Information processing apparatus and method

1. An information processing apparatus, comprising:

an authentication module that executes biometric authentication;

a storage area having tamper resistance, wherein the storage area stores biometric information of a user required when authentication processing is performed by the authentication module;

a display;

a biometric information sensor that reads the biometric information, wherein the biometric information sensor is arranged in the information processing apparatus and configured to read the biometric information in at least a part of an operation area on the display;

a memory storing instructions; and

a processor executing the instructions causing the information processing apparatus to:

display in a screen on the display a first control to accept a user operation and start a first processing request, wherein the first control is displayed in a state where information indicating that authentication is requested is added to the first control, and the first control is arranged and displayed in a readable area of the biometric information sensor;

display in the same screen on the display a second control to accept a user operation and start a second processing request, wherein the second control is displayed without adding the information indicating that the biometric authentication is requested, and wherein generation instruction information for displaying the first control and the second control is provided from a web application communicating with the information processing apparatus;

make the first processing request corresponding to the first control when the user operation on the displayed first control is detected;

transmit, to a request destination of the first processing request, data based on a result of the biometric authentication by the authentication module using the biometric information stored in the storage area and biometric information read via the biometric information sensor at a position where the first control, which is a user operation target, is displayed, and

make the second processing request corresponding to the second control without performing the biometric authentication when another user operation on the displayed second control is detected.

2. The information processing apparatus according to claim 1 ,

wherein a web browser in the information processing apparatus displays the first control and the second control based on the generation instruction information, and

wherein the first processing request is transmitted to the web application included in a system that is the request destination.

3. The information processing apparatus according to claim 1 ,

wherein in a case where the biometric information cannot be read by the biometric information sensor in a display area of the first control, another control is displayed without adding the information indicating that the biometric authentication is requested, and

wherein in a case where the user operation on the another control is detected, a screen to request the biometric authentication from the user is displayed.

4. The information processing apparatus according to claim 1 , wherein the biometric information is information related to the user's fingerprints.

5. The information processing apparatus according to claim 1 ,

wherein the first control is an activation button of an application installed on the information processing apparatus, and

wherein an initial screen of the application is displayed on the display as the information related to the processing corresponding to the first control based on the processing request and the data based on the result of the biometric authentication.

6. The information processing apparatus according to claim 5 , wherein whether to add the information indicating that the authentication is requested to the activation button is set for each application installed on the information processing apparatus.

7. The information processing apparatus according to claim 1 , wherein, in a case where an authentication request including challenge data is made from the request destination of the first processing request, a response including signature data generated using the challenge data and a secret key extracted from the storage area when the biometric authentication executed by the authentication module is successful is transmitted to the request destination, as the data based on the result of the biometric authentication by the authentication module.

8. The information processing apparatus according to claim 7 ,

wherein verification data generated by the information processing apparatus in response to the user operation on the first control is added to the first processing request, and

wherein in a case where the authentication request including the verification data is made from the request destination of the first processing request, the authentication module executes the biometric authentication.

9. The information processing apparatus according to claim 7 ,

wherein the secret key generated when the biometric information is stored is stored in the storage area,

wherein a public key corresponding to the secret key is registered in a system that is the request destination of the first processing request, and

wherein the signature data is verified by the system using the public key.

10. A method for an information processing apparatus including an authentication module that performs biometric authentication, a storage area having tamper resistance and storing biometric information, a display, and a biometric information sensor that reads the biometric information, wherein the biometric information sensor is arranged in the information processing apparatus and configured to read the biometric information in at least a part of an operation area on the display, the method comprising:

displaying in a screen on the display a first control to accept a user operation and start a first processing request, wherein the first control is displayed in a state where information indicating that authentication is requested is added to the first control, and the first control is arranged and displayed in a readable area of the biometric information sensor;

displaying in the same screen on the display a second control to accept a user operation and start a second processing request, wherein the second control is displayed without adding the information indicating that the biometric authentication is requested, and wherein generation instruction information for displaying the first control and the second control is provided from a web application communicating with the information processing apparatus;

making the first processing request corresponding to the first control when the user operation on the displayed first control is detected;

transmitting, to a request destination of the first processing request, data based on a result of the biometric authentication by the authentication module using the biometric information stored in the storage area and biometric information read via the biometric information sensor at a position where the first control, which is a target of the user operation, is displayed, and

making the second processing request corresponding to the second control without performing the biometric authentication when another user operation on the displayed second control is detected.

11. The method according to claim 10 ,

wherein a web browser in the information processing apparatus displays the first control and the second control based on the generation instruction information, and

wherein the first processing request is transmitted to the web application included in a system that is the request destination.

12. The method according to claim 10 ,

wherein in a case where the biometric information cannot be read by the biometric information sensor in a display area of the first control, another control is displayed without adding the information indicating that the biometric authentication is requested, and

wherein in a case where the user operation on the another control is detected, a screen to request the biometric authentication from the user is displayed.

13. The method according to claim 10 ,

wherein the first control is an activation button of an application installed on the information processing apparatus, and

wherein an initial screen of the application is displayed on the display as the information related to the processing corresponding to the first control based on the processing request and the data based on the result of the biometric authentication.

14. The method according to claim 10 , wherein the biometric information is information related to the user's fingerprints.

15. The method according to claim 10 , wherein, in a case where an authentication request including challenge data is made from the request destination of the first processing request, a response including signature data generated using the challenge data and a secret key extracted from the storage area when the biometric authentication executed by the authentication module is successful is transmitted to the request destination, as the data based on the result of the biometric authentication by the authentication module.

16. The method according to claim 15 ,

wherein verification data generated by the information processing apparatus in response to the user operation on the first control is added to the first processing request, and

wherein in a case where the authentication request including the verification data is made from the request destination of the first processing request, the authentication module executes the biometric authentication.

17. The method according to claim 15 ,

wherein the secret key generated when the biometric information is stored is stored in the storage area,

wherein a public key corresponding to the secret key is registered in a system that is the request destination of the first processing request, and

wherein the signature data is verified by the system using the public key.

18. A non-transitory computer readable storage medium storing a computer program for causing a computer to execute a method for an information processing apparatus including an authentication module that executes biometric authentication, a storage area having tamper resistance and storing biometric information, a display, and a biometric information sensor that reads biometric information, wherein the biometric information sensor is arranged in the information processing apparatus and configured to read the biometric information in at least a part of an operation area on the display, the method comprising:

displaying in a screen on the display a first control to accept a user operation and start a first processing request, wherein the first control is displayed in a state where information indicating that authentication is requested is added to the first control, and the first control is arranged and displayed in a readable area of the biometric information sensor;

displaying in the same screen on the display a second control to accept a user operation and start a second processing request, wherein the second control is displayed without adding the information indicating that the biometric authentication is requested, and wherein generation instruction information for displaying the first control and the second control is provided from a web application communicating with the information processing apparatus;

making the first processing request corresponding to the first control when the user operation on the displayed first control is detected;

transmitting, to a request destination of the first processing request, data based on a result of the biometric authentication by the authentication module using the biometric information stored in the storage area and biometric information read via the biometric information sensor at a position where the first control, which is a target of the user operation, is displayed, and

making the second processing request corresponding to the second control without performing the biometric authentication when another user operation on the displayed second control is detected.

19. A system comprising:

an information processing apparatus including an authentication module that executes biometric authentication, a storage area having tamper resistance, a display, a biometric information sensor that reads biometric information, a memory storing instructions, and a processor that executes the instructions; and

a server communicating with the information processing apparatus,

wherein the biometric information sensor is arranged in the information processing apparatus and configured to read the biometric information in at least a part of an operation area on the display,

wherein the instructions cause the information processing apparatus to:

display, in a screen on the display a first control to accept a user operation and start a first processing request, wherein the first control is displayed in a state where information indicating that authentication is requested is added to the first control, and the first control is arranged and displayed in a readable area of the biometric information sensor;

display in the same screen on the display a second control to accept a user operation and start a second processing request, wherein the second control is displayed without adding the information indicating that the biometric authentication is requested, and wherein generation instruction information for displaying the first control and the second control is provided from the server communicating with the information processing apparatus;

make the first processing request corresponding to the first control to the server when the user operation on the displayed first control is detected;

transmit, to the server, data based on a result of the biometric authentication by the authentication module using the biometric information stored in the storage area and biometric information read via the biometric information sensor at a position where the first control, which is a target of the user operation, is displayed, and

make the second processing request corresponding to the second control without performing the biometric authentication when another user operation on the displayed second control is detected.