JP2003099266A - Decentralized computing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enhance the security of a decentralized computing system which enables a user to retrieve and refer to or use a service program in the system. SOLUTION: An information managing means 51 holds information specifying roles of respective users and information specifying roles having reference authority by service programs and generates a list of service programs that a user requesting retrieval can refer to according to those pieces of information. A retrieving means 53 returns only service programs which are included in the list among service programs meeting retrieval conditions as a retrieval result to the user.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a distributed computing system, and more specifically to a distributed computing system that allows a user to search for, refer to, or use a service program in the system.

[0002]

2. Description of the Related Art In distributed computing systems,
A plurality of service programs each having an independent function (hereinafter, simply referred to as a service) operate and cooperate with each other by using the functions of other services. In addition, services can be dynamically added and deleted, and a flexible system can be constructed. In such a distributed computing system, when a user uses a certain service, the user does not directly access the service desired by the user from the beginning, but a search service existing in the system is first used to perform a search. It is common to find and use such services. Therefore, the search service is one of the most important services in the distributed computing system.

[0003]

A search service in a distributed computing system is generally capable of searching all services in the system. This gives the user the freedom to see all services in the system, but at the same time allows all users to see even unnecessary services or services that should not be referred to by other than a specific user. It means to end up. For example, considering a case where a business system for a company is constructed as a distributed computing system, general users can refer to management services for system management and user management. It is possible to add a user authentication function to these management services themselves so that general users cannot use them. However, even if the management service cannot be used unless it is authenticated by the user, causing the general user to refer to the management service leads to a reduction in system security.

The present invention has been made in view of the above problems, and it is an object of the present invention to improve the security of a distributed computing system that allows a user to search for, reference, or use a service program in the system. It is an issue.

[0005]

[Means for Solving the Problems] In order to solve the above problems,
The invention according to claim 1 selects an information management unit that stores and manages user information and a service program that matches a user search condition from a plurality of service programs in the system, and selects the selected service program. In a distributed computing system including a search means for returning to a user as a search result so that the user can refer to or use the information management means, information for specifying a role of each user and a role having a reference authority are provided. Information that is specified for each service program is held, and a list of service programs that can be referred to by a user who has requested a search is created based on these information, and the search means is a service program that matches the search condition. The feature is that only the items included in the list are returned as the search result.

According to a second aspect of the present invention, in the first aspect of the present invention, the user authentication means for authenticating the user who requested the search and giving the authenticated user an authentication ticket including the role of the user. Further, the information management means is characterized in that the list is created based on the roles included in the authentication ticket presented by the user.

According to a third aspect of the present invention, in the second aspect of the present invention, the search means, if the user requesting the search does not present an authentication ticket, a service program matching the search condition, The feature is that only the roles that all roles have reference authority are returned as search results.

According to a fourth aspect of the invention, in the invention according to the second or third aspect, validity guarantee data for guaranteeing the validity of the information provided to the user from the distributed computing system is added to the information. And a validity guarantee data verification unit for validating the validity guarantee data included in the information input to the system by the user, and the authentication ticket given to the user by the user authentication unit. Is added with the validity data guarantee data by the validity guarantee data adding means, and the validity guarantee data included in the authentication ticket presented by the user is verified by the validity guarantee data verifying means.

[0009]

FIG. 1 shows the system configuration of a distributed computing system according to an embodiment of the present invention. This system connects an information terminal to a server computer via a network and receives a service of a service program. The server computer operates system services such as information management service, user authentication service, service search service, and AP services such as news distribution service, customer information service, and management information service. These services generally operate in a distributed manner on a plurality of server computers.

In FIG. 1, 1 and 2 are information terminals, 3 is a network, and 4 is a service operation room in which a server computer 5 and a server computer 6 are installed. The server computer 5 includes an information management service 51, a user authentication service 52, a service search service 53, a customer information service 54, a management information service 55, a user information storage means 56, a role information storage means 57, and a service reference authority information storage means 58. Including, the server computer 6 includes a news distribution service 61.

The information management service 51 includes a user management section 5
1a, role management unit 51b, service reference authority management unit 51
Including c. The user management unit 51a registers user information,
It is for management such as update and deletion. The user management unit 51a uniquely identifies the user by the user ID, and provides the authentication data such as a password, the role indicating the business role of the user, and other data (E-mall address, telephone number, etc.) to the user. The information is stored in the information storage means 56. FIG. 2 shows an example of user information managed by the user management unit 51a. As shown in the figure, the user generally has a plurality of roles. The role management unit 51b is for performing management such as registration, update, deletion, and role hierarchization of role information. Roles have a hierarchical structure, and upper roles (eg, sales manager) necessarily have lower roles (eg, sales employee). The role management unit 51b uniquely identifies the role by the role ID, and
The subordinate role and other data (such as a description of the role) is held in the role information storage means 57.

FIG. 3 shows an example of role information managed by the role management unit 51b. Service reference authority management unit 51c
Is for performing management such as setting, updating, and deleting of service reference authority information for each service. The service reference authority management unit 51c uniquely identifies the service by the service ID, and holds the role having the reference authority and other data (service description, etc.) in the service reference authority information storage unit 58. FIG. 4 shows an example of the service reference authority information managed by the service reference authority management unit 51c. As shown in the figure, each service is generally permitted to refer to a plurality of roles.

The user authentication service 52 includes a user authentication section 52a, an authentication ticket creation section 52b, and an electronic signature section 52c.
including. The user authentication unit 52a is for performing user authentication using the user ID and authentication data presented by the information terminal. The user must be authenticated in order to use the service. The authentication ticket creation unit 52b is for creating an authentication ticket issued to a user who has succeeded in user authentication. The electronic signature unit 52c is for performing an electronic signature on the data, and applies an electronic signature to the content of the authentication ticket to prevent tampering with the authentication ticket.

The service search service 53 includes a service search unit 53a and an electronic signature verification unit 53b. The service search unit 53a is for creating and responding to a search request from the user by creating a list of services that can operate on the server computer at that time and that match the search condition. When the user does not present the authentication ticket, the service search unit 53a creates and responds to a list of services that are permitted to be referred to by all roles among the services that match the search conditions. On the other hand, when the user presents the authentication ticket, a list of services that the user has reference authority among the services that match the search condition is created and responded. The electronic signature verification unit 53b is for verifying the electronic signature of the authentication ticket, and for verifying whether it is a valid authentication ticket signed by the electronic signature unit 52c of the present system.

The procedure of the authentication processing in this system will be described below with reference to the authentication processing sequence shown in FIG. User operates information terminal 1 and client AP1
When 0 is activated, user authentication is required (). A user
If you enter the ID and authentication information into the information terminal 1, the client
AP 10 is a user authentication service 5 for the server computer 5.
Send the user ID and authentication data to 2 and request authentication.
When the user authentication unit 52a of the user authentication service 52 receives the request, the information management service 51 uses the user ID as a key.
Get user information from (). Client AP10
User authentication is performed by verifying the match between the authentication data received from the authentication data and the authentication data stored in the user information storage means 56 (). Client AP if user authentication fails
Returns an error to 10 (). When the user authentication is successful, the authentication ticket creating unit 52b creates an authentication ticket including the role information of the user (). After that, in order to prevent the authentication ticket from being tampered with, the electronic signature unit 52c electronically signs the content of the authentication ticket () and transmits the authentication ticket with the electronic signature to the client AP 10 ().

An example of the authentication ticket transmitted to the client AP 10 is shown in FIG. As shown in the figure, the authentication ticket includes a list of roles of the user and electronic signatures for them. For example, for the user sasaki in FIG.
The authentication ticket includes "salesperson" and "information management service administrator" as roles. Since the specific method of digital signature is not directly related to the present invention, its explanation is omitted.

Once the authentication ticket is obtained, the user can search. The procedure of the service search process will be described below with reference to the search process sequence shown in FIG. The client AP 10 presents the search condition and the authentication ticket acquired as a result of the user authentication to the service search service 53 to request a service search ().
The service search unit 53a of the service search service 53
Upon receiving the request, first, the electronic signature verification unit 53b verifies the electronic signature of the authentication ticket (). If the electronic signature verification is successful, the service search unit 53a reads out the role from the authentication ticket (), presents it to the information management service 51, and acquires from the information management service 51 a list of services for which the user has reference authority. ().

For example, in the case of the user sasaki of FIG. 2, when the roles of “salesperson” and “information management service manager” are presented, the information management service 51 refers to the service reference authority information as shown in FIG. Then, "sales service", "customer information service", and "information management service" are returned as services that the user sasaki has reference authority. Thus, if the user has multiple roles, the sum of services allowed for each role is returned. Service search unit 53a
After that, the service is searched according to the search condition (), only the services for which the user has the reference authority are selected from the services obtained as a result (), and the list is transmitted to the client AP 10. For example, when the user sasaki in FIG. 2 searches for a service under the search condition “all services”, the service search service 53
Is the search result "news distribution service", "customer information service", "management information service", "information management service", "user authentication service", "service search service"
From, select and send "news distribution service", "customer information service", and "information management service" that sasaki has reference authority. In this way, the service search according to the role of the user can be performed.

[0019]

According to the present invention, it is possible to improve the security of a distributed computing system in which a user can search for and use a service program in the system.

[Brief description of drawings]

FIG. 1 is a system configuration diagram of a distributed computing system according to an embodiment of the present invention.

2 is a diagram showing an example of user information in the distributed computing system of FIG.

3 is a diagram showing an example of role information in the distributed computing system of FIG.

4 is a diagram showing an example of service reference authority information in the distributed computing system of FIG.

5 is a diagram showing an authentication processing sequence in the distributed computing system of FIG.

6 is a diagram showing an example of an authentication ticket in the distributed computing system of FIG.

7 is a diagram showing a service search processing sequence in the distributed computing system of FIG.

[Explanation of symbols]

1, 2 information terminals, 3 networks, 4 service operation rooms, 5 and 6 server computers, 10
Client AP, 51 Information management service, 51
a user management unit, 51b role management unit, 51c
Service reference authority management unit, 52 user authentication service, 52a user authentication unit, 52b authentication ticket creation unit, 52c electronic signature unit, 53 service search service, 53a service search unit, 53b electronic signature verification unit, 54 customer information service, 55 management Information service, 56 user information storage means, 57 role information storage means, 58 service reference authority information storage means, 61 news distribution service.

Claims (4)

[Claims] 1. An information management means for storing and managing user information, and a service program that matches a user's search condition are selected from a plurality of service programs in the system, and the user refers to the selected service program or In a distributed computing system comprising a search means for returning to a user as a search result so that it can be used, the information management means provides information specifying a role of each user and a role having reference authority for each service program. Holding a piece of information specified by the above, and creating a list of service programs that can be referred to by a user who requested a search based on these pieces of information, and the search means is included in the list among the service programs that match the search condition. Distributed computing system characterized by returning only those that exist as search results . 2. A user authentication means for authenticating a user who requested a search and for giving an authentication ticket including a role of the user to the authenticated user, wherein the information management means is an authentication ticket presented by the user. 2. The list is created based on the roles included in.
The distributed computing system described in. 3. The search means, when the user who requested the search does not present the authentication ticket, returns only the service programs matching all the search conditions as a search result, all of which have the reference authority. The distributed computing system according to claim 2. 4. A validity guarantee data adding unit for adding validity guarantee data for guaranteeing the validity of information provided to the user from the distributed computing system, and information input from the user to the system. And a validity guarantee data verifying unit for validating the validity guarantee data included in the validity check data, wherein the validity guarantee data adding unit adds the validity data guarantee data to the authentication ticket given to the user by the user authenticating unit. The distributed computing system according to claim 2 or 3, wherein the validity guarantee data included in the authentication ticket presented by the user is verified by the validity guarantee data verification means.