SYSTEM, SERVICE PROVIDING DEVICE, AND SERVICE PROVIDING METHOD

• US 20140123239A1
• Filed: 10/29/2013
• Published: 05/01/2014
• Est. Priority Date: 10/31/2012
• Status: Active Grant

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Nakajima, Masato, FUKUDA, Yasuharu, Seo, Naotoshi, Yamano, Kenta
• Granted Patent: US 9,294,484 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

A service providing device includes a requesting unit for receiving, from the device operated by a user, a request for a process of using a service providing system having a different authentication base, and making a request to acquire authorization information for using the service providing system; a substitute authentication unit for acquiring authentication information of the service providing system from a second storage when the authorization information associated with the user is not stored in a first storage, and acquiring the authorization information from the service providing system by using the authentication information; and a providing unit for providing the authorization information stored in the first storage when the authorization information associated with the user is stored in the first storage, and providing the authorization information acquired from the service providing system when the authorization information associated with the user is not stored in the first storage.

Claims

1. A system comprising:

a first service providing system configured to provide a service to a device;

a second service providing system that has an authentication base that is different from that of the first service providing system;

an authorization information acquisition requesting unit configured to receive, from the device operated by a user, a request for a process of using the second service providing system, and make a request to acquire authorization information after authentication for using the second service providing system;

a substitute authentication unit configured to acquire authentication information of the second service providing system from a second storage unit configured to store the authentication information of the second service providing system when the authorization information after authentication associated with the user is not stored in a first storage unit configured to store the authorization information after authentication, and acquire the authorization information after authentication from the second service providing system by using the authentication information that has been acquired; and

an authorization information providing unit configured to provide the authorization information after authentication stored in the first storage unit when the authorization information after authentication associated with the user is stored in the first storage unit, and provide the authorization information after authentication acquired from the second service providing system when the authorization information after authentication associated with the user is not stored in the first storage unit.

2. The system according to claim 1, further comprising:

an authentication information registration unit configured to receive a request to register the authentication information of the second service providing system, and register, in the second storage unit, the authentication information of the second service providing system in association with user information of the user.

3. The system according to claim 1, further comprising:

an authorization information saving unit configured to save, in the first storage unit, the authorization information after authentication acquired from the second service providing system, in association with user information of the user and identification information of the second service providing system.

4. The system according to claim 1, wherein

when the authorization information after authentication, which has expired and which is associated with the user, is stored in the first storage unit,

the substitute authentication unit acquires the authentication information of the second service providing system from the second storage unit, and acquires the authorization information after authentication from the second service providing system by using the authentication information that has been acquired, and

the authorization information providing unit provides the authorization information after authentication that has been acquired from the second service providing system.

5. The system according to claim 2, wherein

the second storage unit is configured to store information for identifying the user in the authentication base of the second service providing system, and also additional information, as the authentication information of the second service providing system, and

the authentication information registration unit receives a request to register the additional information as information for authentication for using the second service providing system.

6. The system according to claim 5, wherein

the authentication information registration unit receives a request to register the additional information as information for identifying the authentication information of the second service providing system.

7. The system according to claim 1, further comprising:

a process request unit configured to request a process to the second service providing system, by using the authorization information after authentication that has been provided.

8. The system according to claim 7, further comprising:

a process receiving unit configured to receive, from the process request unit, a request for an asynchronous process and a cooperation process for cooperating with the second service providing system, and register information of the cooperation process in a third storage unit; and

a process executing unit configured to acquire the information of the cooperation process from the third storage unit, acquire the authorization information after authentication associated with the user from the first storage unit after performing the asynchronous process, and request the process to the second service providing system by using the authorization information after authentication that has been acquired.

9. The system according to claim 8, wherein

the process receiving unit receives, from the process request unit, a request for the asynchronous process and a non-cooperation process of not cooperating with the second service providing system, and registers information of the non-cooperation process in the third storage unit, and

the process executing unit acquires the information for the cooperation process from the third storage unit and then acquires the authorization information after authentication associated with the user from the first storage unit after performing the asynchronous process, requests the process to the second service providing system by using the authorization information after authentication that has been acquired, acquires the information of the non-cooperation process from the third storage unit, and performs the asynchronous process without cooperating with the second service providing system.

10. A service providing device for providing a service to a device, the service providing device comprising:

an authorization information acquisition requesting unit configured to receive, from the device operated by a user, a request for a process of using a service providing system having a different authentication base, and make a request to acquire authorization information after authentication for using the service providing system;

a substitute authentication unit configured to acquire authentication information of the service providing system from a second storage unit configured to store the authentication information of the service providing system when the authorization information after authentication associated with the user is not stored in a first storage unit configured to store the authorization information after authentication, and acquire the authorization information after authentication from the service providing system by using the authentication information that has been acquired; and

an authorization information providing unit configured to provide the authorization information after authentication stored in the first storage unit when the authorization information after authentication associated with the user is stored in the first storage unit, and provide the authorization information after authentication acquired from the service providing system when the authorization information after authentication associated with the user is not stored in the first storage unit.

11. A service providing method performed in a system including

a first service providing system configured to provide a service to a device, and

a second service providing system that has an authentication base that is different from that of the first service providing system, the service providing method comprising:

receiving, from the device operated by a user, a request for a process of using the second service providing system, and making a request to acquire authorization information after authentication for using the second service providing system;

acquiring authentication information of the second service providing system from a second storage unit configured to store the authentication information of the second service providing system when the authorization information after authentication associated with the user is not stored in a first storage unit configured to store the authorization information after authentication, and acquiring the authorization information after authentication from the second service providing system by using the authentication information that has been acquired; and

providing the authorization information after authentication stored in the first storage unit when the authorization information after authentication associated with the user is stored in the first storage unit, and providing the authorization information after authentication acquired from the second service providing system when the authorization information after authentication associated with the user is not stored in the first storage unit.