Group definition management system

• US 9,858,399 B2
• Filed: 09/27/2011
• Issued: 01/02/2018
• Est. Priority Date: 09/27/2011
• Status: Active Grant

• Current Assignee: Rakuten Group, Inc.
• Original Assignee: Rakuten, Inc. (Rakuten Group, Inc.)
• Inventors: Mashimo, Tatsumi
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US14/239,647
• Publication Number:
  US 20140189796A1
• Time in Patent Office: 2,289 Days
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A group definition management system can easily acquire correspondence between an internal ID and an external ID and easily reflect information of a group definition for the internal ID to an external site. In a typical embodiment of the present invention, this is configured of an internal server 10, an external server 20, and a client. The internal server 10 has an internal user management table 15 and an internal authentication unit 11 that performs authentication by the internal ID. The external server 20 has an external user management table 24 and an external authentication unit 21 that performs authentication by the external ID and replies the information of the external ID in response to an inquiry for whether or not a specific user is an authentic user. The internal server 10 further has an authentication cooperation unit 13 that inquires the external server 20 about whether or not the user is the authentic user of the external server 20 in response to a request from the client used by the user authenticated by the internal authentication unit 11, and registers the replied external ID in the internal user management table 15 so as to correspond to the internal ID.

Claims

1. A group definition management system server connected to a network, comprising:

a user management table that stores a first user login account ID being inputted from a user who can use the group definition management server and information related to a group definition of the user;

an authentication unit that makes a first authentication of the user by the first user login account ID in response to a request from the user via a client device that is connectable to the group definition management server via the network; and

an authentication cooperation unit that makes a second authentication of the user using a second user login account ID identifying the user through another server connected to the network to confirm that the user is authenticated in the another server based on the second user login account ID being inputted by the user in response to a request received from the client device used by the user who is authenticated by the authentication unit;

wherein the authentication unit acquires the second user login account ID from the other server and registers the second user login account ID for the confirmed authenticated user of the other server in the user management table so as to correspond the second user login account ID for the user to the first user login account ID for the user.

2. The group definition management system according to claim 1, wherein, after the user who has authority to manage a group definition for the second user login account ID in the other server is authenticated by the authentication unit in response to a request from the client device used by the user, the group definition management server acquired information of a current group definition for the second user login account ID from the other server.

3. A group definition management method executed in a group definition management server connected to a network, comprising the steps of:

a first step of storing in a user management table information of a first user login account ID for a user who can use the group definition management server and information related to a group definition of the user;

a second step of making an initial authentication of the user by the first user login account ID in response to a request from the user via a client device connectable to the group definition management server via the network;

a third step of making a second authentication of the user by acquiring a second user login account ID identifying the user through another server connected to the network to confirm that the user is an authentic user of the other server in response to a request from the client device used by the user who is authenticated in the second step; and

a fourth step of registering the second user login account ID in the user management table for the authenticated user of the other server confirmed in the third step so as to correspond the second user login account ID for the user to the first user login account ID for the user.

4. A group definition management system, comprising:

a client device connectable to a first server and a second server via a network;

the client device rendering a graphical user interface for performing a second authentication of a user by a second user login account ID acquired from the second server to confirm that the user is authorized to manage a group definition for the second user login account ID in the second server, wherein the second user login account ID identifies the user;

the client device rendering another graphical user interface for performing a first authentication of the user by a first user login account ID from the first server, wherein the first user login account ID corresponds to the second user login account ID authenticated by the second server;

wherein, in response to authentication of the user by the first user login account ID from the first server, the client device renders a graphical user interface for requesting acquisition of information of the group definition for the second user login account ID from the second server; and

the client rendering a graphical user interface related to a result of the first server'"'"'s acquisition of information of the group definition for the second user login account ID from the second server.