Information processing apparatus, information processing system, and non-transitory computer readable medium
AssigneeFUJIFILM Business Innovation Corp.
InventorYuki Inoue
Life of this patent
Estimating the term…
Abstract
An information processing apparatus includes an authenticator that authenticates a user so that the user accesses plural resources on a network, an acquirer that acquires conditions that are related to a strength of authentication information and are provided differently for the respective resources, and a controller that controls, when the user accesses one resource out of the plural resources, access to the one resource based on a condition related to the strength for the one resource and strength information related to the strength of the authentication information of the user that is used by the authenticator.
Claims10
An information processing apparatus, comprising:
- a storage device, configured to store an authenticator, a tenant identification part, an acquirer and a controller;
- a processor, configured to execute the authenticator, the tenant identification part, the acquirer and the controller, wherein
- the authenticator receives authentication information of a user and sends the received authentication information to a tenant management server, such that the tenant management server decides whether to permit the user to log in, wherein the tenant management server is configured to provide a tenant information indicating which tenant each user belongs to;
- the tenant identification part, by referring to the tenant information in the tenant management server, identifies a tenant to which one of a plurality of resources that is requested to access from the user on a network belongs after permitting the user to log in;
- the acquirer acquires password policy information of the identified tenant, wherein the password policy information is related to a strength of authentication information;
- and
- the controller determines whether strength information of the authentication information satisfies the password policy information, permits to access the one resource requested from the user in response to the strength information of the authentication information satisfies the password policy information, and does not permit to access the one resource requested from the user in response to the strength information of the authentication information does not satisfy the password policy information,
- wherein the storage device further comprises a notifier that notifies the user of details of the password policy information when the user accesses the one resource and when the strength information does not satisfy the password policy information.
An information processing system, comprising:
- a storage device, configured to store an authenticator, a memory and a controller;
- a processor, configured to execute the authenticator, the memory and the controller, wherein
- the authenticator receives authentication information of a user and sends the received authentication information to a tenant management server, such that the tenant management server decide whether to permit the user to log in, wherein the tenant management server is configured to provide a tenant information indicating which tenant each user belongs to;
- the memory stores a plurality of password policy information of plurality of tenants corresponding to conditions that are related to a strength of authentication information and are provided differently for respective resources;
- and
- the controller, by referring to the tenant information in the tenant management server, identifies one of the tenants to which one of the resources that is requested to access from the user on a network belongs after permitting the user to log in, acquires the password policy information corresponding to the identified tenant, determines whether strength information of the authentication information satisfies the password policy information corresponding to the identified tenant, permits to access the one resource requested from the user in response to the strength information of the authentication information satisfies the password policy information, and does not permit to access the one resource requested from the user in response to the strength information of the authentication information does not satisfy the password policy information,
- wherein the storage device further comprises a notifier that notifies the user of details of the password policy information when the user accesses the one resource and when the strength information does not satisfy the password policy information.
A non-transitory computer readable medium storing a program causing a computer to execute a process comprising:
- receiving authentication information of a user and sends the received authentication information to a tenant management server, such that the tenant management server decide whether to permit the user to log in, wherein the tenant management server is configured to provide a tenant information indicating which tenant each user belongs to;
- by referring to the tenant information in the tenant management server, identifying a tenant to which one of a plurality of resources that is requested to access from the user on a network belongs after permitting the user to log in;
- acquiring password policy information of the identified tenant, wherein the password policy information is related to a strength of authentication information;
- and
- determining whether strength information of the authentication information satisfies the password policy information;
- permitting to access the one resource requested from the user in response to the strength information of the authentication information satisfies the password policy information;
- not permitting to access the one resource requested from the user in response to the strength information of the authentication information does not satisfy the password policy information;
- and
- notifying the user of details of the password policy information when the user accesses the one resource and when the strength information does not satisfy the password policy information.
Dependencies are inferred from the claim text.