Proximity-Based Access Control for Shared Information Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems allow undesired apparatuses to execute processing when users mistakenly select them, leading to unauthorized use.
Innovation Solution
An information processing apparatus that acquires user position information upon successful authentication and requests a management device to allow use only if the user is within a predetermined range and authorized.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the system allows users to use any apparatus in the predetermined range after successful authentication, then the ease of operation is improved, but the reliability deteriorates because undesired apparatuses may execute processing due to user selection mistakes
Solution Approach 1:
The patent introduces position information as an intermediary verification parameter between the user authentication and apparatus selection. The management device acts as a mediator that checks both the user's authentication status and their physical proximity to the apparatus before allowing use. This intermediary layer prevents unauthorized access while maintaining ease of operation for legitimate users.
Solution Approach 2:
The patent changes the authentication parameter from solely relying on user identification to including position information verification. By adding the spatial parameter (distance between user and apparatus) to the authentication criteria, the system maintains ease of operation for nearby users while preventing unauthorized access to undesired apparatuses.
2Reliability
If the system requires administrator allowance for each apparatus use, then the reliability is improved, but the ease of operation deteriorates due to additional authentication steps
Solution Approach 1:
The patent enables self-service authentication by allowing the system to automatically verify user position and grant access without requiring manual administrator approval for each use. The management device autonomously checks whether the user is within the predetermined range of the apparatus and permits use if both authentication and position verification succeed, eliminating the need for repeated administrator intervention.
Solution Approach 2:
The system performs preliminary registration of user-apparatus associations and stores position information in advance. During actual use, the management device retrieves pre-stored authentication data and combines it with real-time position verification, allowing rapid automated decisions without requiring administrators to approve each individual use case.
3Reliability
If the system stores and verifies position information, then the reliability is improved by preventing unauthorized access, but the device complexity increases due to additional verification mechanisms
Solution Approach 1:
The patent makes the management device universal by giving it multiple functions: user authentication, position verification, and access control decision-making. Instead of adding separate dedicated hardware for each function, the existing management device is enhanced to perform multiple verification tasks, reducing overall system complexity while maintaining high reliability.
Data Source
AI summary
An information processing apparatus includes a processor configured to: acquire position information of a user in a case where the user is successful in authentication of a system including the information processing apparatus and requests to use the information processing apparatus; and request a management device, which manages a user who is capable of using the information processing apparatus, to allow the user to use the information processing apparatus even though a use of the information processing apparatus is not allowed in advance in a case where the user is present in a predetermined range from the information processing apparatus.


