Cloud Access Mediation for Secure Image Processing Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing image processing devices, such as multifunction peripherals (MFPs), face challenges in efficiently and securely communicating with cloud services due to security vulnerabilities and the need for frequent updates, especially when accessing cloud services like Google Drive, Microsoft SharePoint Online, and Evernote, which restrict access from embedded equipment.

Innovation Solution

A communication mediation device and system that associates cloud service login information with a user, allowing the device to log into cloud services through a communication mediator, which is easier to update than the image processing device, thereby mitigating security vulnerabilities and facilitating communication without directly updating the image processing device.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If image processing devices directly access cloud services, then communication functionality is achieved, but security vulnerabilities and update difficulties arise

Engineering Contradiction:
ImprovesecurityVSAvoidupdate complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a communication mediation device as an intermediary between the image processing device and cloud services. This mediator handles authentication and communication, allowing the image processing device to access cloud services without embedding complex authentication logic, thereby improving security while maintaining simplicity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If cloud service access is enabled in image processing devices, then functionality is improved, but security risks increase due to embedded equipment restrictions

Engineering Contradiction:
Improvecloud service compatibilityVSAvoidsecurity risks
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The communication mediation device serves as a secure intermediary that handles cloud service authentication and communication. This approach enables cloud service compatibility while isolating the image processing device from direct security risks associated with embedded equipment restrictions.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If authentication information is stored in image processing devices, then direct cloud access is enabled, but security vulnerabilities increase

Engineering Contradiction:
Improvecloud access convenienceVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent extracts authentication information and cloud service communication functions from the image processing device and places them in a separate communication mediation device. This extraction maintains ease of cloud access while improving security by removing sensitive authentication data from the embedded image processing device.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS12468492B2Communication mediation device, computer-readable non-transitory recording medium storing communication mediation program, and communication mediation system for mediating communication with cloud service for storing data
Publication Date: 2025.11.11 KYOCERA DOCUMENT SOLUTIONS INC
  • US12468492B2 patent drawing
  • US12468492B2 patent drawing
  • US12468492B2 patent drawing

AI summary

A communication mediation device comprises a communication device, a storage device, and a controller. The communication device communicates with an image processing device and a cloud service. The storage device stores a predetermined code, cloud service information and an access token, in association with user identification information. The controller logs into, when the communication device has received information sent from the image processing device and the received information has matched the predetermined code, the cloud service indicated by the cloud service information corresponding to the user identification information corresponding to the predetermined code using the access token corresponding to the user identification information and provides a notification of the cloud service logged in through the communication device to the image processing device.