Authority delegate system, server system in authority delegate system, and control method for controlling authority delegate system

A second server system including a first server system configured to manage specific information, an authentication device, and a third server system capable of communicating with a client operated by a first user who is allowed to use the service, the second server system comprising:

• a processor coupled to a memory;
• a reception unit configured to receive a shared range of an authorization token used by the second server system, wherein the authorization token is for authorizing a plurality of users other than the first user to use the specific information managed by the first server system;
• a transmission unit configured to transmit, to the client, a setting screen for the first user to set whether to permit the plurality of users within the shared range to share the authorization token, based on the received shared range;
• a management unit configured to issue one authorization token in response to receiving a permission instruction via the setting screen, and manage the shared range of the authorization token set by the first user via the transmitted setting screen, and the issued one authorization token, in association with each other,
• wherein the setting screen is a setting screen that allows setting whether to permit which users within the shared range to share the authorization token, and wherein the shared range of the authorization token is managed by the management unit by setting users who are permitted to share the authorization token by the first user via the setting screen;
• a determination unit configured to determine, in response to use of the service being requested by a client of a second user who has received the authorization token, whether the second user is included in the plurality of users within the shared range of the transmitted authorization token used by the second server system;
• and
• a provision unit configured to provide, in response to the determination unit determining that the second user is included in the plurality of users within the shared range of the authorization token and confirmation that the authorization token is valid, the service to the second user using the specific information acquired by the second server system from the first server system such that the second user is able to provide a proxy service to the first user,
• wherein the reception unit, the transmission unit, the management unit, the determination unit, and the provision unit are implemented by the processor.

A control method for controlling an authority delegate system including a first server system configured to manage specific information, a second server system configured to provide a service using acquired specific information, an authentication device, and a client operated by a first user who is allowed to use the service, the control method comprising:

• receiving a shared range of an authorization token used by the second server system, wherein the authorization token is for authorizing a plurality of users other than the first user to use the specific information managed by the first server system;
• transmitting, to the client, a setting screen for the first user to set whether to permit the plurality of users within the shared range to share the authorization token, based on the received shared range;
• issuing one authorization token in response to receiving a permission instruction via the setting screen, and managing the shared range of the authorization token set by the first user via the transmitted setting screen, and the issued one authorization token, in association with each other,
• wherein the setting screen is a setting screen that allows setting whether to permit which users within the shared range to share the authorization token, and wherein the shared range of the authorization token is managed by setting users who are permitted to share the authorization token by the first user via the setting screen;
• determining, in response to use of the service being requested by a client of a second user who has received the authorization token, whether the second user is included in the plurality of users within the shared range of the transmitted authorization token used by the second server system;
• and
• providing, in response to determining that the second user is included in the plurality of users within the shared range of the authorization token and confirmation that the authorization token is valid, the service to the second user using the specific information acquired by the second server system from the first server system such that the second user is able to provide a proxy service to the first user.

A non-transitory computer-readable storage medium storing a program, which when executed, causes an authority delegate system to perform a control method, wherein the authority delegate system includes a first server system configured to manage specific information, a second server system configured to provide a service using acquired specific information, an authentication device, and a client operated by a first user who is allowed to use the service, the control method comprising:

• receiving a shared range of an authorization token used by the second server system, wherein the authorization token is for authorizing a plurality of users other than the first user to use the specific information managed by the first server system;
• transmitting, to the client, a setting screen for the first user to set whether to permit the plurality of users within the shared range to share the authorization token, based on the received shared range;
• issuing one authorization token in response to receiving a permission instruction via the setting screen, and managing the shared range of the authorization token set by the first user via the transmitted setting screen, and the issued one authorization token, in association with each other,
• wherein the setting screen is a setting screen that allows setting whether to permit which users within the shared range to share the authorization token, and wherein the shared range of the authorization token is managed by setting users who are permitted to share the authorization token by the first user via the setting screen;
• determining, in response to use of the service being requested by a client of a second user who has received the authorization token, whether the second user is included in the plurality of users within the shared range of the transmitted authorization token used by the second server system;
• and
• providing, in response to determining that the second user is included in the plurality of users within the shared range of the authorization token and confirmation that the authorization token is valid, the service to the second user using the specific information acquired by the second server system from the first server system such that the second user is able to provide a proxy service to the first user.