Access Token Management via Server-Side Expiration Feedback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access token management systems fail to efficiently manage access token expiration times, leading to potential communication disruptions and errors during processes like image data upload, as they rely on the scanner's internal clock for time management, which can be inaccurate.
Innovation Solution
A server-based system that generates and manages access tokens with an updated expiration time, transmitting determination information to the scanner about the remaining token validity, allowing for timely refresh and preventing token expiration errors by issuing a new access token when the threshold is reached.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If the scanner's internal clock is used for time management, then the device complexity is reduced, but the reliability of token expiration detection deteriorates due to clock inaccuracy
Solution Approach 1:
The server acts as an intermediary that provides accurate time reference (determination information) to the scanner. Instead of relying on the scanner's internal clock, the server transmits reference time data that the scanner uses to accurately determine token expiration, thus resolving the contradiction between simplicity and reliability.
2Productivity
If the access token validity period is extended, then the frequency of token refresh requests is reduced, but the risk of using expired tokens increases
Solution Approach 1:
The server provides feedback (determination information) about the actual expiration time of access tokens to the scanner. This feedback mechanism allows the scanner to accurately track token validity regardless of the token duration, enabling both extended validity periods and high reliability by preventing use of expired tokens.
Solution Approach 2:
The server transmits determination information in advance that enables the scanner to proactively identify when tokens are approaching expiration. This preliminary action allows the scanner to refresh tokens before they expire, maintaining reliability while allowing flexible token duration for productivity.
3Reliability
If the scanner proactively requests token refresh, then communication continuity is maintained, but unnecessary network requests increase
Solution Approach 1:
The server provides determination information that acts as feedback, enabling the scanner to make intelligent decisions about when to request token refresh. The scanner uses this information to request refresh only when necessary (when tokens are approaching expiration), maintaining reliability while avoiding unnecessary network requests and energy consumption.
Data Source
AI summary
Provided is a server including: a user authenticating unit that authenticates, using an access token, a user of a user device; a token receiving unit that receives an access token from the user device; and a determination information transmitting unit which, when the access token is received, transmits determination information that enables a determination as to whether or not a remaining time until a time of expiration of the access token is less than a predetermined threshold, to the user device, wherein the user authenticating unit issues a new access token with an updated time of expiration when an issuance request for an access token which is transmitted by the user device having received the determination information is received.