INFORMATION PROCESSING SERVER SYSTEM, CONTROL METHOD, AND PROGRAM

• US 20140359702A1
• Filed: 05/23/2014
• Published: 12/04/2014
• Est. Priority Date: 05/28/2013
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Mihara, Makoto
• Granted Patent: US 9,565,174 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

An information processing server system in which agreement to terms of service by a user is confirmed using a second authentication session different from a first authentication session used when a client uses the web service is provided.

Claims

1. An information processing server system, comprising:

a generation unit configured to generate, based on a first authentication session generated after a user is authenticated and that is used when a client uses a web service, a second authentication session;

a transmission unit configured to transmit the second authentication session to the client; and

a reception unit configured to receive the second authentication session together with information representing agreement to terms of the web service from the client,

wherein the transmission unit transmits the first authentication session corresponding to the second authentication session to the client when it is determined that the user has agreed to the terms of the web service in accordance with the received information and the second authentication session.

2. The information processing server system according to claim 1, further comprising:

a hook unit configured to hook the first authentication session to be transmitted to the client from an authentication server which receives a response representing that the user has been authenticated by a different information processing server system in response to the reception of the response,

wherein the generation unit generates the second authentication session based on the first authentication session hooked by the hook unit.

3. The information processing server system according to claim 1, further comprising:

a provision unit configured to provide a screen for agreement to the terms of the web service or a plurality of screens for agreement to terms of web services available for an authenticated user,

wherein the transmission unit transmits the first authentication session corresponding to the second authentication session to the client when it is determined that the authenticated user has agreed to all the terms of web services available for the authenticated user.

4. The information processing server system according to claim 3, wherein

the provision unit provides a screen for agreement to terms of the web service associated with a tenant of the user when any web service is not available for the authenticated user.

5. The information processing server system according to claim 1, wherein

the generation unit generates the second authentication session by encrypting the first authentication session, and

the transmission unit decrypts the second authentication session received by the reception unit and transmits the first authentication session obtained by the decryption to the client.

6. A method for controlling an information processing server system, comprising:

generating, based on a first authentication session generated after a user is authenticated and that is used when a client uses a web service, a second authentication session;

transmitting the second authentication session to the client; and

receiving the second authentication session together with information representing agreement to terms of the web service from the client,

wherein, the first authentication session corresponding to the second authentication session is transmitted to the client when it is determined that the user has agreed to the terms of the web service in accordance with the received information and the second authentication session.

7. The method according to claim 6, further comprising:

hooking the first authentication session to be transmitted to the client from an authentication server that receives a response representing that the user has been authenticated by a different information processing server system in response to the reception of the response,

wherein, the second authentication session is generated based on the first authentication session hooked by the hook unit.

8. The method according to claim 6, further comprising:

providing a screen for agreement to the terms of the web service or a plurality of screens for agreement to terms of web services available for an authenticated user,

wherein, the first authentication session corresponding to the second authentication session is transmitted to the client when it is determined that the authenticated user has agreed to all the terms of web services available for the authenticated user.

9. The method according to claim 8, wherein

a screen for agreement to terms of the web service associated with a tenant of the user is provided when any web service is not available for the authenticated user.

10. The method according to claim 6, wherein

the second authentication session is generated by encrypting the first authentication session, and

the second authentication session is decrypted and the first authentication session obtained by the decryption is transmitted to the client.

11. A computer-readable storage medium that stores computer executable instructions that cause a computer to execute a method for controlling an information processing server system, the method comprising:

generating, based on a first authentication session generated after a user is authenticated and that is used when a client uses a web service, a second authentication session;

transmitting the second authentication session to the client; and

receiving the second authentication session together with information representing agreement to terms of the web service from the client,

wherein, the first authentication session corresponding to the second authentication session is transmitted to the client when it is determined that the user has agreed to the terms of the web service in accordance with the received information and the second authentication session.