# US 10,769,268 B2 · Information processing device, information processing system, and information processing method > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,769,268 B2 - Document ID: US10769268B2 - Status: Granted - Kind: B2 - Application number: 15/696,569 - Filed: 2017-09-06 - Published: 2018-05-03 - Granted: 2020-09-08 - Earliest claimed: 2016-11-01 - Assignees: Ricoh Company, Ltd. - Applicants: Ryutaro Sakanashi; Yuuichiroh Hayashi; Yasuharu Fukuda; Seiichi Kondo; Taichi Watanabe - Inventors: Ryutaro Sakanashi; Yuuichiroh Hayashi; Yasuharu Fukuda; Seiichi Kondo; Taichi Watanabe - Web page: https://patentgrep.com/patent/US10769268B2 ## CPC - G06F 21/608: {Secure printing} - G06F 21/44: Program or device authentication - H04L 63/00: {Network architectures or network communication protocols for network security (cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00)} - H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity} - H04L 63/102: {Entity profiles} - H04W 12/06: Authentication - H04W 12/084: using delegated authorisation, e.g. open authorisation [OAuth] protocol - G06F 2221/2115: Third party - G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract There is provided an information processing device in which an application of an electronic device provides a service to a user, the information processing device including a processor; and a memory that includes instructions, which when executed, cause the processor to execute the following steps: associating the application with a processing flow; associating the processing flow with a scope of authorization of an external service; retrieving the scope of the authorization of the external service required by the processing flow associated with the application; retrieving authorized information representing a scope of authorization of the external service authorized by the user; and providing, for each external service, information indicating whether the external service is authorized, based on a result of comparing the scope of the authorization of the external service required by the processing flow with the scope of the authorization of the external service authorized by the user. ## Claims ### Claim 1 An information processing device in which an application of a service coordinated with an electronic device of a user environment provides the service to a user operating the electronic device, the information processing device including a processor; and a memory that includes instructions, which when executed, cause the processor to execute the following steps: for each application of one or more applications installed in the information processing device, associating the application with a processing flow invoked by the application and storing the application and the associated processing flow in the memory; associating the processing flow with a first scope of authorization representing one or more first external services that are required to be authorized by the user so that the processor is allowed to execute the processing flow, and storing the processing flow and the associated first scope in the memory; retrieving, from the memory, the first scope of the authorization; retrieving a second scope of authorization representing one or more second external services that have been authorized by the user; and providing, for each first external service of the one or more first external services represented by the first scope of the authorization, information indicating whether the first external service is required to be authorized by the user, based on a result of comparing the first scope of the authorization with the second scope of the authorization. ### Claim 2 (depends on 1) The information processing device according to claim 1, wherein, upon determining that the first scope of the authorization includes a scope other than the second scope of the authorization, the step of providing provides information indicating that additional authorization is required for each first external service of the one or more first external services. ### Claim 3 (depends on 1) The information processing device according to claim 1, wherein the electronic device operated by the user and the one or more first external services are caused to be coupled by a redirection process so as to cause the electronic device and the one or more first external services to execute a process of authorizing the first scope of the authorization of the one or more first external services required by the processing flow that is associated with the application capable of being used by the user. ### Claim 4 (depends on 1) The information processing device according to claim 1, wherein, upon detecting that the user selects the application of the one or more applications to be used, the step of providing provides, for each first external service of the one or more first external services, information indicating whether the first external service is authorized, based on a result of comparing the first scope of the authorization with the second scope of the authorization. ### Claim 5 (depends on 1) The information processing device according to claim 1, wherein the steps to be executed by the processor further includes associating identifiers of one or more third external services used by the application with first delegated authentication configuration information representing the one or more third external services for which delegated authentication is required and storing the identifiers of the one or more third external services used by the application and the associated first delegated authentication configuration information in the memory; retrieving, from the memory, the first delegated authentication configuration information; retrieving second delegated authentication information representing one or more specific external services, wherein the delegated authentication information has been configured by the user; and providing, for each third external service, information indicating whether delegated authentication information has been configured based on a result of comparing the first delegated authentication configuration information with the second delegated authentication information. ### Claim 6 (depends on 5) The information processing device according to claim 5, wherein the steps to be executed by the processor further includes receiving, for each of the one or more third external services, delegated authentication configuration information. ### Claim 7 (depends on 1) The information processing device according to claim 1, wherein the steps executed by the processor further include: providing information indicating that additional authentication is required while providing a button for starting execution of the additional authorization. ### Claim 8 (depends on 1) The information processing device according to claim 1, wherein the steps executed by the processor further include: merging a plurality of first scopes of authorization of a respective plurality of external services. ### Claim 9 (depends on 1) The information processing device according to claim 1, wherein the electronic device is an image forming apparatus including a printer or a scanner, wherein the image forming apparatus is provided with an image forming function, wherein the image forming apparatus is configured to: receive a selection of a print application for using the printer or a scanner application for using the scanner on a selection screen displayed on an operations panel of the image forming apparatus; and display, on the operations panel, an authorization process confirmation screen indicating that authorization is required to use an external storage service, in response to the selection of the print application or the scanner application, and wherein, after completion of an authorization process of the external storage service through the authorization process confirmation screen, the image forming apparatus is coordinated with the external storage service, and the image forming apparatus is allowed to execute an image forming process using the printer or the scanner. ### Claim 10 An information processing system including one or more information processing devices in which an application of a service coordinated with an electronic device of a user environment provides the service to a user operating the electronic device, the information processing system including a processor; and a memory that includes instructions, which when executed, cause the processor to execute the following steps: for each application of one or more applications installed in the information processing device, associating the application with a processing flow invoked by the application and storing the application and the associated processing flow in the memory; associating the processing flow with a first scope of authorization representing one or more first external services that are required to be authorized by the user so that the processor is allowed to execute the processing flow, and storing the processing flow and the associated first scope in the memory; retrieving, from the memory, the first scope of the authorization; retrieving a second scope of authorization representing one or more second external services that have been authorized by the user; and providing, for each first external service of the one or more first external services represented by the first scope of the authorization, information indicating whether the first external service is required to be authorized by the user, based on a result of comparing the first scope of the authorization with the second scope of the authorization. ### Claim 11 (depends on 10) The information processing system according to claim 10, wherein, upon determining that the first scope of the authorization includes a scope other than the second scope of the authorization, the step of providing provides information indicating that additional authorization is required for each first external service of the one or more first external services. ### Claim 12 (depends on 10) The information processing system according to claim 10, wherein the electronic device operated by the user and the one or more first external services are caused to be coupled by a redirection process so as to cause the electronic device and the one or more first external services to execute a process of authorizing the first scope of the authorization of the one or more first external services required by the processing flow that is associated with the application capable of being used by the user. ### Claim 13 (depends on 10) The information processing system according to claim 10, wherein, upon detecting that the user selects the application of the one or more applications to be used, the step of providing provides, for each first external service of the one or more first external services, information indicating whether the first external service is authorized, based on a result of comparing the first scope of the authorization with the second scope of the authorization. ### Claim 14 (depends on 10) The information processing system according to claim 10, wherein the steps to be executed by the processor further includes associating identifiers of one or more third external services used by the application with first delegated authentication configuration information representing the one or more third external services for which delegated authentication is required and storing the identifiers of the one or more third external services used by the application and the associated first delegated authentication configuration information in the memory; retrieving, from the memory, the first delegated authentication configuration information; retrieving second delegated authentication information representing one or more specific external services, wherein the delegated authentication information has been configured by the user; and providing, for each third external service, information indicating whether delegated authentication information has been configured based on a result of comparing the first delegated authentication configuration information with the second delegated authentication information. ### Claim 15 (depends on 14) The information processing system according to claim 14, wherein the steps to be executed by the processor further includes receiving, for each of the one or more third external services, delegated authentication configuration information. ### Claim 16 (depends on 10) The information processing system according to claim 10, wherein the steps executed by the processor further include: providing information indicating that additional authentication is required while providing a button for starting execution of the additional authorization. ### Claim 17 (depends on 10) The information processing system according to claim 10, wherein the steps executed by the processor further include: merging a plurality of first scopes of authorization of a respective plurality of external services. ### Claim 18 An information processing method executed by an information processing device in which an application of a service coordinated with an electronic device of a user environment provides the service to a user operating the electronic device, the information processing method comprising: for each application of one or more applications installed in the information processing device, associating the application with a processing flow invoked by the application and storing the application and the associated processing flow in a memory of the information processing device; associating the processing flow with a first scope of authorization representing one or more first external services that are required to be authorized by the user so that the processor is allowed to execute the processing flow, and storing the processing flow and the associated first scope; retrieving, from the memory, the first scope of the authorization; retrieving a second scope of authorization representing one or more second external services that have been authorized by the user; and providing, for each first external service of the one or more first external services represented by the first scope of the authorization, information indicating whether the first external service is required to be authorized by the user, based on a result of comparing the first scope of the authorization with the second scope of the authorization.