Image Forming Firmware Recovery After Whitelist Hash Mismatch
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Image forming apparatuses face operational halts when unauthorized programs or modified legitimate programs are detected due to hash value mismatches with the whitelist, leading to inefficiencies and potential security risks.
Innovation Solution
The apparatus includes a processor that rewrites unauthorized or modified programs with original programs stored in a read-only memory or external servers, ensuring continuous operation by maintaining a whitelist of unique information for each program and performing hash checks to validate program integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a whitelist type anti-malware function is used to control program execution based on hash value matching, then program security is improved, but operational continuity deteriorates when unauthorized or modified programs are detected
Solution Approach 1:
The patent applies preliminary action by pre-storing original programs in a read-only memory before they are modified or replaced. When a program is detected as unauthorized or modified, the system can immediately restore the original program from the read-only memory, preventing operational interruption and maintaining both security and continuity.
Solution Approach 2:
The read-only memory acts as an intermediary between the whitelist verification system and the program execution system. It stores authentic program copies that can be restored when violations are detected, serving as a mediator that enables recovery without requiring system shutdown or complete operational halt.
2Reliability
If the image forming apparatus stops processing upon detecting a program whose hash value does not match the whitelist, then security against unauthorized programs is improved, but system efficiency deteriorates
Solution Approach 1:
The patent converts the harmful effect of detecting unauthorized programs into a beneficial restoration process. Instead of simply stopping execution, the system uses the detection opportunity to trigger automatic restoration of the original program from read-only memory, thereby eliminating the harmful unauthorized program while maintaining system efficiency and continuity.
Solution Approach 2:
The system performs self-service by automatically restoring unauthorized or modified programs using the pre-stored original copies in the read-only memory. This self-correction mechanism eliminates the need for manual intervention or complete system shutdown, maintaining efficiency while ensuring security.
3Productivity
If the apparatus restores unauthorized programs with original programs from read-only memory, then operational continuity is improved, but device complexity increases
Solution Approach 1:
The patent applies copying by creating a copy of the original program and storing it in the read-only memory. This copy serves as a backup that can be restored when the program is compromised, enabling operational continuity without requiring complex real-time verification or reconstruction processes.
Solution Approach 2:
The original program is copied and stored in the read-only memory in advance before any potential compromise occurs. This preliminary action simplifies the restoration process during incidents, as the system only needs to read and restore the pre-stored copy rather than performing complex reconstruction or verification procedures.
Data Source
AI summary
An image forming apparatus can include a first memory configured to store at least one program. The image forming apparatus can include a second memory configured to store a whitelist comprising one or more listed programs and unique information for each listed program. The image forming apparatus can include a processor configured to, when the first program requesting to be executed is different than the unique information in the whitelist, rewrite the first program with an original program and restart the image forming apparatus.