Management system, communication system, and management method

Patent metadata

Field	Value
Publication number	US-10728254-B2
Application number	US-201715621074-A
Country	US
Kind code	B2
Filing date	Jun 13, 2017
Priority date	Jun 23, 2016
Publication date	Jul 28, 2020
Grant date	Jul 28, 2020

Abstract

A management system, a communication system, and a management method. The management system and the management method include receiving a request to associate identification information of a first user with identification information of a first client application that the first user is authorized to use, and identification information of a second user who has been authenticated and has been authorized to use a second client application, determining whether the identification information of the second user matches certain information that corresponds to the first client application, and associating the identification information of the first user with the identification information of the first client application when the determining determines that the identification information of the second user matches the certain information that corresponds to the first client application. The communication system includes the management system, and a communication terminal that sends the access token to the management system.

First claim

What is claimed is:

1. A management system comprising:
a receiver to receive
a request to associate identification information of a first user with identification information of a first client application that the first user is authorized to use, and
identification information of a second user who has been authenticated and has been authorized to use a second client application;

circuitry to
determine whether the identification information of the second user matches certain information that corresponds to the first client application,
associate the identification information of the first user with the identification information of the first client application when the identification information of the second user matches the certain information that corresponds to the first client application, and
generate, in response to the request, an access token including identification information of the first user, after authenticating the first user, and authorize the first user to use the first client application; and

a memory to store, for each user, identification information of the user and identification information of a client application that the user is authorized to use, in association with each other, the user including at least the second user,
wherein the receiver receives the access token,
when the identification information of the second user matches the certain information that corresponds to the first client application, the circuitry stores in the memory the identification information of the first user in association with the identification information of the first client application,
the memory further stores, for each developer of the client application, identification information of a user who belongs to the developer, and
when the identification information of the second user matches the identification information of the user who belongs to the developer of the first client application in the memory, the circuitry associates the identification information of the first user with the identification information of the first client application in the memory.

2. The management system according to claim 1 , wherein
the memory further stores, for each client application, identification information of the client application and identification information of the developer of the client application, in association with each other, and
when the identification information of the first client application is stored in association with identification information of the developer to which the second user belongs in the memory, the circuitry associates the identification information of the first user with the identification information of the first client application in the memory.

3. The management system according to claim 1 , further comprising:
a transmitter to transmit the access token to a communication terminal in response to the request to use the client application,
wherein the receiver receives the access token sent from the communication terminal.

4. A communication system comprising:
the management system according to claim 3 ; and
a communication terminal configured to send the access token to the management system.

5. A method of causing an apparatus that includes a receiver coupled to circuitry to perform management, the method comprising:
receiving, with the receiver, a request to associate identification information of a first user with identification information of a first client application that the first user is authorized to use;
receiving, with the receiver, identification information of a second user who has been authenticated and has been authorized to use a second client application;
determining, with the circuitry, whether the identification information of the second user matches certain information that corresponds to the first client application; and
associating, with the circuitry, the identification information of the first user with the identification information of the first client application when the identification information of the second user matches the certain information that corresponds to the first client application;
generating, with the circuitry and in response to the request, an access token including the identification information of the first user, after authenticating the first user, and authorize the first user to use the first client application;
storing, in a memory and for each user, identification information of the user and identification information of a client application that the user is authorized to use, in association with each other, the user including at least the second user; and
receiving, with the receiver, the access token,
wherein when the identification information of the second user matches the certain information that corresponds to the first client application, the identification information of the first user is stored in the memory in association with the identification information of the first client application,
for each developer of the client application, identification information of a user who belongs to the developer is stored in the memory, and
when the identification information of the second user matches the identification information of the user who belongs to the developer of the first client application in the memory, the identification information of the first user is associated with the identification information of the first client application in the memory.

6. The method according to claim 5 , further comprising:
authenticating a user who has sent a request to use a client application;
authorizing the user who has sent the request to use the client application to use the client application;
generating an access token including identification information of the user who has sent the request to use the client application after the authenticating and the authorizing;
transmitting the access token to a communication terminal operated by the user who has sent the request to use the client application; and
receiving the access token sent from the communication terminal.

7. The management system according to claim 1 , wherein at least one of the first client application and the second client application is a screen-sharing application.

8. The management system according to claim 1 , wherein the identification information of the first user is not associated with the identification information of the first client application when the identification information of the second user does not match the certain information that corresponds to the first client application.

Assignees

• Hakata Mayu
• Horiuchi Takeshi
• Ricoh Co Ltd

Inventors

• Hakata Mayu
• Horiuchi Takeshi

Classifications

• G06F21/33

  using certificates · CPC title

• H04L63/0815

  providing single-sign-on or federations · CPC title

• H04L63/0807

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title