of a document with your client's name on it because this is against your company policy, then buy this printer. It makes sense to me.
To qualify as DRM, the copier would have to somehow prevent any copyrighted material from being copied. This just isn't practical given the way this copier works. (What, you'd have a monster list of every trademarked phrase in the world or copyrighted passages?) I'm no fan of DRM, but I don't think this qualifies as DRM.
[ link to this | view in chronology ]
Re: DRM?
[ link to this | view in chronology ]
Re: Re: DRM?
In that case, it would be DRM. But that's not what this copier does, so I believe it's innacurate to label it as DRM.
[ link to this | view in chronology ]
Re: Re: DRM?
Then it would be just like what already exists for currency. Just google for "EURion Constellation" or "Adobe Counterfeit Detection System"
[ link to this | view in chronology ]
Re: Re: DRM?
[ link to this | view in chronology ]
Re: Re: Re: DRM?
Agreed. However this doesn't relate to whether the Canon copier referenced in the linked article implements DRM. It doesn't. It's a simple keyword match. To implement a true DRM system in a copy machine, even one that was connected to the Internet, would be very cost-ineffective, even compared to other forms of DRM.
[ link to this | view in chronology ]
Re: DRM?
Because it's Digitial, and it Manages Restrictions?
[ link to this | view in chronology ]
Re: Re: DRM?
DRM = Digital Rights Management. Canon isn't saying that its printer can be configured to detect a document which contains material to which a third-party has a copyright or any other IP right. They're simply saying that it can detect a specified keyword.
[ link to this | view in chronology ]
Take a hi-res picture of the document? Or you could use a high-res handheld scanner. Not sure what this going to accomplish.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
¿siɥʇ uɐɔs noʎ uɐɔ
Seriously, I thought this was dumb until I got to this part:
A determined user who has guessed the prohibited keyword could get around it by simply substituting numbers or other characters for letters, such as z00 instead of zoo, representatives for Canon conceded.
Whoa! It can distinguish 0 from o and O? In any font, presumably by context? Never mind the printer, I want that OCR technology!
[ link to this | view in chronology ]
Re: ¿siɥʇ uɐɔs noʎ uɐɔ
[ link to this | view in chronology ]
This is really bad for getting work done.
[ link to this | view in chronology ]
Re: This is really bad for getting work done.
Well, first off, there's nothing saying that a person would be "in trouble". Contrary to Mike's post, this technology is not DRM, so it's not illegal to copy a document with a specified keyword. It'd be up to the company how to handle attempts to copy keywords. Secondly, the point of is that if you have a sensitive list of keywords that you don't want copied, you wouldn't want to broadcast that list to all employees because you'd be defeating the purpose of having the information be controlled in the first place. For example, if you're running a legal office, you don't want the public copier in front of the conference room to be used to copy documents with any of your client names on it. You don't want to send out an e-mail to every person in the company, down to the interns, with your client list. Now, that would be a "bit silly".
[ link to this | view in chronology ]
DRM?
This kind of system is already in use in some high security installations, generally by marking secure documents with a distinctive symbol that document management systems recognize. Photocopyers, particularly modern units that fax and scan to email, are a big way that secrets can make it out of a corporation accidentally. This technology isn't supposed to stop anyone that's intentionally trying to sneak documents out, it's to stop the real user that makes a mistake (doesn't realize a document is sensitive, takes the wrong paper to send, hits the wrong button on the machine...). It's just a simple system to make users with a document that is potentially sensitive stop and think before emailing it to the bank/aunt ellis/nigerians. When this sort of system is implemented it requires oversight to work effectively, because there will be many false positives. It's just the cost of the added security. No doubt the PDFs sent to a monitor will be used more often to make it easier to put through an authorized false positive (email the PDF instead of having to scan the doc again) than to find someone to punish.
[ link to this | view in chronology ]
Sounds a bit like the 'eurion' on currency
"The EURion constellation is a pattern of symbols found on a number of banknote designs worldwide since about 1996. It is added to help software detect the presence of a banknote in a digital image. Such software can then block the user from reproducing banknotes to prevent counterfeiting using colour photocopiers."
[ link to this | view in chronology ]
Man, this opens up yet another path for spamming people (even if it just inside the same company) :p
[ link to this | view in chronology ]
Nevermind paranoid organizations...
How about paranoid governments?
[ link to this | view in chronology ]
Can you imagine going to jail because your copy machine rat you out :)
[ link to this | view in chronology ]
But will that OCR work...
[ link to this | view in chronology ]
Re: But will that OCR work...
[ link to this | view in chronology ]
law firms are going to love this
If anyone suspends a legitimate activity, they are going to have a hell of a time copying a memo instructing people to RESUME it, should the company block RESUME in order to limit job seekers from using the copy technology.
I've actually had email rejected from a corporate server for using "resume" (first meaning above) in an email to an employee inside the firm.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Haters gonna hate, get their knickers in a twist.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Where does it stop?
[ link to this | view in chronology ]
Canon and keywords
Why wouldn't the pissed-off user blame the company that entered the keywords, rather than Canon, who only enabled the feature?
[ link to this | view in chronology ]
Useful OCR tool
[ link to this | view in chronology ]
[ link to this | view in chronology ]
[ link to this | view in chronology ]