Portable Terminal Authentication via One-Time Password for Secure Scanning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing image processing systems face challenges in securely and efficiently managing image reading instructions between portable terminals and image forming devices, particularly in ensuring that only authorized devices can initiate scanning operations within a short-range wireless communication range.
Innovation Solution
The system employs a shared one-time password or universally unique identifier (UUID) for authentication, allowing only devices within the communication range to execute scanning jobs, preventing unauthorized access and ensuring secure operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If short-range wireless communication is used for image reading instructions, then communication convenience and speed are improved, but security and authorization control deteriorate
Solution Approach 1:
The system performs preliminary authentication by sharing information (one-time password or UUID) between the portable terminal and image forming device through short-range wireless communication before executing the image reading instruction. This preliminary action ensures that only authorized devices can initiate scanning operations, resolving the security concern while maintaining communication speed.
Solution Approach 2:
The patent introduces an intermediary authentication mechanism using shared information (one-time password or UUID) that mediates between the portable terminal and image forming device. This intermediary layer verifies authorization before processing the image reading instruction, thereby enhancing security without compromising the speed of short-range wireless communication.
2Reliability
If exclusive authentication information is shared between devices, then security against unauthorized access is improved, but device complexity increases
Solution Approach 1:
The system uses a one-time password as a disposable authentication credential that is valid for a single use or limited time period. This approach provides strong security without requiring complex long-term authentication systems, as the credential becomes invalid after use, preventing replay attacks and unauthorized access.
Solution Approach 2:
The patent employs a universally unique identifier (UUID) that can serve multiple authentication purposes across different devices and sessions. This universal identifier simplifies the authentication mechanism by providing a consistent method for device identification and authorization without requiring device-specific complex authentication protocols.
3Reliability
If one-time password or UUID is used for authentication, then authorization control is improved, but information management complexity increases
Solution Approach 1:
The system implements self-service authentication where the portable terminal and image forming device automatically share and verify the one-time password or UUID without requiring manual intervention or complex information management. The devices handle the authentication process autonomously, reducing the burden of information management while maintaining strong authorization control.
Data Source
AI summary
An image processing system includes a portable terminal and an image forming device. The image forming device receives a reading instruction for an image from the portable terminal and transmits data based on the reading instruction to the portable terminal. On condition that the portable terminal was located or is located within a range available for short-range wireless communication of the image forming device, the image forming device and the portable terminal share information which is able to exclusively possess a reading instruction for an image from the portable terminal to the image forming device, and the portable terminal transmits the reading instruction for an image to the image forming device that shares the information which is able to exclusively possess the reading instruction.