Image Forming Apparatus Status Notification via Inverted Firewall Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In image forming systems, security measures like firewalls often deny connections from image forming apparatuses to computers, preventing the transmission of status information, which hinders control and may delay error responses, while modifying access control configurations to allow connections compromises security.

Innovation Solution

An image forming system with a log notification function that transmits communication failure logs containing status information or location designation data, allowing secure transmission of status information across networks even with firewalls in place, without modifying the firewall configuration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a firewall is configured to allow connections from computers to image forming apparatuses but deny connections from image forming apparatuses to computers, then security is enhanced, but status information transmission fails

Engineering Contradiction:
ImprovesecurityVSAvoidstatus information transmission
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

Instead of having the image forming apparatus actively push status information to the computer (which is blocked by the firewall), the invention inverts the approach: the computer periodically queries the image forming apparatus for status information. This reverse communication pattern allows the computer to initiate connections (which are permitted by the firewall) to retrieve status information, thereby resolving the contradiction between security and information transmission.

Inventive Principle:
Principle #13The other way round (Inversion)

2Loss of information

If the firewall configuration is modified to allow connections from image forming apparatuses to computers, then status information can be transmitted, but security environment is compromised

Engineering Contradiction:
Improvestatus information transmissionVSAvoidsecurity
Core Design Contradiction:
Loss of informationVSReliability

Solution Approach 1:

The invention avoids modifying the firewall configuration by inverting the communication direction. The computer acts as the active querying party, sending requests to the image forming apparatus, while the apparatus only responds when queried. This maintains the firewall's security posture (blocking unsolicited incoming connections from the apparatus) while enabling necessary status information transmission through permitted outgoing connections from the computer.

Inventive Principle:
Principle #13The other way round (Inversion)

3Reliability

If the image forming apparatus cannot transmit status information to the computer, then security is maintained, but control capability and error response time are degraded

Engineering Contradiction:
ImprovesecurityVSAvoidcontrol capability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The invention resolves the control capability issue by inverting the information flow: instead of the apparatus pushing status updates to the computer, the computer periodically queries the apparatus for status information. This enables the computer to maintain up-to-date knowledge of apparatus status (improving control capability) without requiring the apparatus to initiate connections (maintaining security). The periodic querying ensures timely error detection and response.

Inventive Principle:
Principle #13The other way round (Inversion)

Data Source

PatentUS8854667B2Enabling status information of an image forming apparatus to be notified to a computer to which the connection from the image forming apparatus has failed
Publication Date: 2014.10.07 KONICA MINOLTA BUSINESS TECH INC
  • US8854667B2 patent drawing
  • US8854667B2 patent drawing
  • US8854667B2 patent drawing

AI summary

An image forming apparatus connected to a first network has a log notification part that transmits a communication failure log in response to a connection from a computer connected to a second network. The communication failure log contains status information planned to be transmitted by an image forming apparatus that is connected to the first network, to a computer to which the image forming apparatus failed in a connection, or location designation data for designating a location in the first network where the status information is stored. The computer has a log receiving part for receiving the communication failure log transmitted from the image forming apparatus, and a status information notification part for transmitting the status information or the location designation data contained in the received communication failure log to other computers connected to the second network.