Patent ID: 9686264
Date: 2017-06-20
CPC Classifications: G06F,H04L

Claim:
1. A service providing apparatus configured to provide a first Web service through the Internet, the service providing apparatus comprising: a storage; a communication device configured to connect the service providing apparatus to the Internet; a hardware processor; and memory storing computer executable instructions, when executed by the hardware processor, causing the service providing apparatus to perform: acquiring a resource request through the communication device, the resource request requesting connection to a resource corresponding to the first Web service, being transmitted from a terminal apparatus having accessed through a Web browser a first service client configured to provide a second Web service, and including domain information of the first service client and authentication information related to the connection to the resource corresponding to the first Web service and issued in correspondence to a second service client configured to provide a third Web service, specifying, from the storage, destination information which is associated with the authentication information stored in the storage and coinciding with the authentication information included in the acquired resource request, the storage being configured to store, in association with each other, first identification information corresponding to a predetermined service client configured to provide a predetermined Web service, the destination information corresponding to an address to which permission information permitting connection to the resource corresponding to the first Web service is to be transmitted, and the authentication information related to the connection to the resource corresponding to the first Web service and issued in correspondence to the predetermined service client identified by the first identification information; determining whether the domain information included in the acquired resource request and the specified destination information coincide with each other, transmitting a first response to the resource request from the communication device to the terminal apparatus when the domain information and the destination information coincide with each other, and transmitting a second response to the resource request from the communication device to the terminal apparatus when the domain information and the destination information do not coincide with each other, the first response including information indicating that authentication is required and the domain information, and the second response not including the domain information; generating an access token conforming to an OAuth protocol, as the authentication information issued in correspondence to the predetermined service client identified by the first identification information, the generated access token being configured to be stored in the storage in association with the stored information, as the authentication information issued in correspondence to the predetermined service client identified by the first identification information, wherein the acquiring comprises acquiring the resource request including the domain information and the access token as the authentication information issued in correspondence to the second service client, wherein the specifying comprises specifying, from the storage, the destination information which is associated with the access token stored in the storage and coinciding with the access token included in the acquired resource request, wherein the acquiring comprises acquiring an HTTP request conforming to an XMLHttpRequest protocol as the resource request, wherein the specifying comprises specifying, from the storage, the destination information which is associated with the access token stored in the storage and coinciding with the access token included in the acquired HTTP request, and wherein the transmitting of the first response and the transmitting of the second response from the communication device to the terminal apparatus are performed in response to the acquired HTTP request.