Authentication server system, method, and storage medium
AssigneeCanon Kabushiki Kaisha
InventorYu Tamura
Life of this patent
Estimating the term…
Abstract
An authentication server system issues a first-type token for verification of whether a user operating a terminal is a valid user and a second-type token for verification of whether a service is usable with authority transferred to an authorized client cooperating with the service, verifies, based on a token received with a verification request and a scope regardless of a type of the issued token, and notifies a verification result.
Claims14
An authentication server system communicable with an information processing apparatus including a service that provides a specific function to a terminal and an authorized client, the authentication server system comprising:
- an issuance unit configured to issue a first-type token for verification of whether a user operating the terminal is a valid user and a second-type token for verification of whether the service is usable with authority transferred to the authorized client cooperating with the service;
- and
- a verification unit configured to perform checking for verification based on a token received with a verification request and a scope from the information processing apparatus regardless of a type of the token issued by the issuance unit and to notify a verification result,
- wherein, the verification unit does not check authority associated with a token if the first-type token is received, and the verification unit checks authority associated with a token and determines whether the scope is within a range of the authority associated with the token if the second-type token is received.
A method executed by an authentication server system communicable with an information processing apparatus including a service that provides a specific function to a terminal and an authorized client, the method comprising:
- issuing a first-type token for verification of whether a user operating the terminal is a valid user and a second-type token for verification of whether the service is usable with authority transferred to the authorized client cooperating with the service;
- checking for verification based on a token received with a verification request and a scope from the information processing apparatus regardless of a type of the token issued by the issuing;
- and
- notifying a verification result,
- wherein, authority associated with a token is not checked if the first-type token is received, and authority associated with a token is checked and it is determined whether the scope is within a range of the authority associated with the token if the second-type token is received.
A computer-readable storage medium storing computer executable instructions for causing an authentication server system communicable with an information processing apparatus including a service that provides a specific function to a terminal and an authorized client to execute a method, the method comprising:
- issuing a first-type token for verification of whether a user operating the terminal is a valid user and a second-type token for verification of whether the service is usable with authority transferred to the authorized client cooperating with the service;
- checking for verification based on a token received with a verification request and a scope from the information processing apparatus regardless of a type of the token issued by the issuing;
- and
- notifying a verification result,
- wherein, authority associated with a token is not checked if the first-type token is received, and authority associated with a token is checked and it is determined whether the scope is within a range of the authority associated with the token if the second-type token is received.
Dependencies are inferred from the claim text.