Back to results
US 11,082,225 B2Granted
Information processing system and control method therefor
AssigneeCanon Kabushiki Kaisha
InventorMakoto Kobayashi
Life of this patent
Estimating the term…
Abstract
A client specifies a first authorization server based on an authorization response corresponding to an authorization request transmitted by the client, and transmits a token request for requesting an authorization token to the first authorization server. The first authorization server issues the authorization token in response to the token request.
Claims13
An information processing system comprising:
- a client configured to transmit an authorization request used by a user to authorize access by the client to a resource server;
- and
- two or more authorization servers present in different regions,
- wherein the authorization servers each include a first specifying unit configured to specify a first authorization server in which user information about the user who authorizes the access is located,
- wherein the authorization servers each include a first transmission unit configured to cause, upon receiving the authorization request from the client, the first specifying unit to specify the first authorization server and to redirect the authorization request to the first authorization server with the client being specified,
- wherein the first authorization server includes a second transmission unit configured to authenticate the user based on the redirected authorization request from the client, and to transmit, to the client, an authorization response as a response to the authorization request together with information indicating, as a transmission destination, the first authorization server in which the user information about the authenticated user is located,
- wherein the client includes a third transmission unit configured to transmit a token request for requesting an authorization token for accessing the resource server to the first authorization server that is specified by a second specifying unit based on the authorization response transmitted by the second transmission unit, and
- wherein the first authorization server includes an issuance unit configured to issue the authorization token in response to the token request transmitted by the third transmission unit.
5 more elements
A control method for an information processing system including:
- a client configured to transmit an authorization request used by a user to authorize access by the client to a resource server;
- and
- two or more authorization servers present in different regions,
- the control method comprising:
- specifying, by the authorization servers, a first authorization server in which user information about the user who authorizes the access is located;
- causing the authorization servers, upon receiving the authorization request from the client, to specify the first authorization server and to redirect the authorization request to the first authorization server with the client being specified;
- authenticating the user, by the first authorization server, based on the redirected authorization request from the client, and transmitting, by the first authorization server, to the client, an authorization response as a response to the authorization request together with information indicating, as a transmission destination for transmitting a token request, the first authorization server in which the user information about the authenticated user is located;
- transmitting, by the client, a token request for requesting an authorization token for accessing the resource server to the first authorization server that is specified by the client based on the authorization response received from the first authorization server;
- and
- issuing, by the first authorization server, the authorization token in response to the token request received from the client.
7 more elements
Dependencies are inferred from the claim text.