Two-Stage Authentication for Image Processing Apparatus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Unauthorized users can illegitimately access image processing apparatuses by succeeding in face authentication using authorized users' photos or by obtaining and using their ID cards or passwords, leading to unauthorized use.
Innovation Solution
A processing system that acquires entrance permission/refusal information based on first authentication information to determine if a user can enter a controlled area, and then permits or denies access to the image processing apparatus based on second authentication information, ensuring only authorized users within the area can use the apparatus.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If only face authentication is performed, then authentication speed is fast, but unauthorized users can succeed by using authorized users' photos
Solution Approach 1:
The authentication process is divided into two independent stages: first, entrance permission determination based on authentication information (ID card, password, or face photo); second, actual authentication at the image processing apparatus based on the same information. This segmentation allows each stage to function independently, with the second stage specifically checking whether the authenticated user is currently in the controlled area, thereby preventing unauthorized users from succeeding even if they possess authorized users' photos or credentials.
Solution Approach 2:
The system performs preliminary determination of entrance permission before allowing access to the image processing apparatus. By determining in advance whether a user is permitted to enter the controlled area and storing this determination result, the system can quickly reject unauthorized users during actual authentication without requiring complex real-time verification, thus improving security while maintaining operational efficiency.
2Reliability
If multiple authentication methods are implemented, then authentication security is improved, but authentication time is increased
Solution Approach 1:
The system performs preliminary determination of entrance permission and stores the result before actual authentication occurs. During authentication, the system only needs to verify whether the provided authentication information corresponds to a user who has been determined to have entrance permission, rather than performing comprehensive verification. This preliminary action significantly reduces authentication time while maintaining security through the two-stage verification process.
3Reliability
If entrance permission determination is not performed, then system complexity is low, but unauthorized users can access the apparatus from outside the controlled area
Solution Approach 1:
The access control function is segmented into two independent parts: entrance permission determination (which can be implemented by a simple determination portion checking stored results) and authentication at the image processing apparatus. This segmentation allows the system to achieve reliable access control without requiring a complex integrated system, as each part can be implemented independently with appropriate simplicity.
Solution Approach 2:
The determination result of entrance permission acts as an intermediary element that bridges the entrance control system and the image processing apparatus authentication system. By storing and transmitting this determination result, the system enables reliable access control without requiring direct complex interaction between all system components, thus reducing overall system complexity while improving security.
Data Source
AI summary
A processing system that permits a user who is authenticated to use an image processing apparatus installed in a controlled area, the processing system includes an acquisition portion that acquires entrance permission/refusal information indicating whether or not there is entrance permission from a determination portion which determines, based on first authentication information acquired from the user, whether or not to permit entrance of the user to the controlled area, the entrance permission indicating that the entrance is permitted, and a processor that permits the user to use the image processing apparatus, when the entrance permission/refusal information indicates entrance permission and authentication is performed based on second authentication information acquired from the user in the controlled area.