Method and system for diagnosis and control of machines using connectionless modes of communication

• US 5,909,493 A
• Filed: 10/16/1996
• Issued: 06/01/1999
• Est. Priority Date: 10/16/1996
• Status: Expired due to Term

• Current Assignee: Ricoh Company Limited, Ricoh Corporation (Ricoh Company Limited)
• Original Assignee: Ricoh Company Limited, Ricoh Corporation (Ricoh Company Limited)
• Inventors: Motoyama, Tetsuro
• Primary Examiner(s): GREGORY, BERNARR E
• Application Number:
  US08/733,134
• Time in Patent Office: 958 Days
• Field of Search: 340/825.31, 340/825.34, 380/2, 380/4, 380/9, 380/18, 380/23, 380/25, 380/49, 380/50, 380/59, 395/186, 395/187.01, 395/200.57, 395/200.59
• US Class Current: 713/154
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and system of remotely monitoring and controlling machines and business office devices such as copiers, printers, and facsimile machines. Outgoing messages, such as Internet e-mail messages containing information describing the business office device are monitored by a security center. The security center either receives an unencrypted form of the message, or alternatively receives an encrypted form of the message. If the message is encrypted, it will be necessary for the security center to first decrypt the message. The contents of the message are monitored by the security center to assure that only authorized information is transmitted from an authorized business office device, over the Internet, to a data center which monitors the status of and/or controls the business office device. A log of messages passing through a firewall to the Internet is maintained and compared with messages received by the security center to assure that only messages which have been received by the security center and checked are transmitted through the firewall over the Internet.

Claims

1. A method of processing communications from a machine having electro-mechanical sensors to a data center, comprising the steps of:

creating a message containing information of the machine to be transmitted to the data center;

transmitting the message from the machine to a firewall device;

transmitting the message to a security device; and

analyzing the message by the security device.

2. A method according to claim 1, wherein the step of transmitting the message to the security device comprises:

forwarding the message received by the firewall device to the security device.

3. A method according to claim 1, further comprising the step of:

performing a security action when the analyzing step determines that the message is not an authorized message.

4. A method according to claim 1, wherein the step of performing a security action comprises:

prohibiting the message from passing through the firewall.

5. A method according to claim 1, wherein the step of performing a security action comprises:

prohibiting future messages from passing through the firewall.

6. A method according to claim 1, further comprising the step of:

encrypting the message to be transmitted to the firewall device, before transmitting the message to the firewall device,

the method further comprising the step of decrypting, by the security device, the encrypted message received from the firewall device.

7. A method according to claim 1, further comprising the step of:

logging messages into a log which are outgoing through the firewall device,

wherein the step of analyzing comprises;

comparing messages received at the security device with the log of the messages outgoing through the firewall device.

8. A method according to claim 7, further comprising the step of:

outputting a warning indicating that one of the messages sent to the security device does not match a corresponding one of the messages outgoing through the firewall device, when the step of comparing messages received at the security device determines that one of the messages outgoing through the firewall device does not match the corresponding message received by the security device.

9. A method according to claim 1, wherein:

the step of transmitting the message to the security device transmits the message to the security device which is part of the firewall device.

10. A method according to claim 1, wherein:

the step of creating a message comprises creating the message to contain information received from the electromechanical sensors of the machine.

11. A method according to claim 10, wherein:

the step of creating a message comprises creating the message to contain information received from the electromechanical sensors of the machine which is a business office device.

12. A method according to claim 1, wherein the step of transmitting the message to the security device comprises:

transmitting the message from the firewall device to the security device,

said method further comprising the step of;

transmitting the message from the machine to the security device,

wherein the step of analyzing comprises;

comparing, by the security device, the message received by the security device from the machine with the message received by the security device from the firewall device.

13. A method according to claim 12, further comprising the step of:

encrypting the message to be transmitted to the firewall device, before transmitting the message to the firewall device,

wherein the step of transmitting the message from the firewall device to the security device comprises transmitting the encrypted message,

the method further comprising the step of decrypting, by the security device, the encrypted message received from the firewall device,

wherein the step of comparing comprises comparing the message received by the machine with the message which has been decrypted.

14. A method according to claim 13, wherein the step of transmitting the message from the machine to the security device comprises:

transmitting the message in an unencrypted form.

15. A method according to claim 12, further comprising the step of:

logging messages which are outgoing through the firewall device; and

comparing messages received at the security device with messages transmitted through the firewall device which have been logged.

16. A method according to claim 15, further comprising the step of:

outputting a warning indicating that one of the messages sent to the security device does not match a corresponding one of the messages outgoing through the firewall device, when the step of comparing messages received at the security device determines that one of the messages outgoing through the firewall device does not match the corresponding message received by the security device.

17. A method according to claim 12, wherein:

the step of creating a message comprises creating the message to contain information received from the electromechanical sensors of the machine.

18. A method according to claim 17, wherein:

the step of creating a message comprises creating the message to contain information received from the electromechanical sensors of the machine which is a business office device.

19. A method according to claim 1, further comprising the step of:

creating a log of messages passing through the firewall device from machines,

wherein the step of analyzing comprises;

comparing, by the security device, messages received from the machine with the log of messages passing through the firewall device.

20. A method according to claim 19, further comprising the step of:

outputting a warning when one of the messages received from the machine does not correspond to the log of messages passing through the firewall device.

21. A method according to claim 19, further comprising the step of:

prohibiting further messages from the machine from passing through the firewall device, when said one of the messages received from the machine is determined not to exist in the log of messages passing through the firewall device by the comparing step.

22. A method according to claim 19, wherein:

the step of creating a message comprises creating the message to contain information received from the electromechanical sensors of the machine.

23. A method according to claim 22, wherein:

the step of creating a message comprises creating the message to contain information received from the electromechanical sensors of the machine which is a business office device.

24. A method according to claim 1, further comprising the step of:

encrypting the message, before the message is transmitted to the firewall device and transmitted to the security device,

wherein the step of transmitting to the firewall device comprises transmitting the encrypted message to the firewall device,

wherein the step of transmitting to the security device comprises transmitting the encrypted message to the firewall device,

the method further comprising the step of;

decrypting the message by the security device,

wherein the analyzing step comprises analyzing contents of the message which has been decrypted.

25. A method according to claim 24, further comprising the step of:

decoding the decrypted message,

wherein the analyzing step comprises;

analyzing the contents of the messages which have been decrypted and decoded.

26. A method according to claim 24, wherein the analyzing step comprises:

determining if the contents of the message are from a machine which is permitted to communicate with the data center.

27. A method according to claim 24, wherein the analyzing step comprises:

determining if the contents of the message contain only information which is authorized to be transmitted to the data center.

28. A method according to claim 24, wherein:

the step of creating a message comprises creating the message to contain information received from the electromechanical sensors of the machine.

29. A method according to claim 28, wherein:

the step of creating a message comprises creating the message to contain information received from the electromechanical sensors of the machine which is a business office device.

30. A system of processing communications, comprising:

a machine having electromechanical sensors for generating messages and transmitting the messages to a data center;

a firewall device;

a security device;

a network connecting the machine, the firewall device, the security device, and the data center;

means, disposed in the machine, for creating a message containing information of the machine to be transmitted to the data center;

means for transmitting the message from the machine to a firewall device;

means for transmitting the message to a security device; and

means, disposed within the security device, for analyzing the message.

31. A system according to claim 30, wherein the means for transmitting the message to the security device comprises:

means for forwarding the message received by the firewall device to the security device.

32. A system according to claim 30, further comprising:

means for performing a security action when the means for analyzing determines that the message is not an authorized message.

33. A system according to claim 30, wherein the means for performing a security action comprises:

means for prohibiting the message from passing through the firewall.

34. A system according to claim 30, wherein the means for performing a security action comprises:

means for prohibiting future messages from passing through the firewall.

35. A system according to claim 30, further comprising:

means for encrypting the message to be transmitted to the firewall device; and

means for decrypting, within the security device, the encrypted message received from the firewall device.

36. A system according to claim 30, further comprising:

means for logging messages into a log which are outgoing through the firewall device,

wherein the means for analyzing comprises;

means for comparing messages received at the security device with the log of the messages outgoing through the firewall device.

37. A system according to claim 36, further comprising:

means for outputting a warning indicating that one of the messages sent to the security device does not match a corresponding one of the messages outgoing through the firewall device, when the means for comparing messages received at the security device determines that one of the messages outgoing through the firewall device does not match the corresponding message received by the security device.

38. A system according to claim 30, wherein:

the means for transmitting the message to the security device transmits the message to the security device which is part of the firewall device.

39. A system according to claim 30, wherein the means for creating a message comprises:

means for creating the message to contain information received from the electro-mechanical sensors of the machine.

40. A system according to claim 39, wherein:

the means for creating a message comprises creating the message to contain information received from the electromechanical sensors of the machine which is a business office device.

41. A system according to claim 30, wherein the means for transmitting the message to the security device comprises:

means for transmitting the message from the firewall device to the security device,

said system further comprising;

means for transmitting the message from the machine to the security device,

wherein the means for analyzing comprises;

means for comparing, by the security device, the message received by the security device from the machine with the message received by the security device from the firewall device.

42. A system according to claim 41, further comprising:

means for encrypting the message to be transmitted to the firewall device, before transmitting the message to the firewall device,

wherein the means for transmitting the message from the firewall device to the security device comprises;

means for transmitting the encrypted message,

the system further comprising;

means for decrypting, by the security device, the encrypted message received from the firewall device,

wherein the means for comparing comprises;

means for comparing the message received by the machine with the message which has been decrypted.

43. A system according to claim 42, wherein the means for transmitting the message from the machine to the security device comprises:

means for transmitting the message in an unencrypted form.

44. A system according to claim 42, wherein the means for creating a message comprises:

means for creating the message to contain information received from the electromechanical sensors of the machine.

45. A system according to claim 44, wherein the means for creating a message comprises:

means for creating the message to contain information received from the electromechanical sensors of the machine which is a business office device.

46. A system according to claim 41, further comprising:

means for logging messages which are outgoing through the firewall device; and

means for comparing messages received at the security device with messages transmitted through the firewall device which have been logged.

47. A system according to claim 46, further comprising:

means for outputting a warning indicating that one of the messages sent to the security device does not match a corresponding one of the messages outgoing through the firewall device, when the means for comparing messages received at the security device determines that one of the messages outgoing through the firewall device does not match the corresponding message received by the security device.

48. A system according to claim 30, further comprising:

means for creating a log of messages passing through the firewall device from machines,

wherein the means for analyzing comprises;

means for comparing, by the security device, messages received from the machine with the log of messages passing through the firewall device.

49. A system according to claim 48, further comprising:

means for outputting a warning when one of the messages received from the machine does not correspond to the log of messages passing through the firewall device.

50. A system according to claim 48, further comprising:

means for prohibiting further messages from the machine from passing through the firewall device, when said one of the messages received from the machine is determined not to exist in the log of messages passing through the firewall device by the means for comparing.

51. A system according to claim 48, wherein the means for creating a message comprises:

means for creating the message to contain information received from the electromechanical sensors of the machine.

52. A system according to claim 51, wherein the means for creating a message comprises:

means for creating the message to contain information received from the electromechanical sensors of the machine which is a business office device.

53. A system according to claim 30, further comprising:

means for encrypting the message, before the message is transmitted to the firewall device and transmitted to the security device,

wherein the means for transmitting to the firewall device comprises means for transmitting the encrypted message to the firewall device,

wherein the means for transmitting to the security device comprises means for transmitting the encrypted message to the firewall device,

the system further comprising;

means for decrypting the message by the security device,

wherein the means for analyzing comprises means for analyzing contents of the message which has been decrypted.

54. A system according to claim 53, further comprising:

means for decoding the decrypted message,

wherein the means for analyzing comprises;

means for analyzing the contents of the messages which have been decrypted and decoded.

55. A system according to claim 53, wherein the means for analyzing comprises:

means for determining if the contents of the message are from a machine which is permitted to communicate with the data center.

56. A system according to claim 53, wherein the means for analyzing comprises:

means for determining if the contents of the message contain only information which is authorized to be transmitted to the data center.

57. A system according to claim 53, wherein the means for creating a message comprises:

means for creating the message to contain information received from the electromechanical sensors of the machine.

58. A system according to claim 57, wherein the means for creating a message comprises:

means for creating the message to contain information received from the electromechanical sensors of the machine which is a business office device.