Information Processing Apparatus Maintenance Mode USB Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In large office environments, security settings such as USB usage prohibition and TPM usage policies can hinder the ability to obtain necessary logs and backup encryption keys, creating a trade-off between security and convenience, as these settings cannot be simultaneously enforced.
Innovation Solution
An information processing apparatus and method that allow access to removable media, even when prohibited, by activating a maintenance mode, enabling log retrieval and TPM key backup through specific control mechanisms and modes of operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If USB usage prohibition setting is enforced to prevent information leakage, then security is improved, but the ability to obtain logs and backup TPM keys via USB is hindered
Solution Approach 1:
The patent implements dynamic control of USB access by introducing a maintenance mode that temporarily overrides the USB prohibition setting. When maintenance mode is activated, the system dynamically changes the USB access policy to permit connections, allowing specialists to retrieve logs and backup TPM keys. After maintenance operations are completed, the system returns to the prohibited state, thus maintaining security while enabling necessary maintenance functions.
2Reliability
If TPM usage policy is enforced for safe management of confidential data, then security is improved, but USB access for TPM key backup is prohibited, creating operational inconvenience
Solution Approach 1:
The system dynamically adjusts USB access permissions based on the operational context. When TPM usage policy is enforced and USB is normally prohibited, activation of maintenance mode dynamically permits USB access specifically for TPM key backup operations. This allows the system to maintain strict TPM-based security during normal operation while enabling essential backup functions when needed.
3Ease of operation
If USB usage prohibition setting is released to allow log retrieval and TPM key backup, then convenience is improved, but security is compromised
Solution Approach 1:
The patent segments USB access permissions into different operational contexts: normal mode with prohibition and maintenance mode with permission. Instead of applying a blanket prohibition or permission policy, the system divides the operational states and applies appropriate access controls to each segment. This allows security to be maintained in normal operation while enabling convenience during authorized maintenance activities.
Data Source
AI summary
In an information processing apparatus and a method of controlling the same, settings for prohibiting an access to a removable medium is performed, and even if the setting is set, the access to the removable medium is permitted in a case where the information processing apparatus is activated in the maintenance mode.