JP2019192089A - Information processing system, information processing method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing system capable of easily sharing secret information required for login. An information processing system includes a secret information storage unit that stores shared secret information, an authentication information storage unit that stores authentication information in association with the secret information, and an authentication information storage unit that is stored in the authentication information storage unit. Based on the existing authentication information, an authentication unit that performs user authentication, an acquisition unit that acquires associated secret information on condition that the user authentication by the authentication unit is successful, and the secret information acquired by the acquisition unit And a login unit for logging in to the usage system. [Selection diagram] Fig. 7

Description

  The present invention relates to an information processing system, an information processing method, and a program.

  For example, in Patent Document 1, the password is configured by combining a plurality of divided passwords in a predetermined connection order, and the plurality of divided passwords and the connection order are managed in association with a plurality of users. A password management method is disclosed.

  In Patent Document 2, a user-side terminal individually connects to a management server and a plurality of application service providers (hereinafter referred to as “ASP”) via communication means. Connects to a management data registration unit for storing one or more back authentication information corresponding to the front authentication information, a script storage unit for storing a login script corresponding to an individual ASP, and a user terminal And an input / output unit that cooperates with the input / output unit. When a signal for selecting a specific ASP is input from the user end, the processing unit and a login script corresponding to the ASP It has a function to download authentication information to the user terminal, and the user terminal is based on the downloaded script and back authentication information. Automatically connects to the desired ASP, ASP management system is disclosed which has a function of log.

  Patent Document 3 discloses a password character string generating unit that generates a password character string, a character string dividing unit that divides the generated password character string into a plurality of pieces of partial password character string information, and the divided parts. Registration means for registering each password character string information at different addresses of the web server, and address information for referring to each of the divided partial password character string information on the web server individually. A notifying means and an authentication mechanism for allowing one of the divided partial password character string information to be referred to on the web server on condition that the other partial password character string information is input. There is disclosed a password information notification system characterized by having a password information notification system.

  Patent Document 4 is an authentication cooperation system including an authentication cooperation server and a terminal device, and a plurality of pieces of information generated by a secret sharing technique from authentication information used for authentication of a user in a service providing server that provides a predetermined service. A decryption unit that decrypts the authentication information from at least two pieces of fragment data of fragment data; and an authentication agent that requests the service providing server to authenticate the user using the authentication information decrypted by the decryption unit. The fragment data is stored in the authentication cooperation server and a storage area other than the authentication cooperation server specified by the user, and the decryption unit is configured to access the service providing server from the terminal device. , Fragment data stored in the authentication cooperation server, fragment data stored in the storage area, etc. Authentication collaboration system characterized by decoding the authentication information is disclosed.

JP2007-219630 JP 2002-328904 A JP 2006-065708 JP, 2006-153951, A

  Provide an information processing system that can easily share secret information required for login.

  An information processing system according to the present invention is stored in a secret information storage unit that stores secret information to be shared, an authentication information storage unit that stores authentication information in association with the secret information, and the authentication information storage unit. On the basis of the authentication information, an authentication unit that performs user authentication, an acquisition unit that acquires associated secret information on the condition that the user authentication by the authentication unit is successful, and the secret information acquired by the acquisition unit And a login unit for logging in to the use system.

  Preferably, the information processing apparatus further includes a distribution unit that generates a plurality of pieces of distributed piece data from the secret information, and the secret information storage unit includes a plurality of recording devices arranged at different locations, and the distribution unit The distributed piece data generated by is distributed and stored in the plurality of recording devices.

Preferably, it further includes a secret information update unit that periodically updates the secret information stored in the secret information storage unit in response to a change of the secret information in the use system, and the authentication information storage unit includes: The validity period set for the user is stored as part of the authentication information, and the authentication unit performs user authentication according to the validity period set for the user.
Preferably, the effective period of the user is a period in which each user is in charge of the operation or maintenance of the usage system.

  Preferably, the information processing apparatus further includes a history storage unit that stores the use history of the secret information by each user in association with the secret information to be shared and the user ID.

  Preferably, the authentication information storage unit further includes an authority editing unit that adds, changes, or deletes authentication information stored in the authentication information storage unit, and the authentication unit adds, changes, or deletes the authentication information. User authentication is performed based on the information.

  The information processing method according to the present invention includes a step of registering shared secret information, a step of registering authentication information in association with the registered secret information, and user authentication based on the registered authentication information. A step of obtaining secret information associated with the authentication information on the condition that the user authentication is successful, and a step of logging in to the utilization system using the obtained secret information.

  The program according to the present invention performs a user authentication based on a step of registering secret information to be shared, a step of registering authentication information in association with the registered secret information, and the registered authentication information. And a step of acquiring secret information associated with the authentication information on the condition that the user authentication is successful and a step of logging in to the use system using the acquired secret information. .

  Confidential information necessary for login can be easily shared.

1 is a diagram illustrating an overall configuration of an information processing system 1. FIG. 3 is a diagram illustrating a hardware configuration of a secret management server 2. FIG. It is a figure which illustrates the hardware constitutions of the user terminal. It is a figure which illustrates the functional composition of secret management server 2 and user terminal 4. It is a sequence diagram explaining the secret registration process (S10) in the information processing system 1. It is a sequence diagram explaining secret management processing (S20) in information processing system 1. It is a sequence diagram explaining automatic login processing (S30) in information processing system 1. It is a figure which illustrates the functional structure of the secret management server 2 and the user terminal 4 in the modification 1. It is a figure which illustrates the authentication information of the user authentication in the modification 1.

(Background and overview)
When logging into a system or service, confidential information such as a password is required. When sharing a system or service account, it is necessary to share secret information such as a password, but the management of the secret information is unsatisfactory and a security problem occurs. For example, it tends to be unclear who actually used a shared account. Also, it is easy to set a password so that shared users can easily remember it. Furthermore, there is a tendency that the password is not changed and fixed. There is a risk of passwords leaking from users who share accounts. In particular, when the system operation management is undertaken as a business, the password for logging in to the customer's system is targeted and must be strictly managed.

Therefore, in the information processing system 1 according to the present embodiment, the user authentication for accessing the secret information is performed without directly teaching the user the secret information (password) of the use system. Configured to automatically log in to the user system. Accordingly, the user can log in to the use system based on the authentication information set individually for the user authentication without knowing the shared secret information. Even if the secret information of the usage system is frequently changed, it is possible to continuously log in to the usage system unless the authentication information of each user is changed, and the security level of the usage system is improved.
Further, in the information processing system 1, secret information (password) is stored in different storages as distributed piece data by the secret sharing method, and high availability can be realized in a secure state. Furthermore, the usage history of secret information is managed, and verification of unauthorized login or the like is facilitated.

(Embodiment)
FIG. 1 is a diagram illustrating the overall configuration of the information processing system 1.
As illustrated in FIG. 1, the information processing system 1 includes a secret management server 2, a user terminal 4, and a usage server 9, and these configurations are connected to each other via a network 8.
The secret management server 2 is a computer terminal that manages secret information of the usage system 9. The secret management server 2 of this example performs user authentication of the user terminal 4, and provides the user terminal 4 with distributed data of secret information (password) of the use system 9 when the user authentication is successful.

  The user terminal 4 is a computer terminal operated by a user. In this example, a plurality of user terminals 4 (user terminal 4A and user terminal 4B) are used by different users, log in to the use server 9, and perform operation management of the use system 9.

  The usage server 9 constitutes a usage system for logging in using shared secret information. The usage server 9 in this example is a server device of a customer that is operated and managed by a plurality of users. In this example, a case where a plurality of users operate and manage the usage server 9 will be described as a specific example, but the present invention is not limited to this.

FIG. 2 is a diagram illustrating a hardware configuration of the secret management server 2.
As illustrated in FIG. 2, the secret management server 2 includes a CPU 200, a memory 202, an HDD 204, a network interface 206 (network IF 206), a display device 208, and an input device 210, and these configurations are configured via a bus 212. Connected to each other.
The CPU 200 is, for example, a central processing unit.
The memory 202 is, for example, a volatile memory and functions as a main storage device.
The HDD 204 is, for example, a hard disk drive device, and stores a computer program (for example, the server program 300 in FIG. 4) and other data files as a nonvolatile recording device.
The network IF 206 is an interface for performing wired or wireless communication.
The display device 208 is a liquid crystal display, for example.
The input device 210 is, for example, a keyboard and a mouse.

FIG. 3 is a diagram illustrating a hardware configuration of the user terminal 4.
As illustrated in FIG. 3, the user terminal 4 includes a CPU 400, a memory 402, an HDD 404, a network interface 406 (network IF 406), a display device 408, and an input device 410, and these configurations are mutually connected via a bus 412. Connected.
The CPU 400 is, for example, a central processing unit.
The memory 402 is a volatile memory, for example, and functions as a main storage device.
The HDD 404 is, for example, a hard disk drive device, and stores a computer program (for example, the user program 500 in FIG. 4) and other data files as a nonvolatile recording device.
The network IF 406 is an interface for performing wired or wireless communication.
The display device 408 is, for example, a liquid crystal display.
The input device 410 is, for example, a keyboard and a mouse.

FIG. 4 is a diagram illustrating a functional configuration of the secret management server 2 and the user terminal 4.
As illustrated in FIG. 4, a server program 300 is installed in the secret management server 2, and an authentication information storage unit 360 and a log information storage unit 370 are configured in the HDD 404. Further, two physically different external storages are connected to the secret management server 2, and a secret information storage unit 350A and a secret information storage unit 350B are configured in these storages, respectively.
A user program 500 is installed in the user terminal 4.
The server program 300 and the user program 500 are stored in a recording medium such as a CD-ROM, for example, and are installed in the secret management server 2 and the user terminal 4 via this recording medium.
Note that part or all of the server program 300 and the user program 500 may be realized by hardware such as an ASIC. Further, part or all of the server program 300 and the user program 500 may be realized by partially borrowing the function of an OS (Operating System).

  As illustrated in FIG. 4, the server program 300 includes a user authentication unit 302, a distribution unit 304, a distribution piece acquisition unit 306, and a history management unit 308. Note that the authentication information storage unit 360 stores authentication information for user authentication registered from the user terminal 4. Further, the log information storage unit 370 stores history information collected by the history management unit 308.

  In the server program 300, the user authentication unit 302 performs user authentication based on authentication information stored in the authentication information storage unit 360 in association with secret information. The user authentication unit 302 of this example performs user authentication based on the authentication information received from the user terminal 4 and the authentication information stored in the authentication information storage unit 360.

  The distribution unit 304 generates a plurality of pieces of distributed piece data from the secret information. For example, the distribution unit 304 uses a secret sharing method to generate a plurality of pieces of distributed piece data for decrypting secret information. The secret sharing method is, for example, a (k, n) threshold method. The distribution unit 304 of this example generates a plurality of distributed piece data from the password (secret information) of the usage server 9.

  The distributed piece acquisition unit 306 acquires the associated secret information on condition that the user authentication by the user authentication unit 302 is successful. For example, the distributed piece acquisition unit 306 acquires distributed piece data from a plurality of storages (recording apparatuses) installed at different locations only when user authentication by the user authentication unit 302 is successful. The distributed piece acquisition unit 306 in this example reads the distributed piece data from the secret information storage unit 350A and the secret information storage unit 350B only when the user authentication by the user authentication unit 302 is successful, and the read distributed pieces One piece of data is transmitted to the user terminal 4.

  The history management unit 308 monitors the usage status of the shared secret information, and registers the usage history of the secret information by each user in the log information storage unit 370 in association with the secret information and the user ID. The history management unit 308 of this example corresponds to the user ID of the user who is the transmission destination of the distributed piece data, the transmission date and time, and the distributed piece data when the distributed piece data is read by the distributed piece acquisition unit 306. The identification information of the secret information is associated with each other and registered in the log information storage unit 370.

  As illustrated in FIG. 4, the user program 500 includes a secret information registration unit 502, an authentication information registration unit 504, a secret information request unit 506, a secret information restoration unit 508, an automatic login unit 510, a history notification unit 512, and An authority editing unit 514 is provided.

  In the user program 500, the secret information registration unit 502 registers the secret information to be shared with the secret management server 2. The secret information registration unit 502 of this example registers a password for logging in to the use server 9 in the secret management server 2.

  The authentication information registration unit 504 registers authentication information of users who share this secret information in the secret management server 2 in association with the secret information. The authentication information registration unit 504 of this example registers the authentication information (user ID and password) of the user who shares this password in the authentication information storage unit 360 in association with the password of the usage server 9.

  The secret information request unit 506 requests the secret management server 2 for secret information for logging in to the use system. The secret information request unit 506 of this example requests the secret management server 2 to transmit the secret information identification information, the user ID, and the user authentication password to the secret management server 2 to request the secret information.

  The secret information restoration unit 508 restores the secret information based on the distributed piece data acquired by the distributed piece acquisition unit 306. The secret information restoration unit 508 of this example decrypts the password of the usage server 9 based on the two distributed pieces of data received from the secret management server 2.

  The automatic login unit 510 logs in to the use system based on the distributed piece data acquired by the distributed piece acquisition unit 306. For example, the automatic login unit 510 decrypts the secret information based on the distributed piece data acquired by the distributed piece acquisition unit 306, and automatically inputs and uses the secret information without displaying the decrypted secret information. Log in to the system. The automatic login unit 510 of this example automatically logs in to the usage server 9 using the password decrypted by the secret information restoration unit 508.

  The history notification unit 512 notifies the secret management server 2 of the usage history of the secret information. The history notification unit 512 of this example, when logging in to the usage server 9 using the secret information (distributed piece data) received from the secret management server 2, indicates the log-in date and log-out date to the history management unit 308. Notice.

  The authority editing unit 514 adds, changes, or deletes authentication information stored in the authentication information storage unit 360. The authority editing unit 514 of this example adds, changes, or deletes user authentication information registered in association with secret information.

FIG. 5 is a sequence diagram for explaining the secret registration process (S10) in the information processing system 1. The secret registration process (S10) is a process for newly registering shared secret information.
As illustrated in FIG. 5, in step 100 (S100), the secret information registration unit 502 (FIG. 4) of the user terminal 4 transmits the user ID and password to the secret management server 2 to perform user authentication. Request.
In step 105 (S105), the user authentication unit 302 of the secret management server 2 performs user authentication based on the user ID and password received from the user terminal 4, and performs the process of S110 when the user authentication is successful. Transition. If user authentication fails, the secret management server 2 notifies the user terminal 4 to that effect, and ends the secret registration process (S10).

In step 110 (S110), the user authentication unit 302 replies to the user terminal 4 that the user authentication has been successful.
In step 115 (S115), the secret information registration unit 502 of the user terminal 4 accepts input of secret information to be newly registered.

In step 120 (S120), the secret information registration unit 502 uploads the input secret information (in this example, a password for logging in to the use server 9) to the secret management server 2.
In step 125 (S125), the distribution unit 304 of the secret management server 2 generates a plurality of distributed piece data for restoring the secret information from the secret information uploaded from the secret information registration unit 502.

In step 130 (S130), the distribution unit 304 distributes and stores the generated plurality of pieces of distribution pieces in the secret information storage unit 350A and the secret information storage unit 350B.
In step 135 (S135), the secret information storage unit 350A and the secret information storage unit 350B notify the secret management server 2 of the storage processing result of the distributed piece data.

In step 140 (S140), the distribution unit 304 generates and stores distributed piece metadata. At that time, the decentralization unit 304 grants the administrator authority of the secret information to the user who has requested new registration of the secret information, and authenticates the user ID and password for user authentication in association with the distributed piece data. Register in the information storage unit 360. The secret information administrator authority includes the authority to add, change, and delete the secret information user authority.
In step 145 (S145), the distribution unit 304 notifies the user terminal 4 of the result of the secret information distribution process.
In this way, when secret information is newly registered, the secret information is divided into distributed piece data, and an administrator authority that can access the distributed piece data is set.

  FIG. 6 is a sequence diagram illustrating the secret management process (S20) in the information processing system 1. The secret management process (S20) is a process of additionally registering or changing a user who shares the registered secret information, or deleting the secret information. In this example, the case where the secret information is deleted after the additional registration or change of the user who shares the secret information is described as a specific example, but the present invention is not limited to this.

As illustrated in FIG. 6, in step 200 (S <b> 200), the authority editing unit 514 (FIG. 4) of the user terminal 4 transmits the user ID and password of the administrator authority to the secret management server 2. Require user authentication.
In step 205 (S205), the user authentication unit 302 of the secret management server 2 performs user authentication based on the user ID and password received from the user terminal 4, and if the user authentication is successful, the process of S210 is performed. Transition. If user authentication fails, the secret management server 2 notifies the user terminal 4 to that effect, and ends the secret management process (S20).

In step 210 (S210), the user authentication unit 302 replies to the user terminal 4 that the user authentication has been successful.
In step 215 (S215), the authority editing unit 514 of the user terminal 4 requests the secret management server 2 for a list of secret information to be managed.
In step 220 (S220), the secret management server 2 returns a list of secret information to be managed to the user terminal 4.

In step 225 (S225), the authority editing unit 514 of the user terminal 4 requests the secret management server 2 for the details of the secret information selected by the user among the secret information to be managed.
In step 230 (S230), the secret management server 2 returns the details of the secret information selected by the user to the user terminal 4.

In step 235 (S235), the authority editing unit 514 of the user terminal 4 accepts input of editing data for adding or changing a shared user regarding the selected secret information.
In step 240 (S240), the authority editing unit 514 uploads the input editing data (the user ID and password of the user to be added or the user ID and password of the user after the change) to the secret management server 2. Request update of authentication information associated with secret information.

In step 245 (S245), the user authentication unit 302 of the secret management server 2 updates the distributed piece metadata according to the edited data uploaded from the authority editing unit 514. At that time, the user ID and password associated with the secret information are added or changed according to the editing data.
In step 250 (S250), the user authentication unit 302 notifies the update result to the user terminal 4.

In step 255 (S255), the authority editing unit 514 of the user terminal 4 requests the secret management server 2 to delete the secret information that is the management target.
In step 260 (S260), the secret management server 2 instructs to delete the pieces of distributed piece data stored in the secret information storage unit 350A and the secret information storage unit 350B in response to a request from the user terminal 4.
In step 265 (S265), the secret information storage unit 350A and the secret information storage unit 350B notify the secret management server 2 of the deletion result of the distributed piece data.

In step 270 (S270), the user authentication unit 302 generates and stores distributed piece metadata indicating that the distributed piece data has been deleted.
In step 275 (S275), the secret management server 2 notifies the user terminal 4 that the distributed piece of secret information has been successfully deleted.
In this way, it is possible to add, change, and delete users who share this secret information without changing the secret information of the usage server 9 and its metadata. In addition, the secret information itself can be deleted.

FIG. 7 is a sequence diagram illustrating automatic login processing (S30) in the information processing system 1. The automatic login process (S30) is a process of logging in to the use server 9 using shared secret information.
As illustrated in FIG. 7, in step 300 (S <b> 300), when the user terminal 4 activates the automatic login unit 510 in response to a user operation, the user terminal 4 activates a connection application for connecting to the usage server 9. .
In step 305 (S305), the connection application connects to the usage server 9 and displays a login screen of the usage server 9.

In step 310 (S310), the secret information request unit 506 (FIG. 4) of the user terminal 4 transmits a user ID and password to the secret management server 2 to request user authentication.
In step 315 (S315), the user authentication unit 302 of the secret management server 2 performs user authentication based on the user ID and password received from the user terminal 4, and the process of S320 is performed when the user authentication is successful. Transition. If user authentication fails, the secret management server 2 notifies the user terminal 4 to that effect, and ends the automatic login process (S30).

In step 320 (S320), the user authentication unit 302 replies to the user terminal 4 that the user authentication has been successful.
In step 325 (S325), the secret information request unit 502 of the user terminal 4 transmits the identification information (data ID) of the secret information to the secret management server 2 and requests the secret information.

In step 330 (S330), the distributed piece acquisition unit 306 refers to the distributed piece metadata and based on the received identification information (data ID) of the secret information and the result of user authentication by the user authentication unit 302. Identify the distributed fragment data to be acquired.
In step 335 (S335), the distributed piece acquisition unit 306 connects to the secret information storage unit 350A and the secret information storage unit 350B, and accesses the specified distributed piece data.

In step 340 (S340), the distributed piece acquisition unit 306 acquires distributed piece data from the secret information storage unit 350A and the secret information storage unit 350B, respectively.
In step 345 (S345), the distributed piece acquisition unit 306 transmits the acquired two distributed pieces data to the user terminal 4.

In step 350 (S350), the secret information restoration unit 508 of the user terminal 4 restores the secret information (password) of the usage server 9 based on the two pieces of distributed piece data received from the secret management server 2.
In step 355 (S355), the automatic login unit 510 inputs the restored secret information (password) on the login screen of the usage server 9 without displaying it.

In step 360 (S360), the automatic login unit 510 transmits the input secret information (password) to the usage server 9 via the connection application.
In step 365 (S365), the usage server 9 performs login authentication of the user terminal 4 based on the received secret information (password).

In step 370 (S370), the usage server 9 notifies the user terminal 4 of the result of the login authentication.
In step 375 (S375), the history notification unit 512 of the user terminal 4 notifies the secret management server 2 of the date and time when the user server 4 was logged in.
In step 380 (S380), the history management unit 308 of the secret management server 2 registers the login date and time notified from the user terminal 4 in the log information storage unit 370. Similarly, when the user terminal 4 logs out from the usage server 9, the logout date and time is notified to the secret management server 2 and registered in the log information storage unit 370.

  Thus, automatic login to the usage server 9 is realized according to the result of user authentication without displaying the secret information of the usage server 9. Further, the log-in date / time and log-out date / time of the use server 9 are accumulated in the log information storage unit 370.

As described above, in the information processing system 1 of this embodiment, the secret information (password) of the usage server 9 is stored in a secure state by the secret sharing method, and the secret information is shared by a plurality of users by user authentication. .
Further, in the information processing system 1 according to the present embodiment, it is possible to add or change a user who shares this secret information and change a password used for user authentication without affecting the secret information of the usage server 9. Become.
Moreover, in the information processing system 1 of this embodiment, since the usage status of the secret information is managed as a log, it is possible to capture unauthorized logins to the usage server 9 and the like.

(Modification 1)
Next, the modification 1 of the said embodiment is demonstrated.
FIG. 8 is a diagram illustrating a functional configuration of the secret management server 2 and the user terminal 4 in the first modification. Of the components shown in the figure, those substantially the same as those shown in FIG. 4 are denoted by the same reference numerals.
As illustrated in FIG. 8, the server program 330 of Modification 1 has a configuration in which a secret update detection unit 332 and a secret information update unit 334 are added to the server program 300 of FIG. 4.
The secret update detection unit 332 detects an update of secret information in the usage system. The secret update detection unit 332 of this example detects a periodic update of secret information (password) of the usage server 9.
When the update of the secret information is detected by the secret update detection unit 332, the secret information update unit 334 updates the secret information stored in the secret information storage unit 350 according to the change of the secret information in the use system. When the secret update detection unit 332 detects the update of the secret information, the secret information update unit 334 of this example instructs the distribution unit 304 to generate the distributed piece data from the updated secret information, The distributed piece data is registered in the secret information storage unit 350.
That is, in the first modification, the usage server 9 periodically changes the secret information (password), and the secret management server 2 updates the distributed piece data stored in the secret information storage unit 350 in synchronization therewith. .

FIG. 9 is a diagram illustrating user authentication authentication information according to the first modification.
As illustrated in FIG. 9, the user authentication unit 302 of Modification 1 registers the user ID, the user authentication password, and the validity period in the authentication information storage unit 360 in association with each other. The effective period stored in the authentication information storage unit 360 is, for example, a period in which each user (person in charge) is in charge of the operation or maintenance of the usage server 9.
By periodically changing the secret information, even if the secret information remains on the user terminal 4, if the user is out of the validity period, the user cannot log in to the use server 9.
As described above, in the first modification, a more secure environment is realized.

  In the above embodiment, the secret management server 2 collects the distributed piece data and provides it to the user terminal 4. However, the present invention is not limited to this. For example, the user terminal 4 receives the distributed piece data. You may make it collect.

DESCRIPTION OF SYMBOLS 1 Information processing system 2 Secret management server 4 User terminal 9 Use server 300 Server program 500 User program

Claims (8)

A secret information storage unit for storing secret information to be shared;
An authentication information storage unit for storing authentication information in association with the secret information;
An authentication unit for performing user authentication based on the authentication information stored in the authentication information storage unit;
An acquisition unit that acquires associated secret information on the condition that user authentication by the authentication unit is successful;
An information processing system comprising: a login unit that logs in to a use system using the secret information acquired by the acquisition unit. A decentralization unit for generating a plurality of pieces of distributed piece data from the secret information;
The secret information storage unit includes a plurality of recording devices arranged at different locations,
The information processing system according to claim 1, wherein the distributed piece data generated by the distribution unit is distributed and stored in the plurality of recording devices. A secret information update unit that periodically updates the secret information stored in the secret information storage unit in response to the change of the secret information in the utilization system;
The authentication information storage unit stores an effective period set for the user as a part of the authentication information,
The information processing system according to claim 1, wherein the authentication unit performs user authentication according to an effective period set for the user. The information processing system according to claim 3, wherein the effective period of the user is a period in which each user is in charge of an operation job or a maintenance job of the usage system. The information processing system according to claim 1, further comprising: a history storage unit that stores secret information usage history by each user in association with shared secret information and a user ID. An authority editing unit for adding, changing, or deleting authentication information stored in the authentication information storage unit;
The information processing system according to claim 1, wherein the authentication unit performs user authentication based on authentication information added, changed, or deleted by the authority editing unit. Registering shared secret information;
Registering authentication information in association with the registered confidential information;
Performing user authentication based on the registered authentication information;
Obtaining secret information associated with the authentication information on the condition that the user authentication is successful;
An information processing method comprising: logging in to a utilization system using the acquired secret information. Registering shared secret information;
Registering authentication information in association with the registered confidential information;
Performing user authentication based on the registered authentication information;
Obtaining secret information associated with the authentication information on the condition that the user authentication is successful;
A program that causes a computer to execute the step of logging in to the user system using the acquired confidential information.

Images