File Validation Logic for Secure External Storage Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Image processing apparatuses face security issues when transmitting multimedia files from an external storage apparatus to another device, as they may receive malicious writing commands that compromise their security.

Innovation Solution

The electronic apparatus includes a processor that communicates with external devices to receive file requests, filters files based on permitted extensions and validity checks, and selectively stores files, preventing unauthorized or malicious files from being written, thereby enhancing security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the image processing apparatus accepts writing commands from external apparatuses to support multimedia streaming functionality, then the adaptability and versatility of the apparatus is improved, but the security of the apparatus deteriorates due to potential malicious writing commands

Engineering Contradiction:

Improvemultimedia streaming functionalityVSAvoidsecurity risk from malicious writing commands

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by checking file extensions and validating file headers before accepting writing commands from external apparatuses. The processor examines the file extension against a permitted list and verifies the file header format matches the expected format for that extension, preventing malicious files from being written to the storage apparatus before they can cause harm.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary validation mechanism between the external apparatus and the storage apparatus. The processor acts as an intermediary that mediates the writing operation by checking file extensions and validating file headers, allowing legitimate files to pass through while blocking malicious ones, thus resolving the security vulnerability without preventing legitimate multimedia streaming functionality.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If the apparatus performs comprehensive file validation including extension checking and header analysis, then the security against malicious files is improved, but the processing time and complexity increases

Engineering Contradiction:

Improvesecurity against malicious filesVSAvoidprocessing complexity for file validation

Core Design Contradiction:

Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent segments the file validation process into two distinct stages: first checking the file extension against a permitted list, and then validating the file header format. This segmentation allows the system to quickly reject obviously invalid files through extension checking, and only perform more complex header analysis on files with permitted extensions, reducing overall processing complexity while maintaining comprehensive security validation.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS11272263B2Electronic apparatus, control method of electronic apparatus, and recording medium

Publication Date: 2022.03.08 SAMSUNG ELECTRONICS CO LTD

AI summary

Provided is an electronic apparatus including: at least one communicator configured to communicate with a first external apparatus and a second external apparatus; and a processor configured to receive a request for writing a file on the second external apparatus from the first external apparatus, receive the file from the first external apparatus based on a filename format of the file, writing of which is permitted, and make the received file be selectively stored in the second external apparatus.