SERVER APPARATUS, CLIENT APPARATUS, CONTROL METHOD THEREFOR, AND COMPUTER PROGRAM

• US 20070136820A1
• Filed: 09/11/2006
• Published: 06/14/2007
• Est. Priority Date: 09/13/2005
• Status: Abandoned Application

• Current Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Original Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Inventors: Saito, Kentaro
• Application Number:
  US11/530,608
• Publication Number:
  US 20070136820A1
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18

Abstract

A server apparatus capable of communicating with a client apparatus via plurality of transmission paths includes a memory unit adapted to store first authentication information of the client apparatus which communicates via at least one of the plurality of transmission paths, a request unit adapted to request transmission of second authentication information stored in the memory unit of the client apparatus upon acceptance of a connection request from the client apparatus via one of the plurality of transmission paths, a first authentication unit adapted to authenticate the second authentication information on the basis of the first authentication information when the second authentication information is transmitted in response to the request, and an access permission unit adapted to permit access from the client apparatus when the first authentication unit authenticates the second authentication information.

Claims

1. A server apparatus capable of communicating with a client apparatus via a plurality of communication paths, comprising:

a memory unit adapted to store first authentication information of the client apparatus which communicates via at least one of the plurality of communication paths;

a request unit adapted to request the client apparatus to transmit second authentication information stored in a memory unit of the client apparatus upon acceptance of an access request from the client apparatus via one of the plurality of communication paths;

a first authentication unit adapted to authenticate the second authentication information on the basis of the first authentication information when the second authentication information is transmitted in response to the transmission request; and

an access permission unit adapted to permit access from the client apparatus when said first authentication unit authenticates the second authentication information.

2. The apparatus according to claim 1, further comprising:

a display control unit adapted to cause the client apparatus to display a first input window for inputting third authentication information when the second authentication information is not transmitted in accordance with the transmission request or when said first authentication unit does not authenticate the second authentication information;

a reception unit adapted to receive the third authentication information input using the first input window from the client apparatus;

a second authentication unit adapted to authenticate the third authentication information on the basis of the first authentication information; and

a transmission unit adapted to generate the second authentication information and transmit the second authentication information to the client apparatus when said second authentication unit authenticates the third authentication information.

3. The apparatus according to claim 2, wherein

said display control unit causes a display unit of the server apparatus to further display a second input window corresponding to the first input window,

said second authentication unit authenticates one of the third authentication information input using the first input window and fourth authentication information input using the second input window on the basis of the first authentication information, and

said display control unit ends display of the second input window when said second authentication unit performs authentication.

4. The apparatus according to claim 1, wherein

the second authentication information contains time information regarding when the client apparatus finally accessed the server apparatus, and

said first authentication unit does not authenticate the second authentication information upon lapse of a predetermined period of time from the time information.

9. The apparatus according to claim 1, wherein the authentication information contains user identification information and password of the client apparatus.

16. A computer program which is stored in a computer-readable storage medium and causes a computer to function as a server apparatus defined in claim 1.

5. A server apparatus capable of communicating with a client apparatus via a plurality of communication paths, comprising:

a memory unit adapted to store identification information and first authentication information of the client apparatus which communicates via at least one of the plurality of communication paths;

a request unit adapted to request the client apparatus to transmit the identification information of the client apparatus upon acceptance of an access request from the client apparatus via one of the plurality of communication paths;

a determination unit adapted to determine whether or not said memory unit stores the identification information transmitted in response to the transmission request; and

an access permission unit adapted to permit access from the client apparatus when said determination unit determines that said memory unit stores the transmitted identification information.

6. The apparatus according to claim 5, further comprising:

a display control unit adapted to cause the client apparatus to display a first input window for inputting second authentication information when said determination unit determines that said memory unit does not store the transmitted identification information;

a reception unit adapted to receive the second authentication information input using the first input window; and

an authentication unit adapted to authenticate the second authentication information on the basis of the first authentication information,

wherein when said authentication unit authenticates the second authentication information, said memory unit stores the transmitted identification information.

7. The apparatus according to claim 6, wherein

said display control unit causes a display unit of the server apparatus to further display a second input window corresponding to the first input window,

said authentication unit authenticates one of the second authentication information input using the first input window and third authentication information input using the second input window on the basis of the first authentication information, and

said display control unit ends display of the second input window when said authentication unit performs authentication.

8. The apparatus according to claim 5, wherein

said memory unit stores, in association with the identification information of the client apparatus, time information regarding when the client apparatus finally accessed the server apparatus,

said determination unit updates the time information when determining that said memory unit stores the transmitted identification information, and

the identification information is deleted from said memory unit upon lapse of a predetermined period of time from the time information.

10. A client apparatus capable of communicating with a server apparatus via a plurality of communication paths, comprising:

a memory unit adapted to store authentication information received from the server apparatus which communicates via at least one of the plurality of communication paths;

an access request unit adapted to request access to the server apparatus via a first communication path of the plurality of communication paths; and

a transmission unit adapted to transmit, to the server apparatus in response to the access request, the authentication information requested by the server apparatus to be transmitted,

wherein the client apparatus communicates with the server apparatus when access to the server apparatus is permitted on the basis of the authentication information transmitted from said transmission unit.

11. The apparatus according to claim 10, further comprising a display control unit adapted to cause a display unit to display a first input window for accepting input of the authentication information when said memory unit does not store the authentication information or when access to the server apparatus is not permitted on the basis of the transmitted authentication information,

wherein said transmission unit transmits the authentication information input using the first input window to the server apparatus, and

the client apparatus communicates with the server apparatus when access to the server apparatus is permitted on the basis of the authentication information transmitted from said transmission unit.

12. The apparatus according to claim 11, wherein

the first communication path includes a short-range wireless communication path,

a display unit of the server apparatus displays a second input window corresponding to the first input window,

the client apparatus further comprises a detection unit adapted to detect an authentication result in the server apparatus for the authentication information input using one of the first input window and the second input window, and

said display control unit ends display of the first input window when the authentication result represents that the authentication information is authenticated.

17. A computer program which is stored in a computer-readable storage medium and causes a computer to function as a client apparatus defined in claim 10.

13. A client apparatus capable of communicating with a server apparatus via a plurality of communication paths, comprising:

a memory unit adapted to store identification information of the client apparatus;

an access request unit adapted to request access to the server apparatus via a first communication path of the plurality of transmission communication paths; and

a transmission unit adapted to transmit, to the server apparatus in response to the access request, the identification information requested by the server apparatus to be transmitted,

wherein the client apparatus communicates with the server apparatus when access to the server apparatus is permitted on the basis of the identification information transmitted from said transmission unit.

14. The apparatus according to claim 13, further comprising a display control unit adapted to cause a display unit to display a first input window for accepting input of authentication information of the client apparatus when access to the server apparatus is not permitted on the basis of the identification information transmitted from said transmission unit,

wherein said transmission unit transmits the authentication information input using the first input window to the server apparatus, and

the client apparatus communicates with the server apparatus when access to the server apparatus is permitted on the basis of the authentication information transmitted from said transmission unit.

15. The apparatus according to claim 14, wherein

the first communication path includes a short-range wireless communication path,

a display unit of the server apparatus displays a second input window corresponding to the first input window,

the client apparatus further comprises a detection unit adapted to detect an authentication result in the server apparatus for the authentication information input using one of the first input window and the second input window, and

said display control unit ends display of the first input window when the authentication result represents that the authentication information is authenticated.

18. A method of controlling a server apparatus which can communicate with a client apparatus via a plurality of communication paths and has a memory unit adapted to store first authentication information of the client apparatus which communicates via at least one of the plurality of communication paths, said method comprising:

a request step of requesting the client apparatus to transmit second authentication information stored in a memory unit of the client apparatus upon acceptance of a connection request from the client apparatus via one of the plurality of communication paths;

a first authentication step of authenticating the second authentication information on the basis of the first authentication information when the second authentication information is transmitted in response to the transmission request; and

an access permission step of permitting access from the client apparatus when the second authentication information is authenticated in the first authentication step.

19. A method of controlling a server apparatus which can communicate with a client apparatus via a plurality of communication paths and has a memory unit adapted to store identification information and first authentication information of the client apparatus which communicates via at least one of the plurality of communication paths, said method comprising:

a request step of requesting the client apparatus to transmit the identification information of the client apparatus upon acceptance of a connection request from the client apparatus via one of the plurality of communication paths;

a determination step of determining whether the memory unit stores the identification information transmitted in response to the transmission request; and

an access permission step of permitting access from the client apparatus when the memory unit stores is determined in the determination step to store the transmitted identification information.

20. A method of controlling a client apparatus which can communicate with a server apparatus via a plurality of communication paths and has a memory unit adapted to store authentication information received from the server apparatus which communicates via at least one of the plurality of communication paths, comprising:

an access request step of requesting access to the server apparatus via a first communication path of the plurality of communication paths; and

a transmission step of transmitting, to the server apparatus in response to the access request, the authentication information requested by the server apparatus to be transmitted,

wherein the client apparatus communicates with the server apparatus when access to the server apparatus is permitted on the basis of the authentication information transmitted in the transmission step.

21. A method of controlling a client apparatus which can communicate with a server apparatus via a plurality of transmission paths and has a memory unit adapted to store identification information of the client apparatus, comprising:

an access request step of requesting access to the server apparatus via a first transmission path of the plurality of transmission paths; and

a transmission step of transmitting, to the server apparatus in response to the access request, the identification information requested by the server apparatus to be transmitted,

wherein the client apparatus communicates with the server apparatus when access to the server apparatus is permitted on the basis of the identification information transmitted in the transmission step.