Technical white paper
HP Partner Link
Pay-per-use Portal
Security and privacy white paper
Table of contents
1
About this white paper
White paper summary
What is the HP Partner Link Pay-per-use Portal?
The HP Partner Link Pay-per-use Portal—a secure application
What information is being captured?
How is information captured?
How is information transferred?
How is information stored?
How can you access the information?
Appendix A—Printer data captured by the HP Partner Link
2
2
3
3
3
4
4
5
5
6
Technical white paper | HP Partner Link Pay-p er-use Portal securi ty and priv acy
About this white paper
This white paper describes how the HP Partner Link Pay-per-use Portal collects, sends, and stores data and describes
the measures in place to protect your privacy and IT security.
This content is intended for resellers, IT managers, users, or anyone involved in the decision to use the HP Partner
Link Pay-per-use Portal.
White paper summary
What information is sent?
The HP Partner Link Pay-per-use Portal sends information related to the printer conguration, printer status, usage
and errors data, and information about print jobs. The printer does not send actual job content nor user information
and only performs outgoing connections.
How is the information sent and what measures are in place to send it securely?
There are two data collection workows available and both are equally secure. One of the workows uses the
HP Partner Link Data Collector software and the other uses HP direct connection rmware.
between these workows:
• The Data Collector centralizes all the data from all printers in a given local network and sends it to the HP Partner
Link Web Service, while the direct connection is used by each printer to send the information
• In addition, the direct connection enables a new generation of service alerts
2
There are two dierences
The information is sent using HTTPS (Hyper Text Transfer Protocol Secure) over Port 443 and the communication is
encrypted using 128-bit Advanced Encryption Standard (AES) Cipher Algorithm in Cipher Block Changing (CBC) mode.
These measures help ensure that the data cannot be viewed or modied by external applications.
When is the information sent?
The Data Collector workow sends information every three hours. In the case of the direct connection workow, the
information is sent every three hours, 19 jobs, 100 pages, or whichever happens rst. High severity alerts are sent as
soon as detected, while device booting happens.
Where is the information stored and which measures are in place to store it securely?
The information is stored in dedicated HP Partner Link Pay-per-use servers, which are encrypted using SSL/TLS
(Secure Sockets Layer/Transport Layer Security) with strong encryption algorithms, to help prevent the data from
being viewed or modied by an external application.
Both the application itself and the underlying service infrastructure strictly meet HP security standards, and the
system is periodically audited.
How much traic will this imply for my network?
Since the data is compressed, the size of the information that is sent is minimal. The frequency is also low. In most
cases, the amount of bandwidth used is less than 0.01% of the total bandwidth provided by a 5 Mbits/sec data
connection.
Which port and IP address does this application use?
The information is sent over Port 443 and the printer will connect to dierent server instances that meet strict
security standards. Consequently, the IP addresses to which the printer connects can change dynamically.
2
Technical white paper | HP Partner Link Pay-p er-use Portal securi ty and priv acy
What is the HP Partner Link Pay-per-use Portal?
The HP Partner Link Pay-per-use Portal is a software system that supports HP PageWide XL and HP DesignJet printer
reseller in selling printers contractually. With the HP Partner Link Pay-per-use Portal, resellers can:
• Access accurate printer usage information that enables them to charge their customers contractually according to
the specic agreed upon terms and conditions
• Get information to support the printer(s) operation, enabling an enhanced service oering
Thus, the core functionality of the solution is providing resellers access to detailed printer usage and support
information.
The solution has three major components:
• The HP Partner Link Data Collector software is installed in a PC in the customer’s Local Area Network (LAN); the
Data Collector captures the usage data from the dierent printers participating in the contract(s) managed by the
reseller in a particular customer location, and transfers the data to the HP Partner Link Pay-per-use (PPU) Portal
• The HP direct connection rmware
this data to its corresponding account in the HP Partner Link Pay-per-use Portal; when a printer uses the direct
connection, it is not necessary for the printer to be connected to a Data Collector
• The HP Partner Link Pay-per-use Portal is a web application that stores the usage data captured by the Data
Collector Agent and by the HP direct connection rmware, and provides a user interface for the reseller to consult
and export the relevant printer usage data needed to charge the customer according to the specic contract terms
2
periodically collects the printer usage data of a given customer and transfers
Both the HP Partner Link Data Collector and the HP Partner Link Pay-per-use Portal are built on the exible and
highly safeguarded.NET platform that oers excellent performance and scalability.
The HP Partner Link Pay-per-use Portal—a secure application
The HP Partner Link Pay-per-use Portal provides a number of security features including:
• Job content is not sent to the cloud—only information related to the printer conguration, settings, and usage is
sent in order to track how much is printed
• The HP Partner Link Pay-per-use Portal application only performs outgoing connections
• The data is sent using Port 443 and is also encrypted using 128-bit Advanced Encryption Standard (AES) Cipher
Algorithm in Cipher Block Chaining (CBC) mode; the data is stored in a dedicated server using SSL/TLS (Secure
Sockets Layer/Transport Layer Security) with strong encryption algorithms, to help ensure the data cannot be
viewed or modied by any third-party application
What information is being captured?
The HP Partner Link Data Collector collects:
• Printer conguration information, such as printer model and rmware version
• Printer status of operation information, such as status of consumables
• Printer lifetime usage information, such as the total amount of ink and paper used
• Print (and scan and copy, in the case of MFPs) job metadata, such as the job name, type of job, print quality,
media printed, and ink used (note that print or scan job contents are never captured, and consequently jobs cannot
be replicated based on the captured data)
The detailed list of data captured is described in Appendix A.
3