Authentication Broker Apparatus Mediating ID Management

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing authentication broker apparatuses cannot mediate authentication processes between service providing apparatuses and ID managing apparatuses with different authentication conditions, potentially leading to security issues when the ID managing apparatus has a looser authentication condition than the service providing apparatus.

Innovation Solution

An authentication broker apparatus with an extracting unit that identifies and extracts ID managing apparatuses fulfilling the authentication conditions of the service providing apparatus, and a transmitting unit that provides link information to access these ID managing apparatuses, ensuring secure authentication processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If an authentication broker apparatus mediates authentication between service providing apparatus and ID managing apparatus with different authentication conditions, then authentication flexibility and service accessibility are improved, but security reliability deteriorates when the ID managing apparatus has looser authentication conditions

Engineering Contradiction:

Improveauthentication compatibilityVSAvoidsecurity

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The authentication broker apparatus acts as an intermediary between the service providing apparatus and multiple ID managing apparatuses. It receives authentication requests, evaluates authentication conditions, selects appropriate ID managing apparatuses that meet the required security level, and mediates the authentication process. This mediator role enables compatibility between different authentication systems while maintaining security through centralized control and evaluation.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication broker apparatus dynamically selects which ID managing apparatus to use based on the authentication conditions of each request. It evaluates the authentication level required by the service providing apparatus and matches it with suitable ID managing apparatuses in real-time, rather than using a fixed mapping. This dynamic selection ensures security requirements are met while accommodating different authentication conditions.

Inventive Principle:

Principle #15Dynamics

2Adaptability or versatility

If multiple ID managing apparatuses with different authentication conditions are supported, then system versatility is improved, but device complexity increases

Engineering Contradiction:

Improvemulti-apparatus supportVSAvoidauthentication broker complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The authentication broker apparatus segments the authentication management function by maintaining separate evaluation criteria and selection logic for different types of ID managing apparatuses. It divides the complex task of multi-apparatus management into manageable components: condition evaluation, apparatus selection, and request routing. This segmentation reduces overall complexity while supporting multiple apparatus types.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The authentication broker apparatus is designed as a universal system that can handle multiple types of ID managing apparatuses through a unified interface and evaluation framework. It implements a general-purpose authentication condition evaluation mechanism that can adapt to different apparatus types without requiring separate specialized systems, thereby reducing complexity through consolidation.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Reliability

If authentication conditions are strictly enforced, then security is improved, but ease of operation deteriorates due to restricted access

Engineering Contradiction:

ImprovesecurityVSAvoidaccess convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The authentication broker apparatus applies different authentication conditions locally to different service providing apparatuses and user scenarios. Instead of enforcing a single uniform authentication level across all services, it evaluates and applies appropriate authentication conditions based on the specific service requirements and user context. This local adaptation maintains security where needed while allowing easier access where appropriate.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The system changes authentication parameters dynamically based on the service type, user role, and risk level. It adjusts the strictness of authentication conditions as a variable parameter rather than a fixed setting, allowing the same authentication broker to enforce strict conditions for high-security services while permitting more convenient access for low-risk services.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS11218479B2Authentication broker apparatus and non-transitory computer readable medium storing authentication broker program

Publication Date: 2022.01.04 FUJIFILM BUSINESS INNOVATION CORP

AI summary

An authentication broker apparatus includes an extracting unit and a transmitting unit. In response to an authentication request from a service providing apparatus that provides a service, the extracting unit extracts, from identification managing apparatuses that manage user ID codes used by users to access a service, at least one ID managing apparatus that fulfills an authentication condition relating to authentication of the service providing apparatus that has requested authentication. The transmitting unit transmits, to the service providing apparatus, link information to access the at least one ID managing apparatus extracted by the extracting unit.