Print Service Mediation Server Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

As the scale of systems using print services increases, so does the load on these services, potentially leading to unauthorized access and interruptions, such as Denial of Service (DoS) attacks, which existing mediation services struggle to manage effectively.

Innovation Solution

A server with an access unit, condition management unit, and determination unit is provided to assess the status of past access to the print service, determining whether conditions for accessing the service are met, and if not, it refrains from new access to prevent overload and potential DoS attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the scale of the system using print service is increased, then the system capacity and functionality are improved, but the load on the print service increases and access may be interrupted due to DoS attacks

Engineering Contradiction:
Improvesystem scaleVSAvoidservice availability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a mediation service that acts as an intermediary between information processing apparatus and print services. This mediator manages access to print services by controlling the frequency and pattern of access requests, thereby preventing DoS attacks while enabling systems of larger scale to access print services reliably.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The mediation service performs preliminary actions by pre-managing access patterns and conditions before actual print jobs are submitted. It establishes access rules and controls request timing in advance, preventing overload conditions from developing when system scale increases.

Inventive Principle:
Principle #10Preliminary action

2Productivity

If the number of times of access to the print service per unit time increases, then the processing capacity is improved, but the load on the print service increases and may be regarded as unauthorized access

Engineering Contradiction:
Improveaccess frequencyVSAvoidDoS attack risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The mediation service implements periodic action by controlling access requests to occur at regulated time intervals rather than continuously or simultaneously. This periodic access pattern maintains productivity by ensuring print jobs are processed while avoiding the harmful effects of excessive access frequency that could be misinterpreted as DoS attacks.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The system employs feedback mechanisms where the mediation service monitors access patterns and adjusts subsequent access requests based on the response and current load conditions of the print service. This feedback loop ensures high productivity when the service can handle it, while automatically reducing access frequency when load thresholds are approached, thus avoiding DoS classification.

Inventive Principle:
Principle #23Feedback

3Adaptability or versatility

If a mediation service is introduced to support unauthorized printing apparatus, then the compatibility is improved, but the access control complexity increases

Engineering Contradiction:
Improveprinting apparatus compatibilityVSAvoidaccess control mechanism
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The mediation service is designed with universality to handle multiple types of printing apparatus and print services through a single unified interface. This multi-functional approach improves compatibility across different devices while managing access control through standardized procedures, thereby reducing the effective complexity despite the diverse range of supported apparatus.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12056409B2Server, control method therefor, and non-transitory storage medium
Publication Date: 2024.08.06 CANON KK
  • US12056409B2 patent drawing
  • US12056409B2 patent drawing
  • US12056409B2 patent drawing

AI summary

A server for receiving a print job from a print service that has received the print job from an information processing apparatus accesses the print service, manages a condition concerning access to the print service, manages a status of past access to the print service, and determines, based on the status of past access, whether the condition is not to be satisfied by newly accessing the print service. In a case where it is determined the condition is not to be satisfied, new access to the print service is ceased, and in a case where the print service is not accessed since the condition is not to be satisfied, after a wait time for an individual processing elapses, access the print service with respect to the individual processing is retried.