Back to results
US 8,266,440 B2Granted
Information processing apparatus and authentication information migration method
AssigneeCanon Kabushiki Kaisha
InventorYuu Tamura
Life of this patent
Estimating the term…
Abstract
An information processing apparatus of the present invention converts user authentication information based on a second one-way function into a second converted value if authentication with a first converted value obtained by converting the user authentication information based on the first one-way function is successful.
Claims15
An information processing apparatus comprising:
- an acquisition unit configured to acquire authentication information of a user;
- a calculation unit configured to calculate a value from the acquired authentication information, using a first authentication algorithm based on a first one-way function or using a second authentication algorithm based on a second one-way function different from the first one-way function of the first authentication algorithm;
- a determination unit configured to determine
- whether, in a case where a first value is calculated using the first authentication algorithm, the calculated first value corresponds to a first stored value already stored in the information processing apparatus, and
- whether, in a case where a second value is calculated using the second authentication algorithm, the calculated second value corresponds to a second stored value already stored in the information processing apparatus;
- and an authentication unit configured to
- permit a login of the user in a case where it is determined by the determination unit that the calculated first value corresponds to the first stored value,
- deny a login of the user in a case where it is determined by the determination unit that the calculated first value does not correspond to the first stored value,
- permit a login of the user in a case where it is determined by the determination unit that the calculated second value corresponds to the second stored value, and
- deny a login of the user in a case where it is determined by the determination unit that the calculated second value does not correspond to the second stored value,
- wherein, in a case where it is determined by the determination unit that the calculated first value corresponds to the first stored value,
- the second value is calculated from the acquired authentication information, using the second authentication algorithm, and
- the calculated second value is stored in the information processing apparatus so that authentication using the second authentication algorithm is performed for any subsequent authentications by the user.
10 more elements
A method for authenticating a user, the method comprising:
- acquiring authentication information of the user;
- calculating a value from the acquired authentication information, using a first authentication algorithm based on a first one-way function or using a second authentication algorithm based on a second one-way function different from the first one-way function of the first authentication algorithm;
- determining
- whether, in a case where a first value is calculated using the first authentication algorithm, the calculated first value corresponds to a first stored value already stored in an information processing apparatus practicing the method, and
- whether, in a case where a second value is calculated using the second authentication algorithm, the calculated second value corresponds to a second stored value already stored in the information processing apparatus;
- and authenticating
- permission for a login of the user in a case where it is determined that the calculated first value corresponds to the first stored value,
- denial of a login of the user in a case where it is determined that the calculated first value does not correspond to the first stored value,
- permission for a login of the user in a case where it is determined that the calculated second value corresponds to the second stored value, and
- denial of a login of the user in a case where it is determined that the calculated second value does not correspond to the second stored value;
- and
- in a case where it is determined that the calculated first value corresponds to the first stored value,
- calculating the second value from the acquired authentication information, using the second authentication algorithm, and
- storing the calculated second value in the information processing apparatus so that authentication using the second authentication algorithm is performed for any subsequent authentications by the user.
11 more elements
A nontransitory processor readable medium storing a program configured to cause a processor to execute operations comprising:
- acquiring authentication information of a user;
- calculating a value from the acquired authentication information, using a first authentication algorithm based on a first one-way function or using a second authentication algorithm based on a second one-way function different from the first one-way function of the first authentication algorithm;
- determining
- whether, in a case where a first value is calculated using the first authentication algorithm, the calculated first value corresponds to a first stored value already stored in an information processing apparatus, and
- whether, in a case where a second value is calculated using the second authentication algorithm, the calculated second value corresponds to a second stored value already stored in the information processing apparatus;
- and authenticating
- permission for a login of the user in a case where it is determined that the calculated first value corresponds to the first stored value,
- denial of a login of the user in a case where it is determined that the calculated first value does not correspond to the first stored value,
- permission for a login of the user in a case where it is determined that the calculated second value corresponds to the second stored value, and
- denial of a login of the user in a case where it is determined that the calculated second value does not correspond to the second stored value;
- and
- in a case where it is determined that the calculated first value corresponds to the first stored value,
- calculating the second value from the acquired authentication information, using the second authentication algorithm, and
- storing the calculated second value in the information processing apparatus so that authentication using the second authentication algorithm is performed for any subsequent authentications by the user.
11 more elements
Dependencies are inferred from the claim text.