Display Apparatus Controller Security for Remote Approval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In display apparatuses that can be remotely controlled, there is a risk of security deterioration due to the potential for unauthorized users to perform approval operations through remote interfaces, compromising the security of the system.
Innovation Solution
The display apparatus implements a controller that determines whether the remote control function is currently executed and, if not, executes an approval process to display an approval screen, allowing only the user near the apparatus to initiate other functions, thereby preventing unauthorized approval operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the display apparatus allows remote control through external terminals, then the ease of operation is improved, but the security is deteriorated due to potential unauthorized approval operations
Solution Approach 1:
The system proactively checks whether a remote control connection is active before allowing approval operations. When a remote connection is detected, the system preemptively prevents approval operations that could be exploited by unauthorized users, thereby counteracting potential security threats before they can occur.
Solution Approach 2:
The system introduces an intermediary check (remote connection status detection) between the user's approval operation and the system's response. This intermediary mechanism verifies the operational context and blocks potentially harmful operations while allowing legitimate ones, thus resolving the security concern without completely disabling remote functionality.
2Productivity
If the approval process is executed during remote control, then the productivity is improved by allowing remote users to initiate functions, but the security is deteriorated due to potential unauthorized operations
Solution Approach 1:
The system dynamically adjusts its behavior based on the current operational context. When remote control is active, the system changes from allowing approval operations to blocking them, thereby adapting to the potential security risk while maintaining functionality when remote control is not in use.
Solution Approach 2:
The system continuously monitors the remote control connection status and uses this feedback to determine whether to permit approval operations. This feedback mechanism ensures that the system responds appropriately to changing conditions, preventing unauthorized operations while maintaining productivity under normal circumstances.
3Ease of operation
If the system allows approval operations during remote control, then the ease of operation is improved for remote users, but the security is deteriorated as remote users can execute approval processes on behalf of local users
Solution Approach 1:
The system applies preliminary anti-action by detecting remote control connections and preemptively preventing approval operations during such connections. This proactive measure blocks potential unauthorized operations before they can occur, eliminating the harmful effect while preserving remote control functionality for non-sensitive operations.
Data Source
AI summary
A controller executes processes for a plurality of functions including a remote control function and an other function. The remote control function is a function of controlling an external terminal to display a remote control screen corresponding to an input interface and of performing a remote control of a display apparatus based on an instruction from the external terminal. The controller is configured to: in response to receiving a start request for an approval process, determine whether the remote control function is currently executed; and in response to determining that the remote control function is not currently executed, execute the approval process. The approval process is controlling a display to display an approval screen and permitting start of the other function in response to an approval operation received on the approval screen.