Authority delegate system, authorization server system, control method, and program

A control method to control an authority delegate system, including a provider server system which provides a service to a device having an application, and an authorization server system which performs authorization processing to delegate user authority in the service to a usage source of the service, the control method comprising:

• in a management unit of the authorization server system, receiving a request from the device to register the application as the usage source of the service, identifying authority of the application in accordance with the received request, and managing, in an associated manner, an identifier of the application and the identified authority;
• and
• providing, via a providing unit of the provider server system, the service in a case where
• (i) an authorization operation has been performed to permit delegating the user authority to the application that will be transmitting a request to use the service, and
• (ii) the management unit issues an authorization code to the application in response to permitting delegating the user authority to the application, and
• (iii) the issued authorization code is received by the providing unit from the application, wherein a scope identification (ID) is acquired based on the authorization code, and
• (iv) a range authorization ID, identified by the acquired scope ID, is included in range authorization IDs set in the application.

A non-transitory computer-readable storage medium storing a program to cause an authority delegate system to perform a control method, wherein the authority delegate system includes a provider server system which provides a service to a device having an application, and an authorization server system which performs authorization processing to delegate user authority in the service to a usage source of the service, the control method comprising:

• in a management unit of the authorization server system, receiving a request from the device to register the application as the usage source of the service, identifying authority of the application in accordance with the received request, and managing, in an associated manner, an identifier of the application and the identified authority;
• and
• providing, via a providing unit of the provider server system, the service in a case where
• (i) an authorization operation has been performed to permit delegating the user authority to the application that will be transmitting a request to use the service, and
• (ii) the management unit issues an authorization code to the application in response to permitting delegating the user authority to the application, and
• (iii) the issued authorization code is received by the providing unit from the application, wherein a scope identification (ID) is acquired based on the authorization code, and
• (iv) a range authorization ID, identified by the acquired scope ID, is included in range authorization IDs set in the application.