JP2020119147A5 - Systems, tenant movement methods, information processing devices and their control methods, and programs - Google Patents
Systems, tenant movement methods, information processing devices and their control methods, and programs Download PDFInfo
- Publication number
- JP2020119147A5 JP2020119147A5 JP2019008600A JP2019008600A JP2020119147A5 JP 2020119147 A5 JP2020119147 A5 JP 2020119147A5 JP 2019008600 A JP2019008600 A JP 2019008600A JP 2019008600 A JP2019008600 A JP 2019008600A JP 2020119147 A5 JP2020119147 A5 JP 2020119147A5
- Authority
- JP
- Japan
- Prior art keywords
- information
- tenant
- information processing
- authorization server
- authorization
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 230000010365 information processing Effects 0.000 title claims description 68
- 238000000034 method Methods 0.000 title claims description 19
- 238000013475 authorization Methods 0.000 claims description 82
- 238000012795 verification Methods 0.000 claims description 3
- 238000013508 migration Methods 0.000 claims 2
- 230000005012 migration Effects 0.000 claims 2
- 238000012790 confirmation Methods 0.000 claims 1
Description
本発明は、システム、テナントの移動方法、情報処理装置およびその制御方法、並びにプログラムに関する。 The present invention relates to a system, a method of moving a tenant, an information processing device and a control method thereof, and a program.
上記課題を解決するために本願発明は以下の構成を有する。すなわち、情報処理装置と、サービスを提供するサービス提供サーバーと、前記サービスを利用するための認可情報を発行する認可サーバーとを含むシステムであって、前記認可サーバーは、要求に応じて、情報処理装置をテナントに登録するための登録キーを発行する第１の発行手段と、前記登録キーを用いて前記情報処理装置の登録要求を受け付けた場合に、当該情報処理装置の情報を前記テナントに登録する登録手段と、前記テナントに登録された前記情報処理装置を識別するための認証情報を発行する第２の発行手段と、前記認証情報を用いて前記サービスを利用するための認可情報の要求を受け付けた場合に、当該認証情報の検証結果に応じて、前記認可情報を応答する応答手段と、前記テナントに登録されている前記情報処理装置の情報を、異なるテナントに移動させる要求を受け付ける受け付け手段と、当該異なるテナントの情報を移動先のテナントの情報として保持する保持手段と、を有し、前記情報処理装置は、前記認可サーバーに対し、前記登録キーを用いて当該情報処理装置のテナントへの登録要求を行う登録要求手段と、前記認可サーバーから、当該登録要求に基づき発行された前記認証情報を取得する取得手段と、前記認可サーバーに対する前記認証情報を用いた認可情報の取得要求の応答として前記認可情報を取得する取得手段とを有し、前記認可サーバーは、前記移動先のテナントの情報を保持していた場合、前記情報処理装置から前記認可情報の取得要求を受け付けた際に、当該移動先のテナントの情報を前記情報処理装置に通知する通知手段をさらに有し、前記情報処理装置の前記登録要求手段は、前記認可サーバーが発行する前記情報処理装置を前記移動先のテナントに登録するための別の登録キーを用いて、当該情報処理装置の前記移動先のテナントへの登録要求を行う。 In order to solve the above problems, the present invention has the following configurations. That is, it is a system including an information processing apparatus, a service providing server that provides a service, and an authorization server that issues authorization information for using the service, and the authorization server is , upon request , information. When a first issuing means for issuing a registration key for registering an information processing device in a tenant and a registration request for the information processing device are received using the registration key, the information of the information processing device is transmitted to the tenant. Registration means registered in, a second issuing means for issuing authentication information for identifying the information processing device registered in the tenant, and authorization information for using the service using the authentication information. When a request is received, a request to move the response means that responds to the authorization information and the information of the information processing device registered in the tenant to a different tenant is requested according to the verification result of the authentication information. The information processing apparatus has the receiving means for accepting and the holding means for holding the information of the different tenant as the information of the destination tenant, and the information processing apparatus uses the registration key to the authorized server to perform the information processing. The registration request means for making a registration request to the tenant of the device, the acquisition means for acquiring the authentication information issued based on the registration request from the authorization server, and the authentication information for the authorization server were used . It has an acquisition means for acquiring the authorization information as a response to the acquisition request for the authorization information, and when the authorization server holds the information of the tenant of the movement destination, the authorization information is transmitted from the information processing apparatus. Further has a notification means for notifying the information processing apparatus of the information of the tenant of the destination when the acquisition request of the information processing apparatus is received, and the registration requesting means of the information processing apparatus is issued by the authorization server. Using another registration key for registering the information processing device in the destination tenant, a registration request for the information processing device to the destination tenant is made.
Claims (12)
前記認可サーバーは、
要求に応じて、情報処理装置をテナントに登録するための登録キーを発行する第１の発行手段と、
前記登録キーを用いて前記情報処理装置の登録要求を受け付けた場合に、当該情報処理装置の情報を前記テナントに登録する登録手段と、
前記テナントに登録された前記情報処理装置を識別するための認証情報を発行する第２の発行手段と、
前記認証情報を用いて前記サービスを利用するための認可情報の要求を受け付けた場合に、当該認証情報の検証結果に応じて、前記認可情報を応答する応答手段と、
前記テナントに登録されている前記情報処理装置の情報を、異なるテナントに移動させる要求を受け付ける受け付け手段と、
当該異なるテナントの情報を移動先のテナントの情報として保持する保持手段と、を有し、
前記情報処理装置は、
前記認可サーバーに対し、前記登録キーを用いて当該情報処理装置のテナントへの登録要求を行う登録要求手段と、
前記認可サーバーから、当該登録要求に基づき発行された前記認証情報を取得する取得手段と、
前記認可サーバーに対する前記認証情報を用いた認可情報の取得要求の応答として前記認可情報を取得する取得手段とを有し、
前記認可サーバーは、前記移動先のテナントの情報を保持していた場合、前記情報処理装置から前記認可情報の取得要求を受け付けた際に、当該移動先のテナントの情報を前記情報処理装置に通知する通知手段をさらに有し、
前記情報処理装置の前記登録要求手段は、前記認可サーバーが発行する前記情報処理装置を前記移動先のテナントに登録するための別の登録キーを用いて、当該情報処理装置の前記移動先のテナントへの登録要求を行う、
ことを特徴とするシステム。 A system including an information processing device, a service providing server that provides a service, and an authorization server that issues authorization information for using the service.
The authorization server is
A first issuing means for issuing a registration key for registering an information processing device in a tenant upon request ,
When the registration request of the information processing device is received by using the registration key, the registration means for registering the information of the information processing device in the tenant and the registration means.
A second issuing means for issuing authentication information for identifying the information processing device registered in the tenant, and
A response means that responds to the authorization information according to the verification result of the authentication information when the request for the authorization information for using the service is received by using the authentication information.
A receiving means for receiving a request to move the information of the information processing device registered in the tenant to a different tenant.
It has a holding means for holding the information of the different tenant as the information of the destination tenant , and has.
The information processing device is
A registration request means for requesting the authorization server to register the information processing apparatus with the tenant using the registration key.
An acquisition means for acquiring the authentication information issued based on the registration request from the authorization server, and
It has an acquisition means for acquiring the authorization information as a response to an authorization information acquisition request using the authentication information to the authorization server.
When the authorization server holds the information of the tenant of the move destination, when the acquisition request of the authorization information is received from the information processing device, the information processing device of the tenant of the move destination is received. Has more notification means to notify
The registration requesting means of the information processing apparatus uses another registration key for registering the information processing apparatus issued by the authorization server in the tenant of the information processing destination, and uses another registration key of the information processing apparatus of the destination of the information processing apparatus. Request registration to the tenant,
A system characterized by that.
前記認可サーバーは、前記情報処理装置の情報が前記異なるテナントに移動可能であると判定した場合に、前記保持手段により前記異なるテナントの情報を移動先のテナントの情報として保持することを特徴とする請求項１乃至６のいずれか一項に記載のシステム。 The authorization server further has a management means for managing the information of the tenant who can move the information of the information processing device .
The authorization server is characterized in that, when it is determined that the information of the information processing apparatus can be moved to the different tenant, the holding means holds the information of the different tenant as the information of the destination tenant. The system according to any one of claims 1 to 6.
前記認可サーバーにおいて、要求に応じて、情報処理装置をテナントに登録するための登録キーを発行する第１の発行工程と、
前記情報処理装置において、前記認可サーバーに対し、前記登録キーを用いて当該情報処理装置のテナントへの登録要求を行う登録要求工程と、
前記認可サーバーにおいて、前記情報処理装置から前記登録要求を受け付けた場合に、当該情報処理装置の情報を前記テナントに登録する登録工程と、
前記認可サーバーにおいて、前記テナントに登録された前記情報処理装置を識別するための認証情報を発行する第２の発行工程と、
前記情報処理装置において、前記認可サーバーから、前記認証情報を取得する第１の取得工程と、
前記認可サーバーにおいて、前記認証情報を用いて前記サービスを利用するための認可情報の要求を受け付けた場合に、当該認証情報の検証結果に応じて、前記認可情報を応答する応答工程と、
前記情報処理装置において、前記認可サーバーに対する前記認証情報を用いた認可情報の取得要求の応答として前記認可情報を取得する第２の取得工程と、
前記認可サーバーにおいて、前記テナントに登録されている前記情報処理装置の情報を、異なるテナントに移動させる要求を受け付ける受け付け工程と、
前記認可サーバーにおいて、当該異なるテナントの情報を移動先のテナントの情報として保持する保持工程と、を有し、
前記認可サーバーにおいて、前記移動先のテナントの情報を保持していた場合、前記情報処理装置から前記認可情報の取得要求を受け付けた際に、当該移動先のテナントの情報を前記情報処理装置に通知する通知工程をさらに有し、
前記登録要求工程において、前記認可サーバーが発行する前記情報処理装置を前記移動先のテナントに登録するための別の登録キーを用いて、当該情報処理装置の前記移動先のテナントへの登録要求を行うことを特徴とするテナントの移動方法。 A method of moving a tenant in a system including an information processing device, a service providing server that provides a service, and an authorization server that issues authorization information for using the service .
In the authorization server, the first issuing process of issuing a registration key for registering the information processing device to the tenant in response to a request, and
In the information processing apparatus, a registration request process for requesting the authorization server to register the information processing apparatus with a tenant using the registration key, and a registration request process.
The registration process of registering the information of the information processing device in the tenant when the registration request is received from the information processing device in the authorization server.
A second issuing step of issuing authentication information for identifying the information processing device registered in the tenant in the authorization server, and
In the information processing apparatus, the first acquisition step of acquiring the authentication information from the authorization server and
When the authorization server receives a request for authorization information for using the service by using the authentication information, a response step of responding with the authorization information according to the verification result of the authentication information.
In the information processing apparatus, a second acquisition step of acquiring the authorization information as a response to an authorization information acquisition request using the authentication information to the authorization server, and
In the authorization server, a receiving process for receiving a request to move the information of the information processing device registered in the tenant to a different tenant, and
The authorization server has a holding process of holding the information of the different tenant as the information of the destination tenant.
When the authorization server holds the information of the tenant of the migration destination, when the acquisition request of the authorization information is received from the information processing apparatus, the information of the tenant of the migration destination is notified to the information processing apparatus. Further has a notification process to
In the registration request process, a registration request for the information processing device to the destination tenant is made using another registration key for registering the information processing device issued by the authorization server to the destination tenant. How to move a tenant, which is characterized by doing .
前記認可サーバーから発行された認証情報を用いて、前記認可サーバーに対して認可情報を要求する要求手段と、
前記要求に基づき、前記認可サーバーから移動先のテナントの情報の通知を受信する受信手段と、
前記認可サーバーが発行する前記情報処理装置を前記移動先のテナントに登録するための登録キーを用いて、前記認可サーバーに対して、当該情報処理装置の前記移動先のテナントへの登録要求を行う登録要求手段とを有し、
前記認可サーバーでは、前記登録要求に基づき、前記情報処理装置の情報が前記移動先のテナントに登録されることを特徴とする情報処理装置。 An information processing device that can communicate via a network with an authorization server that issues authorization information for the information processing device corresponding to the information registered in the tenant to use the service .
A requesting means for requesting authorization information from the authorization server using the authentication information issued by the authorization server, and
Based on the request , the receiving means for receiving the notification of the information of the destination tenant from the authorization server , and
Using the registration key for registering the information processing device issued by the authorization server to the destination tenant, the authorization server is requested to register the information processing device to the destination tenant. Has a means of requesting registration ,
In the authorization server, the information processing device is characterized in that the information of the information processing device is registered in the tenant of the destination based on the registration request .
前記情報処理装置において、
前記認可サーバーから発行された認証情報を用いて、前記認可サーバーに対して認可情報を要求する要求工程と、
前記要求に基づき、前記認可サーバーから移動先のテナントの情報の通知を受信する受信工程と、
前記認可サーバーが発行する前記情報処理装置を前記移動先のテナントに登録するための登録キーを用いて、前記認可サーバーに対して、当該情報処理装置の前記移動先のテナントへの登録要求を行う登録要求工程とを有し、
前記認可サーバーでは、前記登録要求に基づき、前記情報処理装置の情報が前記移動先のテナントに登録されることを特徴とする情報処理装置の制御方法。 It is a control method of an information processing device that can communicate via a network with an authorization server that issues authorization information for the information processing device corresponding to the information registered in the tenant to use the service .
In the information processing device
A request process for requesting authorization information from the authorization server using the authentication information issued by the authorization server, and
Based on the request , the receiving process of receiving the notification of the information of the destination tenant from the authorization server , and
Using the registration key for registering the information processing device issued by the authorization server to the destination tenant, the authorization server is requested to register the information processing device to the destination tenant. Has a registration request process
The authorization server is a control method for an information processing device, wherein the information of the information processing device is registered in the tenant of the destination based on the registration request .
前記認可サーバーから発行された認証情報を用いて、前記認可サーバーに対して認可情報を要求する要求手段、
前記要求に基づき、前記認可サーバーから移動先のテナントの情報の通知を受信する受信手段、
前記認可サーバーが発行する前記コンピューターを前記移動先のテナントに登録するための登録キーを用いて、前記認可サーバーに対して、当該コンピューターの前記移動先のテナントへの登録要求を行う登録要求手段として機能させるためのプログラムであって、
前記認可サーバーでは、前記登録要求に基づき、前記コンピューターの情報が前記移動先のテナントに登録されることを特徴とするプログラム。 An authorization server that issues authorization information for the computer corresponding to the information registered in the tenant to use the service, and the computer that can communicate via the network.
A requesting means for requesting authorization information from the authorization server using the authentication information issued by the authorization server.
Receiving means for receiving notification of destination tenant information from the authorization server based on the request ,
As a registration request means for requesting the authorization server to register the computer to the destination tenant by using the registration key for registering the computer issued by the authorization server to the destination tenant. It ’s a program to make it work .
The authorization server is a program characterized in that information of the computer is registered in the tenant of the destination based on the registration request .
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| JP2019008600A JP7208807B2 (en) | 2019-01-22 | 2019-01-22 | System, tenant movement method, information processing device and its control method, and program |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| JP2019008600A JP7208807B2 (en) | 2019-01-22 | 2019-01-22 | System, tenant movement method, information processing device and its control method, and program |
Publications (3)
| Publication Number | Publication Date |
|---|---|
| JP2020119147A JP2020119147A (en) | 2020-08-06 |
| JP2020119147A5 true JP2020119147A5 (en) | 2022-02-01 |
| JP7208807B2 JP7208807B2 (en) | 2023-01-19 |
Family
ID=71890814
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| JP2019008600A Active JP7208807B2 (en) | 2019-01-22 | 2019-01-22 | System, tenant movement method, information processing device and its control method, and program |
Country Status (1)
| Country | Link |
|---|---|
| JP (1) | JP7208807B2 (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112507310B (en) * | 2020-12-05 | 2024-03-29 | 广州技象科技有限公司 | Building internet of things management method, device, equipment and storage medium |
| JP2022159845A (en) | 2021-04-05 | 2022-10-18 | キヤノン株式会社 | Information processing system and method |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP6727799B2 (en) * | 2015-12-09 | 2020-07-22 | キヤノン株式会社 | Authority delegation system, information processing device, authorization server, control method and program |
| US10230720B2 (en) * | 2016-12-12 | 2019-03-12 | Sap Se | Authorization code flow for in-browser applications |
| JP7166902B2 (en) * | 2018-12-14 | 2022-11-08 | キヤノン株式会社 | Device management system and device management method |
-
2019
- 2019-01-22 JP JP2019008600A patent/JP7208807B2/en active Active
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP2017107396A5 (en) | ||
| EP3198421B1 (en) | Rule based device enrollment | |
| KR101983048B1 (en) | Method and apparatus for providing a cloud based digital rights management service and system thereof | |
| US20190089698A1 (en) | End user initiated access server authenticity check | |
| US10875741B2 (en) | Elevator request authorization system for a third party | |
| CN103248680B (en) | Method and system for sharing network disk data | |
| TWI648996B (en) | Data interaction method and system | |
| CN113918914A (en) | Password-free authentication for access management | |
| JP2014222522A5 (en) | ||
| JP2017107343A5 (en) | ||
| JP2014203267A (en) | System and control method therefor, access management service system and control method therefor and program | |
| US9619804B1 (en) | Network of biometrically secure devices with enhanced privacy protection | |
| JP2020119147A5 (en) | Systems, tenant movement methods, information processing devices and their control methods, and programs | |
| JP2007201638A5 (en) | ||
| WO2022132345A1 (en) | Integration of legacy authentication with cloud-based authentication | |
| CN103345598B (en) | Based on many business softwares License Management method of super calculation cloud service | |
| WO2019071506A1 (en) | Experiment instrument device management system and method | |
| US11445010B2 (en) | Distributed historization system | |
| JP2012014292A5 (en) | ||
| JP2020119147A (en) | System, tenant moving method, information processing apparatus and control method thereof, authorization server and control method thereof, and program | |
| KR20220130429A (en) | Blockchain-based crowdsensing method providing automatic quality verification | |
| JP2009157917A5 (en) | ||
| US11775660B2 (en) | Transmission of data usable by others based on an appropriate timing and a transmission condition | |
| JP2016051385A (en) | File management system, management server, file management method, and computer program | |
| JP2017126191A (en) | Giving authority system, information processing device and control method |