An information processing apparatus comprising a storage having a tamper resistance configured to store user's biometric information and a biometric information sensor configured to read biometric information of a user; wherein the information processing apparatus further comprises: an executing unit adapted to execute a log-in processing (S401-S408) of the user to log the user into the information processing apparatus according to one of plural authentication methods comprising biometric authentication using biometric information read by the biometric information sensor, an authenticator unit adapted to determine whether the user has logged into the information processing apparatus using the user's biometric information, upon reception of a credential creation request, wherein the credential creation request includes a service ID for identifying a service on a network, a display unit adapted to display, in a case where it is determined by the authenticator unit that the user has not logged into the information processing apparatus using the user's biometric information, a screen for requesting the user to present biometric information according to the credential creation request, a biometric information request unit adapted to create a biometric information ID for identifying biometric information read by the biometric information sensor in accordance with the screen, an acquiring unit adapted to acquire, in a case where it is determined by the authenticator unit that the user has logged into the information processing apparatus using the user's biometric information, a biometric information ID of the logged-in user stored in the storage, a creation unit adapted to create a private key required at the time of using the service on the network, and a public key corresponding to the private key, a storing unit adapted to store, as authentication information, the created private key, the biometric information ID created by the biometric information request unit or acquired by the acquiring unit, and the service ID included in the credential creation request, associated with each other, a communication unit adapted to transmit a credential comprising an authentication information ID for identifying the stored authentication information and the public key to the service on the network. an executing unit adapted to execute a log-in processing (S401-S408) of the user to log the user into the information processing apparatus according to one of plural authentication methods comprising biometric authentication using biometric information read by the biometric information sensor, an authenticator unit adapted to determine whether the user has logged into the information processing apparatus using the user's biometric information, upon reception of a credential creation request, wherein the credential creation request includes a service ID for identifying a service on a network, a display unit adapted to display, in a case where it is determined by the authenticator unit that the user has not logged into the information processing apparatus using the user's biometric information, a screen for requesting the user to present biometric information according to the credential creation request, a biometric information request unit adapted to create a biometric information ID for identifying biometric information read by the biometric information sensor in accordance with the screen, an acquiring unit adapted to acquire, in a case where it is determined by the authenticator unit that the user has logged into the information processing apparatus using the user's biometric information, a biometric information ID of the logged-in user stored in the storage, a creation unit adapted to create a private key required at the time of using the service on the network, and a public key corresponding to the private key, a storing unit adapted to store, as authentication information, the created private key, the biometric information ID created by the biometric information request unit or acquired by the acquiring unit, and the service ID included in the credential creation request, associated with each other, a communication unit adapted to transmit a credential comprising an authentication information ID for identifying the stored authentication information and the public key to the service on the network.