Method of authenticating a user of a peripheral apparatus, a peripheral apparatus, and a system for authenticating a user of a peripheral apparatus

• US 9,203,825 B2
• Filed: 02/12/2014
• Issued: 12/01/2015
• Est. Priority Date: 02/12/2013
• Status: Active Grant

• Current Assignee: Canon Europa N.V. (Canon Inc.)
• Original Assignee: Canon Europa N.V. (Canon Inc.)
• Inventors: Parks, Benjamin John
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): PLECHA, THADDEUS J
• Application Number:
  US14/178,374
• Publication Number:
  US 20140230023A1
• Time in Patent Office: 657 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A method of authenticating a user at a peripheral apparatus includes receiving a log-in request from a user, sending a request to a social networking service to authenticate the user'"'"'s social networking service account, receiving the user'"'"'s social networking service account information from the social networking service, determining based on the user'"'"'s social networking service account information whether the user is authorised to access the peripheral apparatus, and allowing, in a case that the determining determines that the user is authorised to access the peripheral apparatus, the user access to the peripheral apparatus.

Claims

1. A method of authenticating a user at a peripheral apparatus, comprising the peripheral apparatus:

receiving a log-in request from a user;

sending a request to a social networking service to authenticate a social networking service account of the user;

receiving social networking service account information of the user from the social networking service;

determining based on the user'"'"'s social networking service account information whether the user is authorised to access the peripheral apparatus by connecting to an administrator'"'"'s social networking service account on the social networking service and determining whether or not the user'"'"'s social networking service account information is associated with a list on the social networking service; and

allowing, in a case that the determining determines that the user is authorised to access the peripheral apparatus, the user access to the peripheral apparatus.

2. The method according to claim 1, wherein the peripheral apparatus is represented on the social networking service by association with one or more lists of members of the social networking service on the social networking service.

3. The method according to claim 2, wherein associating the representation of the peripheral apparatus on the social networking service with the one or more lists of members of the social networking service comprises defining levels of access to functions of the peripheral apparatus for the one or more lists of members of the social networking service.

4. The method according to claim 1, wherein the sending of the request to the social networking service comprises requesting an access token from the social networking service.

5. The method according to claim 4, wherein the determining comprises using the access token to obtain a social networking service username of the user and determining whether the username is associated with a representation of the peripheral apparatus on the social networking service.

6. The method according to claim 4, further comprising storing the access token on the peripheral apparatus in association with information identifying the user.

7. The method according to claim 6, wherein the storing comprises storing the access token in association with an RFID of the user.

8. The method according to claim 6, wherein the stored access token is for making repeated log-in requests on behalf of the user.

9. The method according to claim 4, wherein the requesting of the access token from the social networking service comprises using an OAuth or a xAuth authentication process.

10. The method according to claim 1, wherein the peripheral apparatus comprises a peripheral device which functions as at least one of a printer, a fax machine, or a scanner.

11. The method according to claim 1, wherein the sending of the request to the social networking service is preceded by a mobile device determining a first piece of information provided by the peripheral apparatus.

12. The method according to claim 11, wherein the first piece of information is a URL,

wherein the peripheral apparatus provides the URL to the user, and

wherein the mobile device determines the URL by entry of the URL into the mobile device by the user.

13. The method according to claim 12, wherein the URL received by the mobile device allows the user to log-in to the social networking service.

14. The method according to claim 12, wherein the URL received by the mobile device allows the user to log-in to the social networking service and authorise issue of an access token to the peripheral apparatus.

15. The method according to claim 11, wherein the peripheral apparatus provides a machine-readable code encoding the first piece of information, and

wherein the mobile device determines the first piece of information by reading and decoding the machine-readable code provided by the peripheral apparatus.

16. The method according to claim 11, wherein the sending of the request to the social networking service to authenticate the user is followed by the mobile device determining a second piece of information provided by the social networking service.

17. The method according to claim 16, wherein the second piece of information is a code and the method comprises the peripheral apparatus receiving the code from the user via a user interface of the peripheral apparatus.

18. The method according to claim 15, wherein the machine-readable code is a bar code or a QR code.

19. A non-transitory storage medium storing instructions that, when executed by a central processing unit of a peripheral apparatus, causes the peripheral apparatus to perform an authentication method comprising:

receiving a log-in request from a user;

sending a request to a social networking service to authenticate a social networking service account of the user;

receiving social networking service account information of the user from the social networking service;

determining based on the user'"'"'s social networking service account information whether the user is authorised to access the peripheral apparatus by connecting to an administrator'"'"'s social networking service account on the social networking service and determining whether or not the user'"'"'s social networking service account information is associated with a list on the social networking service; and

allowing, in a case that the determining determines that the user is authorised to access the peripheral apparatus, the user access to the peripheral apparatus.

20. A peripheral apparatus comprising:

a central processing unit and a memory storing instructions for execution by the central processing unit, the central processing unit operable when executing the instructions to

receive a log-in request from a user;

send a request to a social networking service to authenticate a social networking service account of the user;

receive social networking service account information of the user from the social networking service;

determine based on the user'"'"'s social networking service account information whether the user is authorised to access the peripheral apparatus by connecting to an administrator'"'"'s social networking service account on the social networking service and determining whether or not the user'"'"'s social networking service account information is associated with a list on the social networking service; and

allow, in a case that the peripheral apparatus determines that the user is authorised to access the peripheral apparatus, the user access to the peripheral apparatus.

21. The peripheral apparatus according to claim 20, further comprising a peripheral device which functions as at least one of a printer, a fax machine, or a scanner.

22. A system for authenticating a user of a peripheral apparatus, the system comprising:

a server executing a social networking service; and

a peripheral apparatus configured to receive a first request that is a log-in request from the user and to send a second request to the social networking service to authenticate a social networking service account of the user, the social networking service configured to receive the second request and to send social networking service account information of the user to the peripheral apparatus,

wherein the peripheral apparatus is configured to;

receive the social networking service account information of the user from the social networking service,

determine based on the user'"'"'s social networking service account information whether the user is authorised to access the peripheral apparatus by connecting to an administrator'"'"'s social networking service account on the social networking service and determining whether or not the user'"'"'s social networking service account information is associated with a list on the social networking service, and

allow, in a case that the peripheral apparatus determines that the user is authorised to access the peripheral apparatus, the user access to the peripheral apparatus.

23. A method of authenticating a user at a peripheral apparatus comprising:

a mobile device determining a first piece of identification information and sending an access request to the peripheral apparatus via a social networking service, the access request comprising the determined first piece of identification information and a second piece of information identifying a social networking service account of the user;

the peripheral apparatus receiving the access request via the social networking service and determining based on access request information of the access request whether the user is authorised to access the peripheral apparatus by connecting to an administrator'"'"'s social networking service account on the social networking service and determining whether or not the user'"'"'s social networking service account information is associated with a list on the social networking service; and

in a case that the peripheral apparatus determines that the user is authorised to access the peripheral apparatus, the peripheral apparatus allowing the user access to the peripheral apparatus.

24. The method according to claim 23, wherein the determining by the peripheral apparatus is preceded by the peripheral apparatus connecting to the administrator'"'"'s social networking service account and registering the first piece of identification information in association with a representation of the peripheral apparatus on the social networking service, and

wherein the determining by the peripheral apparatus comprises:

connecting to the administrator'"'"'s social networking service account, accessing the access request, and determining whether the information in the access request corresponds to registered details of the peripheral apparatus.

25. The method according to claim 24, wherein the access request is a direct message sent from the user'"'"'s social networking service account to the administrator'"'"'s social networking service account.

26. The method according to claim 23, wherein the peripheral apparatus determines a level of access to the peripheral apparatus based on the second piece of information identifying the user'"'"'s social networking service account.

27. The method according to claim 23, wherein:

the first piece of identification information comprises a code,

the peripheral apparatus provides the code to the user, and

the mobile device determines the first piece of identification information by entry of the code into the mobile device by the user.

28. The method according to claim 23,

wherein the peripheral apparatus provides a machine-readable code encoding the first piece of identification information, and

wherein the mobile device determines the first piece of identification information by reading and decoding the machine-readable code provided by the peripheral apparatus.

29. The method according to claim 23, wherein the first piece of identification information comprises a random number.

30. The method according to claim 23, wherein the first piece of identification information comprises a piece of information identifying the administrator'"'"'s social networking service account.

31. The method according to claim 23, wherein the peripheral apparatus is configured to generate the first piece of identification information.

32. The method according to claim 23,

wherein the first piece of identification information is derivable from a position of the peripheral apparatus, and

wherein the mobile device determines the first piece of identification information by detecting the position of the peripheral apparatus.

33. A system for authenticating a user at a peripheral apparatus, the system comprising:

a mobile device configured to determine a first piece of identification information and to send an access request to the peripheral apparatus via a social networking service, the access request comprising the determined first piece of identification information and a second piece of information identifying a social service networking account of the user;

the peripheral apparatus configured to receive the access request and to determine based on access request information of the access request whether the user is authorised to access the peripheral apparatus by connecting to an administrator'"'"'s social networking service account on the social networking service and determining whether or not the user'"'"'s social networking service account information is associated with a list on the social networking service, and

wherein the peripheral apparatus is configured, in a case that the peripheral apparatus determines that the user is authorised to access the peripheral apparatus, to allow the user access to the peripheral apparatus.