Dynamic Communication Filter for Wireless Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing apparatuses face challenges in securely managing network settings and controlling communications during direct wireless communication, particularly in balancing user access for mobile printing and network administrator settings, while ensuring security and preventing unintended changes to network settings.
Innovation Solution
The apparatus employs different communication filters based on operation modes, allowing for controlled data transmission and reception through a software access point, enabling secure network settings management and appropriate communication control between the information processing apparatus and communication terminal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single communication filter is used for direct wireless communication, then the device complexity is reduced, but the security and adaptability for different operation modes deteriorate
Solution Approach 1:
The patent implements dynamic communication filters that automatically switch between different filter configurations based on the operation mode. The system transitions from a static single-filter approach to a dynamic multi-filter system that adapts its security parameters according to whether the apparatus is in mobile printing mode or network setting mode, thereby maintaining security without increasing operational complexity for the user.
Solution Approach 2:
The patent changes the parameters of the communication filter based on operation mode. Different port filters are applied: one set of permitted ports for mobile printing mode and another set for network setting mode. This parameter change allows the system to maintain appropriate security levels for each function without requiring the user to manually configure complex filter settings.
2Reliability
If different communication filters are used for different operation modes, then the security and adaptability are improved, but the device complexity increases
Solution Approach 1:
The system provides self-service by automatically selecting and applying the appropriate communication filter based on the current operation mode. The apparatus itself manages the complexity of multiple filters by implementing automatic mode-detecting logic that selects the correct filter configuration without user intervention, thereby maintaining security while avoiding the burden of manual configuration on the user.
Solution Approach 2:
The communication filter system is designed with multi-functionality to handle both mobile printing and network setting operations. A single unified filter management mechanism serves multiple functions by switching between different filter configurations, eliminating the need for separate filter management systems for each operation mode and thereby reducing overall system complexity.
3Ease of operation
If network settings can be changed freely during direct wireless communication, then the ease of operation is improved, but the security and stability deteriorate
Solution Approach 1:
The patent applies preliminary anti-action by pre-configuring restricted port filters for network setting mode that prevent unauthorized or unintended changes to critical network parameters. Before allowing any network setting modifications, the system establishes security constraints through the communication filter that block potentially harmful operations, thereby maintaining stability while permitting legitimate configuration changes.
Solution Approach 2:
The patent applies local quality by selectively permitting or restricting specific network setting modifications based on the type of setting being changed. Rather than uniformly allowing or blocking all network changes, the communication filter applies granular control to different network parameters, permitting safe modifications while preventing changes that would compromise system stability or security.
4Reliability
If port filters restrict communication to permitted ports only, then the security is improved, but the adaptability for various communication services deteriorates
Solution Approach 1:
The patent implements dynamic port filtering where the set of permitted ports changes based on the operation mode. In mobile printing mode, ports necessary for printing services are permitted, while in network setting mode, ports required for network configuration services are permitted. This dynamic adaptation allows the system to maintain strict security through port filtering while supporting diverse communication services appropriate to each mode.
Solution Approach 2:
The communication filter system is designed with multi-functionality to support both mobile printing and network setting services through a single unified filtering mechanism. By switching between different port filter configurations, the same filter system serves multiple communication service functions, thereby maintaining security while achieving versatility without requiring separate filtering systems for each service.
Data Source
AI summary
An information processing apparatus that performs a direct wireless communication with a communication terminal includes a wireless LAN interface, a memory device that stores set of instructions, and at least one processor that executes the instructions of controlling the wireless LAN interface to activate an access point to be used in the direct wireless communication, and controlling, upon condition that the information processing apparatus operates in a first mode where an instruction for a predetermined setting change of the information processing apparatus is waited for from the communication terminal by using the direct wireless communication, transmission and reception of data via the access point by using a first communication filter, and controlling, upon condition that the information processing apparatus operates in a second mode which is different from the first mode, the transmission and the reception of the data via the access point by using a second communication filter.