Communication Control Apparatus for Multi-Network MFP Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In government and public offices, and during company mergers, managing multiple networks for different levels of confidential information leads to increased costs and space requirements due to the need for separate image forming apparatuses, such as multifunction peripherals (MFPs), which can result in misrouting and security issues when processing packets across these networks.

Innovation Solution

A network communication system with a communication control apparatus that includes multiple communication controllers, each with memory for operation determination information and circuitry to process transmission-and-reception information, allowing controlled communication between MFPs and network apparatuses across multiple networks, using protocols like TCP/IP and NAPT to prevent misrouting and enhance security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple image forming apparatuses are set up for each network, then network security and isolation are maintained, but management cost increases and floor space is wasted

Engineering Contradiction:
Improvenetwork securityVSAvoidmanagement cost
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple image forming apparatuses into a single shared apparatus by implementing multiple communication controllers within one device. Each communication controller is assigned to a specific network and handles communication for that network, allowing the single apparatus to serve multiple networks simultaneously while maintaining network isolation and security.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The image forming apparatus is designed with multi-functionality by incorporating multiple communication controllers, each capable of handling communication with different networks. This universal design allows one apparatus to perform the functions of multiple separate apparatuses, reducing the total number of devices needed while maintaining security boundaries between networks.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If multiple image forming apparatuses are set up for each network, then network isolation is maintained, but the number of apparatuses increases occupying more floor space

Engineering Contradiction:
Improvenetwork isolationVSAvoidfloor space
Core Design Contradiction:
ReliabilityVSArea of stationary object

Solution Approach 1:

The patent combines multiple image forming apparatuses that would traditionally occupy separate floor spaces into a single integrated device. By housing multiple communication controllers within one physical apparatus, the system maintains network isolation while reducing the total floor space required from multiple separate devices to one shared device.

Inventive Principle:
Principle #5Merging (Combining)

3Device complexity

If one image forming apparatus connects to multiple networks, then the number of apparatuses is reduced, but packet routing accuracy may deteriorate

Engineering Contradiction:
Improvenumber of apparatusesVSAvoidpacket routing accuracy
Core Design Contradiction:
Device complexityVSManufacturing precision

Solution Approach 1:

The patent segments the communication control function into multiple independent communication controllers, each dedicated to a specific network. This segmentation ensures that packet routing for each network is handled by a specialized controller that understands the specific routing requirements of that network, maintaining high routing accuracy while allowing a single apparatus to serve multiple networks.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The communication controllers act as intermediaries between the image forming apparatus and different networks. Each controller mediates packet transmission between the apparatus and its associated network, ensuring accurate routing decisions are made based on the specific network's requirements while preventing unauthorized packet transfer between networks.

Inventive Principle:
Principle #24Intermediary (Mediator)

4Device complexity

If one image forming apparatus connects to multiple networks, then space is saved, but unauthorized packet transfer between networks may occur

Engineering Contradiction:
Improvenumber of apparatusesVSAvoidunauthorized packet transfer
Core Design Contradiction:
Device complexityVSObject-affected harmful factors

Solution Approach 1:

The patent segments the communication control functionality into separate communication controllers, each dedicated to a specific network. This segmentation creates isolated communication channels that prevent unauthorized packet transfer between networks, as each controller only processes packets for its assigned network, thereby maintaining security while allowing space consolidation.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The communication controllers serve as security intermediaries that mediate all packet transfers between the image forming apparatus and external networks. Each controller enforces network-specific security policies and prevents packets from one network from unauthorizedly accessing another network, thus eliminating the security risk of consolidated apparatuses.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS10572202B2Network communication system, communication control apparatus, and recording medium
Publication Date: 2020.02.25 RICOH CO LTD
  • US10572202B2 patent drawing
  • US10572202B2 patent drawing
  • US10572202B2 patent drawing

AI summary

A communication control apparatus for controlling communication between at least one communication apparatus and a network apparatus residing on one network among a plurality of networks includes multiple communication controllers respectively provided for the plurality of networks. Each communication controller includes a memory that stores operation determination information to be used for determining processing to be performed on transmission-and-reception information, the transmission-and-reception information to be transmitted or received by the communication controller with respect to other communication controller or the network apparatus on the network and circuitry that acquires the operation determination information in response to receiving the transmission-and-reception information, and performs operation corresponding to the acquired operation determination information on the transmission-and-reception information. Each of the multiple communication controllers controls communication between the communication apparatus and the network apparatus residing on the network by performing the operation corresponding to the acquired operation determination information.