Authentication method and authentication apparatus

• US 20040039945A1
• Filed: 07/30/2003
• Published: 02/26/2004
• Est. Priority Date: 08/23/2002
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Oda, Yoshihiro
• Application Number:
  US10/630,010
• Publication Number:
  US 20040039945A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

In an authentication method for using a plurality of Web servers to allow only a user in a certain group to access information in the Web servers, a first Web server has a restricted access domain that only the user in the certain group is allowed to access from a client terminal, and does not have authentication information regarding the user. A second Web server has the restricted access domain that only the user in the certain group is allowed to access and further has the authentication information registered thereto. The first Web server delivers an authentication request to the second Web server. Based on authentication results determined by the second Web server, the first Web server allows the user to access the information. As a result, it is possible to reduce both user'"'"'s work load for using a Web server to which the authentication method is applied and administrator'"'"'s work load for managing the Web server.

Claims

1. An authentication method for using a plurality of Web servers to allow only a user in a certain group to access information in said Web servers, wherein a first Web server in said Web servers has a restricted access domain that only the user in said certain group is allowed to access from a client terminal and does not have authentication information regarding the user, and a second Web server in said Web servers has the restricted access domain that only the user in said certain group is allowed to access and further has said authentication information registered thereto, comprising the steps of:

causing said first Web server to request authentication from said second Web server; and

allowing said user to access said restricted access domain in said first Web server from said client terminal based on an authentication result provided to said first Web server by said second Web server.

2. The authentication method as claimed in claim 1, wherein said first Web server delivers an authentication information request received from said second Web server to said client terminal and then delivers authentication information received from said client terminal for said authentication information request to said second Web server.

3. The authentication method as claimed in claim 1, wherein said second Web server receives an authentication request from a plurality of first Web servers.

4. The authentication method as claimed in claim 1, wherein said first Web server delivers an authentication request to a plurality of second Web servers.

5. The authentication method as claimed in claim 1, wherein said first Web server delivers an authentication request to another first Web server and said other first Web server delivers the authentication request to said second Web server.

6. An authentication apparatus for allowing only a user in a certain group to access information in a restricted access domain therein, comprising:

an authentication requested Web server registering part registering a Web server as an authentication requested Web server, said Web server having a same restricted access domain as said restricted access domain therein and further having authentication information regarding the user registered thereto; and

an authentication requesting part requesting authentication from said Web server with reference to said authentication requested Web server registering part when said authentication requesting part receives an access request for access to said restricted access domain therein from a client terminal of the user,

wherein said Web server determines whether or not said authentication is valid and said access request is allowed based on an authentication result determined by said Web server.

7. The authentication apparatus as claimed in claim 6, wherein said authentication requesting part delivers an authentication information request received from said Web server to said client terminal and delivers authentication information supplied in response to said authentication information request by said client terminal to said Web server.