Firmware Update Mechanism for Image Forming Apparatus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for updating firmware in digital multifunction machines face challenges in reducing downtime during the process, especially when differential updates are performed, as they require handling and encryption of multiple package files, which can increase updating time and risk tampering if not managed properly.
Innovation Solution
The solution involves an image forming apparatus and control method that accepts update instructions for both encrypted and combined firmware files, allowing for differential updates by downloading and decrypting only necessary files, while also enabling full encryption for security, thereby reducing device downtime and ensuring secure updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If firmware is divided into multiple package files for differential update, then updating time is reduced, but security against tampering deteriorates
Solution Approach 1:
The firmware is segmented into multiple package files (first package file, second package file, etc.) allowing differential updates where only changed portions are downloaded and installed. This segmentation enables reduced update time while maintaining security through individual encryption of each package file and verification of the content list file that tracks their combinations.
Solution Approach 2:
A content list file is introduced as an intermediary that stores information about the combination of package files. This mediator enables the system to verify firmware integrity by checking whether the downloaded packages match the expected combination, thereby maintaining security while allowing segmented differential updates.
2Reliability
If entire firmware is encrypted for security, then firmware integrity is protected, but differential update capability is lost
Solution Approach 1:
Instead of encrypting the entire firmware as a single unit, the encryption is applied segmentally to individual package files. This allows the system to maintain security through encryption while preserving the ability to perform differential updates by selectively downloading and installing only the encrypted package files that contain changes.
Solution Approach 2:
The encryption approach transitions from a static all-or-nothing model to a dynamic selective model where specific package files are encrypted and updated based on actual changes. This dynamic approach enables differential updates while maintaining security, as the encryption adapts to the specific update needs rather than requiring full firmware encryption.
3Productivity
If firmware is delivered in package units for differential update, then updating efficiency is improved, but risk of tampering with package combination information increases
Solution Approach 1:
The content list file serves as an intermediary that securely manages package combination information. It stores and verifies the relationships between package files, enabling efficient differential updates while protecting against tampering through cryptographic verification of the content list file itself, thus mediating between update efficiency and security concerns.
Solution Approach 2:
The system implements feedback mechanisms where the content list file is downloaded and verified to confirm the integrity of package combinations before updates are applied. This feedback loop ensures that any tampering with package combination information is detected, allowing efficient differential updates to proceed only when integrity is confirmed.
Data Source
AI summary
An image forming apparatus having a firmware update technology that realizes updating of firmware using an encrypted file and reduces a downtime using a differential update. When a first update instruction to perform an update using a first firmware including an encrypted plurality of files is accepted, a content list file is downloaded from an external apparatus, an update file to be updated is identified based on the content list file, and the identified update file is further downloaded from the external apparatus. Then, the update file is decrypted and installed in the image forming apparatus. When a second update instruction to perform an update using a second firmware including an encrypted plurality of files and content list files is accepted, the second firmware is downloaded in a single batch from the external apparatus. Then, the second firmware is decrypted, and the plurality of files is installed in the image forming apparatus.