Instruction Path-Based Data Output Restrictions for Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing systems fail to differentiate between different reception paths of instructions for outputting processing-target data, resulting in uniform treatment regardless of the source, which can lead to unauthorized access or misuse of sensitive information.
Innovation Solution
An information processing apparatus that receives instructions from terminals not managed by its authentication system, processes them through a management apparatus to apply limitations or restrictions based on the reception path, ensuring secure output of processing-target data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If instructions are processed uniformly regardless of reception path, then processing simplicity is maintained, but security and data protection are compromised
Solution Approach 1:
The system performs preliminary identification of the instruction reception path before processing the actual output instruction. By determining whether an instruction comes via a management apparatus or directly from a terminal in advance, the system can pre-select the appropriate processing mode (with or without limitations), thereby ensuring data security while maintaining clear and organized processing logic.
Solution Approach 2:
The patent applies different processing qualities to different instruction sources. Instructions received via a management apparatus are processed with full functionality (no limitations), while direct terminal instructions are processed with restrictions (limitation applied). This local differentiation of processing quality based on reception path ensures security without unnecessarily complicating the overall system.
2Object-affected harmful factors
If all output instructions are treated the same way, then operational simplicity is maintained, but unauthorized access prevention is weakened
Solution Approach 1:
The patent segments the instruction processing into two distinct paths: one for instructions received via a management apparatus and another for direct terminal instructions. Each path has its own processing rules (with or without limitation). This segmentation prevents unauthorized access by ensuring direct instructions undergo security checks, while maintaining operational simplicity through clear, separate processing workflows for each path.
3Reliability
If differentiated processing is applied based on reception path, then security is improved, but processing time and system complexity increase
Solution Approach 1:
The system performs preliminary identification of the reception path type before executing the main processing logic. By quickly determining whether an instruction comes via management apparatus or directly from terminal, the system can immediately route to the appropriate processing mode without unnecessary delays, thus improving access control while minimizing additional processing time.
Data Source
AI summary
An information processing apparatus includes a processor configured to: receive, from a terminal, an instruction to output processing-target data to the terminal, the terminal being not managed by a manager who manages an authentication system to which the information processing apparatus belongs; and, in response to reception of the instruction via a management apparatus managed by the manager, output the processing-target data having no limitation, and, in response to reception of the instruction not via the management apparatus, output the processing-target data having limitation.