Patent SG-11201407932Q-A (SG)
Title: Cloud security management system
Inventor: TAMURA MINEYUKI
Filed: 2012-05-29
Abstract: (i2) mwu ft iz s-5 iv x m £ titz s issaj n d9) mm IHMMi (43) m&'&m a 2013^12^ 5 0(05.12.2013) WIPOIPCT (10) WO 2013/179383 A1 (51) G06F 21/20 (2006.01) (21) (22) (25) (26) 4>§fl(£> s In: G06F 21/24 (2006.01) PCT/JP2012/063739 2012 ^ 5 M 29 0(29.05.2012) (71) ttSJSiA. (5K:|ai^-^ < %-CCDJH^ISII^-OL^-C): iyXjAX (Hitachi Systems, Ltd.) [JP/JP]; T 1418672 JH — T I2|1^ Tokyo (JP). (72) (75) f§BJ#/tiil!A (SfcSICOl^TO)^): Ett (TAMURA, Mineyuki) [JP/JP]; T 1418672 JIIE*MS-Tg 2#1ttaSttBii/Xf AX rt Tokyo ( JP) . (74) ^ (TSUTSUI, Yamato et al.); T 1600022 H JiliRfrfl Efffi 2 T g 3 # 1 O T§- Tokyo $r?HiP*6tf;u3ie (JP). (8i) Jt^ia (^ro&i^psy > IS ft nJ f b): AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DK, DM, DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IS, JP, KE, KG, KM, KN, KP, KR, KZ, LA, LC, LK, LR, LS, LT, LU, LY, MA, MD, ME, MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW. (84) (asrofci^isy > ±T(Dmm(Dfcm% V&tf nlfb): ARIPO (BW, GH, GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, SZ, TZ, UG, ZM, ZW), 3- — V T (AM, AZ, BY, KG, KZ, RU, TJ, TM), 3 — • V / ^ (AL, AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR), OAPI (54) Title: CLOUD SECURITY MANAGEMENT SYSTEM (54)^BJCD^i^ :^ 7 t> = r R-tr^rn. 'J f-fUvXf A 00 m o\ i> i-H cn i-H o CJ o & teli Public cloud (CL) Ul section (Web server) Registration section Execution control section Authentication control secti< Controller (agent) Shared server [virtual serve Hardware (physical server z Control section Library (storage section) Management information User program (UP) UP data \"i information generation process Server authentication information generation process Permission information setting process Authentication process Permission information User information UP information CL information Server information UP authentication information (file) Server authentication information (file) AA. System according tc ;u rity management system) (57) Abstract: The purpose of the invention is to implement security when a user program is executed in a cloud environment. This system includes a user terminal (2), a public cloud (CL) (3), and an authentication server (1). The CL (3) includes a server (31) that executes a user program (UP) and a controller (30). The authen­ tication server (1) includes an authentication control section (13) and a library (50). The library (50) stores user information (d2), UP information (d3), CL (3) in­ formation (d4), server information (d5), and permission information (dl) that man­ ages the association between the UP and the server about execution. The authen­ tication control section (13) performs a process for generating UP authentication information (FI), a process for generating server authentication information (F2), a process for, when UP is be to executed by the server in the CL (3), determining ex­ ecution permission by referencing the authentication information (F1, F2) and the permission information (dl), and other processes. (57)®$: *7^ M2. t, /ij'j R (c L) 3 t, SH-y—/*1 U CLSfldii, (UP) fctfcS-y—/* (3 1) t, =l > hP-73 EflE -y-—1 3 t -J 4 ~Z> -J U 5 0 t ^usoii, (d2) , UPCDltfR (d 3) , c L3a>flMR (d4) , •tf-/toUMR (d5) , UPtf-A'iffl HfTromjEttit^Sa-fSfrpTflNR (dD IIS (JPSPI 3iA, UP SHAMS ( F 1) •+*—A'SII it® (F2) upscL3©^-/^iffjt (F 1 F , 2) (d 1 ) £#HBLT WO 2013/179383 Al I lllll llllllll II llllll III lllll lllll III III III lllll lllll lllll lllll lllll llll lllllll llll llll llll (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, ML, MR, NE, SN, TD, TG). - (&&£ 21 &(3))