Connection Determination for OAuth Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing apparatuses cannot determine whether a connection to a service providing apparatus is practicable using connection information input by a user, especially in authentication schemes that require preliminary authorization, such as OAuth, leading to confusion and discrepancies during connection tests.
Innovation Solution
An information processing apparatus with an inputter for receiving connection information and controllers that determine the feasibility of connection based on the acquisition status of authentication information involved with the authorization, allowing for connection determination even in authentication schemes that require preliminary authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If OAuth authentication is used which requires preliminary authorization, then security and authentication reliability are improved, but the ability to perform connection tests using user-assumed connection information is lost
Solution Approach 1:
The system performs preliminary authorization acquisition before connection testing. The controller checks whether authorization is acquired in advance, and only when authorization is confirmed does it proceed to test connection using the user-assumed connection information. This preliminary action enables both OAuth security requirements and connection test functionality to coexist.
2Ease of operation
If connection test is performed without checking authorization status, then operation simplicity is maintained, but connection determination accuracy deteriorates
Solution Approach 1:
The controller acts as an intermediary that automatically checks authorization status between the user's connection test request and the actual connection attempt. This intermediary step ensures accurate connection determination by verifying authorization prerequisites without requiring users to manually check or understand complex authorization states.
Data Source
AI summary
An information processing apparatus including: an inputter which receives an input of connection information; and one or more controllers which control connection to a service providing apparatus on the basis of the received connection information, in which the one or more controllers determine, when an authentication scheme in the service providing apparatus is an authentication scheme in which authorization is preliminarily required, whether or not connection based on the received connection information is practicable, according to an acquisition status of authentication information involved with the authorization.