Security information update system, information processing device, security information update method, and security information update program

An information processing device that can communicate with a service providing server and an administrative server, the service providing server providing a service when a pair of identification information and security information received from the information processing device is the same as a pair of identification information and security information stored in advance by the service providing server, and the information processing device comprising:

• a security information memory that stores security information in association with identification information that is the same as the identification information stored in the service providing server;
• and
• a hardware processor that is configured to execute:
• a policy acquisition process that acquires, from the administrative server, a security policy that is stored in a policy memory of the administrative server, the security policy determining the identification information stored in the service providing server and an update date and time;
• a process executing process that, when executing a process of receiving a service provided by the service providing server, transmits a pair of (i) identification information that is the same as the identification information stored in the service providing server and (ii) security information stored in association with the identification information, to the service providing server, and receives a service provided by the service providing server;
• an authentication information acquisition process that acquires updated security information having been updated in the service providing server, the updated security information being associated with the identification information stored in the service providing server;
• an update process that updates the security information stored in the security information memory in association with the identification information that is the same as the identification information stored in the service providing server, with the acquired updated security information, after the update date and time determined by the security policy for the identification information stored in the service providing server;
• and
• a prohibition process that prohibits execution of the process of receiving a after service provided by the service providing server after the update date and time determined by the security policy for the identification information stored in the service providing server, until the update process is successfully performed.

A security policy update method executed in an information processing device that can communicate with a service providing server and an administrative server, the service providing server providing a service when a pair of identification information and security information received from the information processing device is the same as a pair of identification information and security information stored in advance by the service providing server, the information processing device comprising a security information memory that stores security information in association with identification information that is the same as the identification information stored in the service providing server, and the security policy update method comprising:

• acquiring, from the administrative server, a security policy that is stored in a policy memory of the administrative server, the security policy determining the identification information stored in the service providing server and an update date and time;
• when executing a process of receiving a service provided by the service providing server, transmitting a pair of (i) identification information that is the same as the identification information stored in the service providing server and (ii) security information stored in association with the identification information, to the service providing server, and receiving a service by the service providing server;
• acquiring updated security information having been updated in the service providing server, the updated security information being associated with the identification information stored in the service providing server;
• updating the security information stored in the security information memory in association with the identification information that is the same as the identification information stored in the service providing server, with the acquired updated security information, after the update date and time determined by the security policy for the identification information stored in the service providing server;
• and
• prohibiting execution of the process of receiving a service provided by the service providing server after the update date and time determined by the security policy for the identification information stored in the service providing server, until the updating the security information is successfully performed.

A non-transitory recording medium storing a computer readable security information update program executed in a computer for controlling an information processing device that can communicate with a service providing server and an administrative server, the service providing server providing a service when a pair of identification information and security information received from the information processing device is the same as a pair of identification information and security information stored in advance by the service providing server, the information processing device comprising a security information memory that stores security information in association with identification information that is the same as the identification information stored in the service providing server, and the security policy update program controlling the computer to execute processes comprising:

• acquiring, from the administrative server, a security policy that is stored in a policy memory of the administrative server, the security policy determining the identification information stored in the service providing server and an update date and time;
• when executing a process of receiving a service provided by the service providing server, transmitting a pair of (i) identification information that is the same as the identification information stored in the service providing server and (ii) security information stored in association with the identification information, to the service providing server, and receiving a service by the service providing server;
• acquiring updated security information having been updated in the service providing server, the updated security information being associated with the identification information stored in the service providing server;
• updating the security information stored in the security information memory in association with the identification information that is the same as the identification information stored in the service providing server, with the acquired updated security information, after the update date and time determined by the security policy for the identification information stored in the service providing server;
• and
• prohibiting execution of the process of receiving a service provided by the service providing server after the update date and time determined by the security policy for the identification information stored in the service providing server, until the updating the security information is successfully performed.