Print Accounting Debit Cards.ppt

Print Accounting Debit Cards Jeff Merriman Tom Fountain Ethan Rikleen History of Print Accounting Pre-history Little coin cups! Printers in hall offices History (cont.) Fall 1993 NeXTStation + NeXTPrinter in each cluster MacAuthenticator Spoolers link to account server for balance info Flat-file database with command-line data management RCCs handle money, manage student accounts Separate system/account for public clusters History (cont.) Fall 1995 HP smart printers + SUN spoolers Still MacAuthenticator HP 4Mplus with JetDirect cards SUN spoolers as trusted hosts Same balance database recompiled for SunOS RCCs still manage money and accounts History (cont.) Winter 1996 - Summer 1997: Partnership with Diebold (Griffin) to integrate with Stanford Card Plan Fall 1997 ResComp/Diebold system rolls out campus-wide ResComp and RCCs no longer handle money Public labs begin to adopt ResComp system Stanford Student Card Plan Vendor: Diebold (Griffin) Dining service accounting Library access Vending Machines Laundry Reverse ATMs allow cash deposits Stanford Student Card Plan Overview of DCE SUNet ID Single, flat name space Unique identifiers available to all students, 50% staff, and faculty or through “sponsorships” Kerberos 4 and 5 Authentication and Encryption S/Ident PC-Leland and Mac-Leland UNIX Printing Mac Printing Macintosh Authenticator LPR Printing Web Print Queue Looking Ahead Seamless authentication through S/Ident Kerberized MacAuthenticator Diebold: Off the shelf product? Security Requirements Printers Printers accept jobs only from known spoolers (IP restrictions, IP only, physical ports blocked) Printer control panel locked Printer configured via TFTP Servers Print server only accepts jobs from known hosts Lwsrv and LPR Spooler are “promiscuous” Required Components Kerberos Diebold Series V (modified) Print Accounting (Diebold interface) Macintosh: CAP with Lwsrv (modified) Web-based: Apache WWW (modified for S/Ident) Client applications for Mac authenti