Command Execution Determination for Information Processing Apparatus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional information processing apparatuses lack a comprehensive method to determine command execution rights, leading to inadequate security protection and inefficient user restriction operations, which can result in unauthorized access to resources.
Innovation Solution
An information processing apparatus with a memory storing command execution right information and a command determination unit that differentiates between user and system commands, determining executable commands based on stored rights, thereby enhancing security and reducing administrative workload.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional security protection settings are used to restrict user commands, then basic command execution control is achieved, but system commands invoked by user commands cannot be properly restricted leading to security vulnerabilities
Solution Approach 1:
The command execution determination is segmented into multiple stages: first determining if the entered command is a target of determination (distinguishing between user commands and system commands), then checking command execution rights only for relevant commands. This segmentation allows precise security control without requiring complex comprehensive checks of all commands.
Solution Approach 2:
The system performs preliminary determination of whether an entered command is a target of command execution determination before executing security checks. By identifying and filtering out system commands that are not targets of determination in advance, the system avoids unnecessary security verification steps and reduces overall complexity.
2Reliability
If comprehensive command execution determination is implemented for all commands, then security is improved, but administrative workload and processing time increase significantly
Solution Approach 1:
The system applies command execution determination selectively rather than comprehensively to all commands. By performing determination only for user commands and specific system commands that are targets of determination, the system achieves adequate security protection with reduced processing overhead compared to checking every command.
Solution Approach 2:
The command execution determination process is divided into distinct steps: first identifying if the command is a target of determination, then checking execution rights only for those commands. This segmented approach eliminates unnecessary security checks on system commands that don't require determination, reducing overall processing time.
3Ease of operation
If security protection is applied to all commands uniformly, then consistent security policy is maintained, but flexibility in managing different command types is reduced
Solution Approach 1:
Different security determination approaches are applied to different command types: user commands undergo full command execution determination, while system commands are selectively determined based on whether they are targets of determination. This local differentiation simplifies management by allowing administrators to focus only on specific commands that require security control.
Solution Approach 2:
The security determination system dynamically adapts its behavior based on the command type. The command determination unit automatically adjusts the determination process depending on whether the entered command is a user command or system command, providing flexible management without requiring complex static configuration for all command types.
Data Source
AI summary
An information processing apparatus includes a memory that stores command execution right information including execution right information indicating whether a command is executable, and a command determination unit that determines whether an entered command is a target of a command execution determination where it is determined that whether a command is executable based on whether the entered command is invoked by a user command or a system command, and determines whether the entered command is executable with reference to the command execution right information stored in the memory when the entered command is determined as the target of the command execution determination.