JP2022054500A - Information processing program, information processing method, information processing device, and information processing system - Google Patents

Abstract

To enhance the protection of authentication information used for access to an external system.SOLUTION: A first information processing device detects, when access from a virtual computer belonging to a first system to a second system different from the first system is performed, first authentication information that is set in the virtual computer and transmits both a first message indicating a request to the second system and first authentication information to a second information processing device. The second information processing device obtains second authentication information that is associated with the first authentication information and that indicates an access authority to the second system which is owned by a first user among a plurality of users who can use the virtual computer; transmits the first message and the second authentication information to the second system; and transfers to the first information processing device a second message indicating a response of the second system.SELECTED DRAWING: Figure 7

Description

The present invention relates to an information processing program, an information processing method, an information processing device and an information processing system.

The information processing system may arrange one or more virtual computers on a physical computer by using computer virtualization technology. The virtual computer may be a virtual machine in a narrow sense in which a guest OS (Operating System) is executed, or it may be a lightweight virtual computer in which a guest OS is not executed, such as a so-called container.

The virtual computer may use an external system different from the information processing system to which the virtual computer belongs. The external system may be a cloud system that accepts access via the Internet and provides information processing services. For example, a virtual computer may use an external storage system that stores a large amount of data or an external database system that searches the stored data at high speed.

The external system may receive authentication information at the time of access to perform user authentication for the purpose of preventing unauthorized access and managing billing. The authentication information includes, for example, an identifier (ID: Identifier) assigned to the user and confidential information. Therefore, when the virtual computer accesses the external system, the authentication information is transmitted to the external system.

An authentication linkage system having an authentication function equivalent to that of single sign-on has been proposed. In the proposed authentication linkage system, the client terminal sends the token and MAC (Media Access Control) address to the authentication server, and the authentication server performs user authentication and provides the token and MAC address to the linkage server. The functions of the authentication server and the linkage server are implemented on the Web container. Further, a load balancing system has been proposed in which a service request is transferred to one of two or more service providing devices when the token included in the service request from the user terminal matches the token stored in the load balancing device. ..

Japanese Unexamined Patent Publication No. 2007-206851 Japanese Unexamined Patent Publication No. 2011-128731

The information processing system may allow multiple users to share a virtual computer. Therefore, a user other than the user who started the virtual computer may use the virtual computer. On the other hand, the virtual computer may use an external system. Therefore, the problem is how to manage the authentication information used for accessing the external system from the virtual computer.

One method is to require the user who is currently using the virtual computer to input the authentication information every time the virtual computer accesses the external system. However, this method imposes a heavy burden on the user and reduces operability.

Another method is to store the authentication information of the representative such as the user who started the virtual computer in the virtual computer, and access the external system with the stored authentication information even when other users are using the virtual computer. There is a way to do it. However, in this method, since other users can obtain the authentication information of the representative, there is a risk that the authentication information of the representative can be abused and the other user can perform an operation other than the authority to the external system. be.

In one aspect, it is an object of the present invention to provide an information processing program, information processing method, information processing apparatus and information processing system capable of enhancing the protection of authentication information used for accessing an external system.

In one aspect, an information processing program is provided that causes a computer to perform the following processes. Information set in the virtual computer when accessing a second system different from the first system to which the virtual computer belongs from a virtual computer running on the computer, among a plurality of users who can use the virtual computer. The first authentication information associated with the second authentication information indicating the access authority of the second system possessed by the first user of the above is detected. A first message indicating a request for the second system and the first authentication information are sent to another computer having access to the second authentication information, and the other computer responds to the request indicated by the first message. Receive a second message indicating the response of the second system.

Further, in one aspect, an information processing method executed by a system having a first information processing device and a second information processing device is provided. Further, in one embodiment, an information processing device having a processing unit and a communication unit is provided. Further, in one aspect, an information processing system including a first information processing device and a second information processing device is provided.

On one side, the protection of credentials used to access external systems is enhanced.

It is a figure for demonstrating the information processing system of 1st Embodiment. It is a figure which shows the example of the information processing system of the 2nd Embodiment. It is a block diagram which shows the hardware example of a server apparatus. It is a block diagram which shows the software example of a data analysis system. It is a sequence diagram which shows the 1st communication example of an external access. It is a sequence diagram which shows the 2nd communication example of the external access. It is a sequence diagram which shows the 3rd communication example of the external access. It is a figure which shows the example of the temporary key of a container, and the table of a management server. It is a flowchart which shows the procedure example of a container process. It is a flowchart which shows the procedure example of a relay server processing. It is a flowchart which shows the procedure example of management server processing. It is a flowchart (continued) which shows the procedure example of the management server processing.

Hereinafter, the present embodiment will be described with reference to the drawings.
[First Embodiment]
The first embodiment will be described.

FIG. 1 is a diagram for explaining the information processing system of the first embodiment.
The information processing system 1 of the first embodiment uses computer virtualization technology to arrange one or more virtual computers on a physical computer. The virtual computer may access an external system 3 different from the information processing system 1.

The information processing system 1 may be an on-premises system owned by a specific company or a cloud system arranged in a data center. The information processing system 1 is, for example, a data analysis system that analyzes accumulated data using artificial intelligence technology. The external system 3 accepts access via the network and provides an information processing service. The external system 3 may be a cloud system located in a data center. The external system 3 is, for example, a storage system that stores a large amount of data, or a database system that searches the stored data at high speed.

The information processing system 1 has information processing devices 10 and 20. The information processing devices 10 and 20 are, for example, server computers. The information processing devices 10 and 20 may have a storage unit, a processing unit, and a communication unit, respectively. The storage unit may be a volatile semiconductor memory such as a RAM (Random Access Memory) or a non-volatile storage such as an HDD (Hard Disk Drive) or a flash memory. The processing unit may be a processor such as a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), or a DSP (Digital Signal Processor). Further, the processing unit may include a specific electronic circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

The processor executes the program stored in the memory. A collection of multiple processors may be referred to as a "multiprocessor" or simply a "processor." The communication unit may be a wired communication interface connected to a wired communication device such as a switch or a router, or may be a wireless communication interface connected to a wireless communication device such as an access point or a base station.

In the information processing apparatus 10, the virtual computer 11 operates. The virtual computer 11 may be a virtual machine in a narrow sense in which the guest OS is executed, or may be a container in which the guest OS is not executed. When the virtual computer 11 is a virtual machine in a narrow sense, the information processing apparatus 10 may execute a management OS or a hypervisor for controlling the virtual machine. When the virtual computer 11 is a container, the information processing apparatus 10 may execute a container engine for controlling the container. A plurality of users including the representative can use the virtual computer 11. The representative is, for example, the user who started the virtual computer 11 or the owner who defined the virtual computer 11.

When the virtual computer 11 accesses the external system 3, the information processing apparatus 10 detects the authentication information 12 set in the virtual computer 11. The authentication information 12 is information associated with the authentication information 22 indicating the access authority of the external system 3 possessed by the representative. The authentication information 12 may be set when the virtual computer 11 is started. The authentication information 12 may be the value of an environment variable of the virtual computer 11. The authentication information 12 is stored, for example, in the storage area of the virtual computer 11 in the storage area of the memory of the information processing apparatus 10.

The authentication information 12 may include the user ID and password of the representative. Further, the authentication information 12 may include an identifier of the virtual computer 11. Further, the authentication information 12 may include an identifier of a project owned by the representative. Further, the authentication information 12 may be encrypted so as not to be forged by the virtual computer 11. For example, the information processing device 20 or another information processing device that communicates with the information processing device 20 issues the authentication information 12.

When the authentication information 12 is detected, the information processing apparatus 10 transmits the message 13 and the authentication information 12 to the information processing apparatus 20. Message 13 indicates a request to the external system 3. For example, message 13 is a query indicating a search request to the database system. The message 13 may be generated by the virtual computer 11. The message 13 is transmitted to the information processing apparatus 20 instead of the external system 3.

Then, the information processing apparatus 10 receives the message 23 from the information processing apparatus 20. The message 23 indicates the response of the external system 3 to the request indicated by the message 13. The message 23 may include the data processing result of the external system 3. For example, message 23 contains the data retrieved by the query. The message 23 is passed to the virtual computer 11. The processing of the information processing apparatus 10 may be defined by a communication library executed by the virtual computer 11. Further, the process of the information processing apparatus 10 may be executed even when a user other than the representative is using the virtual computer 11. Therefore, the access authority indicated by the authentication information 12 is delegated to a user other than the representative.

The information processing device 20 relays communication between the information processing device 10 and the external system 3. The information processing device 20 may be called a relay server or a proxy server. The information processing device 20 receives the message 13 and the authentication information 12 from the information processing device 10.

Then, the information processing apparatus 20 acquires the authentication information 22 associated with the authentication information 12. For example, the information processing apparatus 20 decodes the authentication information 12 and acquires the authentication information 22 by using the identifier included in the authentication information 12. The information processing device 20 may store the authentication information 22. Further, the information processing apparatus 20 may inquire of another information processing apparatus included in the information processing system 1 and receive authentication information 22 from the other information processing apparatus. Further, the information processing apparatus 20 may request the external system 3 to issue the authentication information 22 as the temporary authentication information. The authentication information 22 may include a key ID and confidential information.

The information processing apparatus 20 transmits the message 13 and the authentication information 22 to the external system 3, and receives the message 23 corresponding to the message 13 from the external system 3. Then, the information processing device 20 transfers the message 23 to the information processing device 10. In the above series of communications, the authentication information 22 is not provided to the information processing apparatus 10. The information processing apparatus 20 may invalidate the authentication information 12 when the virtual computer 11 is stopped, or may refuse the acquisition of the authentication information 22 as an error when the authentication information 12 is received after the stop. ..

As described above, in the information processing system 1 of the first embodiment, when the virtual computer 11 accesses the external system 3, the authentication information 12 set in the virtual computer 11 is transmitted from the information processing device 10 to the information processing device 20. Will be sent. The authentication information 22 associated with the authentication information 12 is acquired by the information processing device 20, and the authentication information 22 is transmitted from the information processing device 20 to the external system 3. Then, the message 23 indicating the response from the external system 3 is transmitted to the information processing device 10 via the information processing device 20.

As a result, a plurality of users including the representative can use the virtual computer 11. At this time, a user other than the representative can cause the virtual computer 11 to access the external system 3 based on the access authority of the representative without inputting the authentication information of the user. Therefore, the burden on the user is reduced and the operability is improved.

Further, the virtual computer 11 does not hold the authentication information 22 itself indicating the access authority of the external system 3, but holds the authentication information 12 associated with the authentication information 22. Therefore, the authentication information 22 is kept secret from users other than the representative. Therefore, the risk that the user misuses the authentication information 22 to perform an operation deviating from the purpose of the virtual computer 11 on the external system 3 is reduced. As a result, the security of the information processing system 1 is improved.

[Second Embodiment]
Next, a second embodiment will be described.
FIG. 2 is a diagram showing an example of an information processing system according to a second embodiment.

The information processing system of the second embodiment has a plurality of terminal devices including a data analysis system 31, a cloud system 32, and terminal devices 33, 33a. The data analysis system 31, the cloud system 32 and the plurality of terminal devices are connected to the network 30. The network 30 may include a wide area network such as the Internet.

The data analysis system 31 analyzes data using artificial intelligence technology. For example, the data analysis system 31 generates training data from the accumulated data and generates a model from the training data by machine learning. The data analysis system 31 may be an on-premises system owned by a company or a cloud system located in a data center. The data analysis system 31 has a plurality of server devices including the server devices 100 and 100a. The data analysis system 31 corresponds to the information processing system 1 of the first embodiment. The server devices 100 and 100a correspond to the information processing devices 10 and 20 of the first embodiment.

The data analysis system 31 arranges a container using computer virtualization technology. The container is a lightweight virtual computer on which the guest OS is not executed. The data analysis system 31 starts the container and stops the container in response to a request from the user. The container may use the service of the cloud system 32.

The cloud system 32 is an information processing system external to the data analysis system 31. The cloud system 32 is located in a data center and provides an information processing service according to access via the network 30. For example, the cloud system 32 provides a storage service for accumulating a large amount of data. Further, for example, the cloud system 32 provides a database service for searching and updating accumulated data. The cloud system 32 has a plurality of server devices including the server devices 100b and 100c. The cloud system 32 corresponds to the external system 3 of the first embodiment.

The cloud system 32 issues authentication information in order to identify the contracted legitimate user. The cloud system 32 receives the authentication information together with the request message, and performs user authentication based on the received authentication information. The cloud system 32 accepts the request message if the user authentication is successful, and rejects the request message if the user authentication fails.

The terminal devices 33 and 33a are client devices used by the user. The terminal devices 33, 33a may be used to access the data analysis system 31. For example, the terminal devices 33 and 33a instruct the data analysis system 31 to start the container, connect to the started container, and instruct the data analysis system 31 to stop the container. Further, the terminal devices 33 and 33a can be used to access the cloud system 32. For example, the terminal devices 33 and 33a request the cloud system 32 to issue authentication information. The issued authentication information may be registered in the data analysis system 31 from the terminal devices 33, 33a.

FIG. 3 is a block diagram showing a hardware example of the server device.
The server device 100 includes a CPU 101, a RAM 102, an HDD 103, an image interface 104, an input interface 105, a medium reader 106, and a communication interface 107. These units included in the server device 100 are connected to the bus. Other server devices and terminal devices such as the terminal devices 33 and 33a also have the same hardware as the server device 100.

The CPU 101 is a processor that executes a program instruction. The CPU 101 loads at least a part of the programs and data stored in the HDD 103 into the RAM 102 and executes the program. The server device 100 may have a plurality of processors. A collection of multiple processors may be referred to as a "multiprocessor" or simply a "processor."

The RAM 102 is a volatile semiconductor memory that temporarily stores a program executed by the CPU 101 and data used by the CPU 101 for calculation. The server device 100 may include a type of memory other than RAM, or may include a plurality of memories.

The HDD 103 is a non-volatile storage that stores software programs such as an OS, middleware, and application software, and data. The server device 100 may include other types of storage such as a flash memory and an SSD (Solid State Drive), or may include a plurality of storages.

The image interface 104 outputs an image to the display device 111 connected to the server device 100 in accordance with a command from the CPU 101. As the display device 111, any kind of display device such as a CRT (Cathode Ray Tube) display, a liquid crystal display (LCD: Liquid Crystal Display), an organic EL (OEL: Organic Electro-Luminescence) display, and a projector can be used. .. An output device other than the display device 111 such as a printer may be connected to the server device 100.

The input interface 105 receives an input signal from the input device 112 connected to the server device 100. As the input device 112, any kind of input device such as a mouse, a touch panel, a touch pad, and a keyboard can be used. A plurality of input devices may be connected to the server device 100.

The medium reader 106 is a reading device that reads programs and data recorded on the recording medium 113. As the recording medium 113, any kind of recording medium such as a magnetic disk such as a flexible disk (FD) or HDD, an optical disk such as a CD (Compact Disc) or a DVD (Digital Versatile Disc), or a semiconductor memory is used. Can be done. The medium reader 106, for example, copies a program or data read from the recording medium 113 to another recording medium such as the RAM 102 or the HDD 103. The read program is executed by, for example, the CPU 101. The recording medium 113 may be a portable recording medium and may be used for distribution of programs and data. Further, the recording medium 113 and the HDD 103 may be referred to as a computer-readable recording medium.

The communication interface 107 is connected to the network 30 and communicates with other server devices and terminal devices such as the terminal devices 33 and 33a via the network 30. The communication interface 107 is a wired communication interface connected to a wired communication device such as a switch or a router. However, the communication interface 107 may be a wireless communication interface connected to a wireless communication device such as a base station or an access point.

FIG. 4 is a block diagram showing a software example of a data analysis system.
The data analysis system 31 has a plurality of containers including the containers 121 and 121a, a relay server 131, and a management server 132. The containers 121 and 121a are lightweight virtual computers. The containers 121 and 121a are arranged in any server device. For example, the containers 121 and 121a are arranged in the server device 100. The relay server 131 and the management server 132 are server applications. The relay server 131 and the management server 132 are respectively arranged in any of the server devices. For example, the relay server 131 and the management server 132 are arranged in the server device 100a.

The server device in which the containers 121 and 121a are arranged executes the container engine 124 and the host OS 125. The container engine 124 runs on the host OS 125. The containers 121 and 121a are executed on the container engine 124. The host OS 125 manages the hardware resources such as the CPU, RAM, HDD, and communication interface of the server device. The container engine 124 controls the containers 121 and 121a. The container engine 124 allocates a part of the hardware resources managed by the host OS 125 to the containers 121 and 121a. In particular, the container engine 124 allocates a part of the user space of the memory to the containers 121 and 121a. Seen from the host OS 125, the containers 121 and 121a are executed as one process, respectively.

In the container 121, the application program 122 and the communication library 123 are executed. In the container 121a, the application program 122a and the communication library 123a are executed. The application programs 122 and 122a are user programs that implement the data flow specified by the user. The application programs 122 and 122a may use the service of the cloud system 32. In that case, the application program 122 calls the communication library 123. Further, the application program 122a calls the communication library 123a.

The communication libraries 123 and 123a are library programs that control access to the cloud system 32. The communication library 123 communicates with the relay server 131 in response to a request from the application program 122. Further, the communication library 123a communicates with the relay server 131 in response to a request from the application program 122a.

The server device in which the relay server 131 is arranged executes the host OS 133. The relay server 131 is executed on the host OS 133. The host OS 133 manages the hardware resources of the server device. However, similarly to the application programs 122 and 122a, the relay server 131 can be arranged in the container. The relay server 131 relays communication between the containers 121 and 121a and the cloud system 32. The relay server 131 may be referred to as a proxy server.

The server device in which the management server 132 is arranged executes the host OS 134. The management server 132 is executed on the host OS 134. The host OS 134 manages the hardware resources of the server device. However, it is also possible to arrange the management server 132 in the container as in the application programs 122 and 122a. The management server 132 manages the start and stop of the containers 121 and 121a. Further, the management server 132 manages the authentication information for the containers 121 and 121a to access the cloud system 32 in cooperation with the relay server 131.

In the second embodiment, when starting the container 121, the user can select one of the three container types. The first type is a non-shared type in which only the user who started the container can connect to the container. The second type is a shared / individual authentication type in which users other than the user who started the container can connect to the container and access the cloud system 32 with the access authority of the connected user. The third type is a sharing / delegation type in which users other than the user who started the container can connect to the container and access the cloud system 32 with the access authority of the representative regarding the container. The representative is the owner who defined the container or the invoker who started the container. In the following, examples of access to the cloud system 32 will be described for the three container types.

FIG. 5 is a sequence diagram showing a first communication example of external access.
Here, a case where the container 121 is a non-shared type will be described. User A transmits a container start request to the management server 132 using the terminal device 33 (S10). The container start request includes the user information of the user A. The user information includes a user ID and a password. The user information included in the container start request is the authentication information used in the data analysis system 31, and is different from the authentication information used in the cloud system 32. In addition, the container start request specifies a non-shared type as the container type.

The management server 132 authenticates the user A by using the user information included in the container start request. When the authentication of the user A is successful, the management server 132 assigns a container ID to the container 121 to be started, transfers the program of the container 121 to any server device, and starts the container 121. Further, the management server 132 generates a temporary key of the user A from the user information included in the container start request and transmits it to the container 121 (S11). The container 121 holds the temporary key of the user A until it is stopped. The temporary key issued by the management server 132 may be stored in the storage area of the RAM used by the container 121. Further, the temporary key may be assigned to the environment variable of the container 121.

The temporary key is, for example, encrypted data obtained by encrypting data including a user ID, a password, and a container ID. Temporary keys may be called tokens. For encryption, an encryption key such as a common key held by the management server 132 is used. Since the container 121 does not know this encryption key, the temporary key cannot be decrypted and the temporary key cannot be forged. The temporary key of the user A is different from the authentication information of the user A used in the cloud system 32. Therefore, the container 121 cannot directly access the cloud system 32 by using the temporary key.

User A connects to the activated container 121 (S12). The container 121 executes the application program 122. The application program 122 defines access to the cloud system 32. The container 121 then generates a query indicating a database search or update request. Further, the container 121 extracts the temporary key of the user A set in the container 121. The container 121 transmits the query and the temporary key of the user A to the relay server 131 (S13).

The relay server 131 transmits the temporary key received from the container 121 to the management server 132 (S14). The management server 132 verifies the validity of the temporary key received from the relay server 131. For example, the management server 132 decrypts the temporary key using an encryption key such as a common key held by the management server 132, determines that the temporary key is valid if the decryption is successful, and is valid if the decryption fails. Judge that it is not a temporary key. Further, the management server 132 verifies the validity of the temporary key. When the container 121 is stopped, the temporary key set in the container 121 is invalidated. For example, the management server 132 confirms whether the container ID extracted from the temporary key is the container ID of the running container.

If there is no problem with the received temporary key, the management server 132 acquires the authentication information corresponding to the temporary key. For example, the management server 132 acquires the authentication information associated with the user information extracted from the temporary key. The authentication information acquired by the management server 132 is the authentication information issued by the cloud system 32, and may be called a credential. Here, the authentication information of the user A who started the container 121 is acquired. The authentication information includes, for example, a key ID and confidential information. The management server 132 transmits the authentication information to the relay server 131 (S15).

In acquiring the authentication information, the management server 132 may store the authentication information in association with the user information. Further, the management server 132 may inquire of another server of the data analysis system 31 and receive the authentication information corresponding to the user information. Further, the management server 132 may transmit user information to the cloud system 32 and receive temporary authentication information for the user A from the cloud system 32. The relay server 131 and the management server 132 may not be separated, and the relay server 131 may also serve as the management server 132.

The relay server 131 transmits the query received from the container 121 and the authentication information received from the management server 132 to the cloud system 32 (S16). The cloud system 32 authenticates the user A using the authentication information received from the relay server 131, and permits the execution of the query received from the relay server 131 within the range of the access authority of the user A. The cloud system 32 generates result data corresponding to the query and sends it to the relay server 131 (S17). The result data includes, for example, the data retrieved from the database.

The relay server 131 transfers the result data received from the cloud system 32 to the container 121 (S18). However, in the above series of communications, the authentication information used in the cloud system 32 is not provided to the container 121. After that, the user A may send a container stop request to the management server 132. In that case, the management server 132 stops the container 121 and invalidates the temporary key set in the container 121. After that, the management server 132 refuses to provide the authentication information of the user A even if the temporary key is received.

FIG. 6 is a sequence diagram showing a second communication example of external access.
Here, a case where the container 121 is a shared / individual authentication type will be described. User A transmits a container start request to the management server 132 using the terminal device 33 (S20). The container start request includes the user information of user A, and specifies the shared / individual authentication type as the container type. The management server 132 authenticates the user A using the user information included in the container start request, assigns a container ID to the container 121 to be started, and starts the container 121 (S21). When the container type is shared / individual authentication type, the management server 132 does not issue a temporary key to the container 121. Therefore, the container 121 does not hold the temporary key. For example, the environment variable indicating the temporary key of the container 121 becomes empty.

User B, which is different from user A who started the container 121, connects to the container 121 by using the terminal device 33a (S22). When the container 121 accesses the cloud system 32, the container 121 detects that the temporary key of the container 121 is empty. Then, the container 121 requests the user B who is currently connected to the container 121 to input the user information, and acquires the user information of the user B. For example, the container 121 requests user information from the terminal device 33a and receives the user information from the terminal device 33a. The container 121 transmits the user information of the user B to the management server 132 (S23).

The management server 132 authenticates the user B using the user information received from the container 121, generates a temporary key for the user B, and transmits the temporary key to the container 121 (S24). The temporary key is, for example, encrypted data obtained by encrypting data including a user ID of user B, a password, and a container ID of container 121. The container 121 transmits the query and the temporary key of the user B to the relay server 131 (S25). The temporary key of user B is not stored in the container 121. After transmitting the temporary key to the relay server 131, the container 121 may discard the temporary key.

The relay server 131 transmits the temporary key received from the container 121 to the management server 132 (S26). The management server 132 verifies the validity and validity of the temporary key received from the relay server 131, and acquires the authentication information of the user B corresponding to the temporary key. The management server 132 may store the authentication information, may receive the authentication information from another server of the data analysis system 31, or may receive the temporary authentication information from the cloud system 32. .. The management server 132 transmits the authentication information to the relay server 131 (S27).

The relay server 131 transmits the query received from the container 121 and the authentication information received from the management server 132 to the cloud system 32 (S28). The cloud system 32 authenticates the user B using the authentication information received from the relay server 131, and permits the execution of the query received from the relay server 131 within the range of the access authority of the user B. The cloud system 32 generates result data corresponding to the query and sends it to the relay server 131 (S29). The relay server 131 transfers the result data to the container 121 (S30).

FIG. 7 is a sequence diagram showing a third communication example of external access.
Here, a case where the container 121 is a shared / delegated authority type will be described. User A transmits a container start request to the management server 132 using the terminal device 33 (S40). The container start request includes the user information of user A, and specifies the shared / authority delegation type as the container type. The management server 132 authenticates the user A using the user information included in the container start request, assigns a container ID to the container 121 to be started, and starts the container 121. Further, the management server 132 generates a temporary key of the user A from the user information included in the container start request and transmits it to the container 121 (S41). The temporary key is, for example, encrypted data obtained by encrypting data including a user ID, a password, and a container ID.

User B, which is different from user A who started the container 121, connects to the container 121 by using the terminal device 33a (S42). When the container 121 accesses the cloud system 32, the container 121 extracts the temporary key of the user A set in the container 121. The container 121 sends a query and a temporary key to the relay server 131 (S43).

The relay server 131 transmits the temporary key received from the container 121 to the management server 132 (S44). The management server 132 verifies the validity and validity of the temporary key received from the relay server 131, and acquires the authentication information of the user A corresponding to the temporary key. The management server 132 may store the authentication information, may receive the authentication information from another server of the data analysis system 31, or may receive the temporary authentication information from the cloud system 32. .. The management server 132 transmits the authentication information to the relay server 131 (S45).

The relay server 131 transmits the query received from the container 121 and the authentication information received from the management server 132 to the cloud system 32 (S46). The cloud system 32 authenticates the user A using the authentication information received from the relay server 131, and permits the execution of the query received from the relay server 131 within the range of the access authority of the user A. The cloud system 32 generates result data corresponding to the query and sends it to the relay server 131 (S47). The relay server 131 transfers the result data to the container 121 (S48).

In this way, the non-shared container holds the temporary key of the user who started the non-shared container and is the only user who uses the non-shared container. The non-shared container uses the temporary key to access the relay server. The relay server acquires the authentication information of the user from the temporary key and accesses the cloud system 32 based on the access authority of the user.

Shared / individual authentication type container does not hold temporary key. The shared / individual authentication type container requests user information from the user who is currently using the shared / individual authentication type container, acquires the temporary key of the current user based on the entered user information, and accesses the relay server. do. The relay server acquires the authentication information of the current user from the temporary key of the current user, and accesses the cloud system 32 based on the access authority of the current user.

The shared / delegated authority container holds a temporary key of a representative such as the owner who defined the shared / delegated authority container and the user who started the non-shared container. The sharing / delegation type container accesses the relay server using the temporary key of the representative. The relay server acquires the authentication information of the representative from the temporary key of the representative, and accesses the cloud system 32 based on the access authority of the representative instead of the access authority of the current user.

FIG. 8 is a diagram showing an example of a temporary key of a container and a table of a management server.
The container 121 may store the temporary key 141. The temporary key 141 may be stored in the storage area of the RAM used by the container 121, or may be the value of the environment variable of the container 121. The temporary key 141 is a ciphertext of a character string in which the user ID of the user A, the password of the user A, and the container ID of the container 121 are concatenated.

The management server 132 stores the user table 142, the container table 143, and the authentication information table 144. However, the authentication information table 144 may be stored in a server other than the management server 132. Further, when the management server 132 requests the cloud system 32 to issue temporary authentication information every time the cloud system 32 is accessed, the data analysis system 31 does not have to hold the authentication information table 144.

The user table 142 stores user information of a plurality of users. The user information stored in the user table 142 is used for user authentication in the data analysis system 31. Each user information includes a user ID and a password. The container table 143 stores the container information of one or more containers operating in the data analysis system 31. Each container information includes a container ID and a container type.

The authentication information table 144 stores authentication information of a plurality of users. In the authentication information table 144, the user information and the authentication information are associated with each other. The authentication information stored in the authentication information table 144 is the authentication information issued by the cloud system 32. The management server 132 may receive user information and authentication information from the terminal devices 33 and 33a and register them in the authentication information table 144. Each authentication information includes a key ID and confidential information. When the management server 132 acquires the user ID and password of a certain user, the management server 132 searches the authentication information table 144 for the corresponding key ID and secret information.

Next, the processing of the container 121, the relay server 131, and the management server 132 will be described.
FIG. 9 is a flowchart showing an example of a container processing procedure.
(S50) The container 121 determines whether or not the temporary key has been received from the management server 132 after the startup. If the temporary key is received from the management server 132, the process proceeds to step S51, and if the temporary key is not received, the process proceeds to step S52.

(S51) The container 121 stores the received temporary key in the container 121.
(S52) The container 121 determines whether the stop is instructed by the management server 132. If the management server 132 instructs to stop, the container process ends, and if the stop is not instructed, the process proceeds to step S53.

(S53) The container 121 detects a request for access to an external service.
(S54) The container 121 determines whether the temporary key is stored in the container 121. If the temporary key is stored in the container 121, the process proceeds to step S57, and if the temporary key is not stored, the process proceeds to step S55.

(S55) The container 121 requests the user currently connected to the container 121 to input user information including a user ID and a password.
(S56) The container 121 transmits the input user information to the management server 132, and receives the temporary key corresponding to the user information from the management server 132.

(S57) The container 121 transmits a query indicating a request to the external service and the temporary key obtained in step S54 or step S56 to the relay server 131.
(S58) The container 121 receives the result data indicating the response of the external service to the step S57 from the relay server 131. Then, the process returns to step S52.

FIG. 10 is a flowchart showing a procedure example of relay server processing.
(S60) The relay server 131 receives the query and the temporary key from the container 121.
(S61) The relay server 131 transmits the temporary key to the management server 132, and receives the authentication information of the external service corresponding to the temporary key from the management server 132.

(S62) The relay server 131 sends a query and authentication information to an external service.
(S63) The relay server 131 receives the result data indicating the response to the query from the external service, and transfers the result data to the container 121.

FIG. 11 is a flowchart showing a procedure example of the management server process.
(S70) The management server 132 determines whether or not the container start request has been received from the user. If the container start request is received, the process proceeds to step S71, and if the container start request is not received, the process proceeds to step S75.

(S71) The management server 132 starts the container 121 by assigning the container ID after verifying the validity of the user information included in the container start request. If the verification of the user information fails, the management server 132 notifies the user of the error.

(S72) The management server 132 determines whether the container type specified in the container start request is a shared / individual authentication type. In the case of the shared / individual authentication type, the process proceeds to step S75, and in the case of the non-request type or the shared / delegated authority type, the process proceeds to step S73.

(S73) The management server 132 generates a temporary key from the user information and the container ID.
(S74) The management server 132 transmits the temporary key to the container 121.
(S75) The management server 132 determines whether or not the user information has been received from the container 121. If the user information is received from the container 121, the process proceeds to step S76, and if the user information is not received, the process proceeds to step S78.

(S76) The management server 132 generates a temporary key from the user information and the container ID of the container 121 after verifying the validity of the received user information. If the verification of the user information fails, the management server 132 notifies the container 121 of the error.

(S77) The management server 132 transmits the temporary key to the container 121.
FIG. 12 is a flowchart (continued) showing an example of the management server processing procedure.
(S78) The management server 132 determines whether or not the temporary key has been received from the relay server 131. If the temporary key is received from the relay server 131, the process proceeds to step S79, and if the temporary key is not received, the process proceeds to step S82.

(S79) The management server 132 extracts the user information and the container ID from the temporary key.
If the decryption fails, the management server 132 notifies the relay server 131 of the error.
(S80) The management server 132 verifies the validity of the container ID. For example, the management server 132 confirms that the container ID is registered in the container table 143. If the verification fails, the management server 132 notifies the relay server 131 of the error.

(S81) The management server 132 acquires the authentication information corresponding to the user information. For example, the management server 132 searches the authentication information table 144 for the authentication information corresponding to the user information. Further, for example, the management server 132 transmits the user information to the cloud system 32 and requests the issuance of the temporary authentication information corresponding to the user information. The management server 132 transmits the acquired authentication information to the relay server 131.

(S82) The management server 132 determines whether or not the container stop request has been received from the user. If the container stop request is received, the process proceeds to step S83, and if the container stop request is not received, the management server process ends.

(S83) The management server 132 stops the container 121 and invalidates the container ID. For example, the management server 132 deletes the container ID from the container table 143.
As described above, the data analysis system 31 of the second embodiment can create a container that can be used by a plurality of users. Therefore, the data analysis work can be performed flexibly. Further, the representative of the plurality of users can delegate the access authority to the other user, and the container can access the cloud system 32 without the other user individually inputting the authentication information. Therefore, the burden on the user is reduced and the operability is improved.

Further, the container does not hold the authentication information itself of the cloud system 32. Therefore, the authentication information of the representative is kept secret from other users, and the other users cannot acquire the authentication information of the representative. Therefore, the risk that another user misuses the authentication information of the representative and executes an operation other than the purpose of the container on the cloud system 32 is reduced. As a result, the protection of the authentication information is strengthened and the security of the data analysis system 31 is improved. Also, when the container is stopped, the temporary key assigned to the container is invalidated. Therefore, the risk of another user copying the temporary key and misusing it is also reduced.

1 Information processing system 3 External system 10, 20 Information processing device 11 Virtual computer 12, 22 Authentication information 13, 23 Message

Claims (8)

On the computer
Information set in the virtual computer when accessing a second system different from the first system to which the virtual computer belongs from a virtual computer operating on the computer, and a plurality of information that can use the virtual computer. The first authentication information associated with the second authentication information indicating the access authority of the second system possessed by the first user among the users of the above is detected.
A first message indicating a request for the second system and the first authentication information are transmitted to another computer having access to the second authentication information.
A second message indicating the response of the second system to the request indicated by the first message is received from the other computer.
An information processing program that executes processing. Further, when the first user starts the virtual computer, the computer is made to execute a process of setting the first authentication information in the virtual computer.
The information processing program according to claim 1. In the transmission of the first message and the first authentication information, the second user among the plurality of users accesses the second system while using the virtual computer. Also sends the first authentication information,
The information processing program according to claim 1. Further, when the first authentication information is not set in the virtual computer, the second user has the first authentication information based on the input from the second user who is using the virtual computer. The process of acquiring the third authentication information associated with the fourth authentication information indicating the access authority of the second system and transmitting the first message and the third authentication information to the other computer is executed. Let me
The other computer has access to the fourth authentication information,
The information processing program according to claim 1. The information processing program is executed on the virtual computer and
In the transmission of the first message and the first authentication information, the communication destination of the virtual computer is changed from the second system to the other computer.
The information processing program according to claim 1. The first information processing device is set in the virtual computer when the virtual computer operating in the first information processing device accesses a second system different from the first system to which the virtual computer belongs. Detects the first authentication information and
The first information processing apparatus transmits a first message indicating a request to the second system and the first authentication information to the second information processing apparatus.
The second information processing apparatus is information related to the first authentication information, and is accessible to the second system by the first user among a plurality of users who can use the virtual computer. Obtain the second authentication information indicating the authority,
The second information processing apparatus transmits the first message and the second authentication information to the second system, and responds to the request indicated by the first message by the second system. The second message shown is transferred to the first information processing apparatus.
Information processing method. Information set in the virtual computer when accessing a second system different from the first system to which the virtual computer belongs from a virtual computer operating in the own device, and a plurality of information that can use the virtual computer. A processing unit that detects the first authentication information associated with the second authentication information indicating the access authority of the second system possessed by the first user among the users of the above.
A first message indicating a request for the second system and the first authentication information are transmitted to another information processing device that can access the second authentication information, and the other information processing device can send the first message and the first authentication information. A communication unit that receives a second message indicating the response of the second system to the request indicated by the first message, and a communication unit.
Information processing device with. When accessing a second system different from the first system to which the virtual computer belongs from a virtual computer operating in the own device, the first authentication information set in the virtual computer is detected, and the second system is detected. A first information processing device that transmits a first message indicating a request to the system and the first authentication information, and a first information processing device.
The first user among a plurality of users who have received the first message and the first authentication information and are associated with the first authentication information and can use the virtual computer The second authentication information indicating the access authority of the second system to be possessed is acquired, the first message and the second authentication information are transmitted to the second system, and the first message indicates. A second information processing apparatus that transfers a second message indicating the response of the second system to the request to the first information processing apparatus, and a second information processing apparatus.
Information processing system with.

Images