Dynamic Notification Control for Mobile Terminal Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing systems face challenges in securely notifying mobile terminals of events from information processing apparatuses, as information leakage risks arise from varying security levels in different connection environments.
Innovation Solution
The system employs a dual authentication method and a server that receives authentication state and connection environment information from mobile terminals, allowing it to dynamically adjust the notification content based on the authentication state and connection environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the server notifies mobile terminals of event information without authentication verification, then the notification system is simple and fast, but information leakage risk increases in low-security environments
Solution Approach 1:
The notification system dynamically adjusts the level of authentication required and information disclosed based on the connection environment's security level. In high-security environments (e.g., offices), the system requires authentication and provides detailed notifications. In low-security environments (e.g., public spaces), the system uses simplified authentication and provides only essential notifications, thus adapting to varying security requirements without a fixed complex structure
Solution Approach 2:
Different authentication methods and notification contents are applied to different connection environments based on their security characteristics. The server identifies the connection environment type and applies appropriate authentication strategies locally - using fingerprint or face recognition for high-security environments while using simpler methods for low-security environments, ensuring each environment receives appropriately tailored security measures
2Loss of information
If the server provides detailed notification information to all mobile terminals, then users receive complete event information, but information leakage risk increases in shared spaces
Solution Approach 1:
The system changes the parameter of notification information completeness based on the connection environment's security level. In high-security environments, the server provides complete detailed notifications including all event information. In low-security environments, the server modifies the notification content to include only essential information, thus adjusting the information completeness parameter to balance user needs with security risks
3Reliability
If the server uses multiple authentication methods, then security is enhanced for high-security environments, but the authentication process becomes more complex
Solution Approach 1:
The authentication process dynamically adapts its complexity based on the connection environment. For high-security environments like offices, the system activates multiple authentication methods (fingerprint, face recognition) to enhance security. For low-security environments like public spaces, the system simplifies authentication to a single method, thus adjusting the authentication process complexity dynamically to match security requirements
Data Source
AI summary
An information processing system includes a controller configured to control information of which is notified to a mobile terminal. The controller performs control to cause a notification unit to notify the mobile terminal of first information in a case where the mobile terminal in a first environment has succeeded in authentication with the first authentication method, notify the mobile terminal of the first information and second information in a case where the mobile terminal in a second environment has succeeded in the authentication with the first authentication method, and notify the mobile terminal of the first information and the second information in a case where the mobile terminal in the first environment has succeeded in the authentication with the first authentication method and has further succeeded in authentication with the second authentication method.