AUTHENTICATION SERVER SYSTEM, METHOD, AND STORAGE MEDIUM

摘要

An authentication server system issues a first-type token for verification of whether a user operating a terminal is a valid user and a second-type token for verification of whether a service is usable with authority transferred to an authorized client cooperating with the service, verifies, based on a token received with a verification request and a scope regardless of a type of the issued token, and notifies a verification result.

主权项

1. An authentication server system communicable with an information processing apparatus including a service that provides a specific function to a terminal and an authorized client, the authentication server system comprising:
an issuance unit configured to issue a first-type token for verification of whether a user operating the terminal is a valid user and a second-type token for verification of whether the service is usable with authority transferred to the authorized client cooperating with the service; and a verification unit configured to perform checking for verification based on a token received with a verification request and a scope from the information processing apparatus regardless of a type of the token issued by the issuance unit and to notify a verification result, wherein, the verification unit does not check authority associated with a token if the first-type token is received, and the verification unit checks authority associated with a token and determines whether the scope is within a range of the authority associated with the token if the second-type token is received.