Network Access Control via User Identification Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems require users to manually set parameters for accessing different networks, such as employee-specific and guest-specific networks, which can compromise security, especially for visitors who should not access employee-specific networks.
Innovation Solution
An information processing apparatus that receives process requests from terminals via multiple networks, stores distinct communication information for each network, and uses identification information to determine the appropriate network for the user, automatically transmitting the necessary communication information to the terminal for secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If wireless communication parameters for multiple networks are transmitted to terminals regardless of users, then all users can access all networks, but security is compromised for visitors who should not access employee-specific networks
Solution Approach 1:
The patent segments network access rights by user type, separating employee network parameters from guest network parameters. The storage unit stores multiple sets of communication parameters corresponding to different networks, and the transmission is segmented based on user identification, ensuring employees receive appropriate parameters while visitors are restricted to guest network parameters only.
Solution Approach 2:
The patent implements preliminary action by pre-storing multiple sets of wireless communication parameters in the storage unit before transmission. The system prepares different network access parameters in advance and selectively transmits only the appropriate set based on user identification, preventing unauthorized access before it can occur.
2Object-affected harmful factors
If manual parameter settings are required for wireless communication, then network security can be controlled, but user convenience deteriorates due to complex settings
Solution Approach 1:
The patent implements self-service by enabling terminals to automatically receive and configure appropriate wireless communication parameters without user intervention. The information processing apparatus automatically identifies user type, selects the corresponding network parameters, and transmits them to the terminal, which then configures itself, eliminating manual setting requirements while maintaining security control.
Solution Approach 2:
The patent introduces an intermediary mechanism where the information processing apparatus acts as a mediator between the network and terminals. This intermediary automatically manages parameter distribution based on user identification, relieving users of the burden of manual configuration while ensuring appropriate security controls are applied.
3Ease of operation
If automatic parameter transmission is implemented, then user convenience improves, but device complexity increases due to identification and determination mechanisms
Solution Approach 1:
The patent applies universality by designing a multi-functional information processing apparatus that integrates storage of multiple parameter sets, user identification, network determination, and automatic transmission capabilities in a single device. This universal approach consolidates what would otherwise be separate functions, managing complexity through integration rather than multiplication of components.
Data Source
AI summary
An information processing apparatus receiving a process request from a terminal via networks includes a storage to store first communications information for connecting via a first network and second communications information for connecting via a second network, an identification information receiver to receive identification information from the terminal, the identification information identifying a user of the terminal, a determination unit to determine the first or second network based on the identification information to receive the process request from the terminal, a communications information transmitter to transmit the first or second communications information via the determined first or second network, and a request receiver to accept connection via the determined first or second network based on the transmitted communications information transmitted by the communications information transmitter from the terminal to receive the process request via the accepted the first or second network.


