Authentication device and computer-readable recording medium

• US 10,701,051 B2
• Filed: 01/22/2018
• Issued: 06/30/2020
• Est. Priority Date: 02/08/2017
• Status: Active Grant

• Current Assignee: Casio Computer Company Limited
• Original Assignee: Casio Computer Company Limited
• Inventors: Ohsumi, Tsuyoshi
• Primary Examiner(s): Arani, Taghi T
• Assistant Examiner(s): Champakesan, Badri Narayanan
• Application Number:
  US15/876,531
• Publication Number:
  US 20180227286A1
• Time in Patent Office: 890 Days
• Field of Search: 726 5
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54

Abstract

An authentication device includes a first login module and a second login module. Upon a login request to a first account among predetermined accounts which is accompanied by an entry of authentication information from a user, the first login module compares the entered authentication information with the authentication information associated with each of the predetermined accounts and approves the login request if the entered authentication information matches the authentication information on the first account. The second login module approves login of a second account if login to the second account is requested in a login session started by approval of the login request to the first account by the first login module. The second account has a pre-established proxy to approve the login request to the first account.

Claims

1. An authentication device comprising:

a memory that stores account setting data in which a first account from among plural accounts is set as a proxy account for which a second account from among the plural accounts has a proxy, in which the second account is set as a dependent account that depends upon the proxy account, and in which each of plural unique email addresses is associated with a respective one of the plural accounts; and

a processor configured to execute processes comprising;

a first login process of, upon receipt of a login request which is accompanied by an entry of authentication information from a user, comparing the entered authentication information with authentication information associated with each of the plural accounts and approving the login request in a case in which it is determined that the entered authentication information matches authentication information of one of the plural accounts;

a second login process of approving login of the dependent account in a case in which login to the dependent account is requested in a login session started by approval of the login request received in the first login process; and

a registration process of, in a case in which an email indicative of information on a specific control window is transmitted as a proxy invitation to a unique email address entered by the user in the login session started by approval of the login request received in the first login process, the specific control window being a window for authorization to associate an account corresponding to the login session with an account corresponding to the unique email address entered by the user, and an operation for the authorization is performed in the specific control window, generating the account setting data in which the account corresponding to the login session is set as a dependent account and the account corresponding to the unique email address entered by the user is set as a proxy account, and registering the generated account setting data in the memory.

2. The authentication device according to claim 1, wherein the login request to the dependent account is approved regardless of entry of authentication information on the dependent account by the user.

3. An authentication device comprising:

a memory that stores account setting data in which a first account from among plural accounts is set as a proxy account for which a second account from among the plural accounts has a proxy, and in which the second account is set as a dependent account that depends upon the proxy account; and

a processor configured to execute processes comprising;

a first login process of, upon receipt of a login request which is accompanied by an entry of authentication information from a user, comparing the entered authentication information with authentication information associated with each of the plural accounts and approving the login request in a ease in which it is determined that the entered authentication information matches authentication information of one of the plural accounts;

a second login process of approving login of the dependent account in a case in which login to the dependent account is requested in a login session started by approval of the login request received in the first login process; and

a registration process of, in a case in which an email indicative of information on a specific control window for generating an account is transmitted as a proxy invitation to an email address entered by the user in the login session started by approval of the login request received in the first login process, and the account is generated in response to an operation in the specific control window, generating the account setting data in which the generated account is set as a proxy account and an account corresponding to the login session is set as a dependent account, and registering the generated account setting data in the memory.

4. The authentication device according to claim 3, Wherein the login request to the dependent account is approved regardless of entry of authentication information on the dependent account by the user.

5. An authentication device comprising:

a memory that stores account setting data in which a first account from among plural accounts is set as a proxy account for which a second account from among the plural accounts has a proxy, in which the second account is set as a dependent account that depends upon the proxy account, and in which each of plural unique email addresses is associated with a respective one of the plural accounts; and

a processor configured to execute processes comprising;

a first login process of, upon receipt of a login request which is accompanied by an entry of authentication information from a user, comparing the entered authentication information with authentication information associated with each of the plural accounts and approving the login request in a case in which it is determined that the entered authentication information matches authentication information of one of the plural accounts;

a second login process of approving login of the dependent account in a case in which login to the dependent account is requested in a login session started by approval of the login request received in the first login process; and

a registration process of, in a case in Which an email indicative of information on a specific control window is transmitted as an invitation to dependence to a unique email address entered by the user in the login session started by approval of the login request received in the first login process, the specific control window being a window for authorization to associate an account corresponding to the login session with an account corresponding to the unique email address entered by the user, and an operation for the authorization is performed in the specific control window, generating the account setting data in which the account corresponding to the login session is set as a proxy account and the account corresponding to the unique email address entered by the user is set as a dependent account, and registering the generated account setting data in the memory.

6. The authentication device according to claim 5, wherein the login request to the dependent account is approved regardless of entry of authentication information on the dependent account by the user.

7. An authentication device comprising:

a memory that stores account setting data in which a first account from among plural accounts is set as a proxy account for which a second account from among the plural accounts has a proxy, and in which the second account is set as a dependent account that depends upon the proxy account; and

a processor configured to execute processes comprising;

a first login process of, upon receipt of a login request which is accompanied by an entry of authentication information from a user, comparing the entered authentication information with authentication information associated with each of the plural accounts and approving the login request in a case in which it is determined that the entered authentication information matches authentication information of one of the plural accounts;

a second login process of approving login of the dependent account in a case in which login to the dependent account is requested in a login session started by approval of the login request received in the first login process; and

a registration process of, in a case in which an email indicative of information on a specific control window for generating an account is transmitted as an invitation to dependence to an email address entered by the user in the login session started by approval of the login request received in the first login process, and the account is generated in response to an operation in the specific control window, generating the account setting data in which the generated account is set as a dependent account and an account corresponding to the login session is set as a proxy account, and registering the generated account setting data in the memory.

8. The authentication device according to claim 7, wherein the login request to the dependent account is approved regardless of entry of authentication information on the dependent account by the user.