Patent ID: 8056120

Claim:
An authentication apparatus that performs an authentication of an access to a resource on a network and a connection to the network by a user, the authentication apparatus comprising: a memory that stores therein a data file that contains first identification information for identifying one of the user and a client terminal used by the user; a monitoring unit that monitors the client terminal, and when a predetermined access operation to access the resource from the client terminal is detected, acquires the first identification information from the memory; a referring unit that acquires second identification indicating an entry status of the user to a physical facility; a verifying unit that verifies whether the first identification information matches the second identification information, and when it is verified that the first identification information matches the second identification information, refers to a room-access management system that is connected to the network and manages the entry status of the user to the physical facility to check the entry status of the user to the physical facility; and a determining unit that determines whether to allow the access operation based on a result from the verifying unit, wherein the determining unit determines to allow an access operation to an access-controlled resource when the result indicates that the user is located within the facility where the access-controlled resource is located.