Management system, management method, and recording medium for managing use of function to terminal

Patent metadata

Field	Value
Publication number	US-10484368-B2
Application number	US-201615335642-A
Country	US
Kind code	B2
Filing date	Oct 27, 2016
Priority date	Nov 13, 2015
Publication date	Nov 19, 2019
Grant date	Nov 19, 2019

Abstract

A management system includes a reception unit configured to receive identification information for identifying an account, allocated by an authentication apparatus, corresponding to a terminal, the terminal being authenticated by the authentication apparatus, and a management unit configured to determine whether a function provided by the management system can be used by the terminal based on the identification information received by the reception unit.

First claim

What is claimed is:

1. A management system that communicates with a terminal and a plurality of authentication apparatuses for authenticating the terminal through a network, the management system comprising:
a memory; and
a processor coupled to the memory, and the processor configured to perform a process
transmitting a list of multiple authentication methods used by one or more of authentication apparatuses and the management system;
transmitting a forwarding instruction to an authentication apparatus corresponding to an authentication method upon receiving the authentication method selected at the terminal;
receiving, from the authentication apparatus, first identification information for identifying an account and second identification information for identifying the authentication apparatus, the account being allocated by the authentication apparatus and corresponding to a terminal, which is authenticated by the authentication apparatus;
permitting the terminal to use a function corresponding to the second identification information among functions provided by the management system based on the received second identification information, the terminal being specified by the first identification information and the second identification information; and
transmitting third identification information for identifying an account that is allocated by the management system to the terminal upon a usage of the function that is determined as being allowed, wherein the third identification information is included in a log-in request transmitted from the terminal to the management system.

2. The management system according to claim 1 , wherein the processor is further configured to transmit information including the first identification information to another terminal, wherein the terminal is recorded in a contact list indicative of one of more destinations provided for the other terminal, and the transmitted information is used as a destination name corresponding to the terminal.

3. The management system according to claim 1 , wherein the processor is further configured to allow the terminal to use a function that is defined in accordance with the authentication apparatus having authenticated the terminal, in response to failing to find the first identification information.

4. The management system according to claim 1 , wherein the processor is further configured to allow the terminal to use the function for a period defined in accordance with the authentication apparatus having authenticated the terminal, in response to failing to find the first identification information.

5. The management system as claimed in claim 1 , wherein the processor permits the terminal to use the function corresponding to the authentication apparatus and a date and time when the function becomes available.

6. The management system as claimed in claim 1 , wherein the first identification information is used to authenticate the terminal by the authentication apparatus.

7. The management system as claimed in claim 1 , wherein the third identification information is used to authenticate the terminal by the management system.

8. A method for a management system that communicates with a terminal and a plurality of authentication apparatuses for authenticating the terminal through a network, the method comprising:
transmitting a list of multiple authentication methods used by one or more of authentication apparatuses and the management system;
transmitting a forwarding instruction to an authentication apparatus corresponding to an authentication method upon receiving the authentication method selected at the terminal;
receiving, from the authentication apparatus, first identification information for identifying an account and second identification information for identifying the authentication apparatus, the account being allocated by the authentication apparatus and corresponding to a terminal, which is authenticated by the authentication apparatus;
permitting the terminal to use a function corresponding to the second identification information among functions provided by the management system based on the received second identification information, the terminal being specified by the first identification information and the second identification information; and
transmitting third identification information for identifying an account that is allocated by the management system to the terminal upon a usage of the function that is determined as being allowed, wherein the third identification information is included in a log-in request transmitted from the terminal to the management system.

9. The method as claimed in claim 8 , wherein the terminal is permitted by the management system to use the function corresponding to the authentication apparatus and a date and time when the function becomes available.

10. The method as claimed in claim 8 , wherein the first identification information is used to authenticate the terminal by the authentication apparatus.

11. The method as claimed in claim 8 , wherein the third identification information is used to authenticate the terminal by the management system.

12. A non-transitory recording medium having stored therein a program for causing a computer serving as a management system that communicates with a terminal and a plurality of authentication apparatuses for authenticating the terminal through a network, to perform a process comprising:
transmitting a list of multiple authentication methods used by one or more of authentication apparatuses and the management system;
transmitting a forwarding instruction to an authentication apparatus corresponding to an authentication method upon receiving the authentication method selected at the terminal;
receiving, from the authentication apparatus, first identification information for identifying an account and second identification information for identifying the authentication apparatus, the account being allocated by the authentication apparatus and corresponding to a terminal, which is authenticated by the authentication apparatus;
permitting the terminal to use a function corresponding to the second identification information among functions provided by the management system based on the received second identification information, the terminal being specified by the first identification information and the second identification information; and
transmitting third identification information for identifying an account that is allocated by the management system to the terminal upon a usage of the function that is determined as being allowed, wherein the third identification information is included in a log-in request transmitted from the terminal to the management system.

13. The non-transitory recording medium as claimed in claim 12 , wherein the process permits the terminal to use the function corresponding to the authentication apparatus and a date and time when the function becomes available.

14. The non-transitory recording medium as claimed in claim 12 , wherein the first identification information is used to authenticate the terminal by the authentication apparatus.

Assignees

• Hinohara Hiroshi
• Umehara Naoki
• Horiuchi Takeshi
• Miyamoto Atsushi
• Soneda Takuya
• Ricoh Co Ltd

Inventors

• Hinohara Hiroshi
• Umehara Naoki
• Horiuchi Takeshi
• Miyamoto Atsushi
• Soneda Takuya

Classifications

• H04L63/0281

  Proxies · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/0807 Primary

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title