Image Forming Apparatus Multi-User Authentication via Device and User ID Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing image forming apparatuses do not adequately secure authentication for each user when multiple users share a mobile terminal, leading to potential unauthorized access and security breaches, especially when previous owners' data is printed alongside current owners' data.
Innovation Solution
The apparatus includes a data reception unit for receiving device IDs and user information from mobile terminals via wired or wireless communication, an authentication information reception unit for short-range wireless communication, and a print control unit to authenticate and print data based on user-specific information such as account IDs, SIM card IDs, and UUIDs, ensuring each user's data is securely printed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication is performed based on device identifier only, then authentication printing can be achieved, but security is compromised when multiple users share one mobile terminal
Solution Approach 1:
The authentication system is segmented into two distinct components: device identifier authentication (for terminal recognition) and user identifier authentication (for user identification). This segmentation allows the system to authenticate both the mobile terminal and the specific user, preventing unauthorized access when multiple users share one device while maintaining manageable system complexity through modular authentication processes
Solution Approach 2:
The system performs preliminary authentication of the device identifier before proceeding to user identifier verification. This preliminary action ensures that only recognized mobile terminals can initiate printing operations, while subsequent user authentication ensures that only authorized users can access specific print data, thereby enhancing security without requiring complete system redesign
2Reliability
If device registration table is updated for each user, then user-specific authentication can be performed, but operation management becomes time-consuming and troublesome
Solution Approach 1:
Authentication data is segmented into device-level information (stored in device registration table) and user-level information (stored in user management table). This segmentation allows the system to perform user-specific authentication without requiring updates to the device registration table, as user identifiers are independently managed. Consequently, the system achieves both user-specific authentication capability and ease of operation, as users can be added or removed without affecting device registration
Solution Approach 2:
The image forming apparatus acts as an intermediary that receives both device identifier and user identifier from the mobile terminal, then performs separate authentication checks against different data structures. This intermediary role allows the system to maintain a static device registration table while dynamically managing user access, thereby achieving user-specific authentication without the operational burden of continuously updating device registration information
Data Source
AI summary
In a case where a plurality of users share the use of one mobile terminal, an image forming apparatus has performed authentication printing also on image data to which the previous owner of the mobile terminal has sent a printing instruction. According to the present embodiment, an image forming apparatus includes a data reception unit configured to receive data having a device ID of a mobile terminal and user information for identifying a user of the mobile terminal, and includes an authentication information reception unit configured to receive authentication information including the device ID and the user information from the mobile terminal. The image forming apparatus also includes a print control unit configured to control, in response to the reception of the authentication information, a printer to print the data received by the data reception unit.