Information Processing System with Device-User Pairing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing systems face challenges in preventing unauthorized access when user credentials, such as usernames and passwords, are inadvertently disclosed, particularly on smart devices that may be stolen or lost, allowing third parties to access sensitive information.
Innovation Solution
The system implements a pairing method where smart devices are authenticated with user information through a QR code registration process, using a one-time key that associates device and user accounts, ensuring that both credentials are required for access, thus preventing unauthorized access even if credentials are disclosed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If common information is used for authentication, then authentication process is simplified, but security is compromised when common information is disclosed
Solution Approach 1:
The authentication system is segmented into two independent parts: device identification information stored in the terminal apparatus and user information stored in the authentication apparatus. Both segments are required for successful authentication, so even if one segment (common information) is disclosed, the system remains secure because the other segment cannot be obtained by unauthorized parties.
2Reliability
If device identification information is stored and verified, then unauthorized access is prevented, but authentication complexity increases
Solution Approach 1:
The patent introduces an intermediary authentication apparatus that mediates between the terminal apparatus and the service system. The authentication apparatus holds the user information and performs the verification of device identification information, thereby preventing direct storage of sensitive data in the terminal apparatus while maintaining a relatively simple terminal device structure.
Data Source
AI summary
An information processing apparatus receives user information and a request, generates authentication information in response to the request, stores the authentication information associated with the user information, receives the authentication information from a terminal apparatus and device identification information identifying the terminal apparatus, stores the device identification information and the user information stored associated with the authentication information in a manner of associating them with one another when information coincident with the received authentication information is stored, determines, when receiving the user information, the device identification information and a service request from the terminal apparatus, whether information coincident with the user information and information coincident with the device identification information are stored, and provides a service concerning the service request when determining that information coincident with same the user information and information coincident with the same device identification information are stored.