Mobile Device Image Forming Apparatus Secure Pairing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing technologies face challenges in securely and efficiently connecting mobile devices to image forming apparatuses for BYOD services, particularly in authenticating and authorizing access to control functions, while ensuring secure communication and data exchange.
Innovation Solution
A method is introduced where temporary and permanent credential information is exchanged between mobile devices and image forming apparatuses, with encrypted PIN codes being decrypted to validate user access, allowing secure pairing sessions and control commands, and utilizing WebSocket for event notifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If temporary credential information is exchanged during pairing, then security of connection establishment is improved, but connection establishment time is increased
Solution Approach 1:
The authentication process is divided into two distinct phases: temporary credential exchange during pairing for initial security verification, and permanent credential exchange after PIN code validation for sustained access. This segmentation allows the system to implement robust security measures without blocking the entire connection process indefinitely, as each phase has a specific purpose and can be completed independently.
Solution Approach 2:
Temporary credential information is provided in advance during the pairing request phase, enabling the mobile device to encrypt the PIN code before submission. This preliminary action ensures that when the PIN code is validated, the credentials are already prepared and can be exchanged efficiently, reducing the overall authentication time while maintaining security.
2Reliability
If PIN code encryption and validation is performed, then user authentication security is improved, but processing time is increased
Solution Approach 1:
The temporary credential information acts as an intermediary that enables secure PIN code encryption without requiring direct transmission of unencrypted credentials. The mobile device uses the temporary credential to encrypt the PIN code locally, then transmits only the encrypted version. This intermediary mechanism ensures security while minimizing processing time, as the encryption operation is performed efficiently using the provided temporary credential rather than requiring complex validation protocols.
3Reliability
If permanent credential information is provided after authentication, then access control reliability is improved, but device complexity is increased
Solution Approach 1:
The credential system transitions dynamically from temporary to permanent based on authentication success. During the pairing phase, temporary credentials are used for secure communication. Once the PIN code is validated, the system automatically transitions to providing permanent credential information, enabling sustained access control. This dynamic approach simplifies the overall system architecture by using a single authentication flow that adapts to different access levels rather than requiring separate complex systems for temporary and permanent access.
Data Source
AI summary
Provided is a method of establishing, by an image forming apparatus, a connection to a mobile device, the method including transmitting temporary credential information to the mobile device in response to receiving a pairing request from the mobile device, receiving an encrypted personal identification number (PIN) code from the mobile device, determining whether a PIN code is valid by decrypting the encrypted PIN code using the temporary credential information to extract the PIN code, and transmitting permanent credential information to the mobile device when it is determined that the PIN code is valid.