Information processing system, recording medium storing control program, and computer data signal embodied in a carrier wave

• US 20080005789A1
• Filed: 11/24/2006
• Published: 01/03/2008
• Est. Priority Date: 06/28/2006
• Status: Active Grant

• Current Assignee: Fuji Xerox Company Limited (Xerox Holdings Corp.)
• Original Assignee: Fuji Xerox Company Limited (Xerox Holdings Corp.)
• Inventors: Nakatsuyama, Hisashi, Kigo, Kenichiro
• Granted Patent: US 8,176,538 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An information processing system, which includes: an information distribution server; a client apparatus; and a plurality of service providing servers that provide service to a user of the client apparatus, and the information distribution server including: a user authentication information memory that stores user authentication information; a receiving section that receives authentication information from the plurality of service providing servers; and an authentication proxy information distributing section that distributes authentication proxy information prepared based on the user authentication information and the authentication information, and the client apparatus including: a user authentication section that carries out authentication of the user, and an authentication proxy section that, if the authentication is carried out by the user authentication section, executes a proxy authentication when the user accesses at least one of the plurality of service providing servers on the basis of the distributed authentication proxy information.

Claims

1. An information processing system, comprising:

an information distribution server;

a client apparatus; and

a plurality of service providing servers that provide service to a user of the client apparatus, and

the information distribution server including;

a user authentication information memory that stores user authentication information;

a receiving section that receives authentication information from the plurality of service providing servers; and

an authentication proxy information distributing section that distributes authentication proxy information prepared based on the user authentication information and the authentication information, and

the client apparatus including;

a user authentication section that carries out authentication of the user, and

an authentication proxy section that, if the authentication is carried out by the user authentication section, executes a proxy authentication when the user accesses at least one of the plurality of service providing servers on the basis of the distributed authentication proxy information.

2. The information processing system of claim 1, wherein the client apparatus further comprises:

an auditing policy acquiring section that acquires an auditing policy from the information distribution server, and

a log output section that outputs an auditing log on the basis of the auditing policy acquired by the auditing policy acquiring section.

3. The information processing system of claim 1, wherein the authentication proxy section is a transparent type proxy.

4. The information processing system of claim 2, wherein the authentication proxy section is a transparent type proxy.

5. A computer readable recording medium storing a control program causing a computer to execute a process for carrying out proxy authentication when a plurality of service providing servers are accessed, the process comprising:

carrying out authentication with a user,

acquiring authentication proxy information for carrying out the authentication to the plurality of service providing servers, and

if the authentication with the user is carried out, executing proxy authentication when the user accesses at least one of the plurality of service providing servers on the basis of the acquired authentication proxy information.

6. The computer readable recording medium of claim 5, the process further comprising:

acquiring an auditing policy, and

outputting an auditing log on the basis of the acquired auditing policy.

7. The computer readable recording medium of claim 5, wherein the authentication of the user is carried out by a transparent type proxy.

8. The computer readable recording medium of claim 6, wherein the authentication of the user is carried out by a transparent type proxy.

9. A computer data signal embodied in a carrier wave for enabling a computer to perform a process for proxy authentication, the process comprising:

carrying out authentication with a user,

acquiring authentication proxy information for carrying out the authentication to the plurality of service providing servers, and

if the authentication with the user is carried out, executing proxy authentication when the user accesses at least one of the plurality of service providing servers on the basis of the acquired authentication proxy information.

10. The computer data signal of claim 9, the process further comprising:

acquiring an auditing policy, and

outputting an auditing log on the basis of the acquired auditing policy.

11. The computer data signal of claim 9, wherein the authentication of the user is carried out by a transparent type proxy.

12. The computer data signal of claim 10, wherein the authentication of the user is carried out by a transparent type proxy.