Patent ID: 9071601
Filing Date: 2015-06-30
Classification: G06F,H04L

Abstract:
1. An authority delegate system including a first server system configured to manage specific information, a second server system configured to provide a service using acquired specific information, an authentication device, and a client operated by a first user who is allowed to use the service, the authority delegate system comprising: a processor coupled to a memory; a reception unit configured to receive a shared range of an authorization token used by the second server system, wherein the authorization token is for authorizing a plurality of users other than the first user to use the specific information managed by the first server system; a transmission unit configured to transmit, to the client, a setting screen for the first user to set whether to permit the plurality of users within the shared range to share the authorization token, based on the received shared range; a management unit configured to issue one authorization token in response to receiving a permission instruction via the setting screen, and manage the shared range of the authorization token set by the first user via the transmitted setting screen, and the issued one authorization token, in association with each other, wherein the setting screen is a setting screen that allows setting whether to permit which users within the shared range to share the authorization token, and wherein the shared range of the authorization token is managed by the management unit by setting users who are permitted to share the authorization token by the first user via the setting screen; a determination unit configured to determine, in response to use of the service being requested by a client of a second user who has received the authorization token, whether the second user is included in the plurality of users within the shared range of the transmitted authorization token used by the second server system; and a provision unit configured to provide, in response to the determination unit determining that the second user is included in the plurality of users within the shared range of the authorization token and confirmation that the authorization token is valid, the service to the second user using the specific information acquired by the second server system from the first server system such that the second user is able to provide a proxy service to the first user, wherein the reception unit, the transmission unit, the management unit, the determination unit, and the provision unit are implemented by the processor.