JP2009258820A - Account management system, account management device, and account management method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an account management system for performing a maintenance operation without leaking account management information, and for recording operation history for each operator. <P>SOLUTION: An access management system is provided with: a maintenance object device; an access control information storage device; an application terminal, an approval terminal, and an operation terminal. The access control information storage device is provided with: an operator information storage part for storing operator information in association with operator ID; and an operation information storage part for storing operation information showing an operation schedule in association with operation ID. The application terminal preliminarily registers the operation information in the operation information storage part. The approval terminal is operated by an approver who has authority to perform access to maintenance object equipment, and configured to approve the registered operation information. The operation terminal is operated by an operator specified by the operator ID, and configured to log in maintenance object equipment by receiving authentication on the basis of the operator information, and to be given temporary authority on the basis of the approved operation information for operation. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an account management system, an account management device, and an account management method for managing an account that permits access to a target device.

  There are cases where a plurality of vendors perform maintenance work on a server that provides a commercial service. In such a case, the department managing the device temporarily pays out the account / password for working on the server to the vendor worker. Account and password history management may be performed manually, but the management work is complicated. In addition, since a plurality of workers share one account and work, it is difficult to grasp a work history indicating who performed by which vendor.

  Various techniques are known for authorization of access to resources provided in a server. For example, Japanese Patent Laid-Open No. 6-274431 discloses a technique for converting a user authentication identifier authenticated by Kerberos authentication into a user identifier in each server computer and authorizing resources in the server computer. Yes. Kerberos authentication is a technique used to confirm the identity between a server computer and a user in a network such as the Internet where security on a communication path is not ensured. Therefore, it is assumed that there is a one-to-one correspondence between the user identifier in Kerberos authentication and the user identifier in the server computer. Furthermore, if there is no user identifier corresponding to the server computer, it will be bundled with a dedicated account for sharing (only one), and this is applicable when multiple vendors use multiple application maintenance accounts. Is difficult.

  Japanese Laid-Open Patent Publication No. 9-34822 describes an authentication information management apparatus that manages authentication information in computer systems connected via a network. The computer system connected via this network has a client computer, a front-end computer that is directly accessed from the client computer, and a back-end computer that is indirectly accessed from the client computer via the front-end computer. The front computer stores the post computer ID / authentication information (password). When the post-computer is accessed after authentication by the pre-computer, the pre-computer returns authentication information for the post-computer to the client, and the client logs in to the post-computer based on the information. In this method, the password of the administrator account is shared, which may cause a security problem.

  Japanese Patent Laid-Open No. 2000-163377 discloses a system in which ID / authentication information (password) for logging in to each server is provided on the client side in a system in which a terminal can access a plurality of servers. Each terminal stores a connection information group in advance in a built-in storage unit. When each terminal accesses the desired server, each terminal searches for the corresponding connection information from the connection information group based on the input personal authentication information, and connects to the desired server based on the connection information of the search result. . In this case, the password for the administrator account is shared, which may cause a security problem.

  Japanese Patent Laid-Open No. 2003-216260 discloses a data processing apparatus having a user authentication function. The data processing apparatus includes a management unit, a first user authentication unit, an activation unit, and a second user authentication unit. The management unit manages authentication information of each system user who is permitted to use the system mounted on the own device. When there is an access request to the system, the first user authentication means performs user authentication for the user who has requested access based on the user authentication information managed by the management means. The activation unit activates the system when the user is authenticated by the first user authentication unit. The second user authentication unit is configured to perform user authentication information managed by the management unit when there is an access request to a processing program for which access restriction is set among various processing programs included in the system after the system is started by the starting unit. Based on the above, user authentication is performed for the user who has requested access.

  Japanese Laid-Open Patent Publication No. 2007-249912 discloses a shared resource management system that manages shared resources that are resources shared by a plurality of users. This shared resource management system includes a temporary authority grant request receiving unit, a privilege granting unit, and a use permission / inhibition determining unit. The temporary authority grant request accepting means accepts a right grant request indicating that the authority should be given to an alternate user who wants to temporarily use the shared resource instead of the user having the authority to use the shared resource. . The authorization processing means performs a process of storing in the storage means authorization information indicating that the authorization is given to the proxy user for a predetermined period based on the rights grant request. The use permission / inhibition judging means allows the substitute user to use the shared resource based on the authorization information of the substitute user stored in the storage means when the use request to use the shared resource is received from the substitute user. It is determined whether or not it is acceptable.

  Japanese Unexamined Patent Application Publication No. 2007-4291 discloses a vulnerability diagnosis method for diagnosing the vulnerability of a network system of a diagnosis target device and creating a diagnosis report based on the diagnosis result. The vulnerability diagnosis method includes a registration step, a diagnosis step, a file creation step, a recording step, a restoration step, and a report creation step. In the registration step, information on the diagnosis target device and authentication information of the diagnostic operator are registered as diagnostic work information in the vulnerability diagnosis device. In the diagnosis step, the vulnerability of the network system of the diagnosis target device is diagnosed using the diagnosis device in which the diagnosis work information is registered. In the step of creating the file, an encrypted vulnerability diagnosis file is created by encrypting the diagnosis result of the network system and the authentication information of the diagnostic operator. In the recording step, the created encrypted vulnerability diagnosis file is temporarily recorded in the recording means of the diagnostic apparatus. In the restoration process, the authentication information entered by the diagnostic report creator when reading the temporarily recorded encrypted vulnerability diagnostic file to the diagnostic report creation device and creating the diagnostic report based on the diagnostic result And the authentication information of the diagnostic operator restored from the encrypted vulnerability diagnosis file are collated, and when these pieces of information match, the encrypted vulnerability diagnosis file read to the diagnostic report creation device is decrypted. The diagnosis result of the network system is restored. In the step of creating a report, a diagnostic report is created based on the restored network system diagnostic result.

JP-A-6-274431 JP-A-9-34822 JP 2000-163377 A JP 2003-216260 A JP 2007-249912 A JP 2007-4291 A

  An object of the present invention is to provide an account management system, an account management apparatus, and an account management method capable of performing maintenance work without leaking account management information and recording a work history for each worker.

  In an aspect of the present invention, the access management system includes a maintenance target device that is a maintenance work target, an access control information storage device, an application terminal, an approval terminal, and a work terminal. The access control information storage device includes a worker information storage unit that stores worker information in association with the worker ID, and a work information storage unit that stores work information indicating a work schedule in association with the work ID. The application terminal registers the work information in the work information storage unit in advance. The approval terminal is operated by an approver having the authority to access the maintenance target device, and gives approval to the registered work information. The work terminal is operated by the worker specified by the worker ID, receives authentication based on the worker information, logs in to the maintenance target device, and is granted temporary authority based on the approved work information. To do.

  In another aspect of the present invention, the access management device includes an operator information storage unit and a work information storage unit. The worker information storage unit stores worker information related to a worker who maintains the maintenance target device in association with the worker ID. The work information storage unit stores work information indicating a work schedule for maintenance in association with the work ID. The work information is registered in advance in the work information storage unit from the application terminal. The registered work information is given approval by an approval terminal operated by an approver having the authority to access the maintenance target device. The worker specified by the worker ID operates the work terminal, receives authentication based on the worker information, logs in to the maintenance target device, and is granted temporary authority based on the approved work information. To do.

  In another aspect of the present invention, the access management method includes a worker registration step, a work information registration step, an approval step, a login step, and a step. In the worker registration step, worker information relating to a worker who maintains the maintenance target device is registered in the worker information storage unit in association with the worker ID. In the work information registration step, work information for maintaining the maintenance target device from the application terminal is registered in the work information storage unit in association with the work ID. In the approval step, approval is given to the work information from the approval terminal by an approver having the authority to access the maintenance target device. In the login step, the worker specified by the worker ID operates the work terminal, receives authentication based on the worker information, and logs into the maintenance target apparatus. Then, as the next step, temporary maintenance is given based on the approved work information, and maintenance work is performed.

  An object of the present invention is to provide an account management system, an account management apparatus, and an account management method capable of performing maintenance work without leaking account management information and recording a work history for each worker.

  Embodiments of the present invention will be described with reference to the drawings. FIG. 1 shows the configuration of an account management system according to an embodiment of the present invention. The account management system includes a maintenance target device 10, an access control information storage device 20, an application terminal 30, an approval terminal 40, and a work terminal 50. These devices are connected by a network such as a LAN (Local Area Network) and exchange information with each other.

  The maintenance target device 10 is a server device that is a target of maintenance work, and includes a login processing unit 11 and a command execution unit 12. The login processing unit 11 includes an authentication process 112, a work information confirmation process 114, and a temporary authority grant process 116. The command execution unit 12 includes a command execution process 122 and a log recording process 124. The maintenance target device 10 is a server device including a CPU (Central Processing Unit), a memory, an input / output device, and an auxiliary storage device, and the functions of each unit are preferably realized by software.

  The access control information storage device 20 includes a worker information storage unit 23 that holds worker information, a work information storage unit 27 that holds work information, and a worker registration processing unit that registers worker information in the worker information storage unit 23. 21. A work information registration processing unit 25 for registering work information in the work information storage unit 27 is provided. The access control information storage device 20 is a server device including a CPU, a memory, an input / output device, and an auxiliary storage device. The work information storage unit 27 and the worker information storage unit 23 are placed on the memory / auxiliary storage device. The person registration processing unit 21 and the work information registration processing unit 25 are preferably realized by software.

  The application terminal 30 is a terminal device for performing work application. The approval terminal 40 is a terminal device for performing approval for a work application. The work terminal 50 is a terminal device used for maintenance work on the maintenance target device 10. These terminal devices are devices exemplified by personal computers and include input / output devices such as a display device and a keyboard.

  In the worker information storage unit 23, as shown in FIG. 2, the name of the vendor to which the worker belongs, the authentication information at the time of login, the expiration date of the worker ID, the login state of the worker ID, etc. Stored in association with. The worker ID is assigned to each worker who performs maintenance work. This worker ID is registered in advance in the access control information storage device 20 and identifies an individual worker. Here, the worker registration processing unit 21 stores the worker ID input from the application terminal 30 to the access control information storage device 20 in the worker information storage unit 23. When registering the worker information, authentication information such as an electronic certificate is registered together with the worker ID as necessary. In addition to electronic certificates, passwords, biometric information (such as fingerprints), etc. may be registered as authentication information. The registration may be performed by a CSV (Comma Separated Value) file or may be performed by using an ID management tool.

  When it is decided to perform the maintenance work, the work schedule is registered in the access control information storage device 20. At the time of registration, a worker (applicant) whose worker ID is registered logs in to the access control information storage device 20 from the application terminal 30. Authentication at the time of login is performed using authentication information registered in the worker information storage unit 23. As the work information of the maintenance work, information including (1) target server name, (2) work account, (3) approval result notification destination type, (4) approval result notification destination, (5) work conditions, and the like is the application terminal 30. It is input from. The input work information is stored in the work information storage unit 27 in association with the work ID, as shown in FIGS.

  The target server name is a name indicating the maintenance target apparatus 10 on which the maintenance work is performed. FIG. 3 exemplifies “Server1” as the target server name. The work account is an OS (Operating System) account used in the maintenance work, and “root” is exemplified in FIG. The approval result notification destination type and the approval result notification destination indicate the notification destination and the type for notifying the approval result when the requested maintenance work is approved. For example, when the approval result notification destination type is a telephone, a telephone number is indicated as the approval result notification destination, and when the approval result notification destination type is an email, an email address is indicated as the approval result notification destination. 3 illustrates an approval result notification destination type “mail” and an approval result notification destination “a@xxx.co.jp”. In addition, an item indicating the state of the application for the work schedule is also registered. This “state” is managed by the access control information storage device 20, and “unapproved” when the work schedule is applied, “approved” when the work schedule is approved, “work completed” when the work is completed, etc. Be changed.

  As work conditions, as shown in FIG. 4, a comparison item, a comparison rule, and a comparison value are set for each work. The comparison item is preferably, for example, the current time for limiting the login time during work, the work terminal MAC address for limiting the terminals used during work, or the like. As the comparison value, the setting value of the comparison item is registered. The comparison rule indicates what relationship the value of the comparison item should have with the comparison value. That is, as a comparison rule, a relationship such as “equal (=)” relationship, “greater than (≧)”, “less than (≦)”, or the like is registered.

  The work condition is not limited to one for each work, and there may be a plurality of conditions. FIG. 4 shows an example in which three work conditions are set for the work with the application ID “Z0001”. It is confirmed that the condition is met during actual work, and work execution is permitted. In the case of the work conditions shown in FIG. 4, it can be seen from the work condition numbers 0001 and 0002 that the maintenance work is set between 1 am and 6 am on January 1, 2008. Further, it can be seen from the condition number 0003 that the MAC address of the work terminal used for the maintenance work is 00-FF-D0-xx-xx-xx.

  When the work schedule (work information) is registered, the access control information storage device 20 notifies the approver of the application content. The approver logs into the access control information storage device 20 from the approval terminal 40, confirms the application contents, and approves or rejects the application for the work schedule. The determination result of approval / disapproval is notified to the notification destination registered in the approval result notification destination by means registered in the approval result notification destination type. If approved, the status of the application changes to “Approved” as shown in FIG. If rejected, the status of the application becomes “denied” and the work schedule is cancelled.

  When the work schedule is approved, as shown in FIGS. 5 and 6, the maintenance work is performed from the scheduled date and time. When starting the maintenance work, the worker transmits the worker ID and the authentication information from the worker terminal 50 to the maintenance target apparatus 10 and logs in (step S310).

  In the maintenance target apparatus 10, the authentication process 112 of the login processing unit 11 is activated to perform worker authentication (step S320). For example, the login processing unit 11 corresponds to “/ bin / login” in the case of software of a UNIX (registered trademark) system. In the authentication process 112, the access control information storage device 20 is inquired about the worker ID and authentication information, and it is determined whether or not the worker ID and authentication information input from the operation terminal 50 are valid (step S322). As a result of the determination, if it is determined to be appropriate (step S322—YES), the maintenance target device 10 requests the work terminal 50 to input a work ID. As a result of the determination, if it is determined that it is not appropriate (step S322-NO), the operation is terminated here without proceeding further.

  When the work ID is input from the work terminal 50 (step S312), the maintenance target apparatus 10 confirms the validity of the work ID by the work information confirmation process 114. Here, based on the work information held in the work information storage unit 27 of the access control information storage device 20, whether or not the input work ID exists and the worker ID corresponding to the work ID is valid. It is confirmed whether or not there is (step S324).

  In the work information confirmation process 114, when the validity of the work ID can be confirmed, it is further determined whether or not the work corresponding to the work ID satisfies the work condition. The determination is made based on the work conditions (comparison item, comparison rule, comparison value) stored in the work information storage unit 27 of the access control information storage device 20 (step S326). If the work conditions are as shown in FIG. 4, the time (comparison item: current time) at which the work information confirmation process 114 is performed is “2008/1/1 1: 00: 00: 00” (comparison value). Whether “≧” (comparison rule) is satisfied, or “2008/1/1 6:00: 00” (comparison value) is satisfied “≦” (comparison rule) Furthermore, it is determined whether the MAC address (comparison item) of the work terminal is “00-FF-D0-xx-xx-xx” (comparison value) (comparison rule “=”).

  In the confirmation of the work ID and the work condition, if the work is valid (step S328-YES), the temporary authority granting process 116 (step S330) is performed. If the work is not valid (step S328-NO), the process is terminated without proceeding.

  In the temporary authority granting process 116, as shown in FIG. 6, first, the maintenance target device 10 acquires the OS account information and worker ID used in this work from the access control information storage device 20 (step S332). . The account information and worker ID of the OS are registered in the work information storage unit 27 as shown in FIG. The maintenance target apparatus 10 sets authority corresponding to the acquired account, and grants temporary authority (step S334). Thereafter, the OS account information and worker ID are passed to the command execution program 12 (step S340). For example, a UNIX (registered trademark) system will be specifically described as follows. A child process is generated by a fork (2) system call. Thereafter, an ID corresponding to the OS account acquired in the child process is set in the child process UID. The command execution program 12 is executed after setting the worker ID and information on the command to be used in an environment variable or the like.

  The command execution unit 12 corresponds to a shell in a UNIX (registered trademark) system, and includes a command execution process 122 and a log recording process 124. In the command execution process 122, a command is executed based on the set account information of the OS. In the log recording process 124, the work history is recorded based on the worker ID delivered by the environment variable or the like. By analyzing the work history, it is possible to confirm how the work was performed in the maintenance work.

  Thus, the worker is assigned a worker ID and performs maintenance work. By managing the worker ID, authentication information, and work schedule of the worker by the access control information storage device 20, the authentication information is managed for each worker ID, and the work history is recorded for each worker ID. Multiple workers can work using a shared account and manage the password of that account without being compromised.

  In the present embodiment, the work start time, the work end time, and the MAC address of the work terminal are exemplified as the work conditions. However, conditions necessary for other maintenance work such as the IP address of the work terminal may be used. Further, the authentication at the time of login is not limited to an electronic certificate, but a password, a worker's identification card, an IC card, or the like can be used. Although authentication based on biometric information such as fingerprints is also exemplified, so-called biometric authentication such as voiceprints and handwriting can also be used. Furthermore, the access control information storage device 20 may be the maintenance target device 10 to be maintained. The application terminal 30, the approval terminal 40, and the work terminal 50 are desirably separate, but may also serve as a part. Moreover, there may be a plurality of terminals.

It is a figure which shows the structure of the account management system which concerns on embodiment of this invention. It is a figure which shows the structure of the worker information which concerns on embodiment of this invention. It is a figure which shows the structure of the work information which concerns on embodiment of this invention. It is a figure which shows the structure of the working condition which concerns on embodiment of this invention. It is a figure explaining operation | movement of the account management system which concerns on embodiment of this invention. It is a figure explaining operation | movement of the account management system which concerns on embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Maintenance object apparatus 11 Login process part 112 Authentication process 114 Work information confirmation process 116 Temporary authority grant process 12 Command execution part 122 Command execution process 124 Log recording process 20 Access control information storage apparatus 21 Worker registration process part 23 Worker information storage Unit 25 Work information registration processing unit 27 Work information storage unit 30 Application terminal 40 Approval terminal 50 Work terminal

Claims (25)

Maintenance target devices,
An access control information storage device comprising: a worker information storage unit that stores worker information in association with a worker ID; and a work information storage unit that stores work information indicating a work schedule in association with a work ID;
An application terminal for registering the work information in the work information storage unit in advance;
An approval terminal operated by an approver having the authority to access the maintenance target device and giving approval to the registered work information;
Operated by a worker identified by the worker ID, authenticated based on the worker information, logged into the maintenance target device, and granted temporary authority based on the approved work information An access management system. The access management system according to claim 1, wherein the work information includes the worker ID authenticated based on the worker information and logged into the access control information storage device. The work information includes information indicating work conditions for specifying work to be performed with the temporary authority,
The access management system according to claim 1, wherein the temporary authority is given to the work terminal when the work condition is satisfied. The access management system according to claim 3, wherein the work condition includes a comparison item to be compared for specifying the work, a comparison value, and a comparison condition. The access management system according to any one of claims 1 to 4, wherein the maintenance target device stores a history accessed from the work terminal in association with the worker ID. The access management system according to any one of claims 1 to 5, wherein the worker information includes information indicating a notification destination and a notification unit when contacting the worker. The access management system according to claim 6, wherein the notification unit notifies the notification destination that the work information has been approved. The access management system according to any one of claims 1 to 7, wherein the worker information includes authentication information based on an electronic certificate. A worker information storage unit that stores worker information related to a worker who maintains the maintenance target device in association with the worker ID;
A work information storage unit that stores work information indicating the maintenance work schedule in association with a work ID;
The work information is registered in advance in the work information storage unit from the application terminal, and approval is given by an approval terminal operated by an approver having authority to access the maintenance target device,
The worker identified by the worker ID operates a work terminal, receives authentication based on the worker information, logs in to the maintenance target device, and temporarily grants authority based on the approved work information. An access management device that is assigned to work. The access management apparatus according to claim 9, wherein the work information includes the worker ID that is authenticated based on the worker information and logs in. The work information includes information indicating work conditions for specifying work to be performed with the temporary authority,
The access management device according to claim 9 or 10, wherein the temporary authority is given to the work terminal when the work condition is satisfied. The access management apparatus according to claim 11, wherein the work condition includes a comparison item to be compared for specifying the work, a comparison value, and a comparison condition. The access management device according to any one of claims 9 to 12, wherein the maintenance target device stores a history of access from the work terminal in association with the worker ID. The access management apparatus according to any one of claims 9 to 13, wherein the worker information includes information indicating a notification destination and a notification unit when contacting the worker. The access management apparatus according to claim 14, wherein the notification unit notifies the notification destination that the work information has been approved. The access management apparatus according to any one of claims 9 to 15, wherein the worker information includes authentication information based on an electronic certificate. A worker registration step of registering worker information relating to a worker who maintains the maintenance target device in the worker information storage unit in association with the worker ID;
A work information registration step of registering work information for maintaining the maintenance target device from the application terminal in association with a work ID in the work information storage unit;
An approval step of giving approval to the work information from an approval terminal by an approver having authority to access the maintenance target device;
A login step of receiving authentication based on the worker information from a work terminal operated by the worker identified by the worker ID and logging in to the maintenance target device;
An access management method comprising: a step of giving a temporary authority to work based on the approved work information. The access management method according to claim 17, wherein the work information includes the worker ID authenticated based on the worker information and logged into the access management apparatus. The work information includes information indicating work conditions for specifying work to be performed with the temporary authority,
The access management method according to claim 17, further comprising: granting the temporary authority to the work terminal when the work condition is satisfied. The access management method according to claim 19, wherein the work condition includes a comparison item to be compared for specifying the work, a comparison value, and a comparison condition. The access management method according to any one of claims 17 to 20, further comprising a step of storing a history accessed by the maintenance target device from the work terminal in association with the worker ID. The access management method according to any one of claims 17 to 21, wherein the worker information includes information indicating a notification destination and a notification unit when contacting the worker. The access management method according to claim 22, further comprising a step of notifying the notification destination that the work information is approved by the notification means. The access management method according to any one of claims 17 to 23, wherein the worker information includes authentication information based on an electronic certificate.   A program for causing a computer to execute the access management method according to any one of claims 17 to 24.

Images