Single Sign-On Authentication Token Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods require multiple logins for using multiple application services, which is cumbersome and inefficient.
Innovation Solution
An authentication system comprising a management server, an image forming apparatus, and a third-party server connected via a network, where the image forming apparatus receives user login credentials, authenticates with the management server, and then uses a token to authenticate with the third-party server for single sign-on functionality, allowing activation of third-party-client programs without additional login steps.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single login is used to access multiple application services, then user convenience and access efficiency are improved, but system complexity and security management become more difficult
Solution Approach 1:
The patent introduces an authentication server as an intermediary component that manages authentication tokens and coordinates between the image forming apparatus and third-party servers. This mediator handles the complexity of single sign-on implementation, allowing users to access multiple services without repeated logins while maintaining security through centralized token management.
Solution Approach 2:
The authentication system is segmented into distinct functional components: the image forming apparatus with its control unit, the authentication server, and third-party servers. Each component has specific responsibilities (login reception, token management, service authentication), which distributes system complexity across multiple specialized modules rather than concentrating it in a single monolithic system.
2Adaptability or versatility
If multiple authentication requests are transmitted to different servers, then service accessibility is improved, but communication overhead and processing time increase
Solution Approach 1:
The system performs preliminary authentication with the authentication server before accessing third-party services. The authentication token is obtained in advance and stored in the image forming apparatus, so that subsequent service accesses can use this pre-acquired credential rather than requiring repeated authentication exchanges, thereby reducing communication overhead and processing time for subsequent services.
Solution Approach 2:
The authentication server creates a copy of user credentials in the form of an authentication token that can be reused across multiple services. Instead of repeatedly transmitting original login credentials to multiple servers, the system uses this token copy to authenticate with third-party servers, reducing communication overhead and protecting original credentials.
Data Source
AI summary
Provided is an authentication system that achieves simple single sign-on used by an MFP. A management application includes a first authentication-request unit that transmits an authentication request to a management server and delivers a token to an execution platform. The other application includes a second authentication-request unit that sends an authentication request together with the token to another server. The application-execution platform includes a token-delivery unit that delivers the token to the other application. The management server includes a first authentication unit that returns a token to the first authentication-request unit, a token-creation unit, and a second authentication unit that performs authentication for an inquiry from the other server that uses a token. The other server includes a third authentication-request unit that transfers an authentication request, and transfers an authentication OK message to the second authentication-request unit.