Temporary Access Control for Image Processing via Management Apparatus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face difficulties in accessing image processing apparatus functions when their registered portable terminal devices are unavailable or insufficient, leading to productivity issues and security risks due to existing systems' inability to provide temporary use permissions securely.
Innovation Solution
An image processing apparatus and method that allows temporary use permission from a second portable terminal apparatus, with a management apparatus registering proper use permissions and determining the scope of temporary use based on application information, ensuring secure access and functionality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If temporary use permission is allowed from unregistered portable terminal apparatus, then user accessibility and productivity are improved, but system security is compromised
Solution Approach 1:
The patent introduces a management apparatus as an intermediary between the portable terminal apparatus and the image processing apparatus. This mediator verifies the terminal's identity, checks application information, and issues temporary use permissions only after confirming security criteria are met, thus enabling access while maintaining security through a controlled intermediate verification layer
Solution Approach 2:
The system changes the permission parameter from permanent/registered status to temporary/unregistered status. By introducing time-limited permissions that expire after a predetermined period, the system allows access from unregistered terminals while automatically revoking it after the specified duration, thereby balancing accessibility with security through parameter modification
2Reliability
If proper use permission is registered for each portable terminal apparatus, then system security is maintained, but user convenience and flexibility are reduced
Solution Approach 1:
The patent transforms the static registration system into a dynamic permission system. Instead of permanent registered permissions, the system provides temporary permissions that can be dynamically issued to unregistered terminals based on application information and security criteria, allowing flexibility while maintaining security through time-limited access
Solution Approach 2:
The management apparatus performs preliminary verification of application information and security criteria before issuing temporary use permission. This preliminary action ensures that only terminals meeting security requirements gain access, maintaining security while enabling convenient temporary access for users who need it
3Reliability
If application information is obtained and verified for temporary permission, then security control is improved, but system complexity increases
Solution Approach 1:
The management apparatus serves as an intermediary that centralizes the complex verification tasks. By separating the verification function into a dedicated intermediary component, the image processing apparatus itself remains simpler while the management apparatus handles the complexity of obtaining and verifying application information from multiple terminals
Data Source
AI summary
An image processing apparatus comprises: an accepting portion that accepts a request for a temporary use permission to use a function of the image processing apparatus from a second portable terminal apparatus in place of a first portable terminal apparatus having a proper use permission to use the function, an obtaining portion that obtains application information of an application installed on the second portable terminal apparatus; a determining portion that determines a scope of the temporary use permission with reference to reference data stored on a management apparatus and on the basis of the application information; a judgment portion that judges whether or not the requested process falls within the determined scope when a request for a process requiring the function is received from or transferred to the second portable terminal apparatus; and an executor portion that executes the requested process if it falls within the determined scope.