Web Application Platform With Unified Authentication and Access Mapping

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing platforms for executing web applications lack comprehensive management and authentication features, particularly in managing user and application relationships, storage services, and device authentication, leading to inefficiencies and limitations in user access and functionality.

Innovation Solution

A platform system with integrated management tables and authentication functions, including user, group, and apparatus management, along with support for PIN and ID card authentication, and storage utilization, enabling centralized control and streamlined access to web applications and services.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional separate authentication systems are used for each web application, then each application can maintain its own security control, but the user authentication process becomes cumbersome and time-consuming

Engineering Contradiction:
Improveuser authentication processVSAvoidauthentication time
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The patent merges multiple separate authentication systems into a single unified authentication mechanism. The authentication server centralizes the authentication process, and the platform stores user identification information and available application information in association, allowing a single authentication to grant access to multiple web applications simultaneously, thereby eliminating the need for separate authentication processes for each application.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The authentication server and platform create a universal authentication system that serves multiple functions. Once a user is authenticated through the single authentication process, the system automatically provides access to all available web applications, making the authentication mechanism multi-functional rather than application-specific.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Productivity

If manual application allocation is used for each user, then detailed control over application access is possible, but the management process becomes complex and time-consuming

Engineering Contradiction:
Improveapplication management efficiencyVSAvoidaccess control process
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system implements self-service through automatic application allocation. The platform automatically determines which web applications are available to a user based on pre-stored association data between user identification information and available application information. This eliminates the need for manual application allocation by administrators, as the system autonomously manages application access based on user authentication status.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The platform performs preliminary action by pre-storing the association between user identification information and available application information in the storage device before user authentication occurs. This pre-configuration allows the system to automatically and instantly determine application availability during authentication, eliminating the need for real-time manual allocation decisions.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If integrated platform architecture is implemented, then web applications and storage services can be seamlessly integrated, but the system architecture becomes more complex

Engineering Contradiction:
Improveintegration capabilityVSAvoidplatform architecture
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary structure - the platform itself - that mediates between web applications and storage services. The platform stores user identification information and available application information in association, acting as an intermediary layer that enables integrated access without requiring direct complex interactions between applications and storage services. This intermediary approach simplifies the overall architecture while enabling versatile integration.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP4592874B1Platform and platform operating program
Publication Date: 2026.05.13 KYOCERA DOCUMENT SOLUTIONS INC
  • EP4592874B1 patent drawingFigure 1
  • EP4592874B1 patent drawingFigure 2
  • EP4592874B1 patent drawingFigure 3

AI summary

A platform (20) serves as a basis for executing a plurality of web applications, and includes a storage device (24) and a control device (25). The storage device (24) contains user identification information, and available application information indicating the web application available to a user, in association with each other. The control device (25) includes a processor, and acts as an application provision device (25A), when the processor executes a control program. The application provision device (25A) allows a log-in user, who has logged in to the platform (20), to utilize at least one of the plurality of web applications, on a basis of the user identification information and the available application information.