Token Management System for Multi-Device Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In modern authentication systems like OAuth, users face the time-consuming and effort-intensive task of setting up authentication settings for each external device to obtain an access token from an authorization server, especially when using multiple devices to access services.

Innovation Solution

An information processing system that links access tokens with identification information for specific services and manages these tokens, allowing a user terminal to obtain and provide tokens to external devices, thereby reducing the need for repeated authentication settings across multiple devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication settings are set between each external device and the authorization server, then each device can independently obtain access tokens, but the time and effort required for setup increases significantly

Engineering Contradiction:
Improveauthentication securityVSAvoidtime and effort for setting authentication
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent introduces a user terminal as an intermediary between external devices and the authorization server. The user terminal stores authentication settings and acts as a mediator to obtain and distribute access tokens to multiple external devices, eliminating the need for each device to independently set up authentication with the authorization server.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The user terminal serves multiple functions: it stores authentication settings, obtains access tokens from the authorization server, and distributes these tokens to multiple different external devices. This multi-functional approach allows a single device to replace what would otherwise require multiple separate authentication setups.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If each external device obtains tokens directly from the authorization server, then device independence is maintained, but the complexity of authentication management increases

Engineering Contradiction:
Improvedevice independenceVSAvoidauthentication settings management
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The user terminal serves as an intermediary that centralizes authentication management. External devices can obtain tokens through the user terminal without directly interacting with the authorization server for setup, reducing the complexity of authentication management while maintaining the ability to use multiple devices.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The user terminal copies and distributes access tokens to multiple external devices. Instead of each device independently obtaining tokens through complex authentication setups, the user terminal obtains the token once and distributes copies to multiple devices, simplifying the process while maintaining device independence.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS20250015996A1Information processing system and method and non-transitory computer readable medium
Publication Date: 2025.01.09 FUJIFILM BUSINESS INNOVATION CORP
  • US20250015996A1 patent drawing
  • US20250015996A1 patent drawing
  • US20250015996A1 patent drawing

AI summary

An information processing system includes at least one processor configured to: link a token to be used for accessing a service with identification information for identifying the service and manage the token and the identification information linked with each other; and return, when a request for a token is received from an external device, the request including identification information of a specified service, and if a valid token of the specified service is stored, a reply including the token of the specified service.