Patent ID: 9686257
Date: 2017-06-20
CPC Classifications: G06F,H04L

Claim:
1. An authorization server capable of communicating with a server configured to provide a resource service to an apparatus connected via a network and the apparatus including a resource service cooperation application configured to use the resource service, the authorization server comprising: one or more processors; and one or more computer-readable media storing one or more programs, the one or more programs comprising instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising: receiving, at the authorization server from a browser on the apparatus, information associated with a client on the apparatus and a request for a token, the information and the request being transmitted by a user's operation via the browser; issuing, by the authorization server, an authorization code in response to the request, transmitting to the browser the authorization code and a request for redirection to the client, and issuing first authorization information based on the authorization code received from the client which has requested the first authorization information, the client accepting the access of the browser redirected from the authorization server and receiving the authorization code from the browser at the time of the redirection, the first authorization information for identifying a first scope of authorization, the first scope of authorization including authorization to use the resource service, wherein the issuing the first authorization information is performed based on one or more user inputs indicating a user has authorized delegating authorization for using the resource service; receiving, at the authorization server from the client, the first authorization information and a request to issue second authorization information corresponding to a second scope of authorization, the request to issue the second authorization information comprising a request sent by the client for delegating authorization for using the resource service by the resource service cooperation application; in response to receiving the first authorization information and the request to issue the second authorization information, identifying: determining whether to issue the second authorization information based on the first scope of authorization; in response to determining to issue the second authorization information, issuing, by the authorization server, the second authorization information for identifying the second scope of authorization, wherein the second scope of authorization comprises a scope of authorization for using the resource service; and transmitting, from the authorization server to the client, the second authorization information, the second authorization information including information usable by the resource service cooperation application to access the resource services, wherein the determining whether to issue the second authorization information comprises determining whether the first scope of authorization encompasses the second scope of authorization, and wherein the issuing the second authorization information is performed in response to determining that the first scope of authorization encompasses the second scope of authorization.