JP2014153826A - System and method for supporting use of public cloud service, and tool and method for public cloud management - Google Patents

Abstract

PROBLEM TO BE SOLVED: To facilitate the settings of user accounts for multiple public clouds.SOLUTION: A system for supporting the use of public cloud services includes a public cloud management tool 10 that reads user information for a selected public cloud, out of public clouds 40 through 42, from a public cloud information management storage 30, determines whether or not an authentication key is needed for the read public cloud by referring to certificate presence information, performs account registration by accessing the public cloud when it is determined according to the certificate presence information that a certificate is not needed or obtains an authentication key and performs account registration by accessing the public cloud, out of the public clouds 40 through 42, when it is determined according to the certificate presence information that a certificate is needed, and then creates user account information on the respective public clouds using the user information and the authentication key and stores it in the public cloud information management storage 30.

Description

  The present invention facilitates the setting of user accounts for a plurality of public clouds, and can also securely manage the set user accounts, authentication keys, server certificates, etc. The present invention relates to a public cloud management tool and the cloud management method.

  In recent years, services provided by the cloud computing that allows users to use computer resources such as services and storage provided over the Internet without being aware of the location of the resources (cloud services) have been provided for general users. Public clouds have become widespread, and with the advent of public cloud IaaS and PaaS, it is possible to easily use resources such as servers and storages, and the necessary amount of resources can be used immediately when necessary. Therefore, the use is expanding and it is a field where growth can be expected in the future.

  The following patent document is cited as a document describing the technology related to the public cloud service in the prior art. In Patent Document 1, the first authentication server requested for content from the authentication client terminal operated by the user is the user's A first authentication process for executing authentication and holding an authentication state as a result of the authentication execution, creating and issuing an authentication token indicating the authentication state, and a second receiving a content request from an authentication client terminal operated by the user There is a single sign-on authentication technique for centrally managing an authentication state by executing an authentication server that executes an authentication token created and issued in the first authentication process and a second authentication process that performs a process for authenticating the user. Patent Document 2 describes authentication key information and customer information given to a customer in advance, and stores customer information. Execute authentication including verification of the takeover condition and takeover information item and the authentication key information transmitted from the customer terminal and the stored authentication key information, accept service selection information for selecting any service from the customer terminal, By acquiring customer information to be taken over based on the takeover conditions and takeover information items for the corresponding service server and permitting logon to the corresponding service server, an input to one service can also be an input to another service. If applicable, a unified authentication technique for applying the input information to other services is described. Patent Document 3 holds related information associated with a proxy input device that performs proxy input, and inputs from the content browsing device. If the request is received, the proxy input device identification information is acquired from the portal site device and a reliable proxy input device is obtained. The technology for guaranteeing the reliability of the system that performs the user information input proxy at the time of user registration is described, and in Patent Document 4, the proxy negotiates the connectivity and performs the user connection. A technique is described in which user registration to a different Internet site is made possible by enabling relaying between the Internet user and the site as the only data input source such as name and password.

JP 2002-335239 A JP 2003-108523 A JP 2007-011849 A Special table 2003-503767 gazette

  Although the technique described in the above patent document describes a technique related to single sign-on that supports authentication for a plurality of services by using one authentication input, user accounts and authentication keys issued from a plurality of service servers are described. It is assumed that the user account and the authentication key have been registered in advance, and the method of acquiring the user account and the authentication key from a plurality of service servers is considered. There was no problem. In addition, in the prior art, in order to use a public cloud in general, it is often necessary to register as a user and access a public cloud service source using a user account or authentication key issued by the service source. There is a problem that user accounts and authentication keys issued from service providers must be set up and managed so that these user accounts and authentication keys are not leaked, and IT skills and man-hours are required and burden the user. .

  An object of the present invention is to solve the above-described problems caused by the prior art, and facilitates the setting of user accounts for a plurality of public clouds and secures the set user accounts, authentication keys, and server certificates. It is to provide a public cloud service use support system, a use support method, a public cloud management tool, and the cloud management method that can be managed.

To achieve the above object, the present invention provides a user account connected to a plurality of public clouds via a communication line and using user information including a user name, a public cloud account name, and a public cloud account password. And a public cloud service usage support system including a public cloud management tool for supporting management of authentication keys,
Public cloud user name, public cloud public cloud name, public cloud user account name, public cloud user account password, authentication key associated with the public cloud user account, and the password A public cloud information management storage for storing user account information including a change date and time, a final use date and time of the public cloud, and a certification presence / absence information indicating the presence / absence of an authentication key for the public cloud,
The public cloud management tool is
A first step of reading public cloud user information selected by the user from the public cloud information management storage;
A second step of determining whether or not an authentication key is necessary for the public cloud read in the first step with reference to the certification presence information;
A third step of accessing the relevant public cloud and registering an account when it is determined that the certificate presence / absence information is unnecessary in the second step;
A fourth step of accessing the relevant public cloud to obtain an authentication key and registering an account when it is determined in the second step that the certification presence / absence information is certificate required;
A fifth step of storing the authentication key obtained in the fourth step in a public cloud information management storage;
A sixth step of creating user account information for each public cloud using the user information read in the first step and the authentication key stored in the fifth step;
The first feature is that the seventh step of storing the user account information generated in the sixth step in the public cloud information management storage is executed.

  In the public cloud service utilization support system according to the first aspect, the present invention provides an account password included in the user information when the public cloud management tool performs account registration in the fourth step and the fifth step. In the public cloud service utilization support system according to the first feature, the public cloud management tool is configured to perform an account in the third step and the fourth step. A third feature is that when registration is performed, an account password to be registered in the public cloud is generated by an arbitrary method, and the ninth step of registering the generated account password in the public cloud is executed.

  The public cloud service utilization support system according to the second aspect of the present invention is the public cloud service utilization support system, wherein the public cloud management tool reads a password change period of a public cloud user account set in advance, and the public cloud The eleventh step of reading the password change date and time of the public cloud stored in the information management storage, and the date and time of adding the password change period read in the eleventh step to the password change date and time read in the tenth step exceeds the system time. If it is determined that the user has changed, the fourth feature is to execute the twelfth step of issuing an e-mail prompting the user to change the password and registering it in the public cloud. In the system, the public cloud management tool reads a password change period of a public cloud user account set in advance, and reads the password change date and time of the public cloud stored in the public cloud information management storage When it is determined that the date and time obtained by adding the password change period read in the 11th step to the password change date and time read in the 11th step and the 10th step exceeds the system time, a new account password is issued and made public The fifth feature is to execute the thirteenth step of registration in the cloud.

  According to the fourteenth step of the present invention, in the public cloud service utilization support system according to any one of the first to fifth features, the public cloud management tool reads a preset unused period of a public cloud user account. And 15th step of reading the last use date and time of the public cloud stored in the public cloud information management storage, and the date and time of adding the last use date and time read by the 14th step to the last use date and time read by the 15th step Is determined to have exceeded the system time, a sixteenth step of issuing an e-mail prompting the user to delete the account or a seventeenth step of issuing an e-mail to the user indicating that the account has been deleted by deleting the corresponding account The sixth feature is to execute

  In the public cloud service utilization support system according to any one of the first to sixth features, the present invention provides an eighteenth step in which the public cloud management tool reads a preset communication confirmation interval to the public cloud; A determination is made based on the system time as to whether or not the current time exceeds the communication confirmation interval from the time when the communication is confirmed in the eighteenth step, and when it is determined that the time is exceeded, a communication confirmation is executed to the public cloud. The seventh feature is to execute the above.

Furthermore, the present invention is connected to a plurality of public clouds via a communication line, and uses user information including a user name, an account name of the public cloud, and an account password of the public cloud. Public cloud management tool for supporting management, public cloud user name, public cloud public cloud name, public cloud user account name, password for public cloud user account, and public cloud user account Stores user account information including an authentication key associated with a user account, the password change date and time, the last use date and time of the public cloud, and certification presence / absence information indicating the presence or absence of an authentication key for the public cloud. A public cloud service support method of a computer equipped with a brick cloud information management storage,
In the public cloud management tool,
A first step of reading public cloud user information selected by the user from the public cloud information management storage;
A second step of determining whether or not an authentication key is necessary for the public cloud read in the first step with reference to the certification presence information;
A third step of accessing the relevant public cloud and registering an account when it is determined that the certificate presence / absence information is unnecessary in the second step;
A fourth step of accessing the relevant public cloud to obtain an authentication key and registering an account when it is determined in the second step that the certification presence / absence information is certificate required;
A fifth step of storing the authentication key obtained in the fourth step in a public cloud information management storage;
A sixth step of creating user account information for each public cloud using the user information read in the first step and the authentication key stored in the fifth step;
The eighth feature is that the seventh step of storing the user account information generated in the sixth step in the public cloud information management storage is executed.

  In the public cloud service usage support method of the eighth feature, the present invention provides an account included in the user information when performing account registration in the fourth step and the fifth step in the public cloud management tool. Executing the eighth step of registering the password in the public cloud is a ninth feature. In the public cloud service use support method of the eighth feature, the public cloud management tool includes the third step and the fourth step. The tenth feature is that, when performing account registration, the account password to be registered in the public cloud is generated by an arbitrary method, and the ninth step of registering the generated account password in the public cloud is executed.

  According to the ninth aspect of the present invention, in the public cloud service utilization support method of the ninth feature, the public cloud management tool reads a password change period of a public cloud user account set in advance, and the public The eleventh step of reading the password change date and time of the public cloud stored in the cloud information management storage, and the date and time obtained by adding the password change period read in the eleventh step to the password change date and time read in the tenth step is the system time. When it is determined that the password has exceeded, the eleventh step is to execute the twelfth step of issuing an e-mail prompting the user to change the password and registering it in the public cloud, and the public cloud service of the tenth feature In the support method, the tenth step of reading the password change period of the public cloud user account set in advance in the public cloud management tool, and the password change date and time of the public cloud stored in the public cloud information management storage When the date and time obtained by adding the password change period read in the eleventh step to the password change date and time read in the tenth step exceeds the system time, a new account password is issued. The twelfth feature is that the thirteenth step of registering in the public cloud is executed.

  Further, the present invention provides a public cloud service utilization support method according to any one of the eighth to twelfth steps, wherein the public cloud management tool reads the unused period of a public cloud user account set in advance, The fifteenth step of reading the last use date and time of the public cloud stored in the public cloud information management storage, and the date and time obtained by adding the last use date and time read in step 14 to the last use date and time read in step 15 is the system time. If it is determined that the account has been exceeded, execute a sixteenth step of issuing an e-mail prompting the user to delete the account or a seventeenth step of issuing an e-mail to the user that the account has been deleted by deleting the corresponding account. This is the thirteenth feature.

  According to the present invention, in any one of the eighth to thirteenth public cloud service usage support methods, an eighteenth step of reading a preset communication confirmation interval with the public cloud into the public cloud management tool; The system time determines whether or not the current time exceeds the communication confirmation interval from the time when the communication is confirmed in the step, and when it is determined that the time is exceeded, the 19th step of executing the communication confirmation to the public cloud is executed. This is a fourteenth feature.

Further, the present invention relates to a public cloud user name, a public cloud name of the public cloud, a user account name of the public cloud, a password for the public cloud user account, and a user account of the public cloud. A public cloud information management storage for storing user account information including an authentication key, the password change date and time, the last use date and time of the public cloud, and the certification presence / absence information indicating the presence / absence of an authentication key for the public cloud A public cloud management tool that is connected and connected to a plurality of public clouds via a communication line, refers to the user account information, and supports management of user accounts and authentication keys,
The public cloud management tool
A first step of reading public cloud user information selected by the user from the public cloud information management storage;
A second step of determining whether or not an authentication key is necessary for the public cloud read in the first step with reference to the certification presence information;
A third step of accessing the relevant public cloud and registering an account when it is determined that the certificate presence / absence information is unnecessary in the second step;
A fourth step of accessing the relevant public cloud to obtain an authentication key and registering an account when it is determined in the second step that the certification presence / absence information is certificate required;
A fifth step of storing the authentication key obtained in the fourth step in a public cloud information management storage;
A sixth step of creating user account information for each public cloud using the user information read in the first step and the authentication key stored in the fifth step;
A fifteenth feature is that the seventh step of storing the user account information generated in the sixth step in the public cloud information management storage is executed.

Further, the present invention relates to a public cloud user name, a public cloud name of the public cloud, a user account name of the public cloud, a password for the public cloud user account, and a user account of the public cloud. A public cloud information management storage for storing user account information including an authentication key, the password change date and time, the last use date and time of the public cloud, and the certification presence / absence information indicating the presence / absence of an authentication key for the public cloud A public cloud management method for a computer system that is connected and connected to a plurality of public clouds via a communication line and that supports user account and authentication key management with reference to the user account information,
In the computer system,
A first step of reading public cloud user information selected by the user from the public cloud information management storage;
A second step of determining whether or not an authentication key is necessary for the public cloud read in the first step with reference to the certification presence information;
A third step of accessing the relevant public cloud and registering an account when it is determined that the certificate presence / absence information is unnecessary in the second step;
A fourth step of accessing the relevant public cloud to obtain an authentication key and registering an account when it is determined in the second step that the certification presence / absence information is certificate required;
A fifth step of storing the authentication key obtained in the fourth step in a public cloud information management storage;
A sixth step of creating user account information for each public cloud using the user information read in the first step and the authentication key stored in the fifth step;
A sixteenth feature is that the seventh step of storing the user account information generated in the sixth step in the public cloud information management storage is executed.

  In the public cloud service usage support system and method according to the present invention, the public cloud management tool reads the public cloud user information selected by the user from the public cloud information management storage, and the read public cloud requires an authentication key. Is determined by referring to the certification presence / absence information, and when it is determined that the certification presence / absence information is not required, access to the public cloud is performed to register an account, and the determination results in the certification presence / absence information. If it is determined that the certificate is required, access the public cloud, obtain the authentication key and register the account, create user account information for each public cloud using the user information and authentication key, and public cloud information Store in managed storage By Rukoto, it is possible to easily set the user account for multiple public cloud.

  Furthermore, according to the present invention, the public cloud management tool can perform a password change alert function that refers to user account information stored in the public cloud information management storage, an unused account management function, and a session timeout prevention function.

The figure for demonstrating the public cloud service utilization assistance system by one Embodiment of this invention. The figure which shows an example of the user information preserve | saved at the public cloud information management storage by this embodiment. The figure which shows an example of the user account information preserve | saved at the public cloud information management storage by this embodiment. The figure which shows the processing flow of the user account setting assistance of the public cloud by the public cloud management tool by this embodiment. The figure which shows the processing flow of the password change alert function which prompts the user account password change by this embodiment. The figure which shows the processing flow of the user account deletion alert function which promotes deletion of the user account by this embodiment. The figure which shows the processing flow of the session time over prevention function of the public cloud by this embodiment.

  Hereinafter, an embodiment of a public cloud service use support system, a use support method, a public cloud management tool, and the cloud management method according to the present invention will be described in detail with reference to the drawings.

[Constitution]
As shown in FIG. 1, a public cloud service utilization support system 100 according to the present embodiment is connected to a plurality of public clouds 40 to 42 via a communication line such as the Internet, and creates a public cloud user account and authentication key and server. A public cloud management tool 10 that automatically creates a certificate, a public cloud information management storage 30 that stores user information such as a user account, an authentication key, and a server certificate created by the public cloud management tool 10; The computer includes a browser 20 for installing a public cloud management tool. This computer, like a general computer, is a CPU (Central Processing Unit), a memory, and a magnetic disk device. Storage means, a display unit, input / output devices such as a keyboard, various interface devices, basic software (OS: operating system) and various software, and the public cloud information management storage 30 includes the built-in magnetic disk device or It is an external magnetic disk device, and the public cloud management tool 10 may be a macro installed in the browser, an application program that operates in conjunction with the browser, or a browser with a function described later.

  As shown in FIG. 2, the user information of the public cloud management tool 10 stored in the public cloud information management storage 30 includes an ID representing a record identifier, a user name of the public cloud management tool 10 corresponding to the ID, , Including each item information of an account name of the public cloud management tool 10 used by the user, an account password of the public cloud management tool 10, and an email address of the user of the public cloud management tool 10, for example, a user The user name with ID “1” is “Hitachi Taro”, the account name is “Hitachi Taro”, the account password is “HitachiPa $$”, the user email address is “Taro.Hitachi@aaa.com”, and the user The user name of ID “2” is “Hitachi Hana ”, The account name is“ Hitachi Hanako ”, the account password is“ Hanako123 ”, the user email address is“ Hanako.Hitachi@aaa.com ”, and the information is stored by the user in advance. .

  The user account information generated by the public cloud management tool 10 according to the present embodiment accessing and generating a plurality of public clouds by the process described later is stored in the public cloud information management storage 30 in the same manner as the user information. As shown in FIG. 3, the ID indicating the record identifier, the user name of the public cloud management tool 10, the public cloud name registered by the user of the public cloud management tool 10, the user account name of the public cloud, and the public Cloud user account password, server certificate that is an authentication key linked to public cloud user account, public cloud user account password change date, public cloud last use date, and corresponding service Each item information indicating the presence / absence of a server certificate includes, for example, a user name “Hitachi Taro”, a user account name “Hitachi Taro”, a user account password “HitachiPa $$”, and a server certificate. Document “TaroA.cert”, user account password change date and time “2012/7/27 15:00”, last use date and time “2012/7/28 9:00”, presence / absence of prover is stored as “present”, ID The user name “Hitachi Taro”, user account name “Hitachi Taro”, user account password “HitachiPa $$”, server certificate “TaroB.cert”, and user account password change date “2012/7” / 1 19:00 ", last use date and time" 2012 / / 1 10:00 ", presence / absence of the prover is stored, and the user name" Hitachi Hanako ", the user account name" Hitachi Hanako ", the user account password" Hanako123 ", and the server certificate are stored in the record of ID" 3 ". "HanakoB.cert", user account password change date and time "2012/7/27 9:00", last use date and time "2012/7/30 9:00", and presence / absence of prover are stored as "Yes" .

  The user account information shown in this example is the user's name, account name, and account password entered by the user, and this system provides various information about the server certificate (authentication key) and the presence / absence of the certificate (authentication key). It is information obtained by accessing the public cloud, and other times are times obtained by referring to the system clock of the computer. In the example shown in FIG. 3, an example is described in which the same public cloud user account password as the password input by the user is applied. However, the present invention is not limited to this, and the public cloud management tool 10 A unique password may be generated in common or individually for an account by an arbitrary procedure, and the generated password may be stored. Further, the certification presence / absence information indicating whether or not a server certificate is necessary for creating the user account is obtained by the system accessing a plurality of public clouds in advance, and this certification presence / absence information is shown in FIG. Stored in user account information or other management tables.

[Operation]
[Account creation process]
Now, the public cloud management tool 10 of the public cloud service utilization support system 100 configured as described above causes the browser to display a list of a plurality of public clouds 40 to 42 as selection candidates, as shown in FIG. Step S101 for selecting a public cloud as a target for creating a user account according to the instruction of the user, and personal information (user information in FIG. 2) such as a user name necessary for creating the selected user account as public cloud information Step S102 that is read from the management storage 30; step S103 that determines whether or not a server certificate (authentication key) is required for creating a user account; and step S103 that determines whether or not a certificate exists in step S103. The information is judged as requiring no certificate (no proof) In step S107 for accessing the relevant public cloud and registering an account (user name, password registration, etc.), and in step S103, if the presence / absence of certification is determined to require a certificate (certified), the relevant public Steps S105 and 104 for accessing the cloud to obtain a server certificate and registering an account (user name, password registration, etc.), and storing the server certificate obtained in step S105 in the public cloud information management storage 30 Subsequent to step S106 and step S106 and step S107, step S108 for creating public cloud user account information, and the user account and server certificate (authentication key) created in step S108 are set as public cloud information. By executing step S109 for storing in the management storage 30, user accounts for a plurality of public clouds are generated, and server certificates (authentication keys) are stored in the public cloud information management storage 30, and user accounts for a plurality of public clouds are stored. Can be easily set.

  In this example, the public cloud management tool 10 registers the account password set by the user as a password for each public cloud, but the present invention is not limited to this, and as described above, the public cloud When the management tool 10 creates a unique password for an account in common or individually by an arbitrary procedure and registers the account, the password for each public cloud registered for the account is notified to the user by e-mail or by browser display. Also good.

[Password change alert processing]
In addition, the public cloud management tool 10 of the public cloud service utilization support system 100 according to the present embodiment has a password change alert function that prompts the user to change the password of the public cloud user account, which is a security-related function for user account management support. As shown in FIG. 5, the procedure is stored in the public cloud information management storage 30 in step S201 for reading the password change period (hourly, monthly, etc.) of the public cloud user account set in a table (not shown) in advance. The latest password change date and time of the public cloud user account is read in step S202, and the latest password change date and time read in step S202 is read in step S201. It is determined whether or not the date and time when the password change period is added exceeds the system time. If it is determined that the date and time is not exceeded, step S203 ends the process. By executing, for each public cloud, an e-mail that prompts a change using a browser function or the like and ending the processing for each public cloud, it is possible to prevent the security function from being deteriorated due to the password not being changed for a long time.

  When the password of the user account information described with reference to FIG. 3 is arbitrarily set by the public cloud management tool 10, the system automatically changes to another password instead of the step S204. You may comprise so that the step performed to may be performed.

[Unused account management processing]
Furthermore, the public cloud management tool 10 of the public cloud service utilization support system 100 according to the present embodiment has a public cloud user account deletion alert function that prompts deletion of a public cloud user account that has not been used for a long time as user account management support. As shown in FIG. 6, this processing procedure includes a step S301 of reading an unused period (monthly, yearly, etc.) of a public cloud user account preset in a table (not shown), and a public cloud information management storage. Step S302 for reading the most recent use date and time of the public cloud user account stored in 30, and the last read by step S301 at the most recent use date and time read in step S302. It is determined whether or not the date and time added to the system date and time has exceeded the system time. When it is determined that the date and time has not been exceeded, step S303 ends the process. Step S304 for notifying the e-mail that prompts the browser function or the like and ending the processing is executed for each public cloud, thereby notifying the user of account deletion of the public cloud that has not been used for a long period of time and managing the account. Can help.

  In step S304 described above, the account may be automatically deleted and the user may be notified of the deletion.

[Session timeout prevention processing]
Furthermore, the public cloud management tool 10 of the public cloud service utilization support system 100 according to the present embodiment has a session timeout as a user account management support (a function of disconnecting access for information maintenance when the system has not been operated for a certain period of time). ) This processing procedure includes steps S401 for logging in to the public cloud management tool 10 and public cloud information (user account information) associated with the user logged in to the public cloud management tool 10, as shown in FIG. ), Step S403 for reading the communication confirmation interval (seconds) to the public cloud set in a table (not shown) in advance, and the current time is confirmed from the time when the communication is confirmed in step S403. It is determined from the system time whether or not the interval (second) has been exceeded, and the processing is terminated when it is determined that the interval has not been exceeded. The communication confirmation interval ( When it is determined that it has exceeded (second), the communication confirmation (for example, ping issuance) is performed to the public cloud by executing for each public cloud the step S405 for executing the communication confirmation to the public cloud and ending the processing. Thus, session time over can be prevented.

10 public cloud management tools, 20 browsers,
30 public cloud information management storage, 40-42 public cloud,
100 Public cloud service usage support system

Claims (16)

A public cloud that is connected to multiple public clouds via a communication line and that supports user account and authentication key management using user information including user name, public cloud account name, and public cloud account password A public cloud service usage support system with management tools,
Public cloud user name, public cloud public cloud name, public cloud user account name, public cloud user account password, authentication key associated with the public cloud user account, and the password A public cloud information management storage for storing user account information including a change date and time, a final use date and time of the public cloud, and a certification presence / absence information indicating the presence / absence of an authentication key for the public cloud,
The public cloud management tool is
A first step of reading public cloud user information selected by the user from the public cloud information management storage;
A second step of determining whether or not an authentication key is necessary for the public cloud read in the first step with reference to the certification presence information;
A third step of accessing the relevant public cloud and registering an account when it is determined that the certificate presence / absence information is unnecessary in the second step;
A fourth step of accessing the relevant public cloud to obtain an authentication key and registering an account when it is determined in the second step that the certification presence / absence information is certificate required;
A fifth step of storing the authentication key obtained in the fourth step in a public cloud information management storage;
A sixth step of creating user account information for each public cloud using the user information read in the first step and the authentication key stored in the fifth step;
A public cloud service utilization support system, comprising: executing a seventh step of storing the user account information generated in the sixth step in a public cloud information management storage.   The public cloud management tool, when performing account registration in the fourth step and the fifth step, executes an eighth step of registering an account password included in the user information in a public cloud. The public cloud service usage support system according to 1.   When the public cloud management tool performs account registration in the third step and the fourth step, an account password to be registered in the public cloud is generated by an arbitrary method, and the generated account password is registered in the public cloud. The public cloud service utilization support system according to claim 1, wherein the step is executed.   A tenth step in which the public cloud management tool reads a password change period of a public cloud user account that has been set in advance, and an eleventh step in which the public cloud password change date and time stored in the public cloud information management storage is read. When it is determined that the date and time obtained by adding the password change period read in the eleventh step to the password change date and time read in the tenth step exceeds the system time, an email is issued to prompt the user to change the password. The public cloud service utilization support system according to claim 2, wherein the twelfth step of registering in the public cloud is executed.   A tenth step in which the public cloud management tool reads a password change period of a public cloud user account that has been set in advance, and an eleventh step in which the public cloud password change date and time stored in the public cloud information management storage is read. When it is determined that the date and time obtained by adding the password change period read in the eleventh step to the password change date and time read in the tenth step exceeds the system time, a new account password is issued and registered in the public cloud. The public cloud service utilization support system according to claim 3, wherein the thirteenth step is executed.   A 14th step in which the public cloud management tool reads an unused period of a public cloud user account that is set in advance, and a 15th step in which the last use date and time of the public cloud stored in the public cloud information management storage is read. When it is determined that the date and time obtained by adding the last use date and time read in step 14 to the last use date and time read in step 15 exceeds the system time, an e-mail that prompts the user to delete the account is issued. The public cloud service usage support system according to any one of claims 1 to 5, characterized in that the sixteenth step or a seventeenth step of issuing an e-mail to the user to the effect that the account has been deleted is executed. .   The 18th step in which the public cloud management tool reads a communication confirmation interval to the public cloud set in advance, and whether or not the current time exceeds the communication confirmation interval from the time at which the communication confirmation has been made in the 18th step. The use of the public cloud service according to any one of claims 1 to 6, wherein the nineteenth step of executing communication confirmation to the public cloud is executed when it is determined by the system time and it is determined that the time is exceeded. system. A public cloud that is connected to multiple public clouds via a communication line and that supports user account and authentication key management using user information including user name, public cloud account name, and public cloud account password Management tool, public cloud user name, public cloud public cloud name, public cloud user account name, password for public cloud user account, and authentication associated with the public cloud user account A public cloud that stores user account information including a key, the password change date and time, the last use date and time of the public cloud, and certification presence / absence information indicating the presence or absence of an authentication key for the public cloud A public cloud service support method of computer having an information management storage,
In the public cloud management tool,
A first step of reading public cloud user information selected by the user from the public cloud information management storage;
A second step of determining whether or not an authentication key is necessary for the public cloud read in the first step with reference to the certification presence information;
A third step of accessing the relevant public cloud and registering an account when it is determined that the certificate presence / absence information is unnecessary in the second step;
A fourth step of accessing the relevant public cloud to obtain an authentication key and registering an account when it is determined in the second step that the certification presence / absence information is certificate required;
A fifth step of storing the authentication key obtained in the fourth step in a public cloud information management storage;
A sixth step of creating user account information for each public cloud using the user information read in the first step and the authentication key stored in the fifth step;
A public cloud service utilization support method, comprising: executing the seventh step of storing the user account information generated in the sixth step in a public cloud information management storage.   The eighth step of registering the account password included in the user information in the public cloud when performing account registration in the fourth step and the fifth step in the public cloud management tool is performed. 8. Public cloud service usage support method according to 8.   When performing account registration in the third and fourth steps in the public cloud management tool, an account password to be registered in the public cloud is generated by an arbitrary method, and the generated account password is registered in the public cloud. 9. The public cloud service usage support method according to claim 8, wherein the step is executed.   A tenth step of reading the public cloud user account password change period set in advance into the public cloud management tool and an eleventh step of reading the public cloud password change date and time stored in the public cloud information management storage When it is determined that the date and time obtained by adding the password change period read in the eleventh step to the password change date and time read in the tenth step exceeds the system time, an email is issued to prompt the user to change the password. The public cloud service utilization support method according to claim 9, wherein the twelfth step of registering in the public cloud is executed.   A tenth step of reading the public cloud user account password change period set in advance into the public cloud management tool and an eleventh step of reading the public cloud password change date and time stored in the public cloud information management storage When it is determined that the date and time obtained by adding the password change period read in the eleventh step to the password change date and time read in the tenth step exceeds the system time, a new account password is issued and registered in the public cloud. 13. The public cloud service utilization support method according to claim 10, wherein the thirteenth step is executed.   A 14th step of reading a public cloud user account unused period set in advance into the public cloud management tool, and a 15th step of reading the last use date and time of the public cloud stored in the public cloud information management storage When it is determined that the date and time obtained by adding the last use date and time read in step 14 to the last use date and time read in step 15 exceeds the system time, an e-mail that prompts the user to delete the account is issued. 13. The public cloud service usage support method according to claim 8, wherein the sixteenth step or a seventeenth step of issuing an e-mail to the user indicating that the account has been deleted by deleting the corresponding account is executed. .   An eighteenth step of reading a preset communication confirmation interval to the public cloud into the public cloud management tool, and whether or not the current time exceeds the communication confirmation interval from the time when the communication confirmation is made in the eighteenth step. The public cloud service usage support according to claim 8, wherein the nineteenth step of executing communication confirmation to the public cloud is executed when it is determined by the system time that it is exceeded. Method. Public cloud user name, public cloud public cloud name, public cloud user account name, public cloud user account password, authentication key associated with the public cloud user account, and the password Connected to a public cloud information management storage that stores user account information including each item of change date, last use date of the public cloud, and certification presence / absence information indicating the presence / absence of an authentication key for the public cloud. A public cloud management tool connected to the cloud via a communication line and referring to the user account information to support management of user accounts and authentication keys,
The public cloud management tool
A first step of reading public cloud user information selected by the user from the public cloud information management storage;
A second step of determining whether or not an authentication key is necessary for the public cloud read in the first step with reference to the certification presence information;
A third step of accessing the relevant public cloud and registering an account when it is determined that the certificate presence / absence information is unnecessary in the second step;
A fourth step of accessing the relevant public cloud to obtain an authentication key and registering an account when it is determined in the second step that the certification presence / absence information is certificate required;
A fifth step of storing the authentication key obtained in the fourth step in a public cloud information management storage;
A sixth step of creating user account information for each public cloud using the user information read in the first step and the authentication key stored in the fifth step;
A public cloud management tool that executes a seventh step of storing user account information generated in the sixth step in a public cloud information management storage. Public cloud user name, public cloud public cloud name, public cloud user account name, public cloud user account password, authentication key associated with the public cloud user account, and the password Connected to a public cloud information management storage that stores user account information including each item of change date, last use date of the public cloud, and certification presence / absence information indicating the presence / absence of an authentication key for the public cloud. A public cloud management method of a computer system connected to a cloud via a communication line and referring to the user account information to support management of a user account and an authentication key,
In the computer system,
A first step of reading public cloud user information selected by the user from the public cloud information management storage;
A second step of determining whether or not an authentication key is necessary for the public cloud read in the first step with reference to the certification presence information;
A third step of accessing the relevant public cloud and registering an account when it is determined that the certificate presence / absence information is unnecessary in the second step;
A fourth step of accessing the relevant public cloud to obtain an authentication key and registering an account when it is determined in the second step that the certification presence / absence information is certificate required;
A fifth step of storing the authentication key obtained in the fourth step in a public cloud information management storage;
A sixth step of creating user account information for each public cloud using the user information read in the first step and the authentication key stored in the fifth step;
And executing a seventh step of storing the user account information generated in the sixth step in a public cloud information management storage.

Images