Access control device, communication system, program, and method for controlling access

• US 10,305,905 B2
• Filed: 07/19/2016
• Issued: 05/28/2019
• Est. Priority Date: 01/31/2014
• Status: Active Grant

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Homma, Takeshi, Yamamoto, Yohei, Maeda, Kaoru
• Primary Examiner(s): Arani, Taghi T
• Assistant Examiner(s): Lane, Gregory A
• Application Number:
  US15/213,557
• Publication Number:
  US 20160330202A1
• Time in Patent Office: 1,043 Days
• Field of Search: 726 23
• CPC Class Codes: G06F 1/16 Constructional details or arrangements
• CPC Class Codes: G06F 1/1613 for portable computers cooling arrangements therefor G06F1/203; constructional details or arrangements for pocket calculators, electronic agendas or books G06F15/0216; constructional details of portable telephone sets: with several bodies H04M1/0202
• CPC Class Codes: G06F 1/1686 the I/O peripheral being an integrated camera
• CPC Class Codes: G06F 1/182 with special features, e.g. for use in industrial environments; grounding or shielding against radio frequency interference [RFI] or electromagnetical interference [EMI]
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04M 1/2535 adapted for voice communication over an Internet Protocol [IP] network Voice over Internet Protocol (VoIP) network equipment and services H04M7/006; implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] H04L69/16
• CPC Class Codes: H04N 7/147 Communication arrangements, e.g. identifying the communication as a video-communication, intermediate storage of the signals selecting H04Q
• CPC Class Codes: H04N 7/15 Conference systems
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 : using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/66 : Trust-dependent, e.g. using trust scores or trust relationships
• CPC Class Codes: H04W 12/67 : Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

An access control device for controlling an access by a communication terminal to an application includes an authentication method management means configured to manage each of the application in association with authentication information, which indicates an effective authentication method effective for authenticating an access request source of an access request to access the application, an authenticating means configured to authenticate the access request source using a usable authentication method, which can be used in the communication terminal, based on the access request, an access request receiving means configured to receive the access request to access an intended application from the communication terminal, and an access control means configured to control the communication terminal so that the communication terminal does not access the intended application in a case where the authentication method management means does not manage the authentication information, which indicates the authentication method used for the authentication.

Claims

1. An access control device for controlling an access by a communication terminal to an application, the access control device comprising:

a central processing unit (CPU) configured to;

manage the application in association with authentication information, which indicates an effective authentication method effective for authenticating an access request source of an access request to access the application;

authenticate the access request source using a usable authentication method, which can bo is used in the communication terminal, based on the access request;

receive the access request to access an intended application from the communication terminal;

control the communication terminal so that

the communication terminal does not access the intended application when the CPU does not manage the authentication information, which indicates the effective authentication method used for authenticating the access request source, in association with the intended application, and

the communication terminal accesses the intended application when the CPU manages the authentication information, which indicates the effective authentication method used for authenticating the access request source, in association with the intended application; and

manage each access request source to the application in association with application information, which indicates the application used in the access request source, wherein

the CPU controls the communication terminal so that the communication terminal is prevented from accessing the intended application when the CPU does not manage the application information indicative of the intended application in association with the access request source to the intended application, and

the communication terminal accesses the intended application when the CPU manages the application information indicative of the intended application in association with the access request source, and

the CPU manages in association with period information, which indicates a period while the application is used, for each of the access request source and for each of the application information.

2. A communication system comprising:

the access control device according to claim 1; and

an application server including a storing means storing the application.

3. The communication system according claim 2, wherein the access control device controls the access to the intended application by reporting access information for accessing the intended application stored in the storing means of the application ser ver to the communication terminal.

4. The communication system according claim 2, the communication system further comprising:

the communication terminal as the access request source.

5. A non-transitory recording medium storing a program which, when executed by a processor of an access control device for controlling an access by a communication terminal to an application, causes the access control device to:

manage the application in association with authentication information, which indicates an effective authentication method effective for authenticating an access request source of an access request to access the application;

authenticate the access request source using a usable authentication method, which is used in the communication terminal, based on the access request;

receive the access request to access an intended application from the communication terminal;

control the communication terminal so that

the communication terminal does not access the intended application when the authentication information, which indicates the effective authentication method used for authenticating the access request source, is not managed in association with the intended application, and

the communication terminal accesses the intended application when the authentication information, which indicates the effective authentication method used for authenticating the access request source, is managed in association with the intended application;

manage each access request source to the application in association with application information, which indicates the application used in the access request source; and

control the communication terminal so that

the communication terminal is prevented from accessing the intended application when the application information, indicative of the intended application, is not managed in association with the access request source to the intended application, and

the communication terminal accesses the intended application when the application information, indicative of the intended application, is managed in association with the access request source, wherein

each access request source is managed in association with each of the application information and with period information that indicates a period while the application is used.

6. A method, performed by a processor of an access control device for controlling an access by a communication terminal to an application, the method comprising:

managing the application in association with authentication information, which indicates an effective authentication method effective for authenticating an access request source of an access request to access the application;

authenticating the access request source using a usable authentication method, which is used in the communication terminal, based on the access request;

receiving the access request to access an intended application from the communication terminal;

controlling the communication terminal so that

the communication terminal does not access the intended application when the authentication information, which indicates the effective authentication method used for authenticating the access request source, is not managed in association with the intended application, and

the communication terminal accesses the intended application when the authentication information, which indicates the effective authentication method used for authenticating the access request source, is managed in association with the intended application;

managing each access request source to the application in association with application information, which indicates the application used in the access request source; and

controlling the communication terminal so that

the communication terminal is prevented from accessing the intended application when the application information, indicative of the intended application, is not managed in association with the access request source to the intended application, and

the communication terminal accesses the intended application when the application information, indicative of the intended application, is managed in association with the access request source, wherein

each access request source is managed in association with each of the application information and with period information that indicates a period while the application is used.