AUTHENTICATION SYSTEM, CONTROL METHOD THEREOF, SERVICE PROVISION DEVICE, AND STORAGE MEDIUM

• US 20140373103A1
• Filed: 06/03/2014
• Published: 12/18/2014
• Est. Priority Date: 06/18/2013
• Status: Active Grant

• Current Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Original Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Inventors: Hirata, Kensuke
• Granted Patent: US 9,230,078 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/608 Secure printing

Abstract

An authentication system registers, in a service provision device, identification information for an information processing device that cooperates with the authentication system, associates the identification information for the information processing device with authorization information in accordance with an issuance of the authorization information corresponding to the information processing device, and saves them in the authorization service device, queries the authorization service device for the identification information for the information processing device associated with the authorization information in response to a request for obtaining the service and the issued authorization information from the information processing device, and provides, according to the request, the service with the information processing device in response to a correspondence between the identification information for the information processing device acquired as a result of the query and the identification information for the information processing device registered.

Claims

1. An authentication system that includes a service provision device that provides a service and an authorization service device that manages authorization information used for providing the service by the service provision device without requiring authentication information, comprising:

a registering unit configured to register, with the service provision device, identification information for information processing device that cooperates with the authentication system;

a saving unit configured to associate the identification information for the information processing device with authorization information in accordance with an issuance of the authorization information corresponding to the information processing device, and save them in the authorization service device;

a querying unit configured to query the authorization service device for the identification information for the information processing device associated with the authorization information in response to a request for obtaining the service and the issued authorization information from the information processing device; and

a providing unit configured to provide, according to the request, the service with the information processing device in response to a correspondence between the identification information for the information processing device acquired as a result of the query by the query unit and the identification information for the information processing device registered by the registration unit.

2. The authentication system according to claim 1, wherein the registration of the identification information for the information processing device is executed through an operation screen provided on a user device having an administrator authority for the information processing device or the pertinent information processing device.

3. The authentication system according to claim 2, wherein the information processing device comprises:

a request unit configured to acquire the authorization information from the authorization service device upon accepting the request for obtaining the service from the user device, and transmit the authorization information and the request for obtaining the service to the query unit; and

a transfer unit configured to accept, from the user, a transfer of an authority for performing the request for obtaining the service to the query unit, acquire the authorization information from the authorization service device in response to an operation for requesting the operation screen by the user, and transmit the authorization information and the request for obtaining the service to the query unit.

4. The authentication system according to claim 3, wherein the authorization service device is configured to generate authorization information associated with the user who has performed the operation in response to the request from the transfer unit, and transmit the authorization information to the transfer unit.

5. The authentication system according to claim 4, wherein the transfer unit is configured to request, the query unit, for verification processing for the validity of the authorization information associated with the user acquired from the authorization service device, and display the operation screen when accepting a verification result indicating that the authorization information is valid from the query unit.

6. The authentication system according to claim 3, wherein the registration unit is configured to determine whether the identification information for the information processing device associated with the authorization information acquired from the transfer unit is registered, provide the service with the information processing device when the identification information for the information processing device is registered, and temporarily register the identification information for the information processing device when the identification information for the information processing device is not registered.

7. The authentication system according to claim 6, wherein the registration unit deletes identification information for the temporarily registered information processing device when the information processing device completes processing execution according to the provided service.

8. The authentication system according to claim 1, wherein, the service provided by the provision unit is for providing a print job, and the information processing device executes print processing based on the provided print job.

9. The authentication system according to claim 8, wherein the operation screen is a selection screen for the document to be printed.

10. A control method for an authentication system that includes a service provision device that provides a service and an authorization service device that manages authorization information used for providing the service by the service provision device without requiring authentication information, comprising:

registering, with the service provision device, the identification information for an information processing device that cooperates with the authentication system;

associating the identification information for the information processing device with authorization information in accordance with an issuance of the authorization information corresponding to the information processing device, and saving them in the authorization service device;

querying, the authorization service device, for the identification information for the information processing device associated with the authorization information in response to a request for obtaining the service and the issued authorization information from the information processing device; and

providing, according to the request, the service with the information processing device in response to a correspondence between the identification information for the information processing device acquired as a result of the querying and the identification information for the registered information processing device.

11. A service provision device that is communicable with an authorization service device that manages authorization information used for providing the service by the service provision device without requiring authentication information, comprising:

a registering unit configured to register the identification information for the information processing device that cooperates with the service provision device;

a querying unit configured to query, the authorization service device, for the identification information for the information processing device associated with the authorization information in response to an acquisition of the request for obtaining the service and the issued authorization information form; and

a providing unit configured to provide, according to the request, the service with the information processing device according to the request in response to a correspondence between the identification information for the information processing device acquired as a result of the querying and the identification information for the registered information processing device.

12. A non-transitory storage medium on which is stored a computer program for making a computer execute a control method of an authentication system that includes a service provision device that provides a service and an authorization service device that manages authorization information used for providing the service by the service provision device without requiring authentication information, comprising:

registering, with the service provision device, the identification information for an information processing device that cooperates with the authentication system;

associating the identification information for the information processing device with authorization information in accordance with an issuance of the authorization information corresponding to the information processing device, and saving them in the authorization service device;

querying, the authorization service device, for the identification information for the information processing device associated with the authorization information in response to a request for obtaining the service and the issued authorization information from the information processing device; and

providing, according to the request, the service with the information processing device in response to a correspondence between the identification information for the information processing device acquired as a result of the querying and the identification information for the registered information processing device.