API Authentication Service Code and License Processor
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the field of Internet services, ensuring the safe and appropriate use of Application Program Interfaces (APIs) across various stakeholders, including application providers, users, server managers, and data owners, is challenging without degrading the service's usefulness.
Innovation Solution
An information processing device is implemented with a service code processor and a license processor to generate and manage service codes and license information, ensuring secure API use by registering service identification, API use information, and user-specific data, while allowing users to approve or disapprove access and restricting API usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If strict authentication and license management are implemented for API use, then information security is improved, but service operation complexity increases
Solution Approach 1:
The patent segments the authentication process into distinct components: service code generation for application identification, license information generation for user-specific permissions, and separate approval workflows. This segmentation allows each component to be managed independently, reducing overall system complexity while maintaining security.
Solution Approach 2:
The patent implements preliminary action by generating service codes and license information in advance before actual API usage. The service code is generated when the application is registered, and license information is prepared with predefined access authorities. This preliminary preparation reduces authentication complexity during actual API operations.
2Manufacturing precision
If multiple registration processes (service code and license) are required for API use, then access control precision is improved, but registration time increases
Solution Approach 1:
The patent merges the service code generation and license information generation into a coordinated registration process. The service code processor and license processor work together to establish both application-level and user-level permissions simultaneously, achieving precise access control without requiring completely separate registration procedures.
Solution Approach 2:
The service code serves multiple functions: it identifies the application, links to license information, and enables authentication. This multi-functionality reduces the need for separate registration processes while maintaining precise access control through the integrated service code and license system.
Data Source
AI summary
The present invention is to ensure information safety of a user of service using API. An information processing device issues a service code in response to an API use request. The API use request relates to service using an application program that uses API and is transmitted from an application provider device. The information processing device makes service identification information and use API information correspond to the service code and registers the service identification information, the use API information, and the service code. According to user-specific information from the application provider, unapproved license information is issued for each application user. Approval of this license information by the application user side registers the license approval information. At service execution, authentication is performed based on the service code and the license information. When the authentication is passed, API use is permitted.