PostScript Interpreter Password Storage for Image Forming Apparatus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing image forming apparatuses face issues with the volatility of the POSTSCRIPT password, which reverts to a default setting upon reboot, allowing malicious users to change system parameters without authentication, leading to unintended changes in the image forming apparatus settings.
Innovation Solution
An information processing apparatus that includes a processor to receive and store authentication information in a nonvolatile storage device, ensuring that the authentication information is maintained even after reboot, and displaying a setting screen for inputting authentication information, which is then stored in a nonvolatile storage device to prevent unauthorized changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the PS password is stored in a volatile region, then the interpreter can quickly access and clear the password, but the password returns to default state after reboot allowing unauthorized changes
Solution Approach 1:
The password storage function is segmented into two separate storage regions: a volatile storage region for quick interpreter access and a non-volatile storage region for persistent security. The system divides the password management into authentication information storage (non-volatile) and interpreter working memory (volatile), allowing each to fulfill its specific function without compromising the other.
Solution Approach 2:
The system introduces an intermediary authentication information storage unit that acts as a bridge between the non-volatile storage and the volatile interpreter memory. This intermediary stores authentication information persistently and provides it to the interpreter when needed, ensuring that the password remains secure in non-volatile storage while being accessible to the interpreter during operation.
2Reliability
If the PS password is stored in nonvolatile storage, then the password persists after reboot, but the system complexity increases
Solution Approach 1:
The storage system is segmented into distinct volatile and non-volatile components, each with specific responsibilities. The non-volatile storage contains only the essential authentication information, while the volatile storage handles interpreter operations. This segmentation allows the system to maintain password persistence without requiring a complete redesign of the storage architecture.
Solution Approach 2:
The authentication information is preliminarily stored in non-volatile memory during system initialization or setup, before the interpreter begins operation. This preliminary action ensures that the password is already in place and persistent before any interpreter operations occur, eliminating the need for complex runtime storage management.
3Reliability
If the authentication information is stored in both volatile and nonvolatile storage, then security is improved, but the loss of information increases due to redundant storage
Solution Approach 1:
The authentication information is segmented into different functional forms: the original password is stored in non-volatile storage for persistence, while an authentication information version (which may be a hash or transformed form) is stored in volatile storage for rapid interpreter access. This segmentation allows both storage types to hold different representations of the same security credential, reducing redundant storage of identical data.
Solution Approach 2:
The system applies parameter changes by transforming the password into different forms for different storage locations. The authentication information stored in volatile memory may be a hashed or encrypted version, while the non-volatile storage contains the original or a different representation. This parameter transformation reduces the risk of information loss from redundant storage of identical plaintext passwords.
Data Source
AI summary
An apparatus and method for setting authentication information of an information processing apparatus is provided. When a setting of a password to a PostScript (PS) interpreter is performed by a PS command, the password is stored in a volatile memory. When the setting of a password to the PS interpreter is performed through a setting screen, the password is stored in a nonvolatile memory, and thereafter, stored in the volatile memory.