INFORMATION PROCESSING SYSTEM, INFORMATION PROCESSING APPARATUS, ACCESS CONTROL METHOD, AND PROGRAM

• US 20160125177A1
• Filed: 10/27/2015
• Published: 05/05/2016
• Est. Priority Date: 10/30/2014
• Status: Active Application

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: KASHIYAMA, Shigeki, NAKAJIMA, Masato, OHZAKI, Hiroki, FUKUDA, Yasuharu
• Granted Patent: US 10,282,525 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213

Abstract

An information processing system including at least one information processing apparatus includes an access control unit configured to receive a request from a service use apparatus to a service providing apparatus, to give, in a case where the request includes information of a completed authentication, based on setup information in which a type of giving information to be given to the request is set, the giving information of the type set in the setup information, and to send the request to the service providing apparatus; and an information providing unit configured to administer the giving information corresponding to the information of the completed authentication, and to provide the giving information corresponding to the information of the completed authentication received from the access control unit to the access control unit.

Claims

1. An information processing system including at least one information processing apparatus, the information processing system comprising:

an access control unit configured to receive a request from a service use apparatus to a service providing apparatus, to give, in a case where the request includes information of a completed authentication, based on setup information in which a type of giving information to be given to the request is set, the giving information of the type set in the setup information, and to send the request to the service providing apparatus; and

an information providing unit configured to administer the giving information corresponding to the information of the completed authentication, and to provide the giving information corresponding to the information of the completed authentication received from the access control unit to the access control unit.

2. The information processing system according to claim 1,

wherein the access control unit receives the request from the service providing apparatus, and gives, in a case where the request includes the information of the completed authentication, the giving information of the type set to the setup information to a response corresponding to the request.

3. The information processing system according to claim 2,

wherein the access control unit receives the request from the service providing apparatus using an application programming interface (API).

4. The information processing system according to claim 1,

wherein the access control unit differentiate an access control corresponding to the information of the completed authentication by determining a type of the service use apparatus based on the information indicative of the type of the service use apparatus included in the request and set to the setup information.

5. The information processing system according to claim 1,

wherein, in a case where a form of the response is designated when the information of the completed authentication is not authorized, the access control unit returns an error response for the request in the designated form.

6. The information processing system according to claim 1,

wherein, in a case where the request is from the service use apparatus having no authority of using the service, the access control unit gives a reason why there is no authority of using the service to the request, and send the request to the service providing apparatus.

7. The information processing system according to claim 2,

wherein the access control unit stores the authorized information of the completed authentication, which is included in the request from the service use apparatus to the service providing apparatus or the authorized information of the completed authentication, which is included in the request from the service providing apparatus, in one memory unit, and

wherein, when the memory unit stores the information of the completed authentication, the access control unit uses the information of the completed authentication.

8. The information processing system according to claim 1,

wherein the access control unit gives the giving information to a header portion of the request.

9. An information processing apparatus comprising:

an access control unit configured to receive a request from a service use apparatus to a service providing apparatus, to give, in a case where the request includes information of a completed authentication, based on setup information in which a type of giving information to be given to the request is set, the giving information of the type set in the setup information, and to send the request to the service providing apparatus; and

an information acquiring unit configured to acquire the giving information corresponding to the information of a completed authentication from an information providing apparatus which administers the giving information corresponding to information of the completed authentication.

10. An access control method performed in an information processing system including an access control apparatus which receives a request from a service use apparatus to a service providing apparatus, and an information providing apparatus which administers giving information corresponding to information of a completed authentication and provides the giving information corresponding to the information of the completed authentication to the access control apparatus, the access control method comprising:

acquiring, in a case where the request includes information of the completed authentication, by the access control apparatus, the giving information corresponding to the information of the completed authentication from the information providing apparatus; and

giving, based on setup information in which a type of giving information to be given to the request is set, the giving information of the type set in the setup information, and sending the request to the service providing apparatus.