Recording Medium Authentication for Secure Program Initiation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for a mechanism to securely initiate programs on information processing and image forming apparatuses using program-initiation recording media like SD cards, while preventing unauthorized or illegally altered programs from being executed.

Innovation Solution

The implementation of a detection unit to check the operational and authentication status of the recording medium, with an error notification system to prevent the initiation of programs that fail these checks, ensuring only authorized and intact programs are executed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a program is added to a program-initiation recording medium using a detachable recording medium like an SD card, then the program can be easily added and used across different information processing apparatuses, but the program may be illegally added or copied without authorization

Engineering Contradiction:
Improveprogram portabilityVSAvoidprogram security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent applies preliminary action by performing authentication checks on the recording medium before initiating the program. The authentication check unit verifies the integrity and authorization of the program on the recording medium before allowing execution, preventing illegally copied or altered programs from being run while still enabling legitimate program portability across different apparatuses.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If an authentication check mechanism is implemented to verify program integrity, then program security is improved, but the system complexity increases

Engineering Contradiction:
Improveprogram securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies segmentation by dividing the system into distinct functional units: a detection unit for detecting the recording medium, an authentication check unit for verifying program integrity, and an error notification unit for handling authentication failures. This modular segmentation manages system complexity by organizing security functions into separate, manageable components rather than a monolithic system.

Inventive Principle:
Principle #1Segmentation

3Reliability

If operation checks and authentication checks are performed on the recording medium, then program integrity is ensured, but the program initiation time increases

Engineering Contradiction:
Improveprogram integrityVSAvoidprogram initiation time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs authentication checks in advance before program initiation, so that when a legitimate program is executed, the verification is already complete. This preliminary action ensures that integrity checks do not delay legitimate program execution, as the authentication is performed as a prerequisite step before the program is allowed to run.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS7302578B2Information processing apparatus, image forming apparatus, program-initiation error processing method, and recording medium
Publication Date: 2007.11.27 RICOH CO LTD
  • US7302578B2 patent drawing
  • US7302578B2 patent drawing
  • US7302578B2 patent drawing

AI summary

An information processing apparatus has a detection unit to detect a recording medium and initiates a program read from the recording medium detected by the detection unit. In the information processing apparatus, an operation check unit performs an operation check of the recording medium detected by the detection unit. An authentication check unit performs an authentication check of the recording medium detected by the detection unit. An error notification unit notifies an operator of an error of the recording medium if at least one of a result of the operation check and a result of the authentication check is an error.