JP6810614B2 - Work environment control method, work environment control system and server equipment - Google Patents

Description

The present invention relates to a technique for safely collaborating in a situation where client terminals are dispersed.

Conventionally, the administrator can centrally manage application updates and driver installations on the server so that the end user can concentrate on the original work, and the end user can work on the client terminal regardless of location. In order to do so, there is a technology for virtualizing the working environment of the client terminal. Patent Document 1 discloses a technique for realizing such a working environment.

Special Table 2016-521385

However, when a work request is made to an external organization using the technology that provides the work environment of the client terminal as in the above conventional example, communication between the work environment and the outside is required, but communication between the work environment and the outside is performed. If possible, there was a risk of leakage of confidential information and there was a security problem. It is also possible to encrypt all the data in the work environment, but there is a problem that it is not possible to control the export of data via an external server only by encryption.

The present invention is a work environment control method in which a server device including a processor and a memory controls access from a client terminal device, the first step in which the client terminal device operates an application and an external communication control unit. The second step in which the client terminal device transmits the login user information and the client certificate to the server device,
A third step in which the server device receives the login user information and the client certificate and authenticates the login user information with the preset first authentication information, and a second step set in advance by the server device. The fourth step of authenticating the client certificate with the authentication information of the above, and when the server device succeeds in the authentication of both the login user information and the client certificate, communication from the application is permitted. , when one of the client certificate and the login user information fails the authentication looking contains and a fifth step of prohibiting communication with the application, the fifth step, the client The second authentication information includes a step of determining whether or not to allow the application to access the confidential data stored in the server device based on the authentication result of the certificate, and the second authentication information is the user of the client terminal device. Accessability to the client certificate and confidential data is set for each community that is a group of the above, and the fifth step is to determine whether access to the confidential data is possible according to the community corresponding to the client certificate. Includes a decision step.

INDUSTRIAL APPLICABILITY According to the present invention, it is possible to prevent leakage of confidential information and safely collaborate in an environment in which communication between a server device and a client terminal device is permitted for communication between a work requester and a requestee. ..

An embodiment of the present invention is shown, and it is a block diagram of a distributed ICT work environment control system. It is a block diagram which shows the Example of this invention and shows the external communication control function of a client terminal apparatus. It is a figure which shows the Example of this invention and shows an example of the user management table. It is a figure which shows the Example of this invention and shows an example of the community information management table. It is a figure which shows the Example of this invention and shows an example of the protected work environment policy table. An embodiment of the present invention is shown, and it is a sequence diagram concerning the registration process of the protected working environment. It is a sequence diagram which shows the Example of this invention and shows an example of the authentication process. It is a flowchart which shows the Example of this invention and shows an example of the availability determination process of the protected work environment. It is a flowchart which shows the Example of this invention and shows an example of the determination process of accessability to a community. It is a block diagram which shows the Example of this invention and shows an example of the hardware of the communication server apparatus.

Hereinafter, an embodiment of a distributed ICT (Information and Communication Technology) work environment control system to which the present invention is applied will be described.

<System configuration>
FIG. 1 is a block diagram of a distributed ICT work environment control system according to an embodiment of the present invention. The distributed ICT work environment control system sets the work environment used by the worker and the environment in which communication and file transmission / reception are possible between the administrator and other workers via the network as the protected work environment. Then, by controlling the usage period and availability of the protected work environment itself by the work instructor, it is possible to safely collaborate even in a situation where the client terminal device 10 is not closed in the organization and is dispersed. It is a system.

The distributed ICT work environment control system is composed of a client terminal device 10, a communication server device 20, and a work environment management device 40, and is connected via a network 50. In this embodiment, an example is shown in which the work request source is the administrator of the work environment management device 40, and the work request destination is the worker who uses the client terminal device 10.

The client terminal device 10 has a protected working environment 11. The protected work environment 11 is an environment in which the worker performs the work instructed (or requested) by the administrator, and the client terminal device 10 downloads the encrypted protected work environment 26 from the communication server device 20. By doing so, it can be installed in the client terminal device 10.

The protected work environment 11 can be started on the OS (not shown) of the client terminal device 10. The protected work environment 11 has an authentication function 12, a decryption function 13, a take-out control function 14, an external communication control function (external communication control unit) 15, and an application 17. The external communication control function 15 includes a client certificate 16.

When the protected work environment 11 is used by the authentication function 12, the protected work environment 11 conforms to the policy preset in the work environment management device 40 by authenticating the communication server device 20 from the client terminal device 10. And the computer resources of the communication server device 20 become available. In addition, the authentication function 12 authenticates when decrypting the encrypted protected working environment 26.

After the authentication by the communication server device 20 is completed, the take-out control function 14 of the protected work environment 11 limits the devices that can be taken out from the protected work environment 11 according to a predetermined policy.

Further, for the application 17 of the protected work environment 11 and the external communication, the external communication control function 15 allows the external communication only to the communication server device 20, so that the communication can be performed while controlling the taking out of the confidential data 32. Centrally manage. The decryption function 13 has a function of decrypting the encrypted protected working environment so that it can be used after authentication.

The communication server device 20 centrally manages communication between the administrator and the worker and the transfer of files. Further, the communication server device 20 is a device for setting the access right of the client terminal device 10 and the policy of the protected work environment 11.

The communication server device 20 has a communication management database 21, a protected work environment storage area 25, and a work data storage area 31, and includes an authentication function 27, a protected work environment registration function 28, and a high-speed transfer function 29. , Has a communication management function 30.

The communication management database 21 is a database that stores login user information (user ID and password) of administrators and workers, community information and access rights, and policy definitions of the protected work environment 11. The communication management database 21 is composed of a user management table 22, a community information management table 23, and a protected work environment policy table 24. The community is a group of users who use the communication server device 20.

The protected work environment storage area 25 is an area for storing the protected work environment 26 encrypted by using the high-speed transfer function 29. The authentication function (authentication unit) 27 collates the user ID, password, and client certificate 16 transmitted from the client terminal device 10 so that only the protected work environment 11 according to the policy can be used. It is a function.

The protected work environment registration function 28 has a function of registering the protected work environment generated by the work environment management device 40 in the communication server device 20. The high-speed transfer function 29 has a function of transferring the protected work environment 11 and the like between the communication server device 20 and the client terminal device 10 at high speed via the network 50. The communication management function 30 has a function of centrally managing communication and file transfer via the network 50 between the administrator and the worker (between the application 17 of the work environment management device 40 and the client terminal device 10).

The work data storage area 31 stores confidential data 32 used in the protected work environment 11. The work data storage area 31 functions as a file server for the protected work environment 11 for which authentication has been completed. However, writing of confidential data 32 from the protected work environment 11 to the outside is restricted according to the rules of the protected work environment policy table 24.

The work environment management device 40 is a device that generates an encrypted protected work environment 26 to be stored in the protected work environment storage area 25. The work environment management device 40 has a protected work environment policy generation function 41, a work environment encryption function 42, and confidential data 43.

The work environment policy generation function 41 has a function of defining access authority settings for users who can use the protected work environment, usage period, available IP addresses, and communities. The work environment encryption function 42 has a function of encrypting the protected environment transmitted to the client terminal device 10. The sensitive data 43 is a master of the confidential data 32 used in the protected working environment 11. The work environment management device 40 partially duplicates the confidential data 43 used in the encrypted protected work environment 26 and stores it in the work data storage area 31 of the communication server device 20.

The encrypted protected work environment 26 is a work environment in which the communication path is protected by the client certificate 16, and is composed of a file including a policy, an application, an identifier and a path of confidential data 32 to be used, and the like. Can be done.

FIG. 10 is a block diagram showing an example of the configuration of the communication server device 20. The communication server device 20 is a computer including a processor 201, a memory 202, a storage 203, a network interface 204, and an input / output device 205. The input / output device 205 includes, for example, an input device such as a mouse, a keyboard, or a touch panel, and an output device such as a display.

Each function unit of the authentication function 27, the protected work environment registration function 28, the high-speed transfer function 29, and the communication management function 30 is loaded into the memory 202 as a program.

The processor 201 operates as a functional unit that provides a predetermined function by processing according to the program of each functional unit. For example, the processor 201 functions as a communication management unit by processing according to the communication management program. The same applies to other programs. Further, the processor 201 also operates as a functional unit that provides each function of a plurality of processes executed by each program. A computer and a computer system are devices and systems including these functional parts.

Information such as programs and tables that realize each function of the communication server device 20 can be stored in storage 203, non-volatile semiconductor memory, hard disk drive, storage device such as SSD (Solid State Drive), IC card, SD card, DVD, etc. It can be stored in a non-volatile data storage medium that can be read by the computer.

The client terminal device 10 and the work environment management device 40 have the same configuration as the communication server device 20 of FIG.

FIG. 2 is a block diagram showing an external communication control function 15 of the client terminal device 10. The external communication control function 15 is a function for limiting communication with the outside of the protected work environment 11 to only the communication server device 20.

The external communication control function 15 is included in the protected work environment 11 of the client terminal device 10. The external communication control function 15 has a communication relay unit 18, and the communication relay unit 18 holds the client certificate 16. The communication relay unit 18 has a function of blocking communication between the application 17 of the protected work environment 11 and other than the communication server device 20.

The application 17 of the protected work environment 11 is permitted to communicate only with the communication relay unit 18 of the external communication control function 15. That is, the application 17 in the protected work environment 11 of the client terminal device 10 is permitted to communicate with the outside only via the communication relay unit 18 in the external communication control function 15, and is allowed to communicate with the outside other than the communication server device 20. Cannot communicate with.

Further, the external communication control function 15 has a function of adding the login user information input by the user and the pre-installed client certificate 16 and transmitting the communication with the communication server device 20.

The authentication function 27 of the communication server device 20 refers to the communication management database 21 based on the login user information and the client certificate 16 acquired from the external communication control function 15 of the protected work environment 11 of the client terminal device 10. It has a function of selecting a target policy and determining whether or not to grant the application 17 access authority to the community according to the policy.

Further, the authentication function 27 has a function of prohibiting access to the target community when there is a connection request from the application 17A from other than the protected work environment 11 of the client terminal device 10. The authentication function 27 determines that the connection request based on the login user information to which the client certificate 16 is not attached is a connection from the application 17A other than the protected work environment 11.

<Data structure>
FIG. 3 is a diagram showing an example of data in the user management table 22 that constitutes the communication management database 21. The user management table 22 is a table having data for identifying a user who uses the client terminal device 10 in the distributed ICT work environment control system.

The user management table 22 has a user ID 301, a user name 302, and a password 303 as data fields in one entry.

FIG. 4 is a data structure diagram of the community information management table 23. The community information management table 23 is a table having data for managing information of an aggregate called a community that can be accessed only by a specific user by the communication management function 30.

The community of this embodiment can include, for example, a group of users who perform one project, a group of users who use the same confidential data 32, a group of users who share a series of tasks, and the like.

The community information management table 23 has a community ID 231, a community name 232, an administrator user ID 233, a participant user ID 234, and a protected work environment use user ID 235 in one entry as data fields.

The community information management table 23 is information generated in advance by the communication server device 20 or the like. The participant user ID 234 stores the user ID of the work environment management device 40, and the protected work environment user ID 235 stores the client. The user ID of the user of the terminal device 10 is stored.

In the figure, the user whose ID is "USER_CCCC" is the user of the protected work environment 11 in the community ID 231 = "COMMUUNITY_01", but the participant user ID 234 who is the requester of the work in the community ID 231 = "COMMUUNITY_02". Here is an example.

Since there are cases where it is not necessary to refer to the confidential data 32 depending on the community, a field for setting the necessity of accessing the confidential data 32 may be added to the community information management table 23. The communication management function 30 prohibits access to the confidential data 32 for the user ID included in the community ID 231 set in the community information management table 23 because the access to the confidential data 32 is unnecessary. As a result, leakage of the confidential data 32 can be suppressed.

FIG. 5 is a data structure diagram of the protected work environment policy table 24. The protected work environment policy table 24 is a table having data for performing policy management of the protected work environment 11.

The protected work environment policy table 24 has a policy ID 241, a target community ID 242, a client certificate 243, an available IP address 244, and an available period 245 as data fields in one entry.

The protected work environment policy table 24 is information generated in advance by the communication server device 20 or the like, and associates the target community ID 242 with the policy ID 241 for each client certificate 243.

The usable period 245 may store the contract period in which the user of the protected work environment 11 performs the work.

<Details of processing>
FIG. 6 is a sequence diagram relating to the registration process of the protected work environment 11. This sequence diagram shows the process from the generation of the protected work environment 11 to the storage in the protected work environment storage area 25.

The work environment management device 40 generates the protected work environment 11 by the work environment policy generation function 41, also generates the client certificate 16 and adds it to the protected work environment 11, and sets the policy of the protected work environment 11. Set (S601). The policy includes the policy ID 241 shown in FIG. 5, the target community ID 242, the client certificate 243, the available IP address 244, and the available period 245.

Then, the work environment management device 40 encrypts the protected work environment 11 with the work environment encryption function 42 to generate the encrypted protected work environment 26. The work environment management device 40 notifies the communication server device 20 of the completion of generation of the encrypted protected work environment 26. The encrypted protected working environment 26 includes the client certificate 16. Further, the decryption function 13 and the authentication function 12 of the protected work environment 11 can be used without encryption.

After that, the protected work environment registration function 28 of the communication server device 20 uses the high-speed transfer function 29 to transfer the encrypted protected work environment 26 and the policy from the work environment management device 40 to the communication server device 20 at high speed. (S602).

The high-speed transfer function 29 stores the encrypted protected work environment 26 in the protected work environment storage area 25 (S603), and stores the policy in the protected work environment policy table 24 of the communication management database 21 (S603). S604).

The protected work environment registration function 28 notifies the work environment management device 40 that the process is completed when the storage of the encrypted protected work environment 26 and the setting of the policy are completed (S605).

By the above processing, the encrypted protected working environment 26 and the policy generated by the working environment management device 40 are stored in the communication server device 20. After that, the client terminal device 10 downloads the encrypted protected working environment 26 from the communication server device 20, authenticates with the authentication function 12, then decrypts the encryption with the decryption function 13, and then protects the protected working environment 11. To install. After the installation is completed, the client terminal device 10 operates the application 17, the external communication control function 15, and the take-out control function 14 included in the protected work environment 11.

FIG. 7 is a flowchart showing an example of the authentication process when the protected work environment 11 of the client terminal device 10 requests the communication server device 20 to authenticate.

The user inputs login user information (user ID and password) for logging in to the communication server device 20 in the protected work environment 11 of the client terminal device 10 (S701). The communication relay unit 18 of the external communication control function 15 assigns a client certificate to the login user information (S702).

The communication relay unit 18 transmits the user ID and password together with the granted client certificate 16 to the communication server device 20 (S703). The authentication function 27 of the communication server device 20 inputs the acquired user ID, password, and client certificate 16 to the user management table 22 of the communication management database 21, the community information management table 23, and the protected work environment policy table 24. It is determined whether or not the user ID can use the protected work environment 11 (S704).

When the authentication function 27 determines as a result of the above determination that the user ID does not have the authority to use the protected work environment 11, the authentication function 27 sends a login failure notification to the client terminal device 10, and the protected work environment 11 Cannot be used (S705).

On the other hand, when the authentication function 27 determines that it has the authority to use the protected work environment 11, it transmits a notification of successful login to the client terminal device 10 (S706). After receiving the notification from the communication server device 20 that the login is successful, the protected work environment 11 transmits the community ID to the communication server device 20 via the communication relay unit 18 for access to the community (S707). , S708).

Does the communication server device 20 have the authority to collate the user management table 22, the community ID 23, and the protected work environment policy table 24 of the communication management database 21 based on the acquired community ID and use the protected work environment in the target community? It is determined whether or not (S709).

When the authentication function 27 determines as a result of the determination that the protected work environment 11 does not have the authority to use the target community, the client terminal device 10 disables access to the target community (S710). As a result of the above determination, the authentication function 27 enables the client terminal device 10 to access the target community when it is determined that the protected work environment 11 has the authority to use the target community (S711).

By the above processing, it is possible to control prohibiting the files in the protected work environment 11 from being taken out to other than the specific community of the communication management function 30.

FIG. 8 is a flowchart showing an example of the availability determination process of the protected work environment 11 performed by the authentication function 27. This process is executed when the login user information and the client certificate 16 are received from the client terminal device 10 in step S704 of FIG.

The authentication function 27 of the communication server device 20 determines whether or not a user ID / password pair is registered in the user management table 22 (S801). When the authentication function 27 determines that the registration is not performed, the authentication function 27 notifies the client terminal device 10 without authority (S806). On the other hand, when it is determined that the authentication function 27 is registered, the authentication function 27 determines whether or not the client certificate 16 is registered in the protected work environment policy table 24 (S802).

When the authentication function 27 determines that the client certificate 16 is not registered, the authentication function 27 notifies the client terminal device 10 without authority (S806). On the other hand, when the authentication function 27 determines that the client certificate 16 is registered, whether or not the IP address of the protected working environment 11 is within the range of the available IP address 244 of the record selected in step S802. Is determined (S803).

When the authentication function 27 determines that the IP address of the protected work environment 11 is out of the range of the available IP address 244, the authentication function 27 notifies the client terminal device 10 without authority (S806). On the other hand, when the authentication function 27 determines that the IP address of the protected work environment 11 is within the range of the available IP address 244, is the current date and time within the range of the available period 245 of the record selected in S802? Whether or not it is determined (S804).

When the authentication function 27 determines that the current date and time is out of the range of the available period 245, the authentication function 27 notifies the client terminal device 10 without authority (S806).

On the other hand, when the authentication function 27 determines that the current date and time is within the range of the available period 245, the authentication function 27 notifies the client terminal device 10 of the authority (S805).

By the above process, the protected work environment 11 cannot be used unless the client certificate 16 is registered in addition to the login user information, and communication from the client terminal device 10 to the communication server device 20 and confidential data 32. Access to is prohibited.

Further, even if the client certificate 16 is registered, the protected work environment 11 cannot be used unless the usable period is 245, and communication from the client terminal device 10 to the communication server device 20 and confidential data 32. Access to is prohibited.

In this embodiment, access to the communication server device 20 is switched from the protected working environment 11 of the client terminal device 10 based on the presence / absence of the client certificate 16 and whether it is valid or invalid.

If the client certificate 16 is invalid, the client terminal device 10 can be used as an unprotected computer that communicates with the outside via the network 50.

FIG. 9 is a flowchart showing an example of the process of determining whether or not the community can be accessed by the authentication function 27. This process is performed in step S709 of FIG. The authentication function 27 of the communication server device 20 is the target community ID 242 of the protected work environment policy table 24 record whose user ID is selected based on the client certificate 16 in step S802 of FIG. 8, and is the community of the community information management table 23. It is determined whether or not the record matched with the ID 231 is included in the protected work environment user ID 235 (S901). That is, the authentication function 27 determines whether or not the protected work environment use user ID 235 corresponding to the client certificate 16 includes the user ID.

When the authentication function 27 determines that the protected work environment use user ID 235 does not include the user ID, the authentication function 27 notifies the client terminal device 10 without authority (S903).

On the other hand, when it is determined that the protected work environment use user ID 235 includes the user ID, the authentication function 27 notifies the client terminal device 10 that the user ID has authority (S902).

By the above processing, the protected working environment 11 can be used by the authentication by the login user information and the client certificate 16, and further, the community can be accessed by the community ID and the client certificate 16.

According to this embodiment, in an environment in which client terminal devices 10 are distributed, an environment in which communication between a work environment management device 40 as a work request source and an external server is permitted for communication between the client terminal device 10 as a request destination. The communication server device 20 can prevent the leakage of the confidential data 32 and safely collaborate with each other.

In this embodiment, an example in which the client terminal device 10 is configured by a physical computer is shown, but the protected work environment 11 may be operated as a virtual computer on the client terminal device 10. In this case, the encrypted protected working environment 26 may be a file including the guest OS.

As described above, in the present embodiment, at the start of using the protected work environment 11, the communication server device 20 performs two authentications, that is, the login user information is authenticated and the client certificate 16 is authenticated. The communication server device 20 controls access to the communication server device 20 from the protected working environment 11 based on the presence / absence of the client certificate 16 and the validity or invalidity of the client certificate 16.

As a result, the use of the computer resources of the communication server device 20 can be switched based on the two authentication results. Further, by determining whether the client certificate 16 is valid or invalid, only the client certificate 16 within the usable period 245 can be permitted. Therefore, even if the login user information is successfully authenticated, the protected work environment 11 is prohibited from accessing the communication server device 20 unless the client certificate 16 is within the usable period 245.

Further, since the communication server device 20 can allow or prohibit access to the confidential data 32 for each community ID 231 by the community information management table 23, the security for the confidential data 32 can be ensured.

Further, the external communication control function 15 of the protected work environment 11 prohibits the communication relay unit 18 from communicating with devices other than the communication server device 20, so that even if the confidential data 32 is referred to in the protected work environment 11, it is external. It is possible to prevent leakage to.

The present invention is not limited to the above-mentioned examples, and includes various modifications. For example, the above-described embodiment is described in detail in order to explain the present invention in an easy-to-understand manner, and is not necessarily limited to the one including all the configurations described. Further, it is possible to replace a part of the configuration of one embodiment with the configuration of another embodiment, and it is also possible to add the configuration of another embodiment to the configuration of one embodiment. Further, for a part of the configurations of each embodiment, any of addition, deletion, or replacement of other configurations can be applied alone or in combination.

Further, each of the above configurations, functions, processing units, processing means and the like may be realized by hardware by designing a part or all of them by, for example, an integrated circuit. Further, each of the above configurations, functions, and the like may be realized by software by the processor interpreting and executing a program that realizes each function. Information such as programs, tables, and files that realize each function can be stored in a memory, a hard disk, a recording device such as an SSD (Solid State Drive), or a recording medium such as an IC card, an SD card, or a DVD.

In addition, the control lines and information lines indicate those that are considered necessary for explanation, and do not necessarily indicate all the control lines and information lines in the product. In practice, it can be considered that almost all configurations are interconnected.

10 Client terminal device 11 Protected work environment 15 External communication control function 16 Client certificate 17 Application 20 Communication server device 21 Communication management database 22 User management table 23 Community information management table 24 Protected work environment Policy table 25 Protected work environment storage Area 26 Encrypted protected work environment 27 Authentication function 30 Communication management function 32 Confidential data 40 Work environment management device 41 Work environment policy generation function 42 Work environment encryption function

Claims (7)

A work environment control method in which a server device including a processor and memory controls access from a client terminal device.
The first step in which the client terminal device operates the application and the external communication control unit,
The second step in which the client terminal device transmits the login user information and the client certificate to the server device,
A third step in which the server device receives the login user information and the client certificate and authenticates the login user information with the preset first authentication information.
The fourth step in which the server device authenticates the client certificate with the second authentication information set in advance,
When the server device succeeds in the authentication for both the login user information and the client certificate, communication from the application is permitted, and either one of the login user information and the client certificate authenticates. If it fails, the fifth step of prohibiting communication with the application and
Only including,
The fifth step is
A step of determining whether or not to allow the application to access the confidential data stored in the server device based on the authentication result of the client certificate is included.
The second authentication information is
Access to the client certificate and confidential data is set for each community, which is a group of users of the client terminal device.
The fifth step is
A work environment control method comprising a step of determining whether or not access to the confidential data is possible according to the community corresponding to the client certificate . A work environment control method in which a server device including a processor and memory controls access from a client terminal device.
The first step in which the client terminal device operates the application and the external communication control unit,
The second step in which the client terminal device transmits the login user information and the client certificate to the server device,
A third step in which the server device receives the login user information and the client certificate and authenticates the login user information with the preset first authentication information.
The fourth step in which the server device authenticates the client certificate with the second authentication information set in advance,
When the server device succeeds in the authentication for both the login user information and the client certificate, communication from the application is permitted, and either one of the login user information and the client certificate authenticates. If it fails, the fifth step of prohibiting communication with the application and
Including
The first step is
A work environment control method, wherein the client terminal device further includes a step of acquiring a protected work environment including the application, an external communication control unit, and the client certificate from the server device. The work environment control method according to claim 1 or 2.
A work environment control method, wherein the external communication control unit further includes a sixth step of limiting the communication destination of the application to the server device. A work environment control system in which a server device including a processor and memory controls access from a client terminal device.
The client terminal device is
It has an external communication control unit that relays application communication and sends login user information and client certificates to the server device.
The server device is
An authentication unit that receives the login user information and the client certificate, authenticates the login user information with the preset first authentication information, and authenticates the client certificate with the preset second authentication information.
When both the login user information and the client certificate succeed in the authentication, communication from the application is permitted, and when either the login user information or the client certificate fails in the authentication. Is a communication management department that prohibits communication with the application,
Have,
The second authentication information is
Access to the client certificate and confidential data is set for each community, which is a group of users of the client terminal device.
The communication management department
Based on the authentication result of the client certificate, it is determined whether or not to allow the application to access the confidential data stored in the server device, and the confidential data is determined according to the community corresponding to the client certificate. A work environment control system characterized by determining the availability of access to. A work environment control system in which a server device including a processor and memory controls access from a client terminal device.
The client terminal device is
It has an external communication control unit that relays application communication and sends login user information and client certificates to the server device.
The server device is
An authentication unit that receives the login user information and the client certificate, authenticates the login user information with the preset first authentication information, and authenticates the client certificate with the preset second authentication information.
When both the login user information and the client certificate succeed in the authentication, communication from the application is permitted, and when either the login user information or the client certificate fails in the authentication. Is a communication management department that prohibits communication with the application,
Have,
The client terminal device is a work environment control system characterized in that a protected work environment including the application, an external communication control unit, and the client certificate is acquired from the server device. The work environment control system according to claim 4 or 5.
A work environment control system characterized in that the external communication control unit limits the communication destination of the application to the server device. A server device that includes a processor and memory to control access from client terminal devices.
An authentication unit that receives the login user information and the client certificate, authenticates the login user information with the preset first authentication information, and authenticates the client certificate with the preset second authentication information.
When both the login user information and the client certificate succeed in the authentication, communication from the client terminal device is permitted, and either one of the login user information and the client certificate fails in the authentication. In some cases, the communication management unit that prohibits communication with the client terminal device,
Have,
The second authentication information is
Access to the client certificate and confidential data is set for each community, which is a group of users of the client terminal device.
The communication management department
Based on the authentication result of the client certificate, it is determined whether or not to allow the client terminal device to access the confidential data stored in the server device, and the community corresponding to the client certificate is determined. A server device characterized by determining whether or not access to confidential data is possible.

Images