Information providing device, method, program and recording medium, and user authentication device, method, program and recording medium

• US 20040187009A1
• Filed: 03/19/2004
• Published: 09/23/2004
• Est. Priority Date: 03/20/2003
• Status: Active Grant

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Ebata, Jun
• Granted Patent: US 7,617,399 B2
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

In an information providing device and method, a plurality of information providers, including first and second information providers, are made to be associated with each other. The first information provider is caused to receive a first user information item, stored in a first information management unit, in response to a user information receiving request. The second information provider is caused to receive a second user information item, correlated with the first user information item and stored in a second information management unit, in response to a predetermined identification data. A unified information item is created by combining the first user information item and the second user information item based on the predetermined identification data is outputted.

Claims

1. An information providing device comprising:

a provider association unit making a plurality of information providers, including first and second information providers, be associated with each other, the plurality of information providers providing respective user information items, the provider association unit comprising;

a first unit causing the first information provider to receive a first user information item, stored in a first information management unit, in response to a user information receiving request;

a second unit causing the second information provider to receive a second user information item, correlated with the first user information item and stored in a second information management unit, in response to a predetermined identification data; and

a third unit outputting a unified information item which is created by combining the first user information item and the second user information item based on the predetermined identification data.

2. The information providing device according to claim 1 wherein the user information receiving request contains retrieval conditions specified therein, and the provider association unit causes the first and second information providers to respectively receive the first and second user information items that satisfy the retrieval conditions.

3. The information providing device according to claim 1 wherein the provider association unit is provided to unify the information items received by the first and second information providers for every user.

4. The information providing device according to claim 1 wherein the information providing device further comprises the first information provider and the second information provider.

5. The information providing device according to claim 1 wherein the information providing device further comprises:

a first-information-provider information management unit managing a first-information-provider identification data which identifies the first information provider from among the plurality of information providers; and

a second-information-provider information management unit managing a second-information-provider identification data which identifies the secong information provider from among the plurality of information providers.

6. The information providing device according to claim 1 wherein the information providing device further comprises a call information management unit in which a plurality of call information items used to call the plurality of information providers respectively are recorded, and the provider association unit causes the first and second information providers to respectively receive the first and second information items by calling the first and second information providers based on the call information management unit.

7. An information providing method for use in an information providing device which makes a plurality of information providers, including first and second information providers, be associated with each other, the information providing method comprising:

causing the first information provider to receive a first user information item, stored in a first information management unit, in response to a user information receiving request;

causing the second information provider to receive a second user information item, correlated with the first user information item and stored in a second information management unit, in response to a predetermined identification data; and

outputting a unified information item which is created by combining the first user information item and the second user information item based on the predetermined identification data.

8. The information providing method according to claim 7 wherein the user information receiving request contains retrieval conditions specified therein, and the first and second information providers are caused to respectively receive the first and second user information items that satisfy the retrieval conditions.

9. The information providing method according to claim 7 wherein the information items received by the first and second information providers are unified for every user.

10. A computer program product for causing an information providing device which makes a plurality of information providers, including first and second information providers, be associated with each other, to perform:

causing the first information provider to receive a first user information item, stored in a first information management unit, in response to a user information receiving request;

causing the second information provider to receive a second user information item, correlated with the first user information item and stored in a second information management unit, in response to a predetermined identification data; and

outputting a unified information item which is created by combining the first user information item and the second user information item based on the predetermined identification data.

11. The computer program product according to claim 10 wherein the user information receiving request contains retrieval conditions specified therein, and the first and second information providers are caused to respectively receive the first and second user information items that satisfy the retrieval conditions.

12. A user authentication device comprising:

a provider association unit which makes a plurality of authentication providers, including first and second authentication providers, be associated with each other, the provider association unit comprising;

a first unit causing the first authentication provider to perform, in response to a first authentication request, a first user authentication based on a first user identification data that is specified in the first authentication request; and

a second unit causing the second authentication provider to perform, in response to a second authentication request related to a user approved by the first user authentication, a second user authentication based on a second user identification data that is correlated with the first user identification data.

13. The user authentication device according to claim 12 wherein the user authentication device further comprises the first authentication provider and the second authentication provider.

14. The user authentication device according to claim 12 wherein the user authentication device further comprises a user-identification management unit in which the first user identification data and the second user indentification data are correlated to each other and recorded, and the provider association unit is provided to search for the second user identification data in the user-identification management unit based on the first user identification data.

15. The user authentication device according to claim 12 wherein the provider association unit further comprises a user-identification management unit in which the first user identification data and the second user indentification data are correlated to each other and recorded, and the provider association unit is provided to search for the second user identification data in the user-identification management unit based on the first user identification data.

16. The user authentication device according to claim 12 wherein the user authentication device further comprises:

a first-authentication-provider information management unit managing a first-authentication-provider identification data which identifies the first authentication provider from among the plurality of authentication providers; and

a second-authentication-provider information management unit managing a second-authentication-provider identification data which identifies the second authentication provider from among the plurality of authentication providers.

17. The user authentication device according to claim 12 wherein the user authentication device further comprises a call information management unit in which a plurality of call information items used to call the plurality of authentication providers respectively are recorded, and the provider association unit causes the first and second authentication providers to perform the first and second user authentications respectively by calling the first and second authentication providers based on the call information management unit.

18. The user authentication device according to claim 12 wherein the first authentication provider creates a first electronic ticket which certifies approval of the user by the first authentication provider, the second authentication provider creates a second electronic ticket which certifies approval of the user by the second authentication provider, and the user authentication device provides information containing the first electronic ticket, in response to the first authentication request and provides information containing the second electronic ticket, in response to the second authentication request.

19. The user authentication device according to claim 18 wherein the provider association unit creates a merge ticket in which the first electronic ticket and the second electronic ticket are unified, and the user authentication device provides a first merge ticket in which the first electronic ticket is unified, in response to the first authentication request, and provides a second merge ticket in which the second electronic ticket is unified further, in response to the second authentication request.

20. The user authentication device according to claim 19 wherein the user authentication device provides the merge ticket which is encoded.

21. The user authentication device according to claim 19 wherein at least one of the merge ticket, the first electronic ticket, and the second electronic ticket contains a term of validity.

22. The user authentication device according to claim 19 wherein at least one of the merge ticket, the first electronic ticket, and the second electronic ticket contains a code for ticket falsification check.

23. The user authentication device according to claim 19 wherein at least one of the merge ticket, the first electronic ticket, and the second electronic ticket contains a range of validity.

24. The user authentication device according to claim 12 wherein the first authentication provider is a password authentication provider which performs a password authentication based on a password of the user, and the second authentication provider is a fingerprint authentication provider which performs a fingerprint authentication based on a fingerprint of the user.

25. The user authentication device according to claim 19 wherein the provider association unit causes the first authentication provider to decode the first electronic ticket of the first merge ticket in response to a decode request of the first merge ticket, and causes the second authentication provider to decode the second electronic ticket of the second merge ticket in response to a decode request of the second merge ticket.

26. The user authentication device according to claim 12 wherein the provider association unit is provided with a call function using a remote procedure call of SOAP.

27. A user authentication method for use in a user authentication device which makes a plurality of authentication providers, including first and second authentication providers, be associated with each other, the user authentication method comprising:

causing the first authentication provider to perform, in response to a first authentication request, a first user authentication based on a first user identification data that is specified in the first authentication request; and

causing the second authentication provider to perform, in response to a second authentication request related to a user approved by the first user authentication, a second user authentication based on a second user identification data that is correlated with the first user identification data.

28. The user authentication method according to claim 27 wherein the second user identification data is searched for in a user-identification management unit, based on the first user identification data, and, in the user-identification management unit, the first user identification data and the second user indentification data are correlated to each other and recorded.

29. The user authentication method according to claim 27 wherein the first authentication provider is identified from among the plurality of authentication providers based on a first-authentication-provider identification data managed by a first-authentication-provider information management unit, and the second authentication provider is identified from among the plurality of authentication providers based on a second-authentication-provider identification data managed by a second-authentication-provider information management unit.

30. The user authentication method according to claim 27 wherein the first and second authentication providers are caused to perform the first and second user authentications respectively by calling the first and second authentication providers based on a call information management unit in which a plurality of call information items used to call the plurality of authentication providers respectively are recorded.

31. A computer program product for causing a user authentication device which makes a plurality of authentication providers, including first and second authentication providers, be associated with each other, to perform:

causing the first authentication provider to perform, in response to a first authentication request, a first user authentication based on a first user identification data that is specified in the first authentication request; and

causing the second authentication provider to perform, in response to a second authentication request related to a user approved by the first user authentication, a second user authentication based on a second user identification data that is correlated with the first user identification data.

32. The computer program product according to claim 31 wherein the second user identification data is searched for in a user-identification management unit, based on the first user identification data, and, in the user-identification management unit, the first user identification data and the second user indentification data are correlated to each other and recorded.