Communication system, and client, server and program used in such system

• US 20070067831A1
• Filed: 06/23/2006
• Published: 03/22/2007
• Est. Priority Date: 06/24/2005
• Status: Abandoned Application

• Current Assignee: Brother Kogyo Kabushiki Kaisha
• Original Assignee: Brother Kogyo Kabushiki Kaisha
• Inventors: Matsuda, Makoto, Ohara, Kiyotaka, Aoki, Kazuma
• Application Number:
  US11/473,123
• Publication Number:
  US 20070067831A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A communication system, capable of offering improved convenience to third parties having no intention of illegal use without affecting benefits of regular (authorized, registered) users, is provided. When a management server receiving an authentication request (containing authentication information inputted by the user of a client) from the client judges that the client is not a proper device based on the authentication request (authentication information), the management server requests new registration in an authentication database by transmitting a “user registration job” to the client. In a user registration server process executed by the management server upon reception of a user registration request from the client receiving the user registration job, authentication information supplied from the client can be newly registered in the authentication database.

Claims

1. A communication system in which at least part of a function implementable by a client is made available through authentication by a server, wherein:

the server includes;

an authentication judgment unit which judges whether or not authentication information on the client, contained in an authentication request transmitted from the client for requesting authentication of the client, has already been registered in an authentication database, in which authentication information to be used for authenticating the client is registered while associating the authentication information with the client, as authentication information on the client transmitting the authentication request;

a permission instruction transmitting unit which transmits a permission instruction, representing permission for use of the function, to the client transmitting the authentication request when the authentication judgment unit judges that the authentication information contained in the authentication request has already been registered in the authentication database;

a registration request transmitting unit which transmits a registration request, requesting new registration in the authentication database, to the client transmitting the authentication request when the authentication judgment unit judges that the authentication information contained in the authentication request has not been registered in the authentication database; and

an information registering unit which registers authentication information on the client, contained in a registration application transmitted from the client receiving the registration request from the registration request transmitting unit for applying for registration, in the authentication database as authentication information on the client transmitting the registration application, and

the permission instruction transmitting unit is configured to transmit the permission instruction to a client on which the registration of authentication information in the authentication database has been carried out by the information registering unit, and

the client includes;

an information input unit which lets a user input authentication information to be used for authenticating the client;

an authentication request transmitting unit which transmits the authentication request, containing the authentication information inputted through the information input unit, to the server;

a registration application transmitting unit which transmits the registration application, containing authentication information inputted through the information input unit, to the server when the registration request is received from the server receiving the authentication request transmitted by the authentication request transmitting unit; and

a function enabling unit which switches an operational state of the client from a function unavailable state in which at least part of the function implementable by the client is unavailable to a function available state in which the function is available when the permission instruction is received from the server receiving the authentication request transmitted by the authentication request transmitting unit or the registration application transmitted by the registration application transmitting unit.

2. The communication system according to claim 1, wherein:

the client further includes a coincidence judgment unit which judges whether or not the authentication information inputted through the information input unit coincides with previously registered authentication information, and

the authentication request transmitting unit of the client transmits the authentication request, containing the authentication information inputted through the information input unit, to the server when the coincidence judgment unit judges that the authentication information does not coincide with the previously registered authentication information, and

the function enabling unit of the client switches the operational state of the client to the function available state without the transmission of the authentication request by the authentication request transmitting unit when the coincidence judgment unit judges that the authentication information inputted through the information input unit coincides with the previously registered authentication information.

3. The communication system according to claim 2, wherein:

the information input unit of the client lets the user input authentication information again in the case where the coincidence judgment unit judges that the authentication information inputted through the information input unit does not coincide with the previously registered authentication information, and

the registration application transmitting unit of the client transmits the registration application, containing the authentication information inputted through the information input unit again, to the server.

4. The communication system according to claim 1, wherein the information input unit of the client lets the user input the authentication information when a prescribed setting of the client has been changed.

5. The communication system according to claim 1, wherein the information input unit of the client lets the user input the authentication information at startup of the client.

6. The communication system according to claim 1, wherein when authentication information on the client transmitting the registration application to-the-server in response to the registration request from the registration request transmitting unit has already- been registered in the authentication database at the point of reception of the registration application from the client, the information registering unit of the server updates the already registered authentication information into authentication information represented by the received registration application.

7. The communication system according to claim 1, wherein:

the communication system comprises a supply server capable of supplying a service to the client, and

the client further includes;

a service supply judgment unit which judges whether or not a service associated with the client has already been registered in a service supply database in which each service supplied by the supply server is registered while associating the service with each client to which the service should be supplied; and

a service supply request transmitting unit which transmits a service supply request, requesting the supply of a service, to the supply server when the service supply judgment unit judges that a service associated with the client has already been registered in the service supply database, and

the function enabling unit of the client switches the service supply request transmitting unit from a state in which the transmission of the service supply request is prohibited to a state in which the transmission of the service supply request is allowed when the permission instruction is received from the server.

8. The communication system according to claim 7, wherein:

the server further includes;

an inquiry search unit which searches the service supply database for a service associated with a client when a registration inquiry, for inquiring whether or not a service associated with the client has already been registered in the service supply database, is received from the client; and

a search result transmitting unit which transmits result of the search by the inquiry search unit to the client transmitting the registration inquiry, and

the service supply judgment unit of the client makes the judgment on whether a service associated with the client has already been registered in the service supply database or not based on the search result received from the server after the transmission of the registration inquiry to the server.

9. The communication system according to claim 1, wherein the server further includes a registration examination unit which determines whether to permit the registration of the authentication information, contained in the registration application transmitted from the client, in the authentication database by the information registering unit or not based on the authentication information, wherein:

the information registering unit registers the authentication information contained in the registration application in the authentication database when the registration examination unit determines to permit the registration.

10. A server capable of communicating with a client and executing authentication for making at least part of a function implementable by the client available, comprising:

an authentication judgment unit which judges whether or not authentication information on the client, contained in an authentication request transmitted from the client for requesting authentication of the client, has already been registered in an authentication database, in which authentication information to be used for authenticating the client is registered while associating the authentication information with the client, as authentication information on the client transmitting the authentication request;

a permission instruction transmitting unit which transmits a permission instruction, representing permission for use of the function, to the client transmitting the authentication request when the authentication judgment unit judges that the authentication information contained in the authentication request has already been registered in the authentication database;

a registration request transmitting unit which transmits a registration request, requesting new registration in the authentication database, to the client transmitting the authentication request when the authentication judgment unit judges that the authentication information contained in the authentication request has not been registered in the authentication database; and

an information registering unit which registers authentication information on the client, contained in a registration application transmitted from the client receiving the registration request from the registration request transmitting unit for applying for registration, in the authentication database as authentication information on the client transmitting the registration application, wherein;

the permission instruction transmitting unit is configured to transmit the permission instruction to. a client on which the registration of authentication information in the authentication database has been carried out by the information registering unit.

11. A client capable of communicating with a server executing authentication for making at least part of a function implementable by the client available, comprising:

an information input unit which lets a user input authentication information to be used for authenticating the client;

an authentication request transmitting unit which transmits an authentication request for requesting authentication of the client, containing the authentication information inputted through the information input unit, to the server;

a registration application transmitting unit which transmits a registration application for applying for registration of authentication information, containing authentication information inputted through the information input unit, to the server when a registration request for requesting new registration is received from the server receiving the authentication request transmitted by the authentication request transmitting unit; and

a function enabling unit which switches an operational state of the client from a function unavailable state in which at least part of the function implementable by the client is unavailable to a function available state in which the function is available when a permission instruction representing permission for use of the function is received from the server receiving the authentication request transmitted by the authentication request transmitting unit or the registration application transmitted by the registration application transmitting unit.

12. A computer program product comprising computer-readable instructions to be executed by a server, capable of communicating with a client and executing authentication for making at least part of a function implementable by the client available, the instructions causing the server to:

judge whether or not authentication information on the client, contained in an authentication request transmitted from the client for requesting authentication of the client, has already been registered in an authentication database, in which authentication information to be used for authenticating the client is registered while associating the authentication information with the client, as authentication information on the client transmitting the authentication request;

transmit a permission instruction, representing permission for use of the function, to the client transmitting the authentication request if it is judged that the authentication information contained in the authentication request has already been registered in the authentication database;

transmit a registration request, requesting new registration in the authentication database, to the client transmitting the authentication request if it is judged that the authentication information contained in the authentication request has not been registered in the authentication database; and

register authentication information on the client, contained in a registration application transmitted from the client receiving the registration request for applying for registration, in the authentication database as authentication information on the client transmitting the registration application, wherein;

the permission instruction is transmitted to a client on which the registration of authentication information in the authentication database has been carried out.

13. A computer program product comprising computer-readable instructions to be executed by a client, capable of communicating with a server executing authentication for making at least part of a function implementable by the client available, the instructions causing the client to:

let a user input authentication information to be used for authenticating the client;

transmit an authentication request for requesting authentication of the client, containing the authentication information, to the server;

transmit a registration application for applying for registration of authentication information, containing authentication information, to the server if a registration request for requesting new registration is received from the server receiving the authentication request; and

switch an operational state of the client from a function unavailable state in which at least part of the function implementable by the client is unavailable to a function available state in which the function is available if a permission instruction representing permission for use of the function is received from the server receiving the authentication request or the registration application.