JP7613208B2 - Information processing device and information processing program - Google Patents

Description

The present invention relates to an information processing device and an information processing program.

Patent Document 1 discloses an information processing device that includes an authentication means for authenticating a user in order for the user to access multiple resources on a network, and an acquisition means for acquiring conditions related to the strength of authentication information that are different for each of the resources. Note that this information processing device also includes a control means for controlling access to one resource of the multiple resources, when the user accesses the one resource, based on the conditions related to the strength of the one resource and strength information related to the strength of the authentication information of the user.

JP 2020-042502 A

There is a technology that allows a user to use services corresponding to all groups to which the user belongs, among groups that manage the use of services, with a single authentication process. With this technology, if a user belongs to multiple groups and authentication information conditions are defined for each group, the user must comply with the authentication information conditions defined for the first group to which the user belongs or the default authentication information conditions during the authentication process. Since authentication information conditions are defined for each group, a security level is also defined for each group. Therefore, when a user uses a group that has authentication information conditions with a higher security level than the authentication information conditions that the user must comply with, there is a problem that the security level cannot be maintained because the user does not need to comply with the higher conditions.

The present invention aims to be able to maintain the security level defined for each group even when a user belongs to multiple groups.

To achieve the above object, an information processing device according to a first aspect includes a processor, which receives authentication information for using a group that manages the use of a service, and if the received authentication information does not satisfy the highest security level condition among the authentication information conditions defined for each group to which the user belongs, presents a message urging the user to change the authentication information.

In the information processing device according to the second aspect, in the information processing device according to the first aspect, when the processor receives the authentication information from a user who does not belong to the group, if the received authentication information does not satisfy the conditions for the authentication information defined in the group with which the company to which the user belongs has a contract, the processor presents a message urging the user to change the authentication information.

In addition, in the information processing device according to the third aspect, in the information processing device according to the first or second aspect, the condition with the highest security level is the authentication information condition that includes the most items with the highest security level among the authentication information conditions defined for each of the groups to which the device belongs.

In addition, in the information processing device according to the fourth aspect, in the information processing device according to the first or second aspect, the condition with the highest security level is the condition in which the sum of values obtained by multiplying the values representing each item of the condition by a predetermined multiplier, among the conditions of the authentication information set for each of the groups to which the device belongs, is the highest for each item.

In addition, in an information processing device according to a fifth aspect, in the information processing device according to any one of the first to fourth aspects, when there are multiple conditions with the highest security level, the processor accepts a selection of a condition to be applied as a condition for determining whether or not to present a prompt to change the authentication information.

In addition, in the information processing device according to the sixth aspect, in the information processing device according to the fourth aspect, the processor accepts a change to the predetermined multiplier when there are multiple conditions with the highest security level.

Furthermore, in order to achieve the above object, the information processing program according to the seventh aspect causes a computer to execute a process of accepting authentication information for using a group that manages the use of a service, and if the accepted authentication information does not satisfy the highest security level condition among the authentication information conditions defined for each of the groups to which the user belongs, presenting a message urging the user to change the authentication information.

According to the first and seventh aspects, even if a user belongs to multiple groups, the security level defined for each group can be maintained.

According to the second aspect, even if authentication information is received from a user who does not belong to a group, the security level set for the group with which the company to which the user belongs has a contract can be maintained.

According to the third aspect, the security level can be derived more easily than when the security level is derived without using the number of items with the highest security level.

According to the fourth aspect, the security level can be derived by multiplying the values representing the conditions of the authentication information by different multipliers.

According to the fifth aspect, it is possible to select the conditions to be applied to determine whether or not to present a prompt to change authentication information from among the conditions with the highest security level.

According to the sixth aspect, if there are multiple conditions with the highest security level, the multiplier for calculating the security level can be changed.

FIG. 2 is a schematic diagram illustrating an example of a hardware configuration of an information processing system according to an embodiment. FIG. 2 is a schematic diagram illustrating an example of a hardware configuration of an information processing apparatus according to an embodiment. FIG. 2 is a schematic diagram illustrating an example of a configuration of a tenant database according to the embodiment. FIG. 4 is a schematic diagram illustrating an example of a configuration of a user database according to the embodiment. 10 is a flowchart illustrating an example of information processing according to the embodiment. FIG. 13 is a schematic diagram showing an example of a first authentication information change screen according to the embodiment. FIG. 13 is a schematic diagram showing an example of a second authentication information change screen according to the embodiment. FIG. 13 is a schematic diagram showing an example of a third authentication information change screen according to the embodiment. FIG. 13 is a schematic diagram showing an example of a fourth authentication information change screen according to the embodiment. 10 is a flowchart illustrating an example of a home policy derivation process according to the first embodiment. FIG. 13 is a schematic diagram illustrating an example of a home tenant selection screen according to the embodiment. 10 is a flowchart illustrating an example of a user setting process according to the embodiment. FIG. 13 is a schematic diagram illustrating an example of a user setting screen according to the embodiment. 10 is a flowchart illustrating an example of a policy setting process according to the embodiment. FIG. 13 is a schematic diagram illustrating an example of an applicable policy screen according to the embodiment. FIG. 13 is a schematic diagram illustrating an example of a policy setting screen according to the embodiment. 11 is a flowchart illustrating an example of a policy change process according to the embodiment. FIG. 13 is a schematic diagram illustrating an example of a policy change screen according to the embodiment. 13 is a flowchart illustrating an example of a home policy derivation process according to the second embodiment. FIG. 13 is a schematic diagram showing an example of a multiplier change screen according to the second embodiment;

Below, an example of an embodiment of the present disclosure will be described with reference to the drawings. Note that the same reference symbols are used in each drawing to identify identical or equivalent components and parts. Also, the dimensional ratios in the drawings have been exaggerated for the convenience of explanation and may differ from the actual ratios.

As shown in FIG. 1, the information processing system 100 according to this embodiment includes multiple user terminal devices 10A, 10B, 10C, etc., and a tenant server 20. In the following description, when the multiple user terminal devices 10A, 10B, 10C, etc. are not to be differentiated from one another, they will be collectively referred to as "user terminal devices 10."

The user terminal device 10 and the tenant server 20 are capable of communicating with each other via a communication means N. In this embodiment, an in-company communication line such as a LAN (Local Area Network) or a WAN (Wide Area Network) is used as the communication means N. However, a public communication line such as the Internet or a telephone line may be used as the communication means N, or a combination of an in-company communication line and a public communication line may be used. In this embodiment, a wired communication line is used as the communication means N. However, a wireless communication line may be used as the communication means N, or a combination of wired and wireless communication lines may be used.

The user terminal device 10 according to this embodiment is an information processing terminal that can connect to the tenant server 20 via a communication means N and can use the services described below. In this embodiment, a personal computer is applied as the user terminal device 10. However, any information processing terminal such as a tablet terminal or a smartphone may be applied as the user terminal device 10.

The user terminal device 10 in this embodiment includes an input unit 12 and a display unit 14.

The input unit 12 includes a pointing device such as a mouse and a keyboard, and is used to accept various types of input information.

The display unit 14 is, for example, a liquid crystal display, and displays various information. The display unit 14 may also function as the input unit 12 by adopting a touch panel system.

The tenant server 20 according to this embodiment is a server that manages the authority for a user to use a service on communication means N using a user terminal device 10, using a multi-tenant management method. In this embodiment, a cloud service or a web service is applied as a service on communication means N (hereinafter simply referred to as a "service"). However, any service provided by resources such as hardware, software, or data that a user can use via communication means N may be applied as a service.

A multi-tenant management system is a management system in which multiple tenants (tenant A and tenant B in the example shown in FIG. 1) are set up to represent a group that manages the use of a service, and the authority to use the service is managed for each tenant. In this embodiment, the management of the use of the service involves management of users who can use the service, and management of the authority of the users.

A user who belongs to a tenant can use the service corresponding to the tenant to which he or she belongs. Note that in this embodiment, a case will be described in which one tenant manages one service.

The company that has contracted with the tenant appoints an administrator (hereafter referred to as the "administrator") to manage the tenant. The administrator registers and deletes users who belong to the managed tenant, and sets the authentication information conditions for the users to use the corresponding services.

The tenant server 20 according to this embodiment also includes an information processing device 30. In this embodiment, a server computer is used as the information processing device 30. However, any information processing device, such as a personal computer, may be used as the information processing device 30. The tenant server 20 and the information processing device 30 may also be configured as separate entities.

As shown in FIG. 2, the information processing device 30 according to this embodiment includes a CPU 31, a memory 32 as a temporary storage area, a non-volatile storage unit 33, and a communication I/F unit 38. Each component is connected to each other via a bus B3.

The storage unit 33 is realized by a storage device such as an HDD, SSD, or flash memory. Note that an information processing program 33A, a user setting program 33C, a policy setting program 33D, and a policy change program 33E are stored in the storage unit 33 as a storage medium. The CPU 31 reads these programs from the storage unit 33, expands them in the memory 32, and sequentially executes the processes contained in the programs. A detailed explanation of the execution of each program will be given later. In addition, various databases such as a tenant database 33F and a user database 33G are stored in the storage unit 33.

The communication I/F unit 38 is an interface for the information processing device 30 to communicate with external devices such as the user terminal device 10. For this communication, for example, a wired communication standard such as Ethernet (registered trademark) or FDDI, or a wireless communication standard such as 4G, 5G, or Wi-Fi (registered trademark) is used.

Next, referring to FIG. 3, the tenant database 33F according to this embodiment will be described. In the tenant database 33F shown in FIG. 3, tenant information, which is information about tenants managed by the tenant server 20, is stored. In FIG. 3, each row represents a piece of tenant information. Each piece of tenant information is associated with information about a tenant ID, a password policy, and a contracted company.

The tenant ID is information for individually identifying a tenant, and is an ID that is assigned in advance as information that differs for each tenant.

The password policy is information indicating the conditions of authentication information for a user to use a service corresponding to a corresponding tenant. In this embodiment, the password policy applies a minimum length of authentication information (hereinafter referred to as "minimum password length") and whether or not to use uppercase alphabetic characters (hereinafter referred to as "whether or not to use uppercase alphabetic characters"). Furthermore, in this embodiment, the password policy applies whether or not to use lowercase alphabetic characters (hereinafter referred to as "whether or not to use lowercase alphabetic characters"), whether or not to use numbers (hereinafter referred to as "whether or not to use numbers"), and the expiration date of authentication information (hereinafter simply referred to as "expiration date"). However, the password policy may apply conditions such as whether or not to use symbols and an upper limit on the number of times the same authentication information can be used repeatedly, or a single or multiple combinations of these conditions may be applied.

The above contracting company is information that indicates the name of the company that has a contract with the corresponding tenant.

Next, the user database 33G according to this embodiment will be described with reference to FIG. 4. In the user database 33G shown in FIG. 4, user information, which is information about a user who uses a service using a user terminal device 10, is stored. In FIG. 4, each row represents user information. Each piece of user information is associated with information on the user ID, the tenant to which the user belongs, the company to which the user belongs, and the home tenant. Note that each piece of user information is also associated with information indicating authentication information as a hash value, information indicating the date and time when the authentication information was set, and a change history of the authentication information. Furthermore, each piece of user information is also associated with information indicating the user's name, information indicating the name of the organization to which the user belongs, and information indicating the user's email address. However, to avoid confusion, illustration and explanation of this information will be omitted.

The above user ID is information for individually identifying a user, and is an ID that is assigned in advance as information that differs for each user.

The above-mentioned "tenant" is information indicating the tenant ID of the tenant to which the corresponding user belongs. As shown in FIG. 4, the tenant corresponding to a user who does not belong to a tenant is stored as "none."

The above company affiliation is information that indicates the name of the company to which the corresponding user belongs.

The above-mentioned home tenant is a tenant to which the user belongs that corresponds to a home policy, which is a password policy with the highest security level among the password policies defined for each of the corresponding tenants to which the user belongs. Note that the home tenant does not necessarily have to match the home policy, and may be, for example, the tenant to which the user first belonged or a tenant set as the home tenant by an administrator. Even in this case, a home policy is set for each user, and the same invention as below can be applied. In addition, the home tenant of a user who does not belong to a tenant stores a contract tenant, which is a tenant with which the corresponding company to which the user belongs has a contract.

Next, the operation of the information processing device 30 according to this embodiment will be described with reference to Figs. 5 to 18. First, the operation of the information processing device 30 when executing information processing will be described with reference to Figs. 5 to 11. When a user issues an instruction to start execution of the information processing program 33A via the input unit 12, the CPU 31 of the information processing device 30 executes the information processing program 33A, thereby executing the information processing shown in Fig. 5.

In step 100, the CPU 31 waits until it receives authentication information (hereinafter simply referred to as "password") for using services corresponding to all tenants to which the user belongs from the input unit 12 via the communication I/F unit 38.

In step 102, the CPU 31 executes a home policy derivation process, which is a process for deriving a home policy corresponding to the user. The home policy derivation process according to this embodiment will be described later with reference to FIG. 10.

In step 104, the CPU 31 determines whether the password received in step 100 satisfies the home policy derived in step 102. If the determination in step 104 is affirmative, the CPU 31 proceeds to step 106.

In addition, the CPU 31 may not execute step 100, but may determine in step 104 whether the password previously stored in the storage unit 33 satisfies the home policy derived in step 102, and may proceed to step 106 if the determination is affirmative. In addition, in step 104, the CPU 31 may determine whether the home policy previously stored in the storage unit 33 has a higher security level than the home policy derived in step 102, and may proceed to step 106 if the determination is affirmative.

In step 106, the CPU 31 permits the login and ends this information processing. In other words, the CPU 31 allows the user to use all services corresponding to the tenant to which the user belongs and ends this information processing.

On the other hand, if the CPU 31 makes a negative determination in the processing of step 104, the CPU 31 proceeds to step 108. In step 108, the CPU 31 reads the tenant to which the user belongs from the user database 33G, and determines whether the user belongs to a tenant. In other words, the CPU 31 determines whether the home policy is the maximum tenant. The maximum tenant will be described later. If the CPU 31 makes a negative determination in the processing of step 108, the CPU 31 proceeds to step 110.

In step 110, the CPU 31 displays a first authentication information change screen on the display unit 14 according to a predetermined format.

As shown in FIG. 6, the first authentication information change screen according to this embodiment displays a message indicating that the password accepted in step 100 does not satisfy the password policy defined by the contract tenant. The first authentication information change screen according to this embodiment also displays a message urging the user to change the password so that it satisfies the password policy defined by the contract tenant. The first authentication information change screen according to this embodiment also displays the password policy defined by the contract tenant. The user inputs the changed password into the password input field 14A via the input unit 12.

In step 112, the CPU 31 waits until the password received in the processing of step 110, step 118, step 122, or step 124 satisfies the home policy corresponding to the user.

In step 114, the CPU 31 stores the password received in the processing of step 110, step 118, step 122, or step 124 in the memory unit 33 as a password corresponding to the user.

On the other hand, if the CPU 31 judges in step 108 that the answer is positive, the CPU 31 proceeds to step 116. In step 116, the CPU 31 reads the storage unit 33 and judges whether the home policy has been changed because the user has newly belonged to a tenant in the user setting process described below. In other words, in step 116, the CPU 31 judges whether the password policy defined for the tenant to which the user has newly belonged has a higher security level than the home policy that was previously stored. If the CPU 31 judges in step 116 that the answer is positive, the CPU 31 proceeds to step 118.

In step 118, the CPU 31 displays a second authentication information change screen on the display unit 14 according to a predetermined format.

As shown in FIG. 7, the second authentication information change screen according to this embodiment displays a message indicating that the home tenant has changed due to a new tenant affiliation, and a message prompting the user to change the password to satisfy the home policy. The second authentication information change screen according to this embodiment also displays the home policy. The user inputs the changed password into the password input field 14B via the input unit 12.

On the other hand, if the CPU 31 makes a negative determination in the processing of step 116, the CPU 31 proceeds to step 120. In step 120, the CPU 31 reads the storage unit 33 and determines whether the home policy has been changed because the user was deleted from the tenant to which the user belongs in the user setting processing described below. If the CPU 31 makes a positive determination in the processing of step 120, the CPU 31 proceeds to step 122.

In step 122, the CPU 31 displays a third authentication information change screen on the display unit 14 according to a predetermined format.

As shown in FIG. 8, the third authentication information change screen according to this embodiment displays a message indicating that the home tenant has changed due to deletion from the belonging tenant, and a message prompting the user to change the password to satisfy the home policy. The third authentication information change screen according to this embodiment also displays the home policy. The user inputs the changed password into the password input field 14C via the input unit 12.

On the other hand, if the CPU 31 makes a negative determination in the processing of step 120, the CPU 31 proceeds to step 124. In step 124, the CPU 31 displays a fourth authentication information change screen on the display unit 14 according to a predetermined format.

As shown in FIG. 9, the fourth authentication information change screen according to this embodiment displays a message indicating that the home policy has been changed due to a change in the password policy corresponding to the tenant to which the user belongs, and prompts the user to change the password to satisfy the home policy. The fourth authentication information change screen according to this embodiment also displays the home policy. The user inputs the changed password into the password input field 14D via the input unit 12.

In addition, in step 110, step 118, step 122, or step 124, the CPU 31 may present the message and home policy displayed on the screen by voice via the speaker of the user terminal device 10.

Also, in this embodiment, a case has been described in which if the password accepted by the CPU 31 satisfies the home policy (step 104: Y), a message prompting the user to change the password is not displayed. However, if the password accepted by the CPU 31 satisfies the home policy, a message may be displayed prompting the user to change the password to one that has a lower security level than the currently set password and satisfies the home policy.

Next, the details of the home policy derivation process according to this embodiment will be described with reference to FIG. 10.

In step 200, the CPU 31 reads the tenant corresponding to the user from the user database 33G and determines whether or not there is a tenant to which the user belongs. If the determination in the processing of step 200 is affirmative, the CPU 31 proceeds to step 202.

In step 202, the CPU 31 reads the minimum password length value corresponding to the tenant from the tenant database 33F and identifies the tenant with the longest minimum password length value.

In step 204, the CPU 31 reads the requirement for uppercase letters for the associated tenants from the tenant database 33F, and identifies the associated tenants for which the use of uppercase letters is mandatory.

In step 206, the CPU 31 reads the requirement for lowercase letters for the associated tenants from the tenant database 33F, and identifies the associated tenants for which the use of lowercase letters is mandatory.

In step 208, the CPU 31 reads the number requirement corresponding to the associated tenant from the tenant database 33F, and identifies the associated tenant for which the use of numbers is mandatory.

In step 210, the CPU 31 reads the expiration date corresponding to the associated tenant from the tenant database 33F and identifies the associated tenant with the shortest expiration date.

In step 212, the CPU 31 identifies the largest tenant, which is the tenant that belongs to the largest number of items identified in steps 202 to 210. Specifically, the CPU 31 identifies the largest tenant, which is the tenant that belongs to the largest number of items with the highest security level.

In step 214, the CPU 31 determines whether there are multiple maximum tenants. If the determination in the processing of step 214 is negative, the CPU 31 proceeds to step 216, and if the determination is positive, the CPU 31 proceeds to step 218.

In step 216, the CPU 31 sets the password policy corresponding to the maximum tenant as the home policy and proceeds to information processing step 104.

In step 218, the CPU 31 displays a home tenant selection screen conforming to a predetermined format on the display unit 14 of the user terminal device 10 owned by the administrator.

As shown in FIG. 11, the home tenant selection screen according to this embodiment displays a message indicating that there are multiple largest tenants and the password policies defined for the multiple largest tenants. The administrator inputs the largest tenant to be applied as the home tenant in the home tenant selection field 14E via the input unit 12.

In step 220, the CPU 31 sets the password policy corresponding to the maximum tenant entered in the home tenant selection field 14E as the home policy, and proceeds to information processing step 104.

On the other hand, if the CPU 31 makes a negative determination in the processing of step 200, the CPU 31 proceeds to step 222. In step 222, the CPU 31 sets the password corresponding to the contract tenant as the home policy, and proceeds to step 104 of the information processing.

Next, the details of the user setting process according to this embodiment will be described with reference to Figs. 12 and 13. When an instruction to start execution of the user setting program 33C is given by the administrator via the input unit 12, the CPU 31 of the information processing device 30 executes the user setting program 33C, thereby executing the user setting process shown in Fig. 12.

In step 300, the CPU 31 displays a user setting screen image on the display unit 14 according to a predetermined format.

As shown in FIG. 13, the user setting screen according to this embodiment displays a message prompting the user to enter a user ID and to select whether to assign the entered user ID to a managed tenant or to delete the user from the managed tenant. The administrator first enters the user ID into the user ID input field 14F via the input unit 12. Next, if the administrator wants to assign the user ID entered into the user ID input field 14F to a managed tenant, the administrator selects the affiliation button 14G via the input unit 12, and if the administrator wants to delete the user ID from the managed tenant, the administrator selects the delete button 14H via the input unit 12.

In step 302, the CPU 31 determines whether the affiliation button 14G is selected on the user setting screen. If the determination in step 302 is affirmative, the CPU 31 proceeds to step 304, and if the determination is negative, the CPU 31 proceeds to step 306.

In step 304, the CPU 31 adds the tenant managed by the administrator to the tenant in the user database 33G that corresponds to the user ID entered in the user ID input field 14F, and ends this user setting process.

In step 306, the CPU 31 deletes the tenant managed by the administrator from the tenant in the user database 33G that corresponds to the user ID entered in the user ID input field 14F, and ends this user setting process.

Next, details of the policy setting process according to this embodiment will be described with reference to Figs. 14 to 16. When an instruction to start execution of the policy setting program 33D is given by the administrator via the input unit 12, the CPU 31 of the information processing device 30 executes the policy setting program 33D, thereby executing the policy setting process shown in Fig. 14.

In step 400, the CPU 31 reads the tenant database 33F and determines whether there is a tenant contracted by the same company as the company that contracts the tenant to be managed. If the determination in the processing of step 400 is positive, the CPU 31 proceeds to step 402, and if the determination is negative, the CPU 31 proceeds to step 408.

In step 402, the CPU 31 displays an applicable policy screen on the display unit 14 according to a predetermined format.

As shown in FIG. 15, the applicable policy screen according to this embodiment displays a message indicating that there is a tenant contracted by the same company as the company that contracts the tenant to be managed, and the password policy defined for the tenant contracted by the same company. The administrator selects the Apply button 14I via the input unit 12 if the administrator wishes to apply the password policy defined for the tenant contracted by the same company as the password policy for the tenant to be managed as is, or the Do not apply button 14J if the administrator does not wish to apply the password policy.

In step 404, the CPU 31 determines whether the apply button 14I was selected on the applicable policy screen. If the determination in the processing of step 404 is affirmative, the CPU 31 proceeds to step 406, and if the determination is negative, the CPU 31 proceeds to step 408.

In step 406, the CPU 31 stores the password policy defined for the tenant contracted by the same company as the password policy for the managed tenant in the tenant database 33F, and ends this policy setting process.

In step 408, the CPU 31 displays a policy setting screen on the display unit 14 according to a predetermined format.

As shown in FIG. 16, the policy setting screen according to this embodiment displays a message prompting the user to enter a password policy. The administrator enters the password policy of the tenant to be managed in the password policy input field 14K via the input unit 12.

In step 410, the CPU 31 stores the password policy entered in the password policy input field 14K on the policy setting screen as the password policy of the managed tenant in the tenant database 33F, and ends this policy setting process.

When the CPU 31 sets a password policy by the processing of step 406, if the applied password policy is changed by the policy change processing described below, the set password policy may be changed accordingly.

Next, details of the policy change process according to this embodiment will be described with reference to Figs. 17 and 18. When an instruction to start execution of the policy change program 33E is given by the administrator via the input unit 12, the CPU 31 of the information processing device 30 executes the policy change program 33E, thereby executing the policy change process shown in Fig. 17.

In step 500, the CPU 31 displays a policy change screen on the display unit 14 according to a predetermined format.

As shown in FIG. 18, the policy change screen according to this embodiment displays a message prompting the user to input a changed password policy. The administrator inputs the changed password policy of the managed tenant into the changed password policy input field 14L via the input unit 12.

In step 502, the CPU 31 overwrites the password policy of the managed tenant in the tenant database 33F with the password policy entered in the post-change password policy input field 14L on the policy change screen, and ends this policy change process.

The CPU 31 may execute information processing after executing the user setting process or the policy change process. In this case, the CPU 31 derives a home policy without executing step 100 in the information processing, and if the password pre-stored in the memory unit 33 does not satisfy the derived home policy, it may present a message urging the user to change the password. The CPU 31 may also present a message urging the user to change the password if the password policy corresponding to the home tenant pre-stored in the user database 33G has a lower security level than the derived home policy.

The CPU 31 may also prompt the user to change his or her password if all items in the current password policy have a lower security level compared to the item in the home policy that has the lowest security level.

[Second embodiment]
The second embodiment differs from the first embodiment in that the tenant that is applied as the maximum tenant is the one that corresponds to the password policy having the highest policy score, which is a value obtained by multiplying each of the items of the password policy by a predetermined multiplier and adding up the values for each item. This will be described in detail below.

Note that the hardware configuration of the information processing device 30 according to this embodiment is the same as the configuration according to the first embodiment (see Figures 1 to 4), so a description thereof will be omitted here.

Next, the operation of the information processing device 30 when executing the home policy derivation process will be described with reference to FIG. 19. Note that the process of step 600 and the process of steps 630 to 638 of the information processing shown in FIG. 19 are the same as the process of step 200 and the process of steps 214 to 222 of the information processing shown in FIG. 10, and therefore the description thereof will be omitted.

In step 602 of FIG. 19, the CPU 31 reads the password length lower limit value corresponding to the tenant from the tenant database 33F, normalizes the value to a value between 0 and 1, and multiplies the normalized value by a predetermined multiplier A to derive the password length score. The CPU 31 stores the derived password length score in the memory unit 33.

In step 604, the CPU 31 reads from the tenant database 33F whether or not to require uppercase letters for the associated tenant, and determines whether or not the use of uppercase letters is required. If the determination in step 604 is affirmative, the CPU 31 proceeds to step 606, and if the determination is negative, the CPU 31 proceeds to step 608.

In step 606, the CPU 31 derives the English uppercase letter score by multiplying 1 by a predetermined multiplier B, which is a value between 0 and 1. The CPU 31 stores the derived English uppercase letter score in the memory unit 33.

In step 608, the CPU 31 sets the English uppercase letter score to 0 and stores the English uppercase letter score in the memory unit 33.

In step 610, the CPU 31 reads from the tenant database 33F whether or not lowercase letters are required for the tenant to which the tenant belongs, and determines whether or not the use of lowercase letters is required. If the determination in the processing of step 610 is affirmative, the CPU 31 proceeds to step 612, and if the determination is negative, the CPU 31 proceeds to step 614.

In step 612, the CPU 31 derives the lowercase English letter score by multiplying 1 by a predetermined multiplier C, which is a value between 0 and 1. The CPU 31 stores the derived lowercase English letter score in the memory unit 33.

In step 614, the CPU 31 sets the English lowercase letter score to 0 and stores the English lowercase letter score in the memory unit 33.

In step 616, the CPU 31 reads out the number requirement corresponding to the tenant from the tenant database 33F and determines whether the use of numbers is mandatory. If the determination in step 616 is affirmative, the CPU 31 proceeds to step 618, and if the determination is negative, the CPU 31 proceeds to step 620.

In step 618, the CPU 31 derives the numerical score by multiplying 1 by a predetermined multiplier D, which is a value between 0 and 1. The CPU 31 stores the derived numerical score in the memory unit 33.

In step 620, the CPU 31 sets the numerical score to 0 and stores the numerical score in the memory unit 33.

In step 622, the CPU 31 reads the expiration date corresponding to the tenant from the tenant database 33F, and derives the expiration date score by multiplying the reciprocal of the expiration date by a predetermined multiplier E. The CPU 31 stores the derived expiration date score in the memory unit 33.

In step 624, the CPU 31 derives the policy score as the sum of the password length score, the uppercase letter score, the lowercase letter score, the numeric score, and the expiration date score, and stores the policy score in the memory unit 33.

In step 626, the CPU 31 determines whether or not the policy scores of all tenants to which the target user belongs have been derived. If the determination in step 626 is affirmative, the CPU 31 ends this policy score derivation process, and if the determination is negative, the CPU 31 returns to step 602.

In step 628, the CPU 31 determines the tenant that corresponds to the password policy with the highest policy score as the maximum tenant.

In this embodiment, the CPU 31 derives each score to be a value between 0 and 1. However, the CPU 31 may derive each score to be a value outside the above range.

In addition, when there are multiple maximum tenants (step 630: Y), the CPU 31 may accept a change from multiplier A to multiplier E without executing steps 634 and 636, and may re-derive the policy score using the accepted multiplier.

Specifically, the CPU 31 displays a multiplier change screen conforming to a predetermined format on the display unit 14 of the user terminal device 10 owned by the administrator, instead of the home tenant selection screen.

As shown in FIG. 20, the multiplier change screen according to this embodiment displays a message indicating that there are multiple maximum tenants and a message prompting the user to change the multipliers A to E. The administrator inputs values to be applied as multipliers A to E in the multiplier input field 14M via the input unit 12.

Next, the CPU 31 returns to step 602 and re-derives the policy score using the value entered in the multiplier input field 14M.

Although the embodiments have been described above, the technical scope of the present invention is not limited to the scope described in the above embodiments. Various modifications or improvements can be made to the above embodiments without departing from the gist of the invention, and such modifications or improvements are also included in the technical scope of the present invention.

The above embodiments do not limit the inventions described in the claims, and not all of the combinations of features described in the embodiments are necessarily essential to the solution of the invention. The above-mentioned embodiments include inventions at various stages, and various inventions are extracted by combining the multiple constituent elements disclosed. Even if some constituent elements are deleted from all the constituent elements shown in the embodiments, as long as the effect is obtained, the configuration from which these several constituent elements are deleted can be extracted as an invention.

In addition, in each of the above embodiments, the term "processor" refers to a processor in a broad sense, including general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

In addition, the processor operations in each of the above embodiments may not only be performed by a single processor, but may also be performed by multiple processors located at physically separate locations working together. Furthermore, the order of each processor operation is not limited to the order described in each of the above embodiments, and may be changed as appropriate.

In this embodiment, the information processing program 33A is installed in the storage unit 33, but the present invention is not limited to this. The information processing program 33A according to this embodiment may be provided in a form recorded on a computer-readable storage medium. For example, the information processing program 33A according to this embodiment may be provided in a form recorded on an optical disc such as a CD (Compact Disc)-ROM or a DVD (Digital Versatile Disc)-ROM, or in a form recorded on a semiconductor memory such as a USB (Universal Serial Bus) memory or a memory card. The information processing program 33A according to this embodiment may also be obtained from an external device via the communication I/F unit 38.

In the above embodiment, the information processing is realized by a software configuration using a computer by executing a program, but the present invention is not limited to this. For example, the information processing may be realized by a hardware configuration or a combination of a hardware configuration and a software configuration.

In addition, the configuration of the information processing device 30 described in the above embodiment is merely an example, and it goes without saying that unnecessary parts may be deleted or new parts may be added without departing from the spirit of the present invention.

Furthermore, the processing flow of the information processing program described in the above embodiment (see FIG. 5) is also one example, and it goes without saying that unnecessary steps may be deleted, new steps may be added, or the processing order may be rearranged, without departing from the spirit of the present invention.

10 User terminal device 12 Input unit 14 Display unit 20 Tenant server 30 Information processing device 31 CPU
32 Memory 33 Storage unit 33A Information processing program 33C User setting program 33D Policy setting program 33E Policy change program 33F Tenant database 33G User database 33D History database 38 Communication I/F unit 100 Information processing system N Communication means

Claims (7)

A processor is provided.
The processor,
Accepts authentication information to use the group that manages the use of the service,
If the received authentication information does not satisfy the highest security level condition among the conditions for the authentication information defined for each group to which the user belongs, a message is displayed urging the user to change the authentication information.
Information processing device. When the processor receives the authentication information from a user who does not belong to the group, if the received authentication information does not satisfy a condition for the authentication information defined in a group with which a company to which the user belongs has a contract, the processor presents a message urging the user to change the authentication information.
The information processing device according to claim 1 . the condition with the highest security level is an authentication information condition that includes the largest number of items with the highest security level among the authentication information conditions defined for each of the groups to which the user belongs;
3. The information processing device according to claim 1 or 2. The condition with the highest security level is a condition in which a value obtained by multiplying a value representing each item of the condition of the authentication information defined for each of the groups to which the user belongs by a predetermined multiplier and adding up the values, for each item, is the highest.
3. The information processing device according to claim 1 or 2. the processor accepts selection of a condition to be applied as a condition for determining whether to present a notification prompting the user to change the authentication information when there are a plurality of conditions having the highest security level;
The information processing device according to any one of claims 1 to 4. the processor accepts a change to the predetermined multiplier when there are a plurality of conditions having the highest security level;
The information processing device according to claim 4. Accepts authentication information to use the group that manages the use of the service,
If the received authentication information does not satisfy the highest security level condition among the conditions for the authentication information defined for each group to which the user belongs, a message is displayed urging the user to change the authentication information.
An information processing program for causing a computer to execute processing.