Patent ID: 9571494
Date: 2017-02-14
CPC Classifications: G06F,H04L

Claim:
1. An authorization server, which authorizes an access request from a client apparatus to a resource server based on a valid access token received from the client apparatus in association with the request, the server comprising: a processor; and a memory storing instructions that, when executed by the processor, cause the server to execute: an issuance step of issuing an access token used to access the resource server and a refresh token used to re-issue a new access token in accordance with an issuance request received from the client apparatus, wherein the refresh token is a first refresh token that has been issued first based on an authorization request from the client apparatus; a re-issuance step of re-issuing a new access token and a new refresh token in accordance with a refresh processing request received together with the refresh token, and storing the refresh token issued by the issuance step so as to re-issue a new refresh token and access token as initial update authorization information in association with the re-issued access token and refresh token; and an invalidation step of invalidating, in accordance with an invalidation request received together with the refresh token, a refresh token with which the received refresh token is associated as initial update authorization information, wherein the refresh token received in the invalidation step together with the invalidation request is the first refresh token issued in the re-issuance step before re-issuance of a refresh token in accordance with an authorization request from the client apparatus, and wherein, where the first refresh token is received in the re-issuance step together with the invalidation request after re-issuance of a new refresh token, both the new refresh token and the first refresh token are invalidated.