Access Restriction Management for Fast Secure Device Onboarding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems require extensive evaluation work before connecting a new apparatus, delaying its use in a system with defined information management policies, which is inefficient for quick integration.
Innovation Solution
An information processing apparatus and method that registers more restrictive access policies for new devices, enabling immediate connection while ensuring system safety through token-based authentication and dynamic restriction management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If evaluation work is performed before connecting a new apparatus to ensure system safety, then system security is improved, but connection time is delayed
Solution Approach 1:
The system performs preliminary actions by pre-defining management policies and restriction information before actual connection occurs. When a new apparatus requests connection, the system already has prepared restriction templates that can be immediately applied, eliminating the need for real-time evaluation work while maintaining security standards.
Solution Approach 2:
The system changes the parameter of security verification from manual evaluation work to automated policy matching. By transforming security checks into parameter-based restriction information that can be rapidly applied, the system maintains high security standards while dramatically reducing connection time.
2Reliability
If manual evaluation work is conducted to confirm apparatus safety, then information management policy compliance is improved, but integration speed is reduced
Solution Approach 1:
The new apparatus performs self-service by automatically presenting its identification information and connection request to the management server. The system automatically matches the apparatus against predefined management policies and applies appropriate restrictions, eliminating manual evaluation work while ensuring policy compliance through automated decision-making.
Solution Approach 2:
The system implements feedback mechanisms where the management server automatically evaluates connection requests against stored management policies and returns appropriate authorization decisions. This automated feedback loop ensures policy compliance is maintained while integration speed is accelerated through rapid automated processing.
3Reliability
If restriction information with more restrictions is registered for unconnected apparatus, then system safety is improved, but ease of connection is reduced
Solution Approach 1:
The system applies dynamics by making restriction information adjustable and context-dependent. Rather than applying maximum restrictions uniformly, the system dynamically selects appropriate restriction levels based on the specific apparatus characteristics and connection requirements, balancing safety with connection ease.
Solution Approach 2:
The system implements local quality by applying different restriction levels to different apparatus based on their specific characteristics and risk profiles. Each apparatus receives customized restriction information tailored to its nature and requirements, rather than a one-size-fits-all approach, making connection easier for trusted devices while maintaining safety for unverified ones.
Data Source
AI summary
An information processing apparatus includes a processor configured to: register, in a system in which a management policy for managing a safety of information is defined, as the management policy of an apparatus that is not connected to the system, restriction information indicating more restrictions than restriction imposed on an information resource of which the safety with respect to the system is guaranteed in a case where a connection request to the system is received from the apparatus; and enable a connection from the apparatus to the information resource connected to the system within a scope of the restriction indicated by the registered restriction information.