Networked Communication Device Security via Alert-Triggered Lockdown
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Devices such as printers and scanners lack the capability to install host-based IDS/IPS systems due to OS or memory limitations, compromising their security.
Innovation Solution
A communication device with a controller that receives alert information from a security monitoring device, executing security processes like shifting to a prohibition mode, deleting data, or encrypting data to enhance security without a host-based IDS/IPS.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a host-based IDS/IPS is installed in a device, then security detection and prevention capability is improved, but device complexity and resource requirements increase beyond what printers and scanners can provide
Solution Approach 1:
A security management device is introduced as an intermediary between the network and devices lacking security capabilities. This external security management device performs intrusion detection and prevention, while the communication device itself remains simple. The security management device monitors traffic and sends notifications to the communication device, enabling security functionality without embedding complex security systems in resource-constrained devices.
Solution Approach 2:
The security functionality is segmented from the communication device and placed in a separate security management device. This allows the communication device to maintain its simplicity while still benefiting from security capabilities provided by the dedicated security management system.
2Reliability
If security measures such as prohibition mode, data deletion, or encryption are implemented, then security against attacks is improved, but device functionality and data accessibility are restricted
Solution Approach 1:
The communication device dynamically changes its operational state based on received notifications. It can switch between normal operation mode and prohibition mode, adjust data access permissions, and modify communication behavior in response to security threats. This dynamic adaptability allows the device to maintain flexibility while implementing security measures.
Solution Approach 2:
The device changes operational parameters such as communication port states, data access permissions, and encryption settings based on security notifications. These parameter changes enable the device to respond to threats while maintaining the ability to return to normal operation when threats are resolved.
Data Source
AI summary
A communication device may comprise a controller, wherein the controller may be configured to: receive alert information from a security monitoring device different from the communication device, the alert information indicating that an attack on an intranet to which the communication device belongs was detected; and in a case where the alert information is received from the security monitoring device, execute a security process for increasing security of the communication device. The security process may include at least one of: a process of shifting an operation mode of the communication device from a normal mode to a prohibition mode, the normal mode allowing receipt through inbound communication, and the prohibition mode prohibiting the receipt through the inbound communication; a process of deleting data in a memory of the communication device; and a process of encrypting data in the memory of the communication device.