Communication Device Port Segmentation for Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Information processing devices face challenges in enhancing security when receiving illegitimate request signals, particularly from ports not associated with stored application programs, which can lead to unauthorized access and attacks.

Innovation Solution

A communication device configuration that does not store application programs for certain communication ports, enabling a security process to be executed upon receiving request signals for those ports, thereby enhancing security by treating such signals as potentially illegitimate and triggering security measures.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If application programs are stored for all communication ports, then the device can handle requests from any port, but the security risk increases due to potential illegitimate access

Engineering Contradiction:

Improveport compatibilityVSAvoidsecurity risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The communication ports are segmented into two categories: ports with stored application programs (first communication ports) and ports without stored application programs (second communication ports). This segmentation allows the device to handle legitimate requests through stored programs while triggering security processes for potentially illegitimate requests, thus resolving the contradiction between adaptability and security risk.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A security process acts as an intermediary between receiving requests on ports without stored application programs and executing potentially harmful operations. This intermediary security process verifies the legitimacy of requests before allowing access, thereby maintaining security while preserving port versatility.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If security processes are executed for all port requests, then security is enhanced, but the device complexity and processing overhead increase

Engineering Contradiction:

ImprovesecurityVSAvoidprocessing complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Instead of executing security processes for all port requests, the system applies security processes only partially - specifically for requests received on ports without stored application programs. This partial application of security measures enhances security where needed while avoiding unnecessary processing complexity for legitimate requests on ports with stored programs.

Inventive Principle:

Principle #16Partial or excessive action

3Reliability

If application programs are not stored for certain ports, then security is improved by detecting illegitimate requests, but the device functionality is reduced

Engineering Contradiction:

Improvesecurity detectionVSAvoidport functionality

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The absence of application programs on certain ports, which initially appears to be a functional limitation, is converted into a security benefit. Requests to these ports are assumed to be potentially illegitimate and trigger security processes, thereby using the functional restriction to enhance security detection capabilities.

Inventive Principle:

Principle #22Blessing in disguise (Convert harm into benefit)

Data Source

PatentUS20240015138A1Communication device and non-transitory computer-readable recording medium storing computer readable instructions for communication device

Publication Date: 2024.01.11 BROTHER KOGYO KK

AI summary

A communication device may include a memory configured to store a first application program corresponding to a first communication port and not to store a second application program corresponding to a second communication port, and a controller. The controller may be configured to: in a case where a first request signal for the first communication port is received in a state where the first communication port is enabled, execute a process according to the first request signal by the first application program; and in a case where a second request signal for the second communication port is received in a state where the second communication port is enabled, execute a security process related to security of the communication device.