Apparatus and method for controlling profile data delivery

1. A profile data delivery control apparatus comprising:

a memory that stores therein a public key and a private key corresponding to the public key; and

a processor that performs a process including

obtaining, with respect to each of two or more services provided using a server, first profile data used in server authentication and including identification information of the server, and responsive to determining that the first profile data satisfies a prescribed validity condition, attaching a signature to the first profile data using the private key, and

embedding the public key in a client application so that the public key is used to verify the signature, and delivering the client application with the public key embedded, the client application causing a client to perform an authentication process based on the first profile data, the client application causing the client to access the server by using the identification information and to obtain second profile data used in service authentication from the server for accessing a service,

wherein the client application permits the client to obtain the second profile data to be used in the authentication process from the server responsive to determining that the verifying of the signature using the public key is successful; and

the client application prohibits the client from obtaining the second profile data to be used in the authentication process from the server responsive to determining that the verifying of the signature using the public key has failed.

2. The profile data delivery control apparatus according to claim 1 , wherein:

the client application permits the client to access a service corresponding to the first profile data responsive to determining that the verifying of the signature using the public key is successful; and

the client application prohibits the client from accessing the service corresponding to the first profile data responsive to determining that the verifying of the signature using the public key has failed.

3. The profile data delivery control apparatus according to claim 1 , wherein:

the memory further stores therein license information indicating a license of an authentication method; and

the process further includes

determining whether the client has the license based on the license information in response to a request for the second profile data from the client, and

rejecting the request responsive to determining that the client does not have the license.

4. A profile data delivery control method to be executed by a computer including a memory and a processor, the profile data delivery control method comprising:

reading, by the processor, a public key and a private key corresponding to the public key from the memory;

obtaining, by the processor, with respect to each of two or more services provided using a server, first profile data used in server authentication and including identification information of the server, and responsive to determining that the first profile data satisfies a prescribed validity condition, attaching a signature to the first profile data using the private key; and

embedding, by the processor, the public key in a client application so that the public key is used to verify the signature, and delivering the client application with the public key embedded, the client application causing a client to perform an authentication process based on the first profile data, the client application causing the client to access the server by using the identification information and to obtain second profile data used in service authentication from the server for accessing a service,

wherein the client application permits the client to obtain the second profile data to be used in the authentication process from the server responsive to determining that the verifying of the signature using the public key is successful; and

the client application prohibits the client from obtaining the second profile data to be used in the authentication process from the server responsive to determining that the verifying of the signature using the public key has failed.

5. A non-transitory computer-readable storage medium storing a profile data delivery control program that causes a processor of a computer including a memory and the processor to perform a process including:

reading a public key and a private key corresponding to the public key from the memory;

obtaining, with respect to each of two or more services provided using a server, first profile data used in server authentication and including identification information of the server, and responsive to determining that the first profile data satisfies a prescribed validity condition, attaching a signature to the first profile data using the private key; and

embedding the public key in a client application so that the public key is used to verify the signature, and delivering the client application with the public key embedded, the client application causing a client to perform an authentication process based on the first profile data, the client application causing the client to access the server by using the identification information and to obtain second profile data used in service authentication from the server for accessing a service,

wherein the client application permits the client to obtain the second profile data to be used in the authentication process from the server responsive to determining that the verifying of the signature using the public key is successful; and

the client application prohibits the client from obtaining the second profile data to be used in the authentication process from the server responsive to determining that the verifying of the signature using the public key has failed.