Patent ID: 7913296

Claim:
An encrypted communication system comprising an authentication server having an encryption key and user information containing access control information for each user, a first information processing device that allows entry of a user identification and user information, and a second information processing device having a decryption key corresponding to the encryption key and a printing unit, wherein the authentication server comprises: a reception unit configured to receive from the first information processing device, after a print instruction is input by a user at the first information processing device to print at the second information processing device, the user identification and information about the second information processing device; a first generation unit configured to generate first key information based on the user identification received by said reception unit; a second generation unit configured to identify access control information for the second information processing device based on the user identification received by said reception unit, and to generate a credential based on the first key information generated by said first generation unit and the identified access control information; an encryption unit configured to encrypt the credential generated by said second generation unit using the encryption key corresponding to the decryption key of the second information processing device; and a first send unit configured to send the credential encrypted by said encryption unit and a predetermined code to the first information processing device, wherein said first send unit does not send the first key information, and the encrypted credential serves as certification information, wherein the first information processing device comprises: a creation unit configured to create second key information based on predetermined user authentication information and the predetermined code received from the authentication server, and to create encrypted information in which print data to be sent is encrypted using the second key information, and a second send unit configured to send the encrypted information and the certification information received from the authentication server to the second information processing device, wherein the second send unit does not send the second key information created by said creation unit, and wherein the second information processing device comprises: a first decryption unit configured to decrypt the certification information using the decryption key of the second information processing device; a second decryption unit configured to decrypt the encrypted information sent from the first information processing device based on the first key information contained in the credential that is obtained by decrypting the certification information by said first decryption unit; and a print unit configured to perform printing based on the print data obtained by decrypting the encrypted information in accordance with access control information contained in the credential.