Authority Transfer System for User Terminal Deregistration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In OAuth 2.0-based cloud services, users cannot deregister their user terminals when they lose or replace them, as existing methods do not provide a way to handle such situations effectively.
Innovation Solution
An authority transfer system that includes a server with a receiving unit for authorization requests, a specifying unit for identifying user terminals, an authorizing unit for sending confirmation requests, an issuing unit for access tokens, a registering unit for user terminal registration, a determining unit for deregistration, and a deregistering unit to confirm and execute deregistration requests from other registered terminals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the user terminal is registered in advance in the authorization server, then the client can request authority transfer independently, but the user cannot deregister the terminal when it is lost or replaced
Solution Approach 1:
The patent introduces a new intermediary component: a deregistration request receiving unit that accepts deregistration requests from any registered terminal. This intermediary handles the terminal deregistration function centrally, allowing users to deregister lost terminals through alternative registered terminals without requiring direct access to the lost terminal itself.
Solution Approach 2:
Instead of requiring the user to operate the lost terminal for deregistration (traditional approach), the patent inverts the approach by allowing deregistration requests to be initiated from any other registered terminal. The system verifies ownership through the user account associated with the terminal to be deregistered, rather than requiring direct operation of that terminal.
2Reliability
If the authorization server requests permission to transfer authority to the registered user terminal, then security is maintained, but the process becomes complex when the user cannot operate the terminal
Solution Approach 1:
The patent introduces a centralized deregistration request receiving unit that mediates all terminal deregistration operations. This intermediary component simplifies the process by providing a single, standardized interface for deregistration requests, handling verification and execution centrally rather than requiring complex point-to-point verification between terminals.
Solution Approach 2:
The system enables self-service deregistration by allowing any registered terminal to initiate deregistration of other terminals through the authorization server. The user account system automatically verifies ownership relationships, eliminating the need for manual verification processes or user intervention at the lost terminal.
Data Source
AI summary
An authority transfer system comprising a client, a resource server, a server that receives, from the client, an authorization request requesting permission to access to a resource managed by the resource server, and a user terminal possessed by an owner of the resource is provided. The server registers a first user terminal in accordance with a registration request of the first user terminal being received from the first user terminal, and determines whether or not a registered second user terminal can be deregistered in accordance with a registration cancellation request being received from the first user terminal, and if it is determined that the second user terminal can be deregistered, authenticates the first user terminal or the second user terminal, and deregisters the second user terminal in accordance with the authentication.