JPH10269184A - Security management method for network system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a security management method for facilitating transition from a present user authentication system by a user ID and a password to a single sign-on by the utilization of a certificate. SOLUTION: A job is requested by transmitting the information of the certificate from a client 8 to a job server 6 and the confirmation of the certificate is requested by transmitting the information of the certificate from the job server 6 to an integrated authentication server 2. The integrated authentication server 2 confirms the certificate, then obtains the security information of a user from a server 3 and checks the right to access the job server 6 of the user. At the time of appropriate access, the user ID, the password and access-to- data control information are sent to the job server 6. The job server 6 performs the authentication processing on the user and manages the access right to data thereafter. It is similar for a DB(data base) server 5 as well.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security management method for a network system having a client and a server, and more particularly to a network for performing a centralized management of a user and providing a single sign-on function using a certificate to the user. The present invention relates to a system security management method.

[0002]

2. Description of the Related Art With the spread of the Internet, market trends regarding security management have been remarkably changing.
In particular, when a wide area network system such as the Internet is connected to a company network system, a user authentication function for integrating these networks and a function for controlling access to resources in the network system are required. That is, there is a demand for unified management of users and centralized management of network resources over both the wide area network system and the in-house network system.

As a method for centrally managing users using a wide area network system, for example, Japanese Patent Laid-Open No. 6-223
As disclosed in Japanese Patent No. 041, there is a method in which information obtained by encrypting a user's personal information and usage environment information with a secret key is issued as a certificate, and the user logs in to the system using the certificate. . As a security management method considering a distributed system, for example, JP-A-8-106
As described in Japanese Patent No. 437, there is a method in which a user uses a logon certificate for certifying his / her credential when accessing a domain other than its home domain. JP-A-7-141296 discloses a TTP (Trn) for managing security across network domains.
A system for setting a security policy of the entire network and performing access control based on the security policy is disclosed.

[0004]

As described above, the method of performing user authentication and access control using certificates is expected to be widespread as one of the security management methods for future wide area network systems. However, in consideration of the actual network system, it is difficult for the current enterprise network system to immediately shift to a method using a certificate issued by an external certificate issuing organization or to shift to security management using TTP. it is conceivable that. That is, it is considered realistic to introduce a single sign-on method using a certificate while leaving the current user authentication method using a user ID and a password.

An object of the present invention is to provide a security management method that facilitates the transition from the current user authentication method using a user ID and password to single sign-on using a certificate.

[0006]

SUMMARY OF THE INVENTION The present invention is a security management method for a network system in which a client, a business server, and an integrated authentication server can communicate with each other via a network. Requesting a certificate, and sending the certificate information from the business server to the integrated authentication server to make a certificate confirmation request. The integrated authentication server checks the certificate and assigns the user's access authority to the business server. A security management method is performed in which a check is performed and, if valid, a user ID and a password are transmitted to the business server, and the business server performs authentication using the user ID and the password.

[0007] Instead of checking the certificate by the integrated authentication server, the business server checks the certificate, transmits the certificate information from the business server to the integrated authentication server, and requests the user ID and password. The integrated authentication server checks the user's access authority to the business server, and if valid, sends the user ID to the business server.
And password, and the business server sends the user ID
And a password may be used for authentication.

The present invention also provides a business request by transmitting a user ID and a password from a client to a business server, and transmitting the user ID and password from the business server to the integrated authentication server. The security management method is to check the access authority to the server and, if valid, create a temporary certificate and send it to the client via the business server.

The present invention also provides a method for confirming a certificate executed by an integrated authentication server and a business server from a login to a logoff to a system by a client, a result of checking an access right to a business server, and a method of checking a user ID and a password. The security check result including the authentication result and the check result of the access right to the data held by the business server is recorded as access history information, and the integrated authentication server checks the certificate check result and the access right to the business server. A security management method of recording a result of security check including access history information, and checking a user's access status by comparing access history information recorded by a client with access history information recorded by an integrated authentication server. I do.

Further, the computer program embodied on a storage medium readable by the integrated authentication server can be executed to perform the processing of the above-described method on the integrated authentication server side.

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below with reference to the drawings.

FIG. 1 is a configuration diagram of a network system according to the present embodiment. A corporate network system 1 and another corporate network system 9 are connected to a wide area network 10 such as the Internet. In the corporate network system 1, in addition to the client 8, an integrated authentication server 2, a server 3 for managing security information, a database (DB) server 5, a business server 6, a groupware server 4, a key management server 17, a certificate issuance Server 1
8 etc. are connected. The DB server 5 and the business server 6 are servers accessed by the client 8 and used for business processing. The groupware server 4 is a server that sends the first job menu screen to the client 8, sends an e-mail to the client 8, and manages the schedule of the user. Server 3 is D
It is a server that centrally manages security information including information for controlling access to the B server 5 and the business server 6, and user access control information including authentication information such as a user ID and a password. The integrated authentication server 2
After confirming the certificate sent from the client 8, the server 3
Security information from the user and the user's DB server 5
And a server for checking access authority to the business server 6. The key management server 17 is a server that generates a master key used for encrypted communication in the enterprise network system 1. The external certificate issuing server 7 is connected to the wide area network 10. The external certificate issuing server 7
A server that issues an external certificate according to a predetermined procedure. The certificate issuing server 18 is a server that issues a certificate to a user who does not have an external certificate in response to a request from the integrated authentication server 2. Note that a server called a directory server may have the information of the server 3. The client 8 and various servers are information processing devices including a personal computer, a workstation, and the like.
Further, by executing a computer program embodied on a storage medium that can be read by the client 8 and various servers, processing of the client 8 and various servers described below can be performed.

When the information of the user's certificate is input from the client 8 or the client 20 connected to the other company network system 9 and the user logs in to the DB server 5, for example, the DB server 5 or the integrated authentication server 2 confirms the certificate. Then, the integrated authentication server 2 acquires security information from the server 3 and checks access authority to the DB server 5. If the user has the access right, authentication information such as a user ID and a password is sent to the DB server 5, and the DB server 5 performs a user authentication process. When the business process using the DB server 5 is completed and the user logs in to the business server 6 next, the client 8 transmits the already input certificate to the business server 6 and performs single sign-on by performing the above procedure. Realize. For a user who does not have a certificate, a certificate is issued by logging in by inputting a user ID and a password, and thereafter, the client 8 transmits this certificate to the business server every time the client 8 moves to another business server, Sign-on is possible.

FIG. 2 is a diagram for explaining a system in which the server 3 for managing security information manages security information in a unified manner. Security information on users and resources (documents, databases, terminal devices, application programs, etc.) managed for each server before the server 3 is introduced is converted into an LDA by the LDAP information conversion program.
The data is converted into the P format, sent to the server 3 and centrally managed by the server 3. Here, LDAP (Lightweight Da
ta Access Protocol) is IETF
A standard directory access protocol.

FIG. 3 shows an example of the information in the LDAP format.
FIG. 4 is a diagram illustrating a document definition and a format of access control information of a business server. The document definition includes document identification information and document access control information. The document identification information includes a document identifier, an identifier and an organization name of a server that manages the document, and document information (document title, document update date, document update date,
Document manager, keywords for document search, subject, abstract, author name). On the other hand, the access control information of the document includes access control information, final modification information, security policy, and the like. The access control information is information for controlling access to a part of the document, such as access control information for a specific page in the document. The last modification information is an update date of the access control information. The security policy sets an access level of a user who is permitted to access the document. For example, it is possible to operate such that users having policy numbers 1 to 3 are allowed to access the corresponding document. The document definition is information managed by the business server 6.

The ACL of the business server (Access Co.)
control list: access control information for accessing the business server 6, the identifier of the management source server of the access control information, the update date of the definition of the domain security, the default security policy and the authorization security policy as security policies. , And via DSA (Domain
Security Authority). The authorization security policy can be operated, for example, to permit users with policy numbers 1 to 5 to access the business server 6. According to the passing DSA, it is defined that the user authentication is always performed via the integrated authentication server 2. The access control information of the business server is information held by the server 3 and managed by the integrated authentication server 2.

In addition to the above access control information, it is necessary to set access control information for a user who accesses the business server 6 and accesses a specific document. The user's access control information sets information on the user's certificate, authentication information such as a user ID and a password, information on the department to which the user belongs, job information, and the user's access level (policy number). Depending on the setting of the access level, for example, the user whose policy number is 4
Can be accessed, but the operation of not allowing access to the document XXXX is possible. It is also possible to operate such that a user who has a certain job system or higher is allowed to access a specific document.

FIG. 4 is a diagram showing a procedure in which the integrated authentication server 2 obtains user security information from the server 3. The LDAP protocol is used for the procedure for acquiring the security information. First, the integrated authentication server 2
When an LDAP connection is established with the server 3 by ap_open, mutual authentication between the integrated authentication server 2 and the server 3 is performed by ldap_simple_bind_s, and the integrated authentication server 2 transmits a user certificate number, a user ID, and the like by ldap_search_s. The security information of the user is transmitted from the server 3 to the integrated authentication server 2.

FIG. 5 is a diagram showing a processing procedure from the time when the user of the client 8 logs in to the corporate network system 1 until the user logs off. Here, a procedure when a user logs in using a certificate (including an external certificate) will be described. The client 8 displays the task menu on the display device of the client 8. When the user selects the business server 6 and inputs certificate information from a storage medium such as an IC card, the client 8 encrypts the certificate information with the user's private key and stores it in the storage device. Then, the contents of the certificate encrypted with the user's private key are transmitted to the business server 6. The business server 6 sends certificate information to the integrated authentication server 2 and requests a confirmation of the contents. After decrypting the encrypted certificate with the user's public key, the integrated authentication server 2 confirms the certificate. The data structure of the certificate is X. 509, and its contents include information such as the owner's name, issuer, issuer's signature, and expiration date. Since the signature of the issuer is encrypted with the private key of the issuer, the signature is first decrypted with the public key of the issuer and compared with the original to confirm that the certificate is valid. Next, the contents such as the expiration date are confirmed.
If the certificate is inappropriate (NG), the business server 6
And transmits a message indicating that login is not permitted to the client 8 via the. If the certificate is appropriate (OK),
An inquiry is made to the server 3 to obtain user security information. The procedure is as described above. The user security information includes access control information of the business server 6 and access control information of the user. The integrated authentication server 2 compares the access level of the user with the access level of the business server 6 and
If the access of the user can be permitted, the access history information indicating that the access of the user is permitted is recorded in the storage device,
The user access control information such as the encrypted user ID, password, access level, and organization information is transmitted to the business server 6. When the business server 6 holds the user's access control information such as the access level and the organization information corresponding to the user ID, it is unnecessary to transmit the access control information other than the user ID and the password. The business server 6 decrypts the received access control information, and first performs an authentication process to determine whether the user ID and the password match those registered. If they do not match, access to the business server 6 is not permitted. If they match, a permission message is transmitted to the client 8. Thereafter, each time a document access request is made from the client 8, it is determined whether or not to permit the document access based on the document access control information, the user access level, and the job organization information. The client 8 issues an access request to a document held by the business server 6 to perform business processing. The client 8 records the access history information of the accessed document in the storage device during the business process.

After the business process related to the business server 6 is completed in this way, the business menu is again displayed on the client 8.
Is displayed on the display device. If the user selects the DB server 5 next, the client 8 takes out the stored certificate of the user and transmits it to the DB server 5 together with the business request. Therefore, the user does not need to input certificate information again. The DB server 5 sends certificate information to the integrated authentication server 2 and requests a confirmation of the contents. Thereafter, as described above, the integrated authentication server 2 decrypts the encrypted certificate with the user's public key, and then confirms the certificate.
The result of the certificate confirmation and the access history information indicating permission / non-permission of the user's access to the DB server 5 are recorded, and the access control information is transmitted to the DB server 5. DB
The server 5 performs a user authentication process using the user ID and the password. When the access of the user is permitted, it is determined based on the access control information received thereafter whether to permit access to the specified database, table, table column, or the like. The client 8 performs business processing using the DB server 5, and records access history information on a database to be accessed during the business processing. When the business process ends in this way and the user inputs logoff, the client 8 sends the recorded access history information to the integrated authentication server 2 and deletes the certificate information stored on the storage device. The integrated authentication server 2
The received access history information is compared with the access history information recorded by the integrated authentication server 2 to check whether the access is appropriate.

In the processing procedure shown in FIG. 5, the same processing procedure is adopted when logging in to the groupware server 4 instead of logging in to the business server 6 first.

FIG. 6 is a diagram showing a procedure of processing when the business server 6 and the DB server 5 have a function of confirming the contents of a certificate. 6 is different from the procedure of FIG.
The business server 6 and the DB server 5 instead of the integrated authentication server 2 confirm the certificate after decrypting the certificate encrypted with the user's private key with the user's public key. In order for each business server to confirm the contents of the certificate, a function of acquiring the public key of the certificate issuer and confirming the signature of the issuer is required.

FIG. 7 is a diagram showing a procedure of processing from the time when a user without a certificate logs in to the corporate network system 1 until the user logs off. When the user selects the business server 6 from the business menu and inputs the user ID and the password, the client 8 transmits the business request, the user ID, and the password to the business server 6. The business server 6 performs an authentication process to determine whether the received user ID and password match those registered. If they do not match, the access to the business server 6 is rejected. When they match, the business server 6 sends the received user ID and password to the integrated authentication server 2. Integrated authentication server 2
Sends a user ID and password to the server 3 to make an inquiry, and obtains user security information. Next, the integrated authentication server 2 checks whether or not the user has the right to access the business server 6 by the above-described check processing based on the security information received from the server 3. If the user does not have authority (NG), a log-in non-permission message is transmitted to the client 8. If the user has authority (OK), a certificate is issued. Since this certificate is issued for the purpose of temporarily granting access to the business server 6, the expiration date is shorter than that of a normal certificate (for example, on the same day), and the access authority to the business server 6 is also restricted. Is done. Next, the integrated authentication server 2 transmits the user's access control information such as a certificate, an access level, and organization information to the business server 6. When the business server 6 holds the access control information, the transmission of the access control information is unnecessary. The business server 6 transmits the received certificate to the client 8. Client 8
After the received certificate is stored in the storage device, an access request is made to the document held by the business server 6 to perform business processing. The business server 6 determines whether or not to permit the document access from the document access control information, the user access level, and the job organization information every time the client 8 requests the document access. The client 8 records access history information on a document to be accessed during the business process. The client 8 periodically checks the expiration date of the certificate, and warns the user if the expiration date has passed.

When the user selects the DB server 5 after finishing the business process related to the business server 6 in this way, the client 8 takes out the stored certificate and sends it to the DB server 5 together with the business request. . The DB server 5 sends the certificate information to the integrated authentication server 2 and requests a confirmation of the contents. The integrated authentication server 2 confirms the certificate as described above, and transmits the access control information including the user ID and the password to the DB server 5. The DB server 5 performs an authentication process based on the user ID and the password, and permits access to the DB server 5 if the user ID is valid. Thereafter, as described above, the client 8 transmits a database access request to the DB server 5, and the DB server 5 determines whether to permit the database access based on the user's access control information. The client 8 performs business processing using the DB server 5, and records access history information on a database accessed during the business processing. When the business process is completed in this way and the user inputs logoff, the client 8 sends the recorded access history information to the integrated authentication server 2 and deletes the stored certificate information. The integrated authentication server 2 compares the received access history information with the access history information recorded by the integrated authentication server 2 to check whether the access is appropriate. If the user issues a certificate issuance request as part of the logoff procedure, the client 8 sends this request to the integrated authentication server 2. Integrated authentication server 2
Checks whether there is a problem with the security information and access status of the user. That is, if the integrated authentication server 2 does not record the log-in permission in the access history information after confirming the user's authority, a problem naturally occurs. Also, there is a problem in a case where there is a record of accessing the DB server 5 in the access history information on the client 8 side even though there is no record of the access permission of the DB server 5 thereafter. In addition, if the case where the client 8 accesses documents and databases of the business server 6 and the DB server 5 is not permitted in the access history information of the client 8, a problem occurs. When there is a problem (YE
S), the integrated authentication server 2 transmits a message to the client 8 not issuing the certificate. If there is no problem (NO), the integrated authentication server 2 sends a certificate issuance request to the certificate issuance server 18, and the certificate issuance server 18 issues a certificate and sends it to the integrated authentication server 2. The authentication server 2 sends the certificate to the client 8. The client 8 outputs the received certificate to an external recording medium such as an IC card or a floppy disk. Thereafter, the user can perform a login procedure using the certificate shown in FIG. As described above, according to the present embodiment, even when a user without a certificate logs in, single sign-on by one login can be realized. The integrated authentication server 2, the business server 6, and the DB server 5 are the same as those in FIG.
It is desirable to support both the processing procedure shown in FIG. 7 and the processing procedure shown in FIG.

FIG. 8 is a diagram showing a procedure of a process in which the integrated authentication server 2 monitors the access status of the user and detects a security breach. The cooperation between the client 8 and the integrated authentication server 2 makes it possible to check the access status of the user and detect a security breach to the system. In the example of FIG. 8, when the client 8 accesses the business server 6 and performs business processing, if an access request is made for a certain document, the business server 6 performs an access check based on the user's access control information and the document access control information. Is performed, and if the access request is invalid, a message indicating that access is not permitted is returned to the client 8. The client 8 records this access denial in the access history information. When the client 8 instructs logoff, the access history information about the user recorded by the client 8 is transmitted to the integrated authentication server 2. The integrated authentication server 2 determines whether the access status of the user is legitimate based on the access history information collected by the integrated authentication server 2, the access history information collected by the client 8, and a match between the two. If it is determined that the user has made an improper or inappropriate access, the integrated authentication server 2 performs processing for deleting the access control information of the user.

For example, the following cases are improper or inappropriate access by the user. (A) There is no record of login permission in the integrated authentication server 2.
That is, the verification result of the certificate is not permitted. (B) As a result of the user authority confirmation check performed by the integrated authentication server 2, the client 8 is accessing the business server even though access to the business server is prohibited. (C) The result of the authentication processing performed by the business server or the DB server is not permitted. (D) The client 8 has detected that the expiration date of the certificate has expired. (E) The client 8 is trying to access an unauthorized document or database. (F) The time at which the client 8 inputs the certificate, the time at which the login command is issued, the time at which the integrated authentication server 2 confirms the certificate, the business server 6 authenticates the user and permits access to the business server 6. The security-related processing time recorded in the access history information, such as the time, is not in a correct chronological sequence.

According to the present embodiment, since the integrated authentication server 2 and the server 3 centrally manage the security information including the access control information of the user and the access control information of the business server, registration and updating of the security information are centralized. It is not necessary for each business server to individually manage security information as in the related art.

FIG. 9 is a diagram showing a procedure of registration, inquiry and update of security information. FIG. 9A is a diagram showing a processing procedure in a security information registration phase. When each server requests the server 3 to register security information, the server 3 registers the requested security information in a storage device. At this time, as described above, the existing security information is converted to the LD using the LDAP information conversion program.
It can be converted to AP format. FIG. 9B is a diagram illustrating a procedure of security information inquiry. Each server inquires of the integrated authentication server 2 about security information. If the integrated authentication server 2 has already taken in security information on the specified user (YES),
Answer the security information. If not (NO), the server 3 is inquired of the server 3 to obtain the security information and then replies to the requesting server. For example, this corresponds to a case where the business server 6 and the DB server 5 shown in FIG. 6 transmit the certificate information to the integrated authentication server 2 and inquire about the security information. 7 corresponds to the case where the business server 6 shown in FIG. 7 transmits the user ID and the password to the integrated authentication server 2 and requests the user to confirm the authority, requests the issuance of a certificate, and receives the access control information of the user. I do.
FIG. 9C is a diagram illustrating an example of updating security information. When the integrated authentication server 2 detects a security breach by the user, it notifies each server of the deletion of the user. Further, the server 3 requests the server 3 to delete the access control information for the user.

The present invention can be realized by using the same server without separating the integrated authentication server 2 and the server 3. Further, the integrated authentication server 2, the server 3, the key management server 17, and the certificate issuing server 18 can be realized by the same server.

Finally, the encrypted communication between the client 8, the servers 5, 6 and the integrated authentication server 2 will be described. If conventional user information, especially password information, is eavesdropped on a communication line, there has been a security threat of impersonating others based on the stolen information. According to the present invention, a user is confirmed by using information of a certificate that may be publicly disclosed. If the secret key information of the user is stolen in addition to the information of the certificate, a malicious third party can impersonate another person. It is even possible. Therefore, the client 8, the servers 5, 6
Communication with the integrated authentication server 2 needs to be performed by encrypted communication after mutually authenticating a communication partner. In particular, since security information about the user is transmitted and received between each server and the integrated authentication server 2, it is necessary to protect the information so that only the parties can see it. As a communication means for protecting security information, for example, SSL (Secure Socket Layer)
It has been known.

In order to perform encrypted communication, there are key management problems such as generation, distribution, and recovery of an encryption key. The management method and the realization method differ depending on what kind of encryption means is used. Hereinafter, an encryption technique based on a group key encryption method called Multi2 will be described.

FIG. 10 is a diagram for explaining the procedure of data encryption processing using a group key. Key management server 17
Creates and distributes master keys for clients and servers. Then, an encryption key is generated to encrypt the message from this master key, but the party who wants to read this message (a plurality of designations are possible) is registered in the destination list, and the dynamic key is created from the master key and the destination list. Create a group key in
The message is encrypted with this group key. FIG.
In the example of 0, the client 8 specifies the client 8, the business server 6, and the integrated authentication server 2 in the destination list A when transmitting the message A to the business server 6. Then, the group key A is not transmitted to the business server 6,
Only the encrypted message A and the destination list A are sent. The business server 6 dynamically creates a group key A from the destination list A and the master key received together with the message A in order to decrypt the message A received from the client 8. The business server 6 decrypts the message A using the group key A created as described above. Also, when transmitting the message A from the business server 6 to the integrated authentication server 2, a group key A is created from the master key and the destination list A, and the message A to be transmitted is encrypted with the group key A. Since the group key A is registered in the destination list A and cannot be dynamically created unless the party has the master key, the message A can be read only by the party who wants to show in this way.

Next, when the integrated authentication server 2 wants to transmit the message B to the business server 6, only the business server 6 is set in the destination list B, and the master key and the group key B created from the destination list B are used. The message B is encrypted and sent. Even if the client 8 attempts to decrypt the encrypted message B, the client 8 cannot decrypt the encrypted message B because it is not registered in the destination list B. In the example of FIG. 10, the encrypted communication using the group key between the client 8 and each server has been described. However, a master key can be provided for each user. In this case,
It is also possible to store the master key in an IC card and generate a group key in the IC card.

[0034]

As described above, according to the present invention, a business server or a database server saves user authentication and access control based on a conventional user ID and password to a user while using single sign-on by using a certificate. Function can be provided. Further, even for a user who does not have a certificate, single sign-on by issuing a temporary certificate can be realized. In addition, by coordinating the client and the integrated authentication server, the access status of the user can be monitored, and a user having a problem with the access status can be excluded from the system.

[Brief description of the drawings]

FIG. 1 is a configuration diagram of a network system according to an embodiment.

FIG. 2 is a diagram illustrating a system in which a server according to an embodiment manages security information in a unified manner.

FIG. 3 is a diagram illustrating an example of information in an LDAP format.

FIG. 4 is a diagram showing a procedure in which the integrated authentication server 2 of the embodiment acquires user security information from the server 3.

FIG. 5 is a diagram showing a processing procedure of single sign-on using a certificate according to the embodiment.

6 is a diagram showing a processing procedure in which a DB server 5 / business server 6 confirms a certificate instead of the integrated authentication server 2 in the processing procedure of FIG.

FIG. 7 is a diagram illustrating a processing procedure of single sign-on by a user without a certificate according to the embodiment.

FIG. 8 is a diagram showing a processing procedure in which the integrated authentication server 2 of the embodiment monitors a user's access status and detects a security breach.

FIG. 9 is a diagram illustrating a process of managing security information according to the embodiment.

FIG. 10 is a diagram illustrating a procedure of data encryption processing using a group key.

[Explanation of symbols]

2: Integrated authentication server, 3: Server for managing security information, 18: Certificate issuing server

Claims (5)

[Claims] 1. A security management method for a network system in which a client, a business server, and an integrated authentication server can communicate with each other via a network, wherein the client transmits information on a certificate to the business server to make a business request. The business server sends certificate information to the integrated authentication server to make a certificate confirmation request, and the integrated authentication server verifies the certificate and checks the user's access right to the business server. A security management method comprising transmitting a user ID and a password to a business server, if any, and performing authentication by the business server using the user ID and the password. 2. The method according to claim 1, wherein the certificate is confirmed by the business server instead of the certificate by the integrated authentication server.
The business server sends certificate information to the integrated authentication server to request a user ID and password, and the integrated authentication server checks the user's access authority to the business server. Sends the ID and password, and the business server sends the user ID
2. The security management method according to claim 1, wherein authentication is performed using a password and a password. 3. A result of checking the certificate executed by the integrated authentication server and the business server, a result of checking access authority to the business server, a user ID and a password during a period from login to logoff to the system by the client. The result of the security check including the result of the authentication and the result of the security check including the result of the check on the access right to the data held by the business server are recorded as access history information, and the integrated authentication server confirms the certificate and the access right to the business server Recording the result of the security check including the check of the above as access history information, and checking the access status of the user by comparing the access history information recorded by the client with the access history information recorded by the integrated authentication server. The seki according to claim 1, characterized in that: Utility management method. 4. A computer program embodied on a storage medium readable by an integrated authentication server in a network system in which a client, a business server, and an integrated authentication server can communicate with each other via a network, the computer program comprising: Includes the following steps: (a) receiving certificate information transmitted from the client via the business server, (b) confirming that the certificate is valid, and (c) confirming the certificate. Check whether the user has the right to access the business server, and (d)
If the check results in (b) and (c) are valid, the user ID and password of the user are transmitted to the business server so that the user is authenticated by the business server. 5. A computer program embodied on a storage medium readable by an integrated authentication server in a network system in which a client, a business server, and an integrated authentication server can communicate with each other via a network. Includes the following steps: (a) receiving a user ID and a password transmitted from a client via a first business server, and (b) authority of a user of the user ID to access the first business server. (C) If the check result in (b) is valid, a temporary certificate of the user is created, and (d) the certificate is sent to the client via the first business server. Transmitting the certificate, and (e) receiving the certificate information transmitted from the client via the second business server;
(F) confirming that the certificate is valid; (g) checking whether the user of the certificate has authority to access the second business server; (h) checking (f) and (f). If the check result of g) is appropriate, the user ID and password of the user are transmitted to the second business server so that the user is authenticated by the second business server.