Management Apparatus Authority Transfer Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing management systems face challenges in transferring management authority from one management apparatus to another, as the new apparatus cannot verify the accuracy of received management information, leading to inefficient processing requirements.

Innovation Solution

A communication system that includes a management apparatus, devices, and a server, where determination information is generated and transmitted to devices to verify the accuracy of management information, allowing for secure and efficient transfer of management authority by checking if the information is correct.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If management authority is transferred by moving management information from the original management apparatus to the new management apparatus, then the transfer process should be simplified, but the new management apparatus cannot verify whether the received management information is correct

Engineering Contradiction:
Improvemanagement authority transfer processVSAvoidverification of management information accuracy
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The original management apparatus generates verification information (hash values) in advance based on the management information before transfer. This verification information is transmitted to the new management apparatus along with the management information, enabling the new apparatus to verify correctness without complex processing.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If the new management apparatus checks the accuracy of received management information by sharing new device keys with respective devices using authenticated key exchange protocol, then verification reliability is improved, but enormous processing quantity is required

Engineering Contradiction:
Improveverification of management information accuracyVSAvoidprocessing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The verification function is extracted from the complex authenticated key exchange protocol and implemented as a simple hash comparison operation. The new management apparatus only needs to compute hash values of received management information and compare them with the transmitted verification information, eliminating the need for repeated key exchange operations with each device.

Inventive Principle:
Principle #2Taking out (Extraction)

3Device complexity

If management information is moved from the original management apparatus to the new management apparatus without verification, then processing complexity is reduced, but the transferred management authority may be based on incorrect information

Engineering Contradiction:
Improveverification process complexityVSAvoidcorrectness of transferred management information
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

Instead of verifying management information through complex interactions with managed devices, the system creates a cryptographic copy (hash value) of the management information. This hash copy serves as a compact verification token that can be transmitted and checked without reconstructing or re-verify the entire management information set.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS10454910B2Management apparatus, computer program product, system, device, method, information processing apparatus, and server
Publication Date: 2019.10.22 KK TOSHIBA
  • US10454910B2 patent drawing
  • US10454910B2 patent drawing
  • US10454910B2 patent drawing

AI summary

According to an embodiment, a management apparatus manages pieces of information held by a plurality of devices. The apparatus includes storage, one or more processors, and a transmitter. The storage stores therein the pieces of information held by the devices. The processors generate a list of inspection values indicating the pieces of information stored in the storage. The processors generate determination information for determining, in a state where the list is concealed, whether a provided value is included in the list. The transmitter transmits the determination information to the respective devices.