Remote UI Password Policy Validation for Secure Password Updates

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing information processing apparatuses lack a mechanism to ensure the security strength of passwords set via remote UI, and there is no unified password policy across local and remote UI environments, making them vulnerable to unauthorized access.

Innovation Solution

An information processing apparatus that includes a processor to acquire and determine whether an obfuscated password string satisfies a password policy, and updates the password if it meets the policy, ensuring security strength across both local and remote UIs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a password authentication function is provided for the remote UI, then security against unauthorized access is improved, but the complexity of the system increases and may reduce ease of operation

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by pre-setting a random password on each information processing apparatus before shipment. This initial password configuration ensures that security is in place before the device is deployed, eliminating the need for users to create passwords manually and reducing system complexity while maintaining security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent implements parameter changes by forcing a password change at the time of initial use. The system changes the password parameter from a pre-set random value to a user-defined value, ensuring both security through randomness and user control through the ability to change it, thereby balancing security requirements with operational simplicity.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If a random password is set before shipment, then security against unauthorized access is improved, but the ease of operation deteriorates because users must change the password

Engineering Contradiction:

ImprovesecurityVSAvoidease of use

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary action by pre-configuring a random password before the device is shipped to the user. This ensures security is established in advance, and the password change requirement is presented as a one-time initial setup task rather than an ongoing operational burden.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent applies self-service by enabling users to change the pre-set random password through a straightforward process using the remote UI. The system provides the necessary interface and guidance for users to independently complete the password change, minimizing support requirements and maintaining ease of operation.

Inventive Principle:

Principle #25Self-service

3Reliability

If a password policy with complicated conditions is applied, then security strength is improved, but the ease of operation deteriorates due to stricter password requirements

Engineering Contradiction:

Improvesecurity strengthVSAvoidease of password setting

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system applies preliminary action by pre-configuring a random password that inherently satisfies security requirements. This eliminates the need for users to manually comply with complex password policy rules, as the pre-generated password already meets high security standards without user intervention.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent enables users to change passwords through a simplified process where the system handles password policy validation automatically. Users simply need to provide a new password through the remote UI, and the system self-verifies it against the password policy, reducing the operational burden on users while maintaining security strength.

Inventive Principle:

Principle #25Self-service

4Adaptability or versatility

If the password policy is not unified across local and remote UIs, then adaptability is improved, but security deteriorates due to inconsistent password strength requirements

Engineering Contradiction:

Improveinterface flexibilityVSAvoidsecurity consistency

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent applies universality by implementing a unified password policy that governs both local UI and remote UI password settings. The same password policy rules and validation mechanisms are applied across both interfaces, ensuring consistent security requirements while allowing users to access the system through their preferred interface.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12524520B2Information processing apparatus, information processing method, and information processing system

Publication Date: 2026.01.13 CANON KK

AI summary

An information processing apparatus includes a first acquisition unit configured to acquire, from an external apparatus, a state regarding at least one item of a password policy of a password string entered on the external apparatus, and an obfuscated password string, a second acquisition unit configured to acquire a setting, which is made in the information processing apparatus, regarding the at least one item of the password policy, a determination unit configured to determine whether the obfuscated password string satisfies the password policy, based on the acquired state regarding the at least one item of the password policy of the password string, and the acquired setting regarding the at least one item of the password policy, and an update unit configured to update a password based on the obfuscated password string in a case where it is determined that the obfuscated password string satisfies the password policy.