Cross-Device Authentication Token Sync for Shared Service Login
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In existing systems, users are required to perform multiple login operations for different information processing apparatuses and their installed applications, leading to inconvenience when switching between them, even if the user's authentication state should remain consistent.
Innovation Solution
An information processing system with a management server that synchronizes authentication token information across multiple apparatuses, allowing a single successful login to enable seamless access across devices by associating and storing authentication tokens with user information, eliminating the need for repeated login operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate login operations are performed for each information processing apparatus and its applications, then security and authentication control are improved, but user convenience and operational efficiency deteriorate due to repeated login requirements
Solution Approach 1:
The patent merges separate authentication processes into a unified system where a single login operation at an information processing apparatus automatically authenticates the user across multiple applications and services. The authentication result is shared and recognized across different systems, eliminating the need for separate logins while maintaining security control.
Solution Approach 2:
The authentication system is designed to be universal, where a single authentication token or credential obtained from logging into one information processing apparatus can be used across multiple applications and even other information processing apparatuses. This multi-functional authentication mechanism resolves the contradiction by providing broad access control without requiring repeated authentication.
2Ease of operation
If authentication state is maintained for a certain time, then user convenience is improved by avoiding repeated logins to the same application, but security control deteriorates due to extended access without re-authentication
Solution Approach 1:
The authentication system dynamically adjusts the validity period and scope of authentication tokens based on user roles, application types, and security requirements. Rather than a fixed time-based approach, the system adaptively manages session duration and access permissions, allowing extended convenience for trusted contexts while maintaining security control for sensitive operations.
Solution Approach 2:
Different authentication state maintenance policies are applied to different applications and contexts. High-security applications may require shorter session durations or additional verification, while lower-risk applications can maintain longer authentication states. This localized approach to session management resolves the contradiction by tailoring security and convenience to specific contexts.
3Adaptability or versatility
If multiple information processing apparatuses are deployed to provide services, then service availability and accessibility are improved, but authentication complexity increases requiring separate logins for each device
Solution Approach 1:
The authentication system is designed as a universal credential system where a single authentication token obtained from any information processing apparatus in the network can be recognized and validated across all other apparatuses. This eliminates the need for device-specific authentication configurations while maintaining service accessibility across multiple devices.
Solution Approach 2:
The patent introduces an intermediary authentication server or centralized credential management system that mediates between multiple information processing apparatuses and users. This intermediary validates authentication tokens and manages credential synchronization across devices, reducing authentication complexity while enabling seamless cross-device access.
Data Source
AI summary
An information processing system includes: multiple information processing apparatuses; and a management server that manages the multiple information processing apparatuses, in which each of the information processing apparatuses includes a first processor, in which the first processor is configured to: perform an authentication process for a user by using first identification information and first password information that are inputted by the user and permit the user who succeeds the authentication process to use a corresponding one of the information processing apparatuses in a case where a result of the authentication process is successful; transmit second identification information and second password information to an external server that manages an additional service and request the external server to perform the authentication process in a case where the second identification information and the second password information are inputted by the user to use the service that is usable in the corresponding one of the information processing apparatuses; and permit the user to use the service and transmit authentication token information that is transmitted when the external server sends back a message that represents success of authentication and user information that enables the user to be identified to the management server in a case where the external server sends back the message that represents the success of authentication, in which the management server includes a second processor and a storage unit, in which the second processor is configured to: acquire data relevant to a state of the multiple information processing apparatuses by synchronously communicating with the multiple information processing apparatuses to be managed and store the data as synchronous data in the storage unit; and associate the authentication token information that is transmitted from the first processor with the user information and store the authentication token information in the synchronous data of the corresponding one of the information processing apparatuses that transmits the authentication token information and in the synchronous data of another information processing apparatus that implements authentication management in common with the corresponding one of the information processing apparatuses, in which the first processor is configured to transmit the user information about the user who logs in to the management server in a case where the user performs the authentication process by using the first identification information and the first password information, in which the second processor is configured to transmit the authentication token information to the corresponding one of the information processing apparatuses that transmits the user information in a case where the authentication token information that is associated with the user information that is transmitted from the first processor is stored in the synchronous data of any one of the information processing apparatuses that implements the authentication management in common, and in which the first processor is configured to request the external server to perform the authentication process by using the authentication token information that is transmitted from the second processor and permit the user to use the service in a case where the external server sends back the message that represents the success of authentication.