Image Processing Apparatus Access Token Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current web applications lack a mechanism to limit the use of image processing functions by an image processing apparatus, potentially leading to unauthorized access and security risks if access tokens are compromised.
Innovation Solution
An image processing apparatus is equipped with circuitry to verify the validity of access tokens and determine function availability based on the token's permissions, using a function availability table to manage and restrict access to specific functions such as printing and scanning.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If access tokens are provided to web applications for authentication, then web applications can access image processing functions, but security risks increase if tokens are compromised
Solution Approach 1:
The patent segments the access control mechanism by introducing a function availability table that divides and restricts access to specific functions individually. Instead of providing blanket access through the access token, the system now checks each function request against the table to determine whether the web application is authorized to use that particular function. This segmentation limits the potential damage if a token is compromised, as the attacker can only access functions listed in the availability table.
Solution Approach 2:
The patent implements preliminary anti-action by pre-configuring the function availability table before web applications can access image processing functions. The table is set up in advance to specify which functions are permitted for each web application, and the system proactively checks this table before allowing any function access. This preventive measure blocks unauthorized function calls before they can execute, countering potential security threats in advance.
2Object-affected harmful factors
If function availability is restricted based on access tokens, then security is improved, but system complexity increases
Solution Approach 1:
The patent introduces the function availability table as an intermediary component between the access token validation and the actual function execution. This table acts as a mediator that translates the broad authentication granted by the access token into specific function-level permissions. The intermediary layer simplifies the control logic by centralizing function permission management in one data structure, making the system easier to maintain and configure despite the increased control granularity.
Data Source
AI summary
An image processing apparatus includes circuitry to verify validity of an access token of a web application that is provided by a web server communicably connected to the image processing apparatus via a network. The circuitry determines whether one of a plurality of functions of the image processing apparatus is available to the web application based on the access token verified and determined as being valid in response to a request to use one of the plurality of functions from the web application. The plurality of functions of the image processing apparatus includes at least one of a print function and a scan function.