Image Processing Apparatus Authentication via Public Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional Bluetooth-based user authentication for multifunction peripherals is vulnerable to spoofing and brute force attacks due to the use of six-digit PIN codes, which can lead to unauthorized access of user ID and password information.
Innovation Solution
Implementing a high-security path-encrypted communication method that generates and verifies an 8-digit random number instead of a PIN code, using public and private key encryption to authenticate the multifunction peripheral and prevent spoofing, ensuring that only the correct device can exchange a Long Term Key (LTK) and perform user authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a six-digit PIN code is used for Bluetooth authentication, then the authentication process is simple and fast, but the security is insufficient and vulnerable to brute force attacks
Solution Approach 1:
The patent changes the parameter of authentication code from six digits to eight digits, increasing the search space from 10^6 to 10^8 possible combinations. This parameter change directly addresses the security weakness while maintaining the same authentication mechanism type, thus improving reliability without fundamentally altering the ease of operation.
Solution Approach 2:
The patent introduces a new dimension of security verification by implementing public key infrastructure (PKI)-based mutual authentication in addition to the traditional PIN code verification. This adds a cryptographic layer that prevents spoofing attacks, addressing the security vulnerability while keeping the original PIN code mechanism intact for compatibility.
2Reliability
If path-encryption is performed using conventional Bluetooth PIN code verification, then encryption is implemented, but spoofing of the multifunction peripheral cannot be detected
Solution Approach 1:
The patent implements mutual authentication where both the mobile terminal and multifunction peripheral verify each other's identity through public key exchange. This feedback mechanism ensures that both parties confirm they are communicating with the legitimate device, preventing spoofing attacks while maintaining the path-encryption capability.
Solution Approach 2:
The patent introduces public key certificates as an intermediary verification mechanism. Instead of directly trusting the PIN code exchange, the system uses certificate-based verification as an intermediary layer to confirm the identity of both communicating parties, thereby preventing spoofing while maintaining encryption.
3Reliability
If the PIN code input area is set for larger range (8+ characters), then password strength is improved, but the conventional Bluetooth PIN code system cannot handle this range
Solution Approach 1:
The patent segments the authentication process into two independent parts: (1) Bluetooth connection establishment using the traditional six-digit PIN code, and (2) secure data transmission using eight-digit or longer passwords with path-encryption. This segmentation allows each part to optimize for its specific requirement while maintaining overall system compatibility.
Solution Approach 2:
The patent separates the authentication dimension from the encryption dimension. The Bluetooth PIN code handles connection authentication, while a separate password field handles data transmission encryption with extended character range. This dimensional separation allows the system to support both six-digit Bluetooth PINs and longer passwords simultaneously.
Data Source
Figure 1
Figure 2
Figure 3A~3C
AI summary
When this image processing apparatus accepts an initial connection request from a mobile terminal, it displays a generated PIN code on a console unit 210, and when it accepts information corresponding to the PIN code from the mobile terminal, it compares that information with the generated PIN code, and performs authentication. When the authentication is successful, it generates a public key and a private key, and transmits the generated public key to the mobile terminal.