Authentication and authorization system and authentication and authorization method

An authentication and authorization method performed by an authentication and authorization system configured to perform authentication and authorization when an external service with which an application executed by a user cooperates is used via a cooperation unit, wherein

• the authentication and authorization system includes:
• an application execution unit configured to execute the application;
• a user information storage unit configured to store user information of the user;
• a token acquisition unit configured to acquire, using the user information acquired from the user information storage unit, an access token from an authorization server that authorizes the application to use the external service when a valid access token is presented via the cooperation unit;
• and
• a token storage unit configured to store the access token acquired by the token acquisition unit,
• the token acquisition unit is configured to
• acquire the access token from the authorization server at a predetermined cycle, and store the acquired access token in the token storage unit, and
• the application execution unit is configured to
• when the application uses the external service, acquire the access token from the token storage unit, and request the cooperation unit to make the application cooperate with the external service using the acquired access token.