Image Forming Apparatus Secure Communication Resumption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing image-forming apparatuses face security issues when resuming communication with terminal devices, as personal information such as telephone numbers and print information can be leaked due to malicious attacks or spoofing.
Innovation Solution
The image-forming apparatus uses QUIC protocol for establishing connections with terminal devices, storing identification information and key information for encryption, and resumes communication through HTTP/3, eliminating the need to transmit mobile-unique information like telephone numbers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If mobile-unique information (telephone number) and print information are transmitted from terminal device to image-forming apparatus for resuming communication, then communication can be resumed, but personal information and print information are leaked due to malicious attacks
Solution Approach 1:
The patent extracts and removes mobile-unique information (telephone number) and print information from the communication resumption process. Instead of transmitting these sensitive data elements, the system uses only device identification information and connection information to establish secure reconnection, thereby eliminating the security vulnerability while maintaining communication functionality
Solution Approach 2:
The patent performs preliminary actions by establishing secure connection parameters and encryption keys before communication interruption occurs. When disconnection happens, the pre-established connection information and encryption keys are used to rapidly resume communication without requiring re-transmission of sensitive data, thus preventing information leakage while ensuring reliable resumption
2Ease of operation
If mobile-unique information is used for connection identification, then communication can be reestablished, but the information may be known by third parties leading to spoofing attacks
Solution Approach 1:
The patent changes the identification parameter from mobile-unique information (telephone number) to device identification information combined with connection information. This parameter substitution maintains the ease of automatic reconnection while significantly improving security against spoofing attacks, as device ID and connection information are not susceptible to the same spoofing vulnerabilities as telephone numbers
Data Source
AI summary
An image-forming apparatus includes a controller, a storage, and a communicator. The controller establishes a connection with a terminal device through the communicator by QUIC, stores, in the storage, identification information for identifying the connection and key information to be used for encryption of transmission/reception information transmitted and received to and from the terminal device, performs communication of the transmission/reception information with the terminal device through HTTP/3, and establishes, when the connection with the terminal device is disconnected, a connection with the terminal device using the identification information and the key information so that the communication of the transmission/reception information with the terminal device is resumed.