Image Processing Apparatus Security Policy Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional multifunctional peripherals do not guarantee compliance with security policies after startup, and changes to security policies or user modes may lead to security holes unless verified at the next startup.

Innovation Solution

An image processing apparatus with an operation unit, verification unit, and restraint unit that verifies changed settings against pre-set security policies and temporarily restricts operations until compliance is ensured, preventing non-compliant operation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security policies are verified only at startup, then device complexity is reduced and ease of operation is improved, but security reliability deteriorates because dynamic setting changes are not verified

Engineering Contradiction:
Improvesecurity complianceVSAvoidverification mechanism
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a feedback mechanism where the verification unit continuously monitors setting changes and provides feedback to the restraint unit. When settings deviate from security policies, the system automatically detects this through the verification process and triggers appropriate restraint actions, creating a closed-loop control system that maintains security compliance dynamically

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent applies preliminary action by verifying settings against security policies before allowing operations to proceed. The verification unit checks settings in advance, and the restraint unit prevents operations until compliance is confirmed, ensuring security policies are maintained proactively rather than reactively

Inventive Principle:
Principle #10Preliminary action

2Adaptability or versatility

If settings are dynamically changed to adapt to different security requirements, then adaptability is improved, but security reliability worsens because compliance cannot be guaranteed between startups

Engineering Contradiction:
Improvesetting flexibilityVSAvoidsecurity policy compliance
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent makes the verification and restraint mechanisms dynamic rather than static. The verification unit operates continuously to detect setting changes, and the restraint unit dynamically adjusts operational permissions based on real-time compliance status. This dynamic approach allows the system to adapt to changing security requirements while maintaining guaranteed compliance through continuous verification

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The feedback mechanism enables the system to respond to dynamic setting changes immediately. When settings are modified to adapt to different security requirements, the verification unit detects these changes and provides feedback to determine compliance, allowing the system to maintain reliability even with enhanced adaptability

Inventive Principle:
Principle #23Feedback

3Reliability

If multiple setting items are required to comply with security policies, then security coverage is improved, but ease of operation deteriorates due to increased configuration complexity

Engineering Contradiction:
Improvesecurity policy enforcementVSAvoidconfiguration simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The verification unit performs self-service by automatically checking settings against security policies without requiring manual verification. The system self-monitors compliance status and triggers restraint actions autonomously, reducing the operational burden on users while maintaining comprehensive security enforcement across multiple setting items

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10243995B2Image processing apparatus that operates according to security policies, control method therefor, and storage medium
Publication Date: 2019.03.26 CANON KK
  • US10243995B2 patent drawing
  • US10243995B2 patent drawing
  • US10243995B2 patent drawing

AI summary

An image processing apparatus which is capable of restraining operation that does not comply with security policies even in a case where security policies are changed through setting of user modes. The security policies are set in advance in the image processing apparatus. The image processing apparatus has a UI operation unit that enables operation on the image processing apparatus. When settings of the image processing apparatus are changed via the UI operation unit, it is verified whether or not the changed settings match the security policies. Operation of the image processing apparatus is restrained until it is verified that the changed settings match the security policies.