Image Forming Apparatus Policy Controls for Cross-Border Data Protection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing image forming apparatuses lack effective measures to prevent the unauthorized transfer of personal information across international borders, violating regional data protection policies.

Innovation Solution

Implementing a personal information protection policy in image forming apparatuses that restricts operations based on country, region, or IP address, blocking unauthorized transfers and deletions, and managing policy updates through a server.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If personal information protection policies are implemented to restrict transfer based on country, region, or IP address, then data protection compliance is improved, but device complexity increases

Engineering Contradiction:
Improvedata protection complianceVSAvoidpolicy management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

A server acts as an intermediary between the image forming apparatus and policy management systems. The server stores policy information and provides it to the apparatus, simplifying the device's internal complexity while maintaining comprehensive data protection compliance through centralized policy management

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The policy management system is segmented into multiple components: policy creation modules, storage modules, and execution modules distributed across the server and client devices. This segmentation allows complex protection rules to be managed in smaller, manageable units while maintaining overall system reliability

Inventive Principle:
Principle #1Segmentation

2Reliability

If scan-to-FTP and scan-to-cloud functions are restricted based on location, then personal information security is improved, but functional versatility deteriorates

Engineering Contradiction:
Improvepersonal information securityVSAvoidscan function versatility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

Different quality levels of scan-to-file transfer functionality are applied to different locations. In authorized locations, full functionality is available. In unauthorized locations, the function is restricted or blocked. This local differentiation maintains security while preserving versatility where appropriate

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The scan-to-file transfer function dynamically adjusts its behavior based on the detected location (country, region, or IP address). The system automatically enables or restricts functionality according to the policy information retrieved from the server, providing adaptability without compromising security

Inventive Principle:
Principle #15Dynamics

3Reliability

If automatic policy update checks are performed, then data protection compliance is improved, but loss of time increases

Engineering Contradiction:
Improvedata protection complianceVSAvoidpolicy update time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs policy update checks periodically at predetermined intervals rather than continuously. This periodic action maintains up-to-date compliance information while minimizing the time impact on device operation, balancing reliability with efficiency

Inventive Principle:
Principle #19Periodic action

Data Source

PatentEP3766236B1Method for protecting personal information in image forming apparatus
Publication Date: 2025.07.16 HEWLETT PACKARD DEVELOPMENT COMPANY LP
  • EP3766236B1 patent drawingFigure 1
  • EP3766236B1 patent drawingFigure 2
  • EP3766236B1 patent drawingFigure 3

AI summary

An image forming apparatus and a method of operating an electronic apparatus are provided. The method includes activating a personal information protection policy corresponding to a country of use set in the image forming apparatus, receiving an execution request of a first application installed in the image forming apparatus, determining whether a first job to be performed by execution of the first application is restricted to the personal information protection policy, and controlling an operation of the image forming apparatus according to whether the first job is restricted to the personal information protection policy.