Automatic Log-Out Mechanism for Image Forming Apparatus Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In image forming apparatuses, users may inadvertently leave without logging out, allowing unauthorized users to access and start subsequent processes, compromising security.

Innovation Solution

An image forming apparatus with a log-in and log-out processing section that verifies user identification through stored discrimination information, ensuring only authorized users can initiate and complete processes, and automatically logs out after process completion to prevent unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the apparatus displays an initial scene and waits for a predetermined time after process completion, then user convenience is improved (users can leave without explicit log-out), but security deteriorates (unauthorized users can pose as identified users to start subsequent processes)

Engineering Contradiction:
Improveuser convenienceVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary log-out processing automatically after process completion, before the wait time expires. This preliminary action ensures that the identified user session is terminated properly, preventing unauthorized users from exploiting the wait time to pose as the identified user. The log-out processing section executes the log-out operation in advance, eliminating the security vulnerability while maintaining the convenient wait time feature.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If automatic log-out is implemented after process completion, then security is improved (unauthorized access is prevented), but device complexity increases (additional log-out processing section required)

Engineering Contradiction:
ImprovesecurityVSAvoidsystem structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The log-out processing section is merged with the existing control architecture of the image forming apparatus. The log-out processing functionality is integrated into the central control unit that already manages identification and process execution, rather than adding a completely separate physical component. This merging approach implements automatic log-out while minimizing the increase in device complexity by utilizing existing system resources and control pathways.

Inventive Principle:
Principle #5Merging (Combining)

3Productivity

If the identified user session is maintained during wait time, then productivity is improved (quick subsequent process execution), but harmful factors increase (unauthorized user impersonation)

Engineering Contradiction:
Improveprocess execution speedVSAvoidunauthorized access
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system applies preliminary anti-action by automatically terminating the identified user session through log-out processing before the wait time period can be exploited by unauthorized users. This counter-measure is executed in advance to prevent the harmful effect of unauthorized impersonation. The log-out processing section ensures that the user session is properly closed, thereby neutralizing the security risk while the apparatus remains ready for the next authorized user to log in and execute processes efficiently.

Inventive Principle:
Principle #9Preliminary anti-action

Data Source

PatentUS8800028B2Image forming apparatus that prevents unauthorized use
Publication Date: 2014.08.05 OKI ELECTRIC INDUSTRY CO LTD
  • US8800028B2 patent drawing
  • US8800028B2 patent drawing
  • US8800028B2 patent drawing

AI summary

An image forming apparatus which performs a log-in through an identification with respect to a user includes a non-volatility memory which previously stores discrimination information of the user as registration discrimination information. A discrimination information obtaining section obtains an identified discrimination information from the user. An identifying section compares the identified discrimination information and the registration discrimination information to determine whether the identification is authenticated. An inputting section which receives a process request input by the user. A process executing section executes the process request from the inputting section. A log-in section logs in for the user when the identification is authenticated. A log-out processing section logs out following an end of the input of the process request. The process executing section executes the requested process together with log-out.