Information processing system, recording medium storing control program, and computer data signal embodied in a carrier wave

• US 8,176,538 B2
• Filed: 11/24/2006
• Issued: 05/08/2012
• Est. Priority Date: 06/28/2006
• Status: Expired due to Fees

• Current Assignee: Fuji Xerox Company Limited (Xerox Holdings Corp.)
• Original Assignee: Fuji Xerox Company Limited (Xerox Holdings Corp.)
• Inventors: Kigo, Kenichiro, Nakatsuyama, Hisashi
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): Almamun, Abdullah
• Application Number:
  US11/603,835
• Publication Number:
  US 20080005789A1
• Time in Patent Office: 1,992 Days
• Field of Search: 726/8, 726/12, 726/14, 726 17- 21, 726/27, 713/170
• US Class Current: 726/8
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An information processing system, which includes: an information distribution server; a client apparatus; and a plurality of service providing servers that provide service to a user of the client apparatus, and the information distribution server including: a user authentication information memory that stores user authentication information; a receiving section that receives authentication information from the plurality of service providing servers; and an authentication proxy information distributing section that distributes authentication proxy information prepared based on the user authentication information and the authentication information, and the client apparatus including: a user authentication section that carries out authentication of the user, and an authentication proxy section that, if the authentication is carried out by the user authentication section, executes a proxy authentication when the user accesses at least one of the plurality of service providing servers on the basis of the distributed authentication proxy information.

Claims

1. An information processing system, comprising:

an information distribution server;

a client apparatus; and

a service providing server that provides a service to a user of the client apparatus,

wherein the information distribution server comprises;

a user authentication information memory that stores user authentication information of the user, the user authentication information for authenticating the user on the client apparatus;

a receiving section that receives authentication information from the service providing server, the authentication information for authenticating the user on the service providing server; and

an authentication proxy information distributing section that distributes to the client apparatus authentication proxy information comprising the user authentication information and the authentication information, the authentication proxy information for authenticating a proxy on behalf of the user on the service providing server; and

wherein the client apparatus comprises;

a user authentication section that authenticates the user using the distributed user authentication information, and

an authentication proxy section that, in response to the user requesting access to the service providing server, executes proxy authentication as the proxy to authenticate the user on behalf of the user on the service providing server using the authentication information included in the authentication proxy information distributed by the authentication proxy information distributing section.

2. The information processing system of claim 1, wherein the client apparatus further comprises:

an auditing policy acquiring section that acquires an auditing policy from the information distribution server, and

a log output section that outputs an auditing log on the basis of the auditing policy acquired by the auditing policy acquiring section.

3. The information processing system of claim 1, wherein the authentication proxy section is a transparent type proxy.

4. The information processing system of claim 2, wherein the authentication proxy section is a transparent type proxy.

5. A computer readable recording medium storing a control program causing a computer to execute a process for carrying out proxy authentication on behalf of a user, the process comprising:

storing user authentication information for authenticating the user on a client apparatus of the user;

receiving authentication information for authenticating the user on a service providing server;

distributing by the information distribution server, authentication proxy information comprising the user authentication information and the authentication information for authenticating a proxy on behalf of the user on the service providing server; and

executing the proxy authentication on the client apparatus to authenticate a proxy on behalf of the user on the service providing server, in response to the user requesting access to the service providing server, using the user authentication information included in the authentication proxy information.

6. The computer readable recording medium of claim 5, the process further comprising:

acquiring an auditing policy, and

outputting an auditing log on the basis of the acquired auditing policy.

7. The computer readable recording medium of claim 6, wherein the authentication of the user is carried out by a transparent type proxy.

8. The computer readable recording medium of claim 5, wherein the authentication of the user is carried out by a transparent type proxy.

9. An information processing system, comprising:

a client apparatus;

a plurality of information providing servers, comprising a first information providing server and a second information providing server, that provide services to a user of the client apparatus; and

an information distribution server that stores user client authentication information that authenticates the user on the client apparatus, receives proxy authentication information comprising first authentication information that authenticates the user on the first information providing server and second authentication information that authenticates the user on the second information providing server, and transmits the user client authentication information and the proxy authentication information to the client apparatus,

wherein the client apparatus receives the user client authentication information and the proxy authentication information, authenticates the user using the client authentication information, and executes proxy authentication to authenticate the user on behalf of the user on at least one of the plurality of information providing servers using the proxy authentication information in response to the user requesting the client apparatus to access the at least one of the plurality of information providing servers.