Server-Mediated MFP Password Change Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies for changing passwords on multi-function peripherals (MFPs) lack secure mechanisms to prevent unauthorized password changes, allowing third parties to modify passwords if they gain access to the device.
Innovation Solution
A server-mediated system where a password change is permitted only if a valid user logs in to the server using associated account information, ensuring that the permission signal is sent to the device for secure password changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the MFP allows password change when accepting input of a wrong passcode, then the password can be changed, but unauthorized users can also change the password without proper authentication
Solution Approach 1:
The patent introduces a server as an intermediary between the MFP and the user for password change operations. When a wrong passcode is entered, the MFP sends a notification to the server, which then verifies the user's identity through account information stored in its database. The server acts as a trusted mediator that authenticates the user before allowing password change, preventing unauthorized access while maintaining ease of operation for legitimate users.
2Reliability
If the server requires terminal device login with account information for password change, then password change security is improved, but the operation process becomes more complex
Solution Approach 1:
The patent implements preliminary action by requiring users to register their account information with the server in advance, before any password change operation is needed. The server stores this account information in its database during a preliminary registration phase. When password change is subsequently required, the server simply verifies the user's identity against the pre-stored account information, streamlining the authentication process while maintaining high security standards.
Data Source
AI summary
A server may comprise a memory configured to store account information and identification information identifying a device, the account information and the identification information being in association with each other; and a controller, wherein the controller is configured to: in a case where a changing operation is performed on the device, receive a predetermined signal from the device, the changing operation being for changing a password currently set for the device; and in a case where a specific condition is fulfilled, send the device a permission signal for permitting a change of the password, wherein the specific condition is that the predetermined signal is received from the device and a terminal device different from the device is logged in to the server by using the account information stored in association with the identification information identifying the device.