Apparatus, system, and method for authorizing a service

Patent metadata

Field	Value
Publication number	US-10200370-B2
Application number	US-201615073485-A
Country	US
Kind code	B2
Filing date	Mar 17, 2016
Priority date	Mar 20, 2015
Publication date	Feb 5, 2019
Grant date	Feb 5, 2019

Abstract

Systems include a service-provider device; and a browser loaded on a first device. To connect the service-provider device with the first device, the browser fetches a device ID from the first device, and sends a request for a service to the service-provider device with the device ID. The service-provider device determines whether the service is allowed to be provided by checking whether the device ID is registered.

First claim

What is claimed is:

1. A system comprising:
a service-provider device that includes one or more hardware processors and a memory; and
a browser loaded on an image processing device that includes one or more hardware processor and a memory, wherein to connect the service-provider device with the image processing device,
the browser fetches device-specific data from the image processing device, the device-specific data being specific to and uniquely identifies the image processing device, and
sends the device-specific data to the service-provider device with a request for access to a service of the service-provider device for use by the image processing device, and the service-provider device
receives the device-specific data of the image processing device;
generates, based on the received device-specific data, a key as part of authorization data that is provided to the image processing device, the authorization data identifying one or more services authorized for use by the image processing device and the key is usable by the image processing device to enable use of the one or more services by the image processing device,
receives data indicating a request for access to at least one feature of an application;
compares the request for access with the authorization data to determine if the request should be granted,
sends a grant of permission to access the at least one feature in a case where the request matches the authorization data, and
sends a denial of permission in a case where the request does not match the authorization data.

2. A service-provider device that authorizes one or more services for use by an image processing device comprising:
at least one memory storing instructions; and
one or more hardware processors that execute the set of instructions and that are configured to cause the service provider device to
receive device-specific data of the image processing device;
generate, based on receiving the device-specific data, a key as part of authorization data that is provided to the image processing device, wherein the authorization data identify the one or more features of an application authorized for use by the image processing device and the key is usable by the image processing device to enable use of the one or more features of the application by the image processing device;
receive data indicating a request for access to at least one feature of an application;
compare the request for access with the authorization data to determine if the request should be granted,
send a grant of permission to access the at least one feature in a case where the request matches the authorization data, and
send a denial of permission in a case where the request does not match the authorization data.

3. The service-provider device of claim 2 , wherein the device-specific data is stored with the authorization data, which defines authorization permissions.

4. The service-provider device of claim 2 , wherein the at least one feature is a print function or a scanning function.

5. The service-provider device of claim 2 , wherein the request for access includes device-specific information of a requesting device.

6. The service-provider device of claim 2 , wherein the one or more hardware processors are further configured to cause the device to
generate a graphical user interface that includes a control that, when activated, initiates sending the request for access to the at least one feature of the application; and
send the graphical user interface to the image processing device.

7. The service-provider device of claim 6 , wherein the graphical user interface is described in HTML.

8. An image processing device which accesses a service-provider-device comprising:
a browser loaded on the image processing device that includes one or more hardware processors and at least one memory, wherein to get an approval from the service-provider device to use a service,
the browser fetches a device ID from the image processing device, the device ID being specific to and uniquely identifies the image processing device,
sends the device ID to the service-provider device with a request for access to the service to be provided on the image processing device, wherein it is determined by the service-provider-device whether the service is allowed to be provided on the image processing device by checking whether the device ID is registered in the service-provider device, and
in a case where it is determined by the service provider device that the service is allowed, receive a grant of permission to use the service and authorization data that includes a key that is generated by the service provider device and which is based on the device ID, the authorization data identifying the service authorized for use by the image processing device and usable by the image processing device to enable use of the service by the image processing device, and
in a case where it is determined by the service provider device that the service is not allowed, receive, from the service provider device, a denial of permission to the image processing device.

9. The image processing device of claim 8 , wherein
in response the service-provider device determining that the requested service is allowed to be provided, the image processing device receives the service from the service-provider device for use on the image processing device.

10. The image processing device of claim 9 , wherein
The service provided by the service-provider device is at least partially executed on the image processing device.

11. The system of claim 1 , wherein the service provided by the service-provider device is at least partially executed on the first device.

12. The service-provider device of claim 2 , wherein the one or more features of an application authorized for use are provided by the service-provider device for use by the image processing device.

13. The service-provider device of claim 12 , wherein the one or more features of an application are at least partially executed on the image processing device.

14. The system of claim 1 , wherein the device specific data is received from the browser of the image processing device.

15. The system of claim 1 , wherein the browser is a web browser.

16. The service provider device of claim 2 , wherein the device specific data is received from the browser of the image processing device.

17. The service provider device of claim 2 , wherein the browser is a web browser.

18. The image processing device of claim 8 , wherein the device ID is received from the browser of the image processing device.

19. The image processing device of claim 8 , wherein the browser is a web browser.

Assignees

• Canon Information & Imaging Solutions Inc
• Canon Usa Inc

Inventors

• Nakashima Kosuke
• Kamasuka Atsushi
• Cang Song
• Dellago Robert
• Peng Jiayin
• Watanabe Ryutaro

Classifications

• G06F21/00

  Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• G06F21/44

  Program or device authentication · CPC title

• H04L63/0807 Primary

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title

• H04L63/102

  Entity profiles · CPC title