Mobile Terminal Biometric Authentication for Image Processing Apparatus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods for network services, such as print and storage services, face security risks due to the leakage of sensitive information like passwords and the inconvenience of inputting user IDs and passwords in public spaces, while biometric authentication systems face challenges in securing private information and convenience when used across multiple devices.
Innovation Solution
A system comprising an image processing apparatus, a mobile terminal, and a service provision system that employs biometric authentication using a Trusted Platform Module (TPM) to securely store and manage biometric information and secret keys, allowing users to authenticate through their mobile devices via near-field communication or Bluetooth, reducing the need for password input and enhancing security and convenience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If biometric authentication is implemented using FIDO standard, then security against information leakage is improved, but device complexity and registration requirements worsen
Solution Approach 1:
The patent introduces a mobile terminal as an intermediary device that holds the secret key and performs biometric authentication. Instead of implementing complex FIDO authentication directly in the image processing apparatus, the mobile terminal acts as a mediator that simplifies the apparatus while maintaining security. The secret key is stored in the mobile terminal's secure element, and the apparatus only needs to communicate authentication results.
2Reliability
If biometric information and secret key are registered in the image processing apparatus, then authentication security is improved, but convenience of use across multiple devices worsens
Solution Approach 1:
The patent segments the authentication system into two parts: the image processing apparatus (which needs authentication) and the mobile terminal (which stores credentials). By separating the secret key storage from the authentication execution, the system allows users to authenticate at multiple devices using their personal mobile terminal, improving convenience while maintaining security.
Solution Approach 2:
The mobile terminal serves as a universal authentication credential holder that can be used across multiple image processing apparatuses. Instead of registering biometric data in each individual apparatus, the mobile terminal's secure element stores the secret key that can authenticate the user at any apparatus in the system, enabling multi-device access.
3Reliability
If user ID and password are input at the operation unit, then user authentication is improved, but risk of information leakage and shoulder surfing worsens
Solution Approach 1:
The patent replaces the mechanical input method (typing password at keyboard) with biometric authentication using the mobile terminal's sensor (fingerprint, face, or iris recognition). This substitution eliminates the need for users to input passwords at public apparatuses, preventing shoulder surfing and password leakage while maintaining strong authentication.
4Ease of operation
If reservation code only is used for printing, then ease of operation is improved, but security against unauthorized printing worsens
Solution Approach 1:
The patent implements preliminary biometric authentication through the mobile terminal before allowing print operations. The authentication happens in advance, and only after successful verification is the user permitted to use the reservation code for printing. This preliminary action ensures both ease of operation (simple print process) and security (authenticated user).
Data Source
Figure 1
Figure 2A~2C
Figure 3A~3D
AI summary
An image processing apparatus according to the present invention is an image processing apparatus capable of communicating with a user's mobile terminal including an authentication module for biometric authentication. In a case where the image processing apparatus receives verification data issued to use a service provision system, the authentication module included in the mobile terminal is identified as an authentication module to perform biometric authentication. Then, the image processing apparatus causes the authentication module included in the mobile terminal to perform authentication processing of the user.