Back to results
US 11,153,305 B2Granted
Apparatus, system and method for managing authentication with a server
AssigneeCanon U.S.A., Inc.
InventorHiroaki Towata
Life of this patent
Estimating the term…
Abstract
An access management system including a server is provided. The server receives, from a client device, a request to log into the server with first information specifying identifying a user that has logged into the client device and second information specifying the client device. The server authenticates the client device using the second information and accesses a service provided by an external apparatus and receive a token for accessing the service. The server associates, in memory, the first information with the received token to enable subsequent access to the service, by the server.
Claims18
A server comprising:
- a memory storing instructions;
- and
- at least one processor that executes the instructions stored in the memory to control the at least one processor to
- receive, from a client device, a request to log into the server and access a service provided by an external apparatus, the request including
- first information that identifies a user, the user having already logged into and been authenticated at the client device,
- second information identifying the client device, and
- service information identifying the service for which access is requested;
- authenticate the client device, with the server, using only the second information;
- redirect the client device to the external apparatus based on the service information to enable user authentication with the service using service-specific authentication information received from the client device, wherein the redirection causes the client device to communicate directly with the external apparatus;
- receive, from the client device, a token provided by the external apparatus to the client device after authentication of the user with the service provided by the external apparatus, wherein the token enables the server to access the service;
- and
- associating, in memory, the first information that identifies the user with the token received from the client device to enable subsequent access to the service by the server when requested by the user at the client device.
9 more elements
A method of controlling a server comprising:
- receiving, from a client device, a request to log into the server and access a service provided by an external apparatus, the request including
- first information that identifies a user, the user having already logged into and been authenticated at the client device;
- second information identifying the client device;
- and
- service information identifying the service for which access is requested;
- authenticating, by the server, the client device with the server using only the second information;
- redirecting, by the server, the client device to the external apparatus based on the service information to enable authentication with the service using service-specific authentication information received from the client device, wherein the redirection causes the client device to communicate directly with the external apparatus;
- receiving, from the client device, a token provided by the external apparatus to the client device after authentication of the user with the service provided by the external apparatus, wherein the token enables the server to access the service;
- and
- associating, in memory, the first information that identifies the user with the token received from the client device to enable subsequent access to the service by the server when requested by the user at the client device.
7 more elements
A client device comprising:
- a memory storing instructions;
- and
- at least one processor that executes the instructions stored in the memory to to control the at least one processor to
- transmit, to a server, a request to log into the server and access a service provided by an external apparatus, the request including
- first information identifying a current user that is logged into and has been authenticated by the client device;
- second information identifying the client device;
- and
- service information identifying the service for which access is request;
- in response to the server authenticating the client device with the server using only the second information based on the transmitted request and the server, based on the transmitted request, accessing the service executing on the external apparatus using the service information, receiving, by the client device, via redirection from the server, information from the external apparatus that enables the user to provide, to the external apparatus, service-specific authentication information for authentication with the service, wherein the redirection causing the client device to communicate directly with the external apparatus;
- receiving, from the external apparatus, a token from the external apparatus that is usable to access the service after the user has been authenticated with the service provided by the external apparatus;
- transmitting the received token to the server, wherein the transmitted token is stored in association with the first information at the server and enables subsequent access to the service by the client device without providing credentials for the service at the client device.
8 more elements
A device access management system comprising
- a client device;
- an external apparatus that provides one or more services for use by the client device;
- and
- a server including a memory storing instructions and at least one processor that executes the instructions stored in the memory to control the at least one processor to
- receive, from a client device, a request to log into the server and access a service provided by an external apparatus, the request including
- first information that identifies a user, the user having already logged into and been authenticated at the client device,
- second information identifying the client device, and
- service information identifying the service for which access is requested;
- authenticate the client device, with the server, using only the second information;
- redirect the client device to the external apparatus based on the service information to enable authentication with the service using service-specific authentication information received from the client device, wherein the redirection causes the client device to communicate directly with the external apparatus;
- receive, from the client device, a token provided by the external apparatus to the client device after authentication of the user with the service provided by the external apparatus, wherein the token enables the server to access the service;
- and
- associating, in memory, the first information that identifies the user with the token received from the client device to enable subsequent access to the service by the server when requested by the user at the client device.
10 more elements
Dependencies are inferred from the claim text.