Method and apparatus for certification and authentication of users and computers over networks

A certification method applicable to a networking system including a plurality of local networks, each of which is constituted by a plurality of terminals connected to a certification server via a network, wherein in a local session sharing process, the plurality of terminals constitute a same group to share a same local session in each of the plurality of local networks, and wherein a general local session sharing process, all the terminals connected with the plurality of local networks respectively are combined together to form a general group to share a general local session, comprising the steps of:

• performing an authentication process wherein a first user of a first terminal issues a service use request to use a prescribed service, the certification server transmits identification information to the first terminal, the certification server sends authentication requests to the other users of the plurality of terminals other than the first terminal asking whether to authenticate the first user of the first terminal, the first user of the first terminal directly communicates the identification information to the other users of the plurality of terminals, a second user of a second terminal within the plurality of terminals receiving the authentication request and the identification information confirms the authentication of the first user with the other users of the plurality of terminals other than the first and second terminals, and the certification server confirms the other terminals sharing the general local session whether to authenticate the first terminal issuing the service use request, so that the certification server makes a determination whether to authenticate the first terminal based on results of confirmation returned from the other terminals;
• and
• controlling the certification server based on a determination result to transmit an authentication information response in response to an authentication information request transmitted thereto from a service provider that is requested to provide the service by the first terminal.

A certification system applicable to a networking system interconnecting a plurality of local networks, each of which is connected with a plurality of terminals that constitute a same group to share a same local session, wherein all terminals are combined together to form a general group to share a general local session, said certification system comprising:

• a certification server for upon reception of a service use request issued by a first terminal belonging to the general group to use a prescribed service, transmitting identification information to the first terminal, transmitting an authentication request to each of the other terminals of the general group, a first user of the first terminal directly communicating the identification information to other users of the plurality of terminals, a second user of a second terminal within the plurality of terminals receiving the authentication request and the identification information confirms the authentication of the first terminal with the other users of the plurality of terminals other than the first and second terminals so that a determination is made based on authentication responses and the identification information, which are returned from the other terminals, as to whether or not the first terminal issuing the service use request is allowed to start the service;
• and a service provider for upon reception of the service use request from the first terminal, transmitting an authentication information request regarding the first terminal to the certification server, so that the service is provided to the first terminal based on an authentication information response that is returned from the certification server, wherein in response to the authentication information request from the service provider, the certification server transmits the authentication information response to the service provider on the basis of a result of the determination as to whether or not the first terminal issuing the service use request is allowed to start the service.