Communication Apparatus Security Level Decision Logic

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Communication apparatuses that allow data requests through multiple security levels, such as HTTP and HTTPS, do not adequately protect sensitive data, leading to potential security vulnerabilities when transmitting specific data that requires higher security.

Innovation Solution

A communication apparatus with a processor configured to receive data requests through different security levels, deciding whether a specific data request is made through a higher or lower security level and transmitting the specific data accordingly, using the higher security level for sensitive information while sending different data through the lower security level to prompt retransmission via the higher security level.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the Web server allows data requests through both HTTP and HTTPS communication, then the client has higher degree of freedom in processing, but the communication security of specific data may become unprotected

Engineering Contradiction:
Improveclient freedom in processingVSAvoidcommunication security of specific data
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent applies local quality by differentiating the response quality based on the security level of the incoming request. When a specific data request is received through HTTP (lower security), the server returns different data (such as a warning page or placeholder) instead of the actual sensitive data. When the same request comes through HTTPS (higher security), the server returns the specific data. This localized differentiation of response quality based on request security level resolves the contradiction by maintaining client freedom to use either protocol while protecting specific data transmission security.

Inventive Principle:
Principle #3Local quality

2Ease of operation

If the server transmits specific data through lower security level communication, then the ease of operation is improved, but the security of specific data is compromised

Engineering Contradiction:
Improvesimplicity of communicationVSAvoidunprotected transmission of sensitive information
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an intermediary mechanism (the decision portion and transmission portion working together) that mediates between the simple HTTP communication channel and the security requirement for specific data. The system intercepts requests through either protocol, evaluates the security level, and selectively routes specific data responses only through the secure HTTPS channel. This intermediary control layer maintains the ease of operation by accepting both protocols while preventing harmful unprotected transmission of sensitive information.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If the server provides different data for HTTP requests instead of specific data, then the security of specific data is improved, but the functionality is reduced

Engineering Contradiction:
Improvesecurity of specific dataVSAvoidfunctionality of communication system
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent applies dynamics by making the server's response behavior adaptive rather than static. The same server dynamically adjusts its response based on the security level of the incoming request protocol. For HTTP requests, it provides alternative data (warning pages, placeholders, or redirects); for HTTPS requests, it provides the specific data. This dynamic adaptation resolves the contradiction by maintaining security for specific data while preserving full functionality for secure communications and providing alternative functionality for insecure communications.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS9038190B2Communication apparatus that communicate in different security levels and computer-readable media for controlling such apparatus
Publication Date: 2015.05.19 BROTHER KOGYO KK
  • US9038190B2 patent drawing
  • US9038190B2 patent drawing
  • US9038190B2 patent drawing

AI summary

A communication apparatus may include a reception portion, a decision portion, and a transmission portion. The reception portion may receive a first data request transmitted through a first security level communication, and a second data request transmitted through a second security level communication, the second security level being more secure than the first security level. The decision portion may decide whether a specific data request is the first data request or the second data request. The transmission portion may transmit a specific data to an apparatus that is a transmission source of the specific data request if the specific data request is the second data request, and may transmit different data to the apparatus if the specific data request is the first data request. The different data contains display information for causing the apparatus to retransmit the specific data request through the second security level communication.