Relay Apparatus Managing Authority Information for Seamless Server Access

Solution Overview

Problem

Existing access control methods require users to reacquire access tokens when a server's version is updated or new functions are added, making it cumbersome to use server functions or services without reacquiring tokens for each user.

Innovation Solution

An information processing apparatus that obtains and manages both normal and special authority information, allowing it to determine which token to use for a request based on the user's identification, ensuring seamless access to server functions or services even after server changes without reacquiring tokens.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a server is updated or new functions are added, then the server's functionality and version are improved, but users must reacquire access tokens which increases operational complexity and time consumption

Engineering Contradiction:

Improveserver functionalityVSAvoidaccess token management

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The patent implements a multi-functionality principle by enabling access tokens to work across multiple server versions and functions. The server generates and manages access tokens that remain valid even when the server is updated or new functions are added, allowing a single token to provide universal access without requiring regeneration for each update.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The server performs preliminary actions by pre-generating and storing access tokens in advance, associated with user identification information. These tokens are prepared beforehand and can be directly used when users need to access the server, eliminating the need for real-time token generation during server updates or new function deployments.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If access tokens are regenerated for each user after server updates, then access control security is maintained, but the time and resources required for token distribution increase

Engineering Contradiction:

Improveaccess controlVSAvoidtoken reacquisition time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The server performs preliminary actions by pre-generating and storing access tokens in advance, associated with user identification information. These tokens are prepared beforehand and can be directly used when users need to access the server, eliminating the need for real-time token generation during server updates or new function deployments.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent implements a copying mechanism where the server creates and stores copies of access tokens in advance. These token copies are associated with user identification information and can be rapidly distributed to users without requiring complex regeneration processes, thus maintaining security while reducing time loss.

Inventive Principle:

Principle #26Copying

3Ease of operation

If individual access tokens are managed for each user, then precise access control is achieved, but the complexity of token management and distribution increases

Engineering Contradiction:

Improveaccess control precisionVSAvoidtoken management system

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The patent implements a multi-functionality principle by enabling access tokens to work across multiple server versions and functions. The server generates and manages access tokens that remain valid even when the server is updated or new functions are added, allowing a single token to provide universal access without requiring regeneration for each update.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent implements a copying mechanism where the server creates and stores copies of access tokens in advance. These token copies are associated with user identification information and can be rapidly distributed to users without requiring complex regeneration processes, thus maintaining security while reducing time loss.

Inventive Principle:

Principle #26Copying

Data Source

PatentUS11455413B2Information processing apparatus and non-transitory computer readable medium

Publication Date: 2022.09.27 FUJIFILM BUSINESS INNOVATION CORP

AI summary

An information processing apparatus includes a processor configured to: obtain first authority information indicating possession of authority over a server, the first authority information being associated with user's identification information, and second authority information indicating possession of authority over the server that is different from authority indicated by the first authority information; accept a request for the server; in a case where the request is executable with authority based on the first authority information identified by the identification information, add the first authority information to the request and send the request with the first authority information to the server; and in a case where the request is not executable with authority based on the first authority information and is executable with authority based on the second authority information, add the second authority information to the request and send the request with the second authority information to the server.