API Authorization Control via Local Token Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need to limit the use of APIs in information processing devices to authorized developers and prevent unauthorized use, especially in scenarios where external network access is not available, and existing solutions like encryption and certificate-based authentication face challenges in ensuring authenticity and efficiency.
Innovation Solution
An information processing system that includes an acquisition unit to gather developer identification information, a determination unit to verify authorization, a control unit to manage API access, and a content processing unit to associate content with authorized developer information, ensuring that only authorized developers can use specific API functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If API access is restricted to authorized developers only, then security and authorization control are improved, but device complexity and authentication overhead increase
Solution Approach 1:
The patent implements preliminary action by requiring developers to register and obtain authorization tokens before accessing APIs. The information processing device stores these tokens in advance, enabling quick verification without complex real-time authentication. This resolves the contradiction by establishing security protocols beforehand, reducing both the perceived complexity and actual overhead during API access.
2Reliability
If developer verification is performed for each API call, then unauthorized access is prevented, but processing time and system overhead increase
Solution Approach 1:
The patent extracts the verification process from individual API calls by implementing a separate authentication module that handles token validation independently. The information processing device separates credential verification from business logic execution, performing verification once per session rather than with every API call. This reduces processing time while maintaining access control reliability.
3Reliability
If encryption methods are used to protect API keys, then security is improved, but implementation complexity and computational overhead increase
Solution Approach 1:
The patent introduces an intermediary authentication module that acts as a mediator between the API caller and the information processing device. This module handles encryption and decryption of API keys, shielding the main system from complex cryptographic operations. The intermediary manages security protocols centrally, reducing implementation complexity while maintaining strong encryption-based security.
4Reliability
If external network access is required for authentication, then centralized authorization is achieved, but system availability decreases when network is unavailable
Solution Approach 1:
The patent implements local quality by enabling the information processing device to store and verify authorization tokens locally without requiring continuous external network access. Different parts of the authentication system have different requirements: initial token issuance requires network access for centralized authorization, while subsequent verifications can proceed offline using locally stored credentials. This provides both centralized authorization consistency and offline operational capability.
Data Source
AI summary
An information processing device includes an acquisition unit configured to acquire developer identification information associated with an application program possessed by a user terminal, from the user terminal. A determination unit determines whether a developer of the application program indicated by the developer identification information is a developer who has made an advance request for authorization for use. A control unit controls execution of a function possessed by the information processing device, according to an instruction from the user terminal, when the developer of the application program indicated by the developer identification information is a developer who has made an advance request for authorization for use, and a content processing unit acquires a content based on the execution of the function, and associates the acquired content with information of the developer on which the determination has been performed.