SYSTEM AND METHOD FOR AUTOMATED MAINTENANCE BASED ON SECURITY LEVELS FOR DOCUMENT PROCESSING DEVICES

• US 20110016531A1
• Filed: 07/16/2009
• Published: 01/20/2011
• Est. Priority Date: 07/16/2009
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Inventors: Khandelwal, Ashish, Yeung, Michael
• Application Number:
  US12/504,048
• Publication Number:
  US 20110016531A1
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: G06F 11/3672 Test management
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

The subject application is directed to a system and method for automated maintenance of preselected security levels for document processing devices. A network data connection is established with at least one document processing device of a plurality thereof. At least one document processing device is identified and testing software is pushed to the at least one document processing device so as to commence loading and running thereof. Test result data is received from the at least one document processing device in accordance with a running of the testing software, a security level associated with the at least one document processing device is identified, and updated software is pushed to the at least one document processing device in accordance with received test result data and an identified security level.

Claims

1. A system for automated maintenance of preselected security levels for document processing devices comprising:

a network data connection with a plurality of document processing devices;

a server data storage including;

testing software operable to test at for at least one vulnerability when running on at least one of the document processing devices,

document processing device software updates,

an identifier associated with each of the document processing devices, and

security level data corresponding to each identifier;

a test software uploader operable to push the testing software to the at least one document processing device via the network data connection;

a tester operable to receive test result data corresponding to a running of the pushed testing software on the at least one document processing device; and

a software update uploader operable to push at least one device software update to the at least one document processing device in accordance with received test result data and security level data corresponding to the at least one document processing device.

2. The system of claim 1 further comprising:

a login data input operable to receive login data from the at least one document processing device via the network data connection;

a login table inclusive of data corresponding to document processing devices preauthorized for security analysis;

a comparator operable to compare received login data with data of the login table; and

wherein

the test software uploader is operable in accordance with an output of the comparator.

3. The system of claim 2 wherein the test result data includes data corresponding to a version of software currently operable on the at least one document processing device.

4. The system of claim 3 wherein the server data storage further includes log data corresponding to software versions currently operable on the plurality of document processing devices.

5. The system of claim 3 wherein the network data connection is secured to the at least one document processing device.

15. The system of claim 2 further comprising means adapted for setting the security level in accordance with instructions received from an associated administrator.

6. A method for automated maintenance of preselected security levels for document processing devices comprising the steps of:

establishing a network data connection with at least one document processing device of a plurality thereof;

identifying at least one document processing device;

pushing testing software to the at least one document processing device so as to commence loading and running thereof;

receiving test result data from the at least one document processing device in accordance with a running of the testing software;

identifying a security level associated with the at least one document processing device; and

pushing updated software to the at least one document processing device in accordance with received test result data and an identified security level.

7. The method of claim 7 further comprising the step of generating a log in accordance with each of the plurality of document processing devices in accordance with result data received therefrom.

8. The method of claim 7 further comprising the step of establishing a secure data connection with the at least one document processing device.

9. The method of claim 7 further comprising the step of verifying a pre-established license relationship with the at least one document processing device prior to pushing of the testing software thereto.

10. The method of claim 7 further comprising the step of setting the security level in accordance with instructions received from an associated administrator.

11. A system for automated maintenance of preselected security levels for document processing devices comprising:

means adapted for establishing a network data connection with at least one document processing device of a plurality thereof;

means adapted for identifying at least one document processing device;

means adapted for pushing testing software to the at least one document processing device so as to commence loading and running thereof;

means adapted for receiving test result data from the at least one document processing device in accordance with a running of the testing software;

means adapted for identifying a security level associated with the at least one document processing device; and

means adapted for pushing updated software to the at least one document processing device in accordance with received test result data and an identified security level.

12. The system of claim 11 further comprising means adapted for generating a log in accordance with each of the plurality of document processing devices in accordance with result data received therefrom.

13. The system of claim 12 further comprising means adapted for establishing a secure data connection with the at least one document processing device.

14. The system of claim 12 further comprising means adapted for verifying a pre-established license relationship with the at least one document processing device prior to pushing of the testing software thereto.