Image Forming Apparatus Security Policy Conflict Resolution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in maintaining security policies for multi-function peripherals, leading to potential security breaches due to inconsistencies in access control information when security policies are changed, particularly when some policies are disabled, causing contradictions and allowing unauthorized changes to settings.
Innovation Solution
An image forming apparatus with an instruction unit to enable or disable security policies, a setting unit to adjust settings accordingly, and a control unit to prevent changes when security policies are disabled, ensuring that settings comply with the security policy without contradictions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If security policies are changed or disabled in multi-function peripherals, then security configuration flexibility is improved, but access control information becomes contradictory and security compliance deteriorates
Solution Approach 1:
The system checks access control information before and after security policy changes to detect contradictions. When a contradiction is detected, the system provides feedback to prevent the problematic setting change, ensuring security compliance is maintained while allowing legitimate configuration flexibility.
Solution Approach 2:
Access control information acts as an intermediary mechanism that mediates between security policy changes and actual setting modifications. The system uses access control information to verify whether a setting change would create contradictions, serving as a gatekeeper that enables compliant changes while blocking non-compliant ones.
2Reliability
If administrators manually configure each multi-function peripheral to comply with security policies, then security compliance is improved, but administrative workload and time consumption worsen
Solution Approach 1:
The system performs preliminary checks of access control information before applying security policy settings. This preliminary action prevents contradictory configurations from being applied in the first place, eliminating the need for time-consuming manual verification and reconfiguration by administrators.
Solution Approach 2:
The multi-function peripheral automatically checks its own access control information and prevents setting changes that would create contradictions. This self-service mechanism eliminates the need for administrators to manually verify each configuration, significantly reducing administrative workload while maintaining security compliance.
3Ease of operation
If access control information is not checked when changing settings, then setting modification ease is improved, but unauthorized changes and security breaches worsen
Solution Approach 1:
The system applies preliminary anti-action by checking access control information before allowing setting changes. This preventive measure blocks potential unauthorized changes before they can occur, maintaining security without significantly impacting legitimate setting modifications.
Data Source
AI summary
An image forming apparatus and a method of controlling the same, when it is instructed that the security policy be enabled, changes a setting item corresponding to the security policy so that the security policy is satisfied, and sets so that a setting value of the setting item cannot be changed, and when it is instructed that the security policy be disabled, controls so that a setting value of the setting item is changed under a condition that a security policy associated with the setting item corresponding to the security policy is disabled.