Security information update system, information processing device, security information update method, and security information update program

Patent metadata

Field	Value
Publication number	US-10484432-B2
Application number	US-201615284944-A
Country	US
Kind code	B2
Filing date	Oct 4, 2016
Priority date	Oct 15, 2015
Publication date	Nov 19, 2019
Grant date	Nov 19, 2019

Abstract

A security information update system includes a service providing server and information processing devices, the service providing server including: an authentication information memory that stores a pair of security information and identification information; and a service providing unit that provides a service to the information processing device, and the information processing devices including: a policy acquisition unit that acquires a security policy; a security information memory that stores security information; a process executing unit that transmits a pair of the same identification information and security information to the service providing server and receives a service; an authentication information acquisition unit that acquires security information after update; an update unit that updates security information with the acquired security information after the update date and time; and a prohibition unit that prohibits execution of a process of receiving a service after the update date and time until update with the security information.

First claim

What is claimed is:

1. A security information update system comprising:
a service providing server;
a plurality of information processing devices; and
an administrative server,
wherein:
the service providing server comprises:
an authentication information memory that stores a pair of identification information and security information, the security information being updated at an update date and time, and the identification information identifying a type of the security information, wherein the service providing server provides a service to one of the plurality of information processing devices when a pair of identification information and security information received from the one of the plurality of information processing devices is the same as the pair of identification information and security information stored in the authentication information memory,

the administrative server comprises:
a policy memory; and
a first hardware processor that is configured to manage the security information stored in the service providing server, and

each of the plurality of information processing devices comprises:
a security information memory that stores security information in association with identification information that is the same as the identification information stored in the service providing server; and
a second hardware processor that is configured to execute:
a policy acquisition process that acquires, from the administrative server, a security policy that is stored in the policy memory of the administrative server, wherein the security policy determines the identification information stored in the service providing server and an update date and time;
a process executing process that, when executing a process of receiving a service provided by the service providing server, transmits a pair of (i) identification information that is the same as the identification information stored in the service providing server and (ii) security information stored in association with the identification information, to the service providing server, and receives a service provided by the service providing server;
an authentication information acquisition process that acquires updated security information having been updated in the service providing server, the updated security information being associated with the identification information stored in the service providing server;
an update process that updates the security information stored in the security information memory in association with the identification information that is the same as the identification information stored in the service providing server, with the acquired updated security information, after the update date and time determined by the security policy for the identification information stored in the service providing server; and
a prohibition process that prohibits execution of the process of receiving a service provided by the service providing server after the update date and time determined by the security policy for the identification information stored in the service providing server, until the update process is successfully performed.

2. The security information update system according to claim 1 , wherein the process executing process executes the process prohibited by the prohibition process in accordance with update of the security information stored in the security information memory by the update process after the update date and time has passed.

3. The security information update system according to claim 1 , wherein the second hardware processor is further configured to execute a notification process that notifies a user that the security information has not been updated while execution of the process by the process executing process is being prohibited by the prohibition process.

4. The security information update system according to claim 1 , wherein the second hardware processor is further configured to execute a communication state detection process that detects a communication state with the service providing server, and
wherein the notification process notifies that it is not possible to communicate with the service providing server if the communication state with the service providing server detected by the communication state detection process is a non-communicable state while execution of the process by the process executing process is being prohibited by the prohibition process.

5. The security information update system according to claim 1 , wherein:
the first hardware processor is further configured to transmit an update instruction including the identification information and new security information after update in the service providing server to each of the plurality of information processing devices at a time and date determined based on the update date and time determined by the security policy for the identification information stored in the service providing server, and
the authentication information acquisition process acquires the new security information included in the update instruction as the updated security information in accordance with reception of the update instruction.

6. The security information update system according to claim 1 , wherein the authentication information acquisition process acquires the updated security information after a date and time determined based on the update date and time determined by the security policy for the identification information stored in the service providing server.

7. The security information update system according to claim 6 , wherein:
the administrative server stores new security information having been updated in the service providing server, the new security information being associated with the identification information stored in the service providing server, and
the authentication information acquisition process acquires, as the updated security information, the new security information from the administrative server.

8. The security information update system according to claim 6 , wherein:
each of the plurality of information processing devices further comprises an input device that accepts an operation input by a user, and
the authentication information acquisition process acquires new security information accepted by the input device as the updated security information.

9. The security information update system according to claim 1 , wherein:
each of the plurality of information processing devices is classified into one or more groups, and
the identification information comprises group identification information for identifying one or more groups.

10. An information processing device that can communicate with a service providing server and an administrative server, the service providing server providing a service when a pair of identification information and security information received from the information processing device is the same as a pair of identification information and security information stored in advance by the service providing server, and the information processing device comprising:
a security information memory that stores security information in association with identification information that is the same as the identification information stored in the service providing server; and
a hardware processor that is configured to execute:
a policy acquisition process that acquires, from the administrative server, a security policy that is stored in a policy memory of the administrative server, the security policy determining the identification information stored in the service providing server and an update date and time;
a process executing process that, when executing a process of receiving a service provided by the

Assignees

• Konica Minolta Inc

Inventors

• Shiraishi Jun
• Shozaki Toshiya
• Nishimura Ryosuke
• Maruyama Tomoko
• Haba Shoko

Classifications

• H04L63/205 Primary

  involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title