Access control system, control method of access control system, and storage medium
AssigneeCanon Kabushiki Kaisha
InventorYu Tamura
Life of this patent
Estimating the term…
Abstract
An access control system is provided and includes a confirmation unit configured to confirm whether a region of a resource server is included in a signed access token by comparing a region included in the signed access token and the region of the resource server, and executes processing with respect to a resource request in a case where a determination unit determines that the signed access token is valid and the confirmation unit confirms that the region of the resource server is included in the signed access token.
Claims10
An access control system comprising:
- at least a terminal having a client;
- a resource server having a resource;
- and
- an authorization server:
- wherein the authorization server includes an issuance unit configured to issue a signed access token for executing verification of an access token by the resource server, and
- wherein the resource server includes:
- a determination unit configured to determine whether the signed access token is valid by executing signature verification on the signed access token in a case where the resource server receives a resource request and the signed access token transmitted from the client;
- a confirmation unit configured to confirm whether a region of the resource server is included in the signed access token by comparing a region included in the signed access token and the region of the resource server;
- and
- an execution unit configured to execute processing with respect to the resource request in a case where the determination unit determines that the signed access token is valid and the confirmation unit confirms that the region of the resource server is included in the signed access token.
A control method executed by an access control system including at least a terminal having a client, a resource server having a resource, and an authorization server, the control method comprising:
- issuing a signed access token for executing verification of an access token by the resource server;
- determining whether the signed access token is valid by executing signature verification on the signed access token in a case where a resource request and the signed access token transmitted from the client are received;
- confirming whether a region of the resource server is included in the signed access token by comparing a region included in the signed access token and the region of the resource server;
- and
- executing processing with respect to the resource request in a case where it is determined that the signed access token is valid and it is confirmed that the region of the resource server is included in the signed access token.
A non-transitory computer-readable storage medium storing a program for executing a control method executed by a resource server in an access control system including at least a terminal having a client, the resource server having a resource, and an authorization server, the control method comprising:
- determining whether the signed access token is valid by executing signature verification on the signed access token in a case where a resource request and the signed access token transmitted from the client are received;
- confirming whether a region of the resource server is included in the signed access token by comparing a region included in the signed access token and the region of the resource server;
- and
- executing processing with respect to the resource request in a case where the determining determines that the signed access token is valid and it is confirmed that the region of the resource server is included in the signed access token.
Dependencies are inferred from the claim text.