Communication Device Password Change via Server Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies for changing security codes or passwords in Multi-Function Peripherals (MFPs) lack secure methods, especially when users forget their passwords, leading to potential unauthorized access.
Innovation Solution
A communication system comprising a terminal device, a printer, and a mediation server that securely changes the printer's password by sending a PIN code to the user's email, which they input into the printer, allowing only authorized users to change the password without needing the old password.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the password change function is implemented without external verification, then the operation is simple and quick, but the security is compromised and unauthorized access may occur
Solution Approach 1:
The patent introduces a server as an intermediary between the communication device and the user. The server sends authentication information (PIN code) to the user's terminal device, which then inputs this information to the communication device for password change verification. This mediator approach enables secure password changes without requiring the old password, resolving the contradiction between security and operational simplicity.
2Ease of operation
If the old password is required for password change, then the security verification is straightforward, but the process cannot proceed if the user has forgotten the old password
Solution Approach 1:
The system performs preliminary authentication by sending a PIN code to the user's terminal device before the password change operation. This preliminary action verifies the user's identity through a different channel (email/SMS to terminal) rather than requiring the old password, enabling users to reset passwords even when forgotten while maintaining security through pre-verified authentication.
3Reliability
If authentication information is sent through email/SMS to terminal device, then secure verification is achieved, but the system requires additional components (server, terminal device)
Solution Approach 1:
The patent makes the terminal device serve multiple functions: it receives authentication information from the server via email or SMS, stores this information, and inputs it to the communication device for verification. This multi-functional use of the terminal device enables secure authentication while reducing the need for separate dedicated hardware, improving system adaptability.
Data Source
AI summary
A communication device may: send a change instruction including identification information to a server, wherein the server may store the identification information and target user information corresponding to a user of a terminal device in association with each other, and the change instruction may be a signal to instruct the server to send first authentication information to the terminal device by using the target user information, after the first authentication information has been sent from the server to the terminal device, accept input of the first authentication information, in a case where the input of the first authentication information is accepted, send the first authentication information to the server, in a case where the first authentication information is sent to the server, receive a change permission notification from the server, and in a case where the change permission notification is received from the server, change the password.