Server-Based Authorization for Image Processing Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Image processing devices in shared office environments face challenges in securely managing access to features and resources, as existing authentication methods lack efficient and centralized control mechanisms, leading to potential misuse and unauthorized access.

Innovation Solution

A server-based authorization system that generates and aggregates authorization data, including keys, to manage access to features on image processing devices, comparing request permissions with stored data to grant or inhibit access, and allows transferable authorization between devices, enabling administrator-directed or automatic authorization.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a server-based centralized authorization system is implemented, then security control and authorization management are improved, but device complexity and system infrastructure requirements worsen

Engineering Contradiction:
Improvesecurity controlVSAvoidsystem infrastructure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a server as an intermediary component that centralizes authorization management. The server stores authorization data, generates keys, and compares access requests against stored permissions. This mediator approach improves security control by centralizing authentication while adding system infrastructure complexity through the required server component and network communication protocols.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If authorization data is stored centrally on a server, then access control management is improved, but data transmission and network dependency worsen

Engineering Contradiction:
Improveaccess control managementVSAvoiddata transmission
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-generating and storing authorization data, including keys and permission sets, on the server before actual access requests occur. When a user requests access, the system quickly retrieves pre-prepared authorization data and compares it against the request. This preliminary preparation improves ease of access control management while minimizing real-time data transmission requirements during actual access operations.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If multiple image processing devices share centralized authorization, then resource utilization is improved, but authorization management complexity worsens

Engineering Contradiction:
Improveresource utilizationVSAvoidauthorization management
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements a universal authorization system where a single server manages authorization data for multiple image processing devices. The server provides multi-functional capabilities by serving different devices with the same authorization infrastructure, generating device-specific keys, and handling various access requests. This universal approach improves resource utilization across multiple devices while the centralized server simplifies authorization management compared to individual device management.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS10200370B2Apparatus, system, and method for authorizing a service
Publication Date: 2019.02.05 CANON INFORMATION & IMAGING SOLUTIONS
  • US10200370B2 patent drawing
  • US10200370B2 patent drawing
  • US10200370B2 patent drawing

AI summary

Systems include a service-provider device; and a browser loaded on a first device. To connect the service-provider device with the first device, the browser fetches a device ID from the first device, and sends a request for a service to the service-provider device with the device ID. The service-provider device determines whether the service is allowed to be provided by checking whether the device ID is registered.