Authentication system
An authentication system includes service providing systems, a global ID platform, and a terminal device owned by a user. The first service providing system includes a first authentication server and a first back-end server. The first back-end server provides a first service. The second service providing system includes a second authentication server and a second back-end server. The second back-end server provides a third service. The user is a member of the first service and has a user ID of the first service. When the user requests global login to the third service, the global ID platform relays the request from the second authentication server to the first authentication server and relays an authentication result, returned by the first authentication server for the request, from the first authentication server to the second authentication server.
1 . An authentication system comprising:
a terminal device configured to be operated by a user;
a first server configured to store identification information for identifying the user;
a second server configured to not store the identification information; and
a platform configured to relay information between the first server and the second server, the platform is separate from each of the terminal device, the first server, and the second server, the first server and the second server being configured not to communicate directly with each other, wherein
the platform is configured to, when there is an authentication request of the user from the terminal device to the second server,
relay the authentication request from the second server to the first server, and
relay an authentication result, returned by the first server for the authentication request, from the first server to the second server,
wherein the authentication request regards a login request of the user that is predetermined by the first server to be successfully authenticated before the platform relays the authentication request from the second server to the first server, and
wherein the authentication request further regards a consent of the user to transfer information of the user between the first server and the second server.
2 . The authentication system according to claim 1 , wherein:
the terminal device includes a display unit;
the terminal device is configured to display a page for authentication on the display unit;
the page contains a first button and a second button;
authentication of the user is performed without using the platform based on the first button being pressed; and
the authentication request is relayed by the platform based on the second button being pressed.
3 . The authentication system according to claim 1 , wherein
the platform is configured to, when the authentication result indicates that authentication is successful,
transmit, to the terminal device, a consent request for consent to share the identification information to the second server, and
when the consent to the consent request is obtained from the terminal device, relay the identification information from the first server to the second server.
4 . The authentication system according to claim 3 , wherein the second server is configured to, when the consent to the consent request is obtained from the terminal device, transmit an authorization code to the terminal device.
5 . The authentication system according to claim 4 , wherein
the terminal device is configured to transmit the authorization code to the second server and acquire at least one of an access token and an ID token from the second server.
6 . An authentication system comprising:
a terminal device configured to be operated by a user;
a first server configured to store identification information for identifying the user;
a second server configured to not store the identification information; and
a platform configured to relay information between the first server and the second server, the platform is separate from each of the terminal device, the first server, and the second server, the first server and the second server being configured not to communicate directly with each other, wherein
the platform is configured to, when there is an authentication request of the user from the terminal device to the second server,
relay the authentication request from the second server to the first server, and
relay an authentication result, returned by the first server for the authentication request, from the first server to the second server, and
wherein the authentication request regards a login request of the user that is predetermined by the first server to be successfully authenticated before the platform relays the authentication request from the second server to the first server,
wherein the first server is configured to provide a first service in a first country, and
wherein the second server is configured to provide a second service in a second country,
wherein the first country is different than the second country, and
wherein the first service is different than the second service,
wherein the authentication request further regards a consent of the user to transfer information of the user between the first server of the first country and the second server of the second country.