Token-Based Authentication for Image Forming Apparatus Resource Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
When user information is deleted from a server used for cloud services, the associated device resources cannot be edited or managed effectively, leading to limitations in user access and resource management.
Innovation Solution
An image forming apparatus is designed with a token-based authentication system that allows users to delegate authentication, using parent tokens to acquire child tokens for specific applications, enabling continued access and editing of device resources even after user information is deleted, by employing a device resource management system with an authorization server and resource server that manage tokens and access rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user information is stored and managed on the server, then user authentication and access control are enabled, but when user information is deleted, the user cannot access or edit device resources anymore
Solution Approach 1:
The patent segments the authentication system into two independent parts: user information management and device resource management. Each part has its own token (user token and device token) that can function independently. This segmentation allows device resources to remain accessible even when user information is deleted, as the device token maintains the connection between the device and its resources without requiring active user information.
2Ease of manufacture
If a single authentication system is used for all applications, then implementation is simple, but security is reduced as parent tokens can be used across all applications
Solution Approach 1:
The patent divides the token authentication system into hierarchical segments: parent tokens for device-level authentication and child tokens for application-specific authentication. This segmentation restricts parent tokens from being used across all applications, as each application requires its own child token generated from the parent token. This improves security while maintaining manageable complexity through the structured token hierarchy.
Solution Approach 2:
The patent applies local quality by making authentication tokens specific to their context: parent tokens have device-level scope while child tokens have application-level scope. Each token type has defined limitations on where and how it can be used, creating localized security zones rather than a universal authentication mechanism. This ensures that compromise of one token does not affect the entire system.
Data Source
AI summary
An image forming apparatus includes first and second token request transmission units, first and second token reception units, a storage unit, and a device resource request transmission unit. The first token request transmission unit transmits a first token acquisition request containing device credential information. The first token reception unit receives a first token corresponding to the device credential information. The storage unit stores the received first token. The second token transmission unit acquires the stored first token and sends a second token acquisition request containing the acquired first token and identification information for identifying a management unit that manages a device resource. The second token reception unit receives a second token corresponding to the identification information. The device resource request transmission unit transmits a request for a process related to a device resource, the request containing the received second token.