Authority Information Copying Control via Segmented Management

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing information processing systems face challenges in controlling and managing the copying of authority information, which can lead to unauthorized use and misuse of hardware resources, as there is currently no effective mechanism to restrict the spread of copied authority information.

Innovation Solution

An information processing apparatus that includes a service processor unit capable of determining and managing the copying authority of activation keys by transmitting and deleting associated management information, ensuring that only authorized copies are made and used, thereby controlling the spread of authority information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If authority information is made copyable for flexibility, then adaptability is improved, but security deteriorates due to unauthorized copying

Engineering Contradiction:

Improvecopying authority informationVSAvoidsecurity of authority information

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The authority information is segmented into two distinct parts: activation keys that enable hardware operation and management information that controls copying permissions. This segmentation allows the system to separate the functional authority from the control authority, enabling flexible copying when permitted while maintaining security through the management information restrictions.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Management information acts as an intermediary between the authority information and the copying process. It serves as a mediator that determines whether copying is permitted, controlling the flow of authority information copies and preventing unauthorized propagation while allowing legitimate copying operations.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If authority information is transmitted to multiple destinations, then versatility is improved, but control over the information deteriorates

Engineering Contradiction:

Improvetransmission of authority informationVSAvoidcontrol of authority information

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The system implements feedback mechanisms where management information is transmitted alongside authority information to track and control its propagation. This feedback loop allows the originating system to maintain awareness of where authority information has been copied and to enforce copying restrictions, thereby maintaining control even as versatility of transmission increases.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

Management information is prepared and attached to authority information before transmission occurs. This preliminary action embeds control mechanisms in advance, allowing the system to pre-establish copying rules and restrictions before the actual transmission and copying process takes place, thereby maintaining control over multi-destination transmission.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If copying restrictions are enforced, then security is improved, but adaptability deteriorates due to limited copying capability

Engineering Contradiction:

Improvesecurity through copying controlVSAvoidcopying capability

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The copying capability is made dynamic through management information that can specify different copying conditions and restrictions. Rather than a static all-or-nothing copying approach, the system dynamically adjusts copying permissions based on the management information attached to each authority information set, allowing flexible adaptation to different security requirements while maintaining usable copying capability.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS10423765B2Apparatus and system for managing authority information to permit operation of hardware resource

Publication Date: 2019.09.24 FUJITSU LTD

AI summary

An information processing apparatus includes a memory and a processor. The memory is configured to store first authority information, the first authority information including information for specifying a hardware resource, the first authority information being used for determining whether or not to permit operation of the hardware resource. The processor is coupled to the memory. The processor is configured to perform accepting a request for transmitting the first authority information to a destination apparatus, determining, in response to the request, whether second authority information is set or not, the second authority information being used for making a copy feasibility determination of the first authority information, transmitting the first authority information to the destination apparatus together with the second authority information when the second authority information is set and deleting the second authority information set in the transmitted first authority information.