# US 10,484,368 B2 · Management system, management method, and recording medium for managing use of function to terminal > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,368 B2 - Document ID: US10484368B2 - Status: Granted - Kind: B2 - Application number: 15/335,642 - Filed: 2016-10-27 - Published: 2017-05-18 - Granted: 2019-11-19 - Earliest claimed: 2015-11-13 - Assignees: Ricoh Company, Ltd. - Applicants: Hiroshi Hinohara; Naoki Umehara; Takeshi Horiuchi; Atsushi Miyamoto; Takuya Soneda - Inventors: Hiroshi Hinohara; Naoki Umehara; Takeshi Horiuchi; Atsushi Miyamoto; Takuya Soneda - Web page: https://patentgrep.com/patent/US10484368B2 ## CPC - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0281: {Proxies} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/10: {for controlling access to devices or network resources} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A management system includes a reception unit configured to receive identification information for identifying an account, allocated by an authentication apparatus, corresponding to a terminal, the terminal being authenticated by the authentication apparatus, and a management unit configured to determine whether a function provided by the management system can be used by the terminal based on the identification information received by the reception unit. ## Claims ### Claim 1 A management system that communicates with a terminal and a plurality of authentication apparatuses for authenticating the terminal through a network, the management system comprising: a memory; and a processor coupled to the memory, and the processor configured to perform a process transmitting a list of multiple authentication methods used by one or more of authentication apparatuses and the management system; transmitting a forwarding instruction to an authentication apparatus corresponding to an authentication method upon receiving the authentication method selected at the terminal; receiving, from the authentication apparatus, first identification information for identifying an account and second identification information for identifying the authentication apparatus, the account being allocated by the authentication apparatus and corresponding to a terminal, which is authenticated by the authentication apparatus; permitting the terminal to use a function corresponding to the second identification information among functions provided by the management system based on the received second identification information, the terminal being specified by the first identification information and the second identification information; and transmitting third identification information for identifying an account that is allocated by the management system to the terminal upon a usage of the function that is determined as being allowed, wherein the third identification information is included in a log-in request transmitted from the terminal to the management system. ### Claim 2 (depends on 1) The management system according to claim 1, wherein the processor is further configured to transmit information including the first identification information to another terminal, wherein the terminal is recorded in a contact list indicative of one of more destinations provided for the other terminal, and the transmitted information is used as a destination name corresponding to the terminal. ### Claim 3 (depends on 1) The management system according to claim 1, wherein the processor is further configured to allow the terminal to use a function that is defined in accordance with the authentication apparatus having authenticated the terminal, in response to failing to find the first identification information. ### Claim 4 (depends on 1) The management system according to claim 1, wherein the processor is further configured to allow the terminal to use the function for a period defined in accordance with the authentication apparatus having authenticated the terminal, in response to failing to find the first identification information. ### Claim 5 (depends on 1) The management system as claimed in claim 1, wherein the processor permits the terminal to use the function corresponding to the authentication apparatus and a date and time when the function becomes available. ### Claim 6 (depends on 1) The management system as claimed in claim 1, wherein the first identification information is used to authenticate the terminal by the authentication apparatus. ### Claim 7 (depends on 1) The management system as claimed in claim 1, wherein the third identification information is used to authenticate the terminal by the management system. ### Claim 8 A method for a management system that communicates with a terminal and a plurality of authentication apparatuses for authenticating the terminal through a network, the method comprising: transmitting a list of multiple authentication methods used by one or more of authentication apparatuses and the management system; transmitting a forwarding instruction to an authentication apparatus corresponding to an authentication method upon receiving the authentication method selected at the terminal; receiving, from the authentication apparatus, first identification information for identifying an account and second identification information for identifying the authentication apparatus, the account being allocated by the authentication apparatus and corresponding to a terminal, which is authenticated by the authentication apparatus; permitting the terminal to use a function corresponding to the second identification information among functions provided by the management system based on the received second identification information, the terminal being specified by the first identification information and the second identification information; and transmitting third identification information for identifying an account that is allocated by the management system to the terminal upon a usage of the function that is determined as being allowed, wherein the third identification information is included in a log-in request transmitted from the terminal to the management system. ### Claim 9 (depends on 8) The method as claimed in claim 8, wherein the terminal is permitted by the management system to use the function corresponding to the authentication apparatus and a date and time when the function becomes available. ### Claim 10 (depends on 8) The method as claimed in claim 8, wherein the first identification information is used to authenticate the terminal by the authentication apparatus. ### Claim 11 (depends on 8) The method as claimed in claim 8, wherein the third identification information is used to authenticate the terminal by the management system. ### Claim 12 A non-transitory recording medium having stored therein a program for causing a computer serving as a management system that communicates with a terminal and a plurality of authentication apparatuses for authenticating the terminal through a network, to perform a process comprising: transmitting a list of multiple authentication methods used by one or more of authentication apparatuses and the management system; transmitting a forwarding instruction to an authentication apparatus corresponding to an authentication method upon receiving the authentication method selected at the terminal; receiving, from the authentication apparatus, first identification information for identifying an account and second identification information for identifying the authentication apparatus, the account being allocated by the authentication apparatus and corresponding to a terminal, which is authenticated by the authentication apparatus; permitting the terminal to use a function corresponding to the second identification information among functions provided by the management system based on the received second identification information, the terminal being specified by the first identification information and the second identification information; and transmitting third identification information for identifying an account that is allocated by the management system to the terminal upon a usage of the function that is determined as being allowed, wherein the third identification information is included in a log-in request transmitted from the terminal to the management system. ### Claim 13 (depends on 12) The non-transitory recording medium as claimed in claim 12, wherein the process permits the terminal to use the function corresponding to the authentication apparatus and a date and time when the function becomes available. ### Claim 14 (depends on 12) The non-transitory recording medium as claimed in claim 12, wherein the first identification information is used to authenticate the terminal by the authentication apparatus.