Command Permission Control for MFP Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing systems, such as multifunction peripherals (MFPs), lack the capability to prevent the execution of unpermitted commands, which can lead to unauthorized software installations or malicious actions when users interact with web pages or application interfaces.
Innovation Solution
An information processing apparatus is designed with an acquisition unit to retrieve screens from servers, a storage unit to store permitted command information, and a permission control unit that ensures only permitted commands are executed by comparing the command information with stored schemes, preventing unauthorized command execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If command execution is permitted without verification, then ease of operation is improved, but security and reliability deteriorate
Solution Approach 1:
The system performs preliminary verification of command permissions before execution by comparing the command information against stored permission data in the storage unit. This preliminary check prevents unauthorized commands from being executed, thereby maintaining security while allowing legitimate commands to proceed without interruption.
Solution Approach 2:
The permission control unit acts as an intermediary between the command execution unit and the storage unit. It verifies whether the command information matches permitted commands stored in the storage unit before allowing execution, thus mediating between operational convenience and security requirements.
2Reliability
If permission verification is performed for all commands, then security is improved, but device complexity increases
Solution Approach 1:
The system segments the command processing function into distinct components: the acquisition unit that obtains command information, the permission control unit that verifies permissions, and the command execution unit that executes permitted commands. This segmentation allows for focused security verification without overwhelming system complexity.
Solution Approach 2:
The permission control unit autonomously verifies command permissions by comparing command information against the storage unit containing permitted command data. This self-service mechanism eliminates the need for external verification systems, maintaining security while minimizing added complexity.
Data Source
AI summary
An information processing apparatus is connectable to a server via a network, and includes an acquisition unit, a first display control unit, a storage unit, and a permission control unit. The acquisition unit acquires a first screen including an execution procedure of a first command from the server. The first display control unit performs control to display the first screen acquired by the acquisition unit. The storage unit stores therein one or more pieces of command information indicating information on a command permitted to be executed. The permission control unit does not permit execution of the first command when the one or more pieces of command information stored in the storage unit include no command information corresponding to the execution procedure of the first command selected from the first screen.