Function Execution via FIDO Authentication for Passwordless MFP Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack efficient methods for securely executing functions on devices using biometric authentication, particularly in multifunction peripherals, without relying on passwords.
Innovation Solution
A communication system utilizing a FIDO authentication scheme with a pair of keys, where a function executing device outputs encoded location information, and a terminal device encrypts verification information with a private key, which is decrypted by a server to send execution instructions to the device, enabling secure function execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password-based authentication is used, then system compatibility is maintained, but security is compromised and user convenience deteriorates
Solution Approach 1:
The patent replaces the mechanical password input system with a biometric authentication system using fingerprint sensors. The fingerprint authentication unit captures fingerprint information and compares it against stored templates, eliminating the need for users to manually input passwords. This substitution provides both enhanced security through unique biometric data and improved convenience through automatic recognition.
Solution Approach 2:
The system enables self-service authentication by storing fingerprint templates locally in the authentication unit and performing automatic comparison without requiring external verification. The user simply places their finger on the sensor, and the system autonomously verifies their identity and grants access, eliminating the need for password management or external authentication servers.
2Reliability
If biometric authentication is implemented, then security and convenience are improved, but device complexity increases
Solution Approach 1:
The patent merges the fingerprint authentication unit directly into the control unit of the image processing device. By integrating the authentication functionality within the existing control structure rather than adding a separate standalone system, the patent reduces overall device complexity while maintaining comprehensive security features. The control unit houses both the authentication logic and the fingerprint processing capabilities.
Solution Approach 2:
The control unit is designed to serve multiple functions: it manages image processing operations, controls device functions, and performs biometric authentication. This multi-functionality eliminates the need for separate dedicated authentication hardware, reducing device complexity while providing robust security. The same processing unit that manages printing and scanning also handles fingerprint verification.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A function executing device may cause a first output unit to output first output information including location information of a server that is configured to operate according to a predetermined authentication scheme. The first output information may be acquired by a terminal device configured to operate according to the predetermined authentication scheme. The terminal device may be configured to access the server, receive first verification information, create signature information by encrypting the first verification information using a private key in a case where first authentication for a target user succeeds, and send the signature information to the server. The server may be configured to decrypt the signature information using a public key, and send an execution instruction to the function executing device in a case where the first verification information is acquired by decrypting the signature information. The function executing device may execute a specific function.