Image Forming Apparatus Application Permission Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the JAVA-based image forming apparatus environment, there is a risk of applications with strong permissions being installed, which can adversely affect the apparatus, as existing security mechanisms do not adequately prevent the installation of bundles with prohibited permissions, potentially allowing access to internal system information.
Innovation Solution
The implementation of a first determination unit to check for a digital signature and a second unit to verify that the application's permissions are not prohibited, ensuring safe installation by allowing only signed applications with permissible permissions to be installed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If applications with strong permissions are allowed to be installed to improve functionality, then the image forming apparatus can achieve desired functions with the application, but the apparatus may be adversely affected by malicious or improperly configured applications
Solution Approach 1:
The patent performs permission verification before application installation. The control unit checks whether the application's required permissions are appropriate for its function category before allowing installation, preventing potentially harmful applications from being installed in the first place
Solution Approach 2:
The patent introduces a permission verification mechanism as an intermediary between the application installation request and the actual installation. This verification layer acts as a mediator that assesses whether the application's permissions are appropriate before granting installation approval
2Ease of manufacture
If signature check is not set to allow installation of applications under development, then development and testing can proceed, but applications with prohibited permissions may be installed compromising system security
Solution Approach 1:
The patent changes the security verification parameter from binary (signature check on/off) to a dynamic assessment based on permission appropriateness. Even when signature check is off for development mode, the system still performs permission verification to ensure applications don't request prohibited permissions
Solution Approach 2:
The patent makes the security verification dynamic by adjusting the strictness of permission checking based on the application's function category and the development/market mode. The system adapts its security posture rather than using a fixed approach
3Reliability
If permission verification is performed for all applications to ensure security, then system safety is improved, but the installation process becomes more complex and time-consuming
Solution Approach 1:
The patent applies different verification standards to different application function categories. Instead of uniformly verifying all permissions for all applications, the system tailors the permission verification to the specific function category, making the process more targeted and efficient
Solution Approach 2:
The patent segments the permission verification process by function category. Applications are divided into different categories (e.g., basic functions, advanced functions), and each category has its own permission verification criteria, simplifying the overall verification process
Data Source
AI summary
It is determined whether signature check is set in installation of an application, and it is determined whether a permission included in the application is not a prohibited permission in a case where the signature check is not set. In a case where it is determined that the permission included in the application is not a prohibited permission, installation of the application is allowed.