Information Processing System Workflow Security via Communication Line Validation

Solution Overview

Problem

In information processing systems connected to multiple independent communication lines, users may not notice security issues when a workflow is received through a communication line different from the one permitted, leading to potential data exchange violations and security breaches due to inconsistent permission and usage information.

Innovation Solution

An information processing system that acquires workflows and associated usage information, and in case of inconsistency with permitted communication lines, reports a warning to the user without displaying the workflow, ensuring security requirements are met by preventing unauthorized data exchange.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the system displays all received workflows to users, then the user can see all incoming workflows, but security requirements are violated when workflows are received through unauthorized communication lines

Engineering Contradiction:

Improvesecurity complianceVSAvoidworkflow visibility

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The patent extracts and separates workflows received through unauthorized communication lines from the main workflow display. The determination unit identifies inconsistent workflows and excludes them from the display list, showing only workflows from permitted communication lines. This resolves the contradiction by removing problematic information (unauthorized workflows) from the user view while maintaining security compliance.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent implements a feedback mechanism where the determination unit continuously monitors and compares the communication line used for receiving workflows against the permitted communication lines stored in memory. When inconsistency is detected, the system provides feedback by excluding the workflow from display and notifying the user, thereby maintaining security compliance while informing users of potential issues.

Inventive Principle:

Principle #23Feedback

2Reliability

If the system prevents workflows from unauthorized communication lines from being displayed, then security is maintained, but users cannot notice setting mistakes related to communication line permission

Engineering Contradiction:

Improvesecurity complianceVSAvoiderror detection capability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent implements a feedback mechanism where the determination unit continuously monitors and compares the communication line used for receiving workflows against the permitted communication lines stored in memory. When inconsistency is detected, the system provides feedback by excluding the workflow from display and notifying the user, thereby maintaining security compliance while informing users of potential issues.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The determination unit acts as an intermediary between the workflow reception process and the user display. It mediates by checking communication line consistency and controlling what workflows are presented to users, while also generating notifications about inconsistencies. This intermediary function allows the system to maintain security while enabling error detection through user notification.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Ease of operation

If the system displays workflows from unauthorized communication lines, then users can notice potential setting mistakes, but unauthorized data exchange occurs violating security requirements

Engineering Contradiction:

Improveerror detection capabilityVSAvoidunauthorized data exchange

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts and separates workflows received through unauthorized communication lines from the main workflow display. The determination unit identifies inconsistent workflows and excludes them from the display list, showing only workflows from permitted communication lines. This resolves the contradiction by removing problematic information (unauthorized workflows) from the user view while maintaining security compliance.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The determination unit acts as an intermediary between the workflow reception process and the user display. It mediates by checking communication line consistency and controlling what workflows are presented to users, while also generating notifications about inconsistencies. This intermediary function allows the system to maintain security while enabling error detection through user notification.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20250016279A1Information processing system, non-transitory computer readable medium, and information processing method

Publication Date: 2025.01.09 FUJIFILM BUSINESS INNOVATION CORP

AI summary

An information processing system includes: one or more processors configured to: acquire a workflow directed to a user who uses an information processing apparatus and usage information in association with each other, the usage information indicating a communication line used in receiving the workflow by the information processing apparatus receiving workflows by using multiple independent communication lines including the communication line; and in response to inconsistency between the usage information and permission information indicating a communication line of the communication lines that is permitted to be used by the user, report warning to the user without displaying, on a display, the workflow associated with the usage information.