Authentication Token Flagging for Low-Latency Multi-Factor Login

Solution Overview

Problem

Existing authentication systems face delays due to increased communication between devices when determining if a user requires a second authentication method, which is not initially set, leading to inefficiencies in service provision.

Innovation Solution

An authentication device and system that determine the need for a second authentication method without additional communication by using a setting unit to set a flag indicating the necessity, allowing the service providing device to prompt the user for the second method based on token information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If the service providing device confirms setting values with the authentication device to determine whether the second authentication method is set, then the determination accuracy is improved, but the number of communications increases and service delivery is delayed

Engineering Contradiction:

Improvedetermination accuracyVSAvoidservice delivery delay

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The authentication device performs preliminary action by setting a flag in the user's information record that indicates whether the second authentication method is necessary. This flag is stored in advance and can be retrieved by the service providing device without requiring additional communication with the authentication device, thus resolving the contradiction between determination accuracy and service delivery speed.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If the service providing device confirms setting values with the authentication device for each login, then the authentication policy compliance is ensured, but the communication overhead increases

Engineering Contradiction:

Improveauthentication policy complianceVSAvoidcommunication overhead

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The authentication device performs preliminary action by setting a flag in the user's information record that indicates whether the second authentication method is necessary. This flag is stored in advance and can be retrieved by the service providing device without requiring additional communication with the authentication device, thus resolving the contradiction between determination accuracy and service delivery speed.

Inventive Principle:

Principle #10Preliminary action

3Measurement precision

If multiple communications are performed between the service providing device and the authentication device, then the setting verification is improved, but the processing efficiency deteriorates

Engineering Contradiction:

Improvesetting verificationVSAvoidprocessing efficiency

Core Design Contradiction:

Measurement precisionVSProductivity

Solution Approach 1:

The authentication device performs preliminary action by setting a flag in the user's information record that indicates whether the second authentication method is necessary. This flag is stored in advance and can be retrieved by the service providing device without requiring additional communication with the authentication device, thus resolving the contradiction between determination accuracy and service delivery speed.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS20260012451A1Authentication device, authentication system, authentication method, and non-transitory computer-readable storage medium

Publication Date: 2026.01.08 CANON KK

AI summary

An authentication device comprises an authentication unit configured to authenticate by a first authentication method a user for whom a second authentication method, which is different from the first authentication method, has not been set and authenticate by the first authentication method and the second authentication method a user for whom the second authentication method has been set, and a setting unit configured to determine whether authentication by the second authentication method is necessary for the user for whom the second authentication method has not been set and if it is determined to be necessary, set information indicating that authentication by the second authentication method is necessary.