Unified Authentication System for Multi-Protocol MFPs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Multi-function peripherals (MFPs) face challenges in managing multiple user authentication mechanisms, leading to cumbersome account management, security inconsistencies, and high development costs due to differing protocols and lack of standardized password policies across various functions.
Innovation Solution
A unified user authentication system that integrates administration across multiple protocols, providing a single mechanism for managing user authentication, password policies, and authentication logs, allowing for centralized management and reduced burdens on vendors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple user authentication mechanisms are provided for different functions and communication protocols, then each function can be authenticated independently according to its specific requirements, but management of user information becomes cumbersome and development costs increase
Solution Approach 1:
The patent implements a universal user authentication mechanism that can handle multiple communication protocols (SNMPv3, HTTP, SMB, Telnet, SSH) through a single unified interface. The authentication mechanism is designed to be protocol-agnostic, accepting authentication requests from various protocols and responding uniformly, thereby eliminating the need for separate authentication mechanisms for each protocol while maintaining protocol-specific authentication requirements
Solution Approach 2:
The patent introduces an intermediary layer between the authentication mechanism and different communication protocols. This intermediary component translates protocol-specific authentication requests into a unified authentication format, manages user information centrally, and returns protocol-appropriate authentication responses. This mediator approach allows the authentication mechanism to remain simple while supporting diverse protocols
2Device complexity
If a single user authentication mechanism is used for all communication protocols, then management becomes simpler and development costs are reduced, but supporting all protocol-specific authentication requirements becomes difficult
Solution Approach 1:
The patent segments the authentication system into distinct functional layers: a protocol-agnostic authentication mechanism layer that handles user verification, and protocol-specific adapter layers that handle protocol-specific requirements. Each communication protocol has its own adapter that translates protocol-specific authentication data into the unified authentication mechanism's expected format, allowing the core authentication mechanism to remain simple while supporting protocol diversity
Solution Approach 2:
The patent employs parameter changes to adapt the single authentication mechanism to different protocols. By dynamically adjusting authentication parameters (such as encryption methods, hash algorithms, and data formats) based on the detected protocol type, the system maintains a unified authentication core while accommodating protocol-specific requirements through parameter configuration rather than structural complexity
3Productivity
If existing software modules are replaced with a unified authentication mechanism, then development efficiency improves, but significant effort and man-hours are required for replacement and function addition
Solution Approach 1:
The patent performs preliminary action by designing the unified authentication mechanism with pre-built adapter templates for common communication protocols (SNMPv3, HTTP, SMB, Telnet, SSH). These adapters are prepared in advance with standard authentication flows, reducing the effort required during deployment. Vendors can selectively enable pre-configured adapters rather than building authentication from scratch for each protocol
Solution Approach 2:
The patent uses copying by creating reusable authentication adapter templates that can be replicated across different protocol implementations. Once an adapter for a particular protocol is developed and tested, it can be copied and adapted for similar protocols with minimal modification, significantly reducing development time and effort compared to creating unique authentication mechanisms for each protocol
Data Source
Figure 1~2
Figure 3
Figure 4A~4D
AI summary
An information processing apparatus capable of receiving an authentication request in accordance with a protocol of a plurality of protocols and a method of controlling the same are provided. The information processing apparatus stores a user identifier and a password for each user and a calculation method for each protocol, and when the apparatus receives an authentication request including authentication data from a remote computer in accordance with a protocol of the plurality of protocols, the apparatus obtains stored password corresponding to the authentication data which is included in the authentication request, obtains, stored calculation method corresponding to the protocol, converts the obtained password into a hash in accordance with the obtained calculation method, and verifies the authentication data with the hash.