Image Forming Apparatus OAuth2 Token Acquisition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Implementing OAuth2.0 access token obtaining flows in image forming apparatuses is costly and inefficient due to the need for individual service provider interface support and changes, which increases the scope of influence and costs when adapting to new service providers or authorization flows.
Innovation Solution
An information processing apparatus capable of communicating with a server for authentication and authorization, including a communicator, a controller, and storage, which executes applications to obtain an authorization code and subsequently an access token, thereby simplifying the OAuth2.0 access token obtaining process and reducing the need for extensive firmware changes and individual interface support.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If individual service provider interfaces are supported in firmware, then compatibility with specific service providers is improved, but device complexity and cost increase
Solution Approach 1:
The patent introduces an intermediary component (authorization code obtaining unit and access token obtaining unit) that mediates between the image forming apparatus and various service providers. Instead of embedding service provider-specific interfaces directly in the firmware, the system uses a standardized OAuth2.0 flow with authorization codes as intermediaries, allowing multiple service providers to be supported without increasing firmware complexity
Solution Approach 2:
The patent implements a universal authentication mechanism based on OAuth2.0 that can work with multiple service providers through a common interface. The authorization code flow serves as a multi-functional solution that handles different service providers (Google, Microsoft, Apple, etc.) through the same authentication protocol, eliminating the need for separate interface implementations for each provider
2Adaptability or versatility
If service provider interfaces are individually supported, then service coverage is improved, but ease of manufacture and maintenance worsen
Solution Approach 1:
The patent uses the authorization code as a copyable, transferable credential that represents user authorization. Instead of implementing complex service provider-specific authentication logic, the system copies the standardized OAuth2.0 authorization code flow pattern and applies it universally across different service providers, significantly reducing implementation costs and complexity
3Adaptability or versatility
If extensive firmware changes are made to support new authorization flows, then functionality is improved, but productivity and development efficiency decrease
Solution Approach 1:
The patent segments the authentication process into distinct, independent units: the authorization code obtaining unit and the access token obtaining unit. This segmentation allows each unit to be developed, tested, and maintained independently, improving development efficiency while maintaining flexibility to support new authorization flows without requiring extensive firmware changes
Data Source
AI summary
An information processing apparatus comprises a communicator that communicates with an external service and a server that issues an access token to be used in access to the external service; a controller; and a storage that stores an application, wherein the controller obtains information on the server by executing the application, obtains an authorization code from the server identified by the server's information, and obtains an access token from the server by executing the application using the authorization code.