Information processing apparatus, authentication system, and information processing method

Abstract

Provided is an information processing apparatus capable of deleting information related to an account that does not exist in an authentication server. According to an embodiment, the information processing apparatus includes a storage unit, an acquisition unit, a determination unit, and a deletion unit. The storage unit stores an account ID transmitted from a server as an authenticated account ID in association with a card ID. The acquisition unit acquires an account ID list by requesting the server to transmit the account ID list. The determination unit determines an authenticated account ID that does not match an account ID included in the acquired account ID list, among the authenticated account IDs. The deletion unit deletes the determined authenticated account ID from the storage unit.

Description

Technical Field

[0001] The embodiments of the present invention relate to an information processing apparatus, an authentication system, and an information processing method. Background Technology

[0002] As one method to improve the authentication time required by the existing authentication system, the following function exists: by retaining the information when the first login is successful in the authentication source, the second and subsequent authentications do not need to query the authentication server, and the authentication judgment is based on the information retained in the authentication source. Summary of the Invention

[0003] However, the above method has the following problem: even if the account is deleted from the authentication server, the authentication source will continue to retain the information of successful authentication before deletion.

[0004] The technical problem to be solved by the embodiments of the present invention is to provide an information processing device capable of deleting information related to accounts that do not exist in the authentication server.

[0005] According to an embodiment, the information processing apparatus includes a storage unit, an acquisition unit, a determination unit, and a deletion unit. The storage unit stores account IDs sent from the server as authenticated account IDs associated with card IDs. The acquisition unit acquires an account ID list by requesting the server to send such a list. The determination unit identifies authenticated account IDs that do not match those listed in the acquired account ID list. The deletion unit deletes the identified authenticated account IDs from the storage unit.

[0006] According to another embodiment, the authentication system includes: a server that performs user authentication by receiving a card ID from an information processing device, and sends an account ID stored in association with the card ID to the information processing device when the user authentication is successful; and an information processing device comprising: a storage unit that stores the account ID sent from the server as an authenticated account ID associated with the card ID; an acquisition unit that acquires the account ID list by requesting the server to send the account ID list; a determination unit that determines, from the authenticated account IDs, an authenticated account ID that is inconsistent with the account IDs contained in the acquired account ID list; and a deletion unit that deletes the authenticated account IDs determined by the determination unit and the card ID associated with the authenticated account IDs determined by the determination unit from the storage unit.

[0007] According to another embodiment, the information processing method is an information processing method of an information processing device. The information processing device performs user authentication by sending a card ID to a server. The server has a database that stores account IDs associated with the card IDs. In the user authentication, the account ID sent from the server is stored as an authenticated account ID associated with the card ID. The device requests the server to send a list of account IDs to obtain the list. Among the authenticated account IDs, the device determines the authenticated account IDs that are inconsistent with the account IDs included in the obtained list. The determined authenticated account IDs and the card IDs associated with the determined authenticated account IDs are deleted from the storage unit. In the user authentication, the storage unit stores the account ID sent from the server as an authenticated account ID associated with the card ID. Attached Figure Description

[0008] Figure 1 This is a block diagram illustrating an example of the configuration of an authentication system according to an implementation method.

[0009] Figure 2 This is a block diagram illustrating an example of the configuration of an information processing apparatus according to an embodiment.

[0010] Figure 3 This is a block diagram illustrating an example of the configuration of the processor in an information processing apparatus according to an embodiment.

[0011] Figure 4 This is a block diagram illustrating an example of the configuration of an authentication server according to an implementation method.

[0012] Figure 5 This is a flowchart illustrating an example of the authentication process of an information processing apparatus according to an embodiment.

[0013] Figure 6 This is a flowchart illustrating an example of the deletion process of an information processing apparatus according to an embodiment.

[0014] Figure 7 This is a flowchart illustrating an example of the deletion process of an information processing apparatus according to an embodiment.

[0015] Explanation of reference numerals in the attached figures

[0016] 1…Information processing device; 4…Scanner; 5…Control system; 51…Processor; 511…Acquisition unit; 512…Decision unit; 513…Delete unit; 52…RAM; 53…ROM; 54…Data storage; 55…Image storage; 56…Image processing unit; 57…FAX interface; 58…Communication interface; 6…Control panel; 61…Processor; 62…RAM; 63…ROM; 64…Operation panel; 641…Touch panel; 642…Input device; 65…External interface; 66…Non-volatile memory; 7…Printer; 2…Card reader; 3…Authentication server; 31…Processor; 32…ROM; 33…RAM; 34…Storage device; 35…Communication interface; 36…Input / output interface. Detailed Implementation

[0017] The embodiments will now be described with reference to the accompanying drawings. The several embodiments shown below illustrate apparatus and methods for embodying the technical concept of the present invention, and are not intended to limit the technical concept of the present invention by the shape, structure, or arrangement of the constituent components. It should be noted that in the following description, elements having the same function and structure are labeled with the same reference numerals, and repeated descriptions are omitted.

[0018] use Figure 1 An overview of the structure of the authentication system involved in the implementation method is provided. Figure 1 This is a block diagram illustrating an example of the configuration of an authentication system according to an implementation method.

[0019] The authentication system involved in the implementation is, for example, the following system: by using a card reader 2 to read information such as an IC card, querying the information of the IC card from the authentication server 3, user authentication is performed, thereby unlocking the screen of the information processing device 1.

[0020] The authentication system consists of at least one authentication server 3, multiple information processing devices 1, and multiple card readers 2 connected to each of the information processing devices 1. The authentication server 3 and the information processing devices 1 are connected by wired or wireless communication to enable them to communicate with each other.

[0021] Card reader 2 is an interface device for sending and receiving data with IC cards, and it is connected to information processing device 1 to send and receive data / information. Card reader 2 includes an antenna, contact terminals, and a communication control unit, and is physically and electrically connected to contact IC cards via the contact terminals for communication. Furthermore, when the IC card is contactless, it is connected and communicates with the contactless IC card in a contactless manner via the antenna. Additionally, when the IC card is a combination type (possessing both contact and contactless functions), it is physically and electrically connected to the combination type IC card via the contact terminals for communication.

[0022] The card reader 2 has the function of sending card information, including the card ID, read from the IC card to the information processing device 1 connected to the card reader 2. The card information includes, for example, employee number, personal number, etc. Furthermore, the card ID is a unique ID that identifies the user.

[0023] Next, use Figure 4 The detailed configuration of the authentication server 3 involved in the implementation method will be described. Figure 4 This is a block diagram illustrating an example of the configuration of an authentication server involved in the implementation method.

[0024] The authentication server 3 has a processor 31, ROM 32, RAM 33, storage device 34, communication interface 35, and input / output interface 36.

[0025] The processor 31, ROM 32, RAM 33, storage device 34, communication interface 35, and input / output interface 36 can be connected and send / receive data to each other via bus communication lines. It should be noted that the processor 31, ROM 32, RAM 33, storage device 34, communication interface 35, and input / output interface 36 can also be configured to send / receive data to each other via wireless communication or other means.

[0026] The processor 31 includes at least one of the following processors: CPU (Central Processing Unit), MPU (micro processing unit), GPU (Graphics Processing Unit), FPGA (field-programmable gate array), etc. The processor 31 can realize various functions of the authentication server 3 by executing system software, application software or firmware stored in ROM 32, RAM 33 or storage device 34.

[0027] ROM32 is a read-only non-volatile memory. ROM32 stores, non-transitory, the startup program required when the authentication server 3 of the implementation is started. The authentication server 3 is started by the processor 31 executing the program in ROM32. ROM32 is, for example, composed of EPROM (Erasable Programmable Read Only Memory), and stores various settings at startup in addition to the startup program.

[0028] RAM33 is a volatile memory capable of being read and written. RAM33 temporarily stores the program required for processing in processor 31 and the data required for executing the program. For example, processor 31 executes the program in RAM33, performs operations on the data in RAM33, and stores the operation results in RAM33.

[0029] Storage device 34 is composed of non-volatile memory such as HDD (Hard Disk Drive) or SSD (Solid State Drive). Storage device 34 non-temporarily stores the program executed by processor 31 and the data required for program execution. Processor 31 loads the program and data from storage device 34 into RAM 33 and executes the program to perform various functions. It should be noted that ROM 32 and storage device 34 are examples of the database in authentication server 3.

[0030] For example, the database of authentication server 3 stores multiple account IDs associated with multiple card IDs. The database registers and stores public or administrator accounts that have been pre-granted access rights to authentication server 3. Additionally, the database stores a list of account IDs, i.e., an account ID list. An example of an account ID list is one that sorts account IDs based on their registration date and time.

[0031] The communication interface 35, connected to the information processing device 1, is capable of receiving data / information from the information processing device 1 and sending data / information to a designated information processing device 1. Alternatively, the communication interface may be configured to connect to a network, enabling it to receive information from external devices and send information to external devices, etc.

[0032] Input / output interface 36 is connected to input devices and output devices, respectively. Input / output interface 36 can input information from input devices and output information to output devices. Input devices include, for example, a keyboard, mouse, touch panel, and disk drive. Input devices are not limited to these and can include any other input device. Output devices include, for example, a display and disk drive. Output devices are not limited to these and can include audio output components such as speakers, and any other output device. Input and output devices can also be composed of input / output devices that have the functions of both.

[0033] When the processor 31 of the authentication server 3 receives the card ID and information related to the account granted access rights from the information processing device 1, it uses the account and card ID to search the database. When the processor 31 determines the account ID associated with the card ID, it sends the determined account ID to the information processing device 1 via the communication interface. For example, the processor 31 may also send information indicating whether user authentication was successful along with the account ID. The user authentication method of the authentication server 3 is not limited to the above; existing known methods may also be used.

[0034] Next, use Figure 2 The detailed configuration of the information processing apparatus 1 according to the embodiment will be described. Figure 2 This is a block diagram illustrating an example of the configuration of an information processing apparatus according to an embodiment.

[0035] Information processing device 1, for example, is an MFP (multi-functional peripheral), which includes a scanner 4, a control system 5, a control panel 6, and a printer 7. The scanner 4, control system 5, control panel 6, and printer 7 are connected to each other in a manner that enables them to send and receive data / information.

[0036] Scanner 4 is a device that optically reads the image of the original document and converts it into image data. Scanner 4 performs scanning of the original document according to action instructions from control system 5. Additionally, scanner 4 outputs the read image data of the original document to control system 5.

[0037] Printer 7 forms an image on paper, which serves as the image forming medium. Under various printing conditions specified by control system 5, printer 7 prints the image onto paper based on image data supplied by control system 5. It should be noted that printer 7 can be any printer employing various image forming methods. For example, printer 7 can be an electrophotographic printer, or an inkjet or thermal transfer printer, etc.

[0038] The control system 5 has the function of unified control over the entire information processing device 1. The control system 5 is connected to various parts of the information processing device 1, such as the scanner 4, printer 7, and control panel 6. The control system 5 exchanges data / information with the scanner 4, printer 7, and control panel 6. That is, the control system 5 has the function of unified control over the actions of various parts, such as the scanner 4, printer 7, and control panel 6. In addition, the control system 5 performs various processes, such as image processing.

[0039] The control system 5 includes a processor 51, RAM (random-access memory) 52, ROM (read-only memory) 53, data memory 54, image memory 55, image processing unit 56, FAX interface (I / F) 57, and communication interface (I / F) 58. The processor 51, RAM 52, ROM 53, and data memory 54 perform control and various processing functions for their respective parts.

[0040] The processor 51 can implement various functions of the information processing device 1 by executing system software, application software, or firmware stored in at least one of the ROM 53 and the data memory 54. It should be noted that the information processing device 1 can also combine two or more processors to perform various processes through the cooperation of these two or more processors.

[0041] Here, using Figure 3 The detailed configuration of the processor 51 of the information processing device 1 will be described. Figure 3 This is a block diagram illustrating an example of the configuration of a processor in an information processing apparatus according to an embodiment. The processor 51 includes an acquisition unit 511, a determination unit 512, and a deletion unit 513.

[0042] The acquisition unit 511 acquires card information, including the card ID, from the card reader 2 via the communication interface 58.

[0043] The acquisition unit 511 acquires the account IDs sent from the authentication server 3. Additionally, the acquisition unit 511 sends a signal requesting a list of account IDs to the authentication server 3 at a preset date and time. The acquisition unit 511 acquires the list of account IDs after sending the aforementioned signal.

[0044] The determination unit 512 retrieves the authenticated account ID associated with the card ID from the ROM 53 or the data memory 54, and determines whether the authenticated account ID exists in the ROM 53 or the data memory 54.

[0045] Based on the determination result, the determination unit 512 sends the card ID obtained from the card reader 2 to the authentication server 3. That is, if the determination unit 512 determines that the authenticated account ID does not exist in the ROM 53 or the data memory 54, it sends the card ID to the authentication server 3 via the communication interface 58. The determination unit 512 stores the account ID obtained by the acquisition unit 511 as the authenticated account ID in the storage unit in association with the corresponding card ID.

[0046] The determination unit 512 identifies, from among multiple certified account IDs, those that match the account IDs included in the account ID list obtained by the acquisition unit 511. By identifying certified account IDs that match the account IDs, the determination unit 512 determines certified account IDs that do not match the account IDs. That is, it determines certified account IDs that are different from all account IDs included in the account ID list.

[0047] The deletion unit 513 deletes the confirmed authenticated account ID and the card ID associated with the authenticated account ID from the storage unit, namely ROM 53 and data memory 54, of the information processing device 1.

[0048] RAM52 is a volatile memory that corresponds to the main storage portion of processor 51. RAM52 is used as a so-called working area to store data that the processor 51 temporarily uses when performing various processes, where processor 51 corresponds to a computer.

[0049] ROM 53 is a read-only, non-volatile memory that corresponds to the main storage portion of processor 51. ROM 53 stores programs such as the operating system or application software. Additionally, ROM 53 stores data used by processor 51 during various processing operations; processor 51 is equivalent to a computer.

[0050] Data memory 54 serves as auxiliary storage for processor 51, which is analogous to a computer. Data memory 54 may be, for example, EEPROM (electrically erasable programmable read-only memory), HDD (hard disk drive), or SSD (solid state drive). Data memory 54 may sometimes store part or all of the aforementioned program. Additionally, data memory 54 stores data used by processor 51 during various processes, data generated by processor 51 through various processes, or various setting values. Examples of data memory 54 include memory card IDs, authenticated account IDs associated with those card IDs, and a list of account IDs. It should be noted that ROM 53 and data memory 54 are examples of the storage unit (database) in information processing device 1.

[0051] ROM 53 and data memory 54 are non-transitory computer-readable storage media. Information processing device 1 can be transferred while storing the aforementioned program, or it can be transferred without storing the aforementioned program. In the latter case, information processing device 1 reads the aforementioned program stored in a removable storage medium such as an optical disc or semiconductor memory, and writes the read program into data memory 54, etc. Information processing device 1 can also download the aforementioned program via a network, etc., and write the downloaded program into data memory 54, etc.

[0052] The image memory 55 consists of a hard disk drive and a page memory, etc. The image memory 55 stores image data. The image processing unit 56 performs image processing on the image data.

[0053] FAX interface 57 is a fax interface used for fax communication. FAX interface 57 sends data via fax to a fax number or email address set by processor 51. Communication interface 58 is a network interface used for data communication with external devices via a network such as the Internet.

[0054] Control panel 6 is the user interface. Control panel 6 displays guidance information to the user or accepts user operation instructions. Control panel 6 has a processor 61, RAM 62, ROM 63, operation panel 64, external interface (I / F) 65, and non-volatile memory 66.

[0055] Processor 61 provides unified control of control panel 6. Processor 61 is a computational circuit that executes programs. Processor 61 is, for example, a CPU. Processor 61 performs various processing functions by executing programs stored in ROM 63. Processor 61 supplies information input to various parts of control panel 6 to control system 5. In addition, processor 61 controls various parts of control panel 6 according to control signals from control system 5.

[0056] RAM 62 is a volatile memory that corresponds to the main storage portion of processor 61, which is analogous to a computer. RAM 62 is used as a so-called working area to store data that the processor 61 temporarily uses while performing various processes.

[0057] ROM 63 is a read-only, non-volatile memory that corresponds to the main storage portion of processor 61, which is analogous to a computer. ROM 63 stores programs such as the operating system or application software. Additionally, ROM 53 stores data used by processor 61 during various processing operations.

[0058] The operation panel 64 is a user interface. The operation panel 64 may include, for example, a touch panel 641 and an input device 642.

[0059] The touch panel 641 is, for example, composed of a display such as a liquid crystal display or an organic EL (electro-luminescence) display and a sensing device for detecting touch input, stacked together. The display in the touch panel 641 shows a screen for notifying the user of various information. Furthermore, the touch panel 641 accepts user touch operations and tracing operations (drawing operations). Touch operations include, for example, touching various displayed text or image information with a finger, stylus, etc. Tracing operations include, for example, tracing the area corresponding to the displayed text or image information with a finger or a pointing device. The touch panel 641 supplies information indicating the location of the user's touch and the tracing area as detection signals to the processor 61.

[0060] Input device 642 accepts user input. Input device 642 may be, for example, a button, keyboard, keypad, or touchpad.

[0061] The processor 61 controls the screen displayed on the touch panel 641. Based on instructions from the control system 5, the processor 61 displays various operation screens on the touch panel 641. Furthermore, the processor 61 determines the location and tracing range of the user's touch based on detection signals from the touch panel 641. The processor 61 supplies information indicating the detected instruction content to the processor 51 of the control system 5. Additionally, the processor 61 can also detect the content of the operation instruction based on the user's touch operation and tracing operation (tracing range and time (speed), etc.) detected by the touch panel 641.

[0062] External interface 65 is an interface for connecting external devices. External interface 65 can be configured as a common standard interface such as USB (Universal Serial Bus). For example, external interface 65 can connect to portable storage devices. In addition, external interface 65 can also connect to numeric keypads or portable keyboards.

[0063] The non-volatile memory 66 is composed of non-volatile memory such as HDD (Hard Disk Drive) or SSD (Solid State Drive). The non-volatile memory 66 non-temporarily stores the program executed by the processor 61 and the data required for executing the program. The processor 61 loads the program and data in the non-volatile memory 66 into RAM 62 and performs various functions by executing the program.

[0064] The following is based on Figure 5 The authentication processing operation of the information processing device 1 according to the implementation method will be described. Figure 5This is a flowchart illustrating an example of the authentication process of the information processing apparatus according to the embodiment. It should be noted that the processing described below is an example, and various processes that can achieve the same result can be appropriately utilized.

[0065] By making the IC card either not in contact with or in contact with the card reader 2, the card reader 2 reads the card information containing the card ID of the IC card and sends the card information to the information processing device 1. Thus, the authentication processing operation of the information processing device 1 according to the embodiment begins.

[0066] The acquisition unit 511 remains in standby mode until it acquires a card ID containing card information from the card reader 2 (step S1). If the acquisition unit 511 acquires the card ID from the card reader 2 (step S1, yes), the determination unit 512 determines whether an authenticated account ID associated with the card ID exists in the database of the information processing device 1 (step S2).

[0067] The determination unit 512 searches the database of the information processing device 1 for the authenticated account ID associated with the card ID. If it determines that the authenticated account ID exists in the database (step S2, yes), it unlocks the screen of the control panel (step S7) and ends the authentication process.

[0068] The determination unit 512 searches the database of the information processing device 1 for the authenticated account ID associated with the card ID. If it determines that the authenticated account ID does not exist in the database (step S2, no), it executes the process of sending the card ID to the authentication server 3 (step S3).

[0069] The acquisition unit 511 waits to receive the authentication result from the authentication server 3. That is, the acquisition unit 511 waits to receive the account ID from the authentication server 3. Alternatively, information indicating whether the authentication was successful or not can be sent along with the account ID. It can also be configured such that the account ID is sent when authentication is successful, and a signal indicating rejection (failure) is sent when authentication is rejected (when authentication fails).

[0070] The acquisition unit 511 receives the authentication result from the authentication server 3 (step S4). The determination unit 512 determines, based on the authentication result received by the acquisition unit 511, whether an account ID associated with the card ID exists in the authentication server 3 (step S5). That is, the determination unit 512 determines whether user authentication was successful in the authentication server 3. If the determination unit 512 determines that an account ID associated with the card ID exists in the authentication server 3 (step S5, yes), it stores that account ID in the database as an authenticated account ID associated with the corresponding card ID in the storage unit (step S6).

[0071] After step S6, the determination unit 512 unlocks the screen of the control panel 6 (step S7) and ends the authentication process. On the other hand, the determination unit 512 determines that there is no account ID associated with the card ID in the authentication server 3 (step S5, No), notifies the user of authentication failure (step S8), and ends the authentication process. For the authentication failure notification, for example, a screen displaying the authentication failure notification can be shown on the control panel 6, or an audio notification of the authentication failure can be played.

[0072] The following is based on Figure 6 as well as Figure 7 The deletion processing operation of the information processing device 1 according to the embodiment will be described. Figure 6 This is a flowchart illustrating an example of the deletion process of an information processing apparatus according to an embodiment. Figure 7 This is a flowchart illustrating an example of the deletion process of the information processing apparatus according to the embodiment. It should be noted that the processing described below is an example, and various processes that can achieve the same result can be appropriately utilized.

[0073] The acquisition unit 511 determines whether the date and time preset by the user have been reached. That is, the acquisition unit 511 remains in standby mode until the preset time is reached (step S11). If the acquisition unit 511 determines that the date and time preset by the user have been reached (step S11, yes), it sends a signal to the authentication server 3 requesting the sending of the account ID list (step S12).

[0074] The user pre-sets the date and time, such as Daily, Weekly, Monthly, or None. If set to Daily, the acquisition unit 511 sends a signal to the authentication server 3 requesting a list of account IDs at the designated time each day. If set to Weekly, the acquisition unit 511 sends a signal to the authentication server 3 requesting a list of account IDs at the designated time each week. If set to Monthly, the acquisition unit 511 sends a signal to the authentication server 3 requesting a list of account IDs at the designated time each month. If set to None, the acquisition unit 511 does not perform the process of sending a signal to the authentication server 3 requesting a list of account IDs.

[0075] After processing the signal to send a request to the authentication server 3 to send the list of account IDs, the acquisition unit 511 waits to receive the list of account IDs from the authentication server 3. The acquisition unit 511 receives the list of account IDs from the authentication server 3 (step S13). After the acquisition unit 511 receives the list of account IDs from the authentication server 3, the determination unit 512 retrieves multiple authenticated accounts from the database. That is, the determination unit 512 retrieves any authenticated account IDN (step S14). It should be noted that N is a variable, and the maximum value of N is the number of authenticated account IDs stored in the database. First, 1 is substituted into the variable N (step S15). Therefore, processing begins from the topmost authenticated account ID in the list of authenticated account IDs in the database.

[0076] Furthermore, the determination unit 512 extracts multiple account IDs n from the account ID list. That is, the determination unit 512 extracts any account ID n (step S16). It should be noted that n is a variable, and the maximum value of n is the number of account IDs contained in the account ID list. First, 1 is substituted into the variable n (step S17). Thus, processing begins from the top account ID in the account ID list.

[0077] The determination unit 512 compares the authenticated account IDN with the account IDn (step S18). The determination unit 512 determines whether the authenticated account IDN and the account IDn are the same account ID (step S19). If the determination unit 512 determines that the authenticated account IDN and the account IDn are not the same account ID (step S19, no), then it determines whether the current account IDn has reached the maximum number of account IDs, i.e., account IDnmax (step S20).

[0078] If the determination unit 512 determines that the current account ID n has not reached the maximum number of account IDs, i.e., account ID nmax (step S20, yes), then the variable n is incremented by 1 (step S21), and the process is transferred to step S18.

[0079] If the determination unit 512 determines that the certified account IDN and the account IDn are the same account ID (step S19, yes) or determines that the current account IDn has reached the maximum number of account IDs, i.e., account IDnmax (step S20, no), then it determines whether the current certified account IDN has reached the maximum number of certified account IDs, i.e., certified account IDNmax (step S22).

[0080] If the determination unit 512 determines that the current number of certified account IDs (IDN) has not reached the maximum number of certified account IDs (IDNmax) (step S22, yes), then it increments the variable N by 1 (step S23) and proceeds to the process in step S18. By executing the process from step S18 to step S23, it is possible to determine the certified account that matches the account ID contained in the account ID list from among multiple certified account IDs.

[0081] If the determination unit 512 determines that the current number of certified account IDs has reached the maximum number of certified account IDs, i.e., certified account IDs max (step S22, no), then it determines whether there is a certified account ID that is inconsistent with any account IDn (step S24).

[0082] If the determination unit 512 determines that a certified account IDN inconsistent with any account IDn does not exist (step S24, No), then the process ends. If the determination unit 512 determines that a certified account IDN inconsistent with any account IDn exists (step S24, Yes), then the certified account IDN inconsistent with any account IDn is determined (step S25). That is, from the certified account IDs stored in the database, the certified account IDs excluding those consistent with the account ID are determined.

[0083] The deletion unit 513 deletes the confirmed authenticated account ID and the card ID associated with the authenticated account ID from the database of the information processing device 1 (step S26) and ends the process.

[0084] According to the information processing apparatus 1 of the embodiment, even if the multiple account IDs stored in the database of the authentication server 3 are not synchronized with the multiple authenticated account IDs stored in the database of the information processing apparatus 1, and there are only authenticated account IDs stored in the database of the information processing apparatus 1, by requesting the authentication server 3 to send a list of account IDs at a preset date and time, and comparing the account IDs included in the list with the authenticated account IDs, inconsistent authenticated account IDs can be identified and deleted.

[0085] Furthermore, although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These new embodiments can be implemented in various other ways, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their variations are included within the scope of the invention, as well as within the scope of the invention as described in the claims and its equivalents.

Claims

1. An information processing apparatus for user authentication by sending a card ID to a server, the server having a database that stores account IDs associated with the card IDs, the information processing apparatus comprising: The storage unit stores the account ID sent from the server as an authenticated account ID associated with the card ID; The acquisition unit obtains the account ID list by requesting the server to send the account ID list; The determination unit identifies, from the certified account IDs, certified account IDs that do not match the account IDs contained in the obtained account ID list; as well as The deletion unit deletes the authenticated account ID that has been determined by the determination unit from the storage unit.

2. The information processing apparatus according to claim 1, wherein, The acquisition unit obtains the list of account IDs by requesting the server to send the list of account IDs at a pre-set date and time.

3. The information processing apparatus according to claim 2, wherein, The deletion unit will delete the card ID associated with the authenticated account ID determined by the determination unit and the authenticated account ID determined by the determination unit from the storage unit.

4. The information processing apparatus according to claim 1, wherein, When user authentication is successful, the information processing device receives the account ID sent by the server; when user authentication fails, the information processing device receives a failure signal sent by the server.

5. An authentication system, comprising: The server performs user authentication by receiving a card ID from the information processing device, and sends the account ID stored in association with the card ID to the information processing device when the user authentication is successful. as well as The information processing device, The information processing device has: The storage unit stores the account ID sent from the server as an authenticated account ID associated with the card ID; The acquisition unit obtains the account ID list by requesting the server to send the account ID list; The determination unit identifies, from the certified account IDs, certified account IDs that do not match the account IDs contained in the obtained account ID list; as well as The deletion unit deletes the authenticated account ID and the card ID associated with the authenticated account ID determined by the determination unit from the storage unit.

6. The authentication system according to claim 5, wherein, The acquisition unit obtains the list of account IDs by requesting the server to send the list of account IDs at a pre-set date and time.

7. The authentication system according to claim 5, wherein, When user authentication is successful, the information processing device receives the account ID sent by the server; when user authentication fails, the information processing device receives a failure signal sent by the server.

8. An information processing method, which is an information processing device method, wherein the information processing device performs user authentication by sending a card ID to a server, the server having a database that stores account IDs associated with the card IDs, wherein... In the user authentication process, the account ID sent from the server is stored as an authenticated account ID associated with the card ID. The account ID list is obtained by requesting the server to send the account ID list. Among the certified account IDs, the certified account IDs that do not match the account IDs included in the obtained account ID list are identified. The storage unit deletes the determined authenticated account ID and the card ID associated with the determined authenticated account ID from the storage unit. In the user authentication, the storage unit stores the account ID sent from the server as the authenticated account ID associated with the card ID.

9. The information processing method according to claim 8, wherein, The information processing device obtains the account ID list by requesting the server to send the account ID list at a pre-set date and time.

10. The information processing method according to claim 8, wherein, When user authentication is successful, the information processing device receives the account ID sent by the server; when user authentication fails, the information processing device receives a failure signal sent by the server.

Images