API Authorization via Local Developer ID Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a demand for a technology that can effectively limit the use of APIs by developers and prevent unauthorized use, particularly in scenarios where information processing devices may not have access to an external network for authentication or encryption key management.
Innovation Solution
An information processing system that obtains developer identification information and access control information from a user terminal, determines if the developer has made an advance request for authorization, and controls function execution based on this information, ensuring that only authorized developers can use specific APIs by embedding authentication information within the application.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If APIs are made available only to licensed developers with advance authorization requests, then unauthorized use is prevented, but the complexity of developer management and authorization verification increases
Solution Approach 1:
The system requires developers to submit advance requests for authorization before using restricted APIs. The information processing device stores these pre-authorized developer identifiers and automatically verifies them during API access, eliminating the need for real-time external verification and reducing system complexity while maintaining security
Solution Approach 2:
The system creates a local copy of authorization information (stored developer identifiers) within the information processing device. This local copy enables rapid verification without requiring continuous external network access, simplifying the authorization process while ensuring reliable control
2Measurement precision
If developer identification information is verified against external network resources, then authorization accuracy is improved, but the system cannot operate when external network access is unavailable
Solution Approach 1:
Authorization information is prepared in advance and stored locally in the information processing device. This pre-stored information enables the system to verify developer authorization offline without requiring external network access, ensuring continuous operation while maintaining verification accuracy
Solution Approach 2:
The system uses stored developer identifier information as an intermediary that bridges the gap between external authorization sources and local API access control. This intermediary enables verification to proceed locally without direct external network connection while maintaining the integrity of the authorization process
Data Source
AI summary
There is provided an information processing device including an obtaining unit configured to obtain, from a user terminal, developer identification information, and access control information for controlling whether or not one or more functions possessed by the information processing device are permitted to be executed, the developer identification information and the access control information being related to an application program possessed by the user terminal, a determination unit configured to determine whether or not a developer of the application program indicated by the developer identification information is a developer who has made an advance request for authorization for use, and a control unit configured to control execution of at least a portion of the one or more functions based on the access control information, based on the result of the determination by the determination unit.