Application Installation Encryption Priority
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for protecting internal information and preventing unauthorized use of applications on process execution apparatuses, such as image forming and information processing devices, require updating both encryption and decryption applications when changing encryption algorithms, leading to complex reconfiguration and firmware updates, especially when firmware versions change post-market.
Innovation Solution
A method that uses an application file and license file with encryption data encrypted using different algorithms, allowing for decryption based on priority levels, enabling installation of executable files in process execution apparatuses without the need for individual updates or storage media for each encryption algorithm, and allowing users to select encryption algorithms for efficient installation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption algorithm is changed, then security is improved, but system complexity increases due to need to update both encrypted application and decryption application
Solution Approach 1:
The patent segments the encryption system into multiple independent encryption algorithms (first algorithm and second algorithm) that can be selectively applied to different application files. This allows the system to use multiple encryption methods without requiring complete reconfiguration, as each algorithm operates independently with its own key management.
Solution Approach 2:
The decryption application is designed with multi-functionality to handle both first-encrypted and second-encrypted application files. By incorporating multiple decryption functions within a single decryption application, the system can process applications encrypted with different algorithms without requiring separate decryption applications for each algorithm.
2Reliability
If encryption algorithm is updated, then security is improved, but time consumption increases due to need to reconfigure all system components
Solution Approach 1:
The patent applies preliminary action by pre-encrypting application files with different encryption algorithms before distribution. Application files are prepared in advance with either first-encryption or second-encryption applied, and the corresponding decryption application is pre-configured with multiple decryption functions. This eliminates the need for time-consuming reconfiguration when updating encryption algorithms, as the system is already prepared to handle multiple encryption types.
3Adaptability or versatility
If multiple encryption algorithms are supported, then adaptability is improved, but device complexity increases due to need for multiple decryption applications
Solution Approach 1:
The patent merges multiple decryption functions into a single decryption application. The decryption application contains integrated capabilities to decrypt both first-encrypted and second-encrypted application files, eliminating the need for separate decryption applications for each encryption algorithm. This consolidation reduces system complexity while maintaining support for multiple encryption algorithms.
4Ease of operation
If automatic determination of application to be distributed is implemented, then ease of operation is improved, but reliability decreases when firmware version changes after market entry
Solution Approach 1:
The patent uses parameter changes by embedding encryption algorithm identification information within the application file itself. The decryption application automatically detects the encryption algorithm type (first or second algorithm) based on parameters in the application file and selects the appropriate decryption function accordingly. This parameter-based identification ensures reliable operation regardless of firmware version changes, as the decryption selection is based on application-specific parameters rather than firmware version matching.
Data Source
AI summary
An application installing method according to the present invention in which an application file includes at least two application encrypting data in which the executable files are respectively encrypted using different encryption algorithms, and a license file includes at least two license encryption data in which application decryption keys for decrypting the application encryption data are encrypted using respectively different encryption algorithms. The process execution apparatus includes a calculation unit configured to execute the executable file, and a storage unit configured to store the application file and the license file. The method includes a step of decrypting the application encryption data by use of the application decryption key with the calculation unit based on the level of priority of the predesignated application encryption data stored in the storage unit, and installing the executable file corresponding to the application encryption data.