Management device, management method, and management program

Patent metadata

Field	Value
Publication number	US-11599606-B2
Application number	US-201917058604-A
Country	US
Kind code	B2
Filing date	May 24, 2019
Priority date	May 30, 2018
Publication date	Mar 7, 2023
Grant date	Mar 7, 2023

Abstract

A management apparatus (20) includes: a storage unit (21) which stores user attribute information that associates a user who manages information related to crises and an attribute of the user with each other, correspondence information that associates the attribute and an external system of which the attribute is login-enabled with each other, and login information with respect to each external system; an external login information processing unit (223) which, when receiving a login request to an external system from a user, refers to the user attribute information, the correspondence information, and the login information stored in the storage unit, acquires an attribute of the user, and acquires information on an external system to which the acquired attribute is login-enabled; and an external login processing unit (224) which executes a login to an external system to which a login has been requested among the login-enabled external systems.

First claim

The invention claimed is:

1. A computer-implemented method for managing access to a system, the method comprising:
interactively receiving a login request from a user for accessing the system, wherein the system processes data associated with a crisis;
retrieving, based on the received login request, a combination of at least:
user attribute information associating a user identity and a user attribute,
correspondence information associating the user identity and one or more login-enabled systems for accessing by the user, wherein the one or more login-enabled systems include the system, and
login information for accessing the one or more login-enabled systems based on the user identity, wherein the login information includes a login information of the system;

retrieving, based on the user attribute associated with the user identity of the user, system information of the one or more login-enabled systems;
transmitting, based on the retrieved system information associated with the one or more login-enabled systems, the login information of the system to the system, causing execution of a login operation based on the user identity of the user by the system to transmit the data associated with the crisis.

2. The computer-implemented method of claim 1 , wherein the user identity is associated with a user accessing a first system, wherein the system identity relates to a second system, and wherein the second system is distinct from the first system.

3. The computer-implemented method of claim 1 , the method further comprising:
storing the combination of at least:
the user attribute,
the correspondence information, and
the login information for accessing the system.

4. The computer-implemented method of claim 1 , the method further comprising:
generating a log, the log including a result of the received login request from the user; and
storing the log.

5. The computer-implemented method of claim 1 , the method further comprising:
receiving a change request on the user attribute; and
updating, based on the received change request, the user attribute.

6. The computer-implemented method of claim 1 , wherein the user attribute includes an organization, a qualification, or an authority.

7. The computer-implemented method of claim 1 , wherein the login information includes a login identifier for accessing the system, and wherein the user identifier is distinct from the login identifier for accessing the system.

8. A system for managing access to a system, the system comprises:
a processor; and
a memory storing computer-executable instructions that when executed by the processor cause the system to:
interactively receiving a login request from a user for accessing the system, wherein the system processes data associated with a crisis;
retrieving, based on the received login request, a combination of at least:
user attribute information associating a user identity and a user attribute,
correspondence information associating the user identity one or more login-enabled systems for accessing by the user, wherein the one or more login-enabled systems include the system, and
login information for accessing the one or more login-enabled systems based on the user identity, wherein login information includes a login information of the system;

Retrieving, based on the user attribute associated with the user identity of the user, system information of the one or more login-enabled systems;
transmitting, based on the retrieved system information associated with the one or more login-enabled systems, the login information of the system to the system, causing execution of a login operation based on the user identity of the user by the system to transmit the data associated with the crisis.

9. The system of claim 8 , wherein the user identity is associated with a user accessing a first system, wherein the system identity relates to a second system, and wherein the second system is distinct from the first system.

10. The system of claim 8 , the computer-executable instructions when executed further causing the system to:
storing the combination of at least:
the user attribute,
the correspondence information, and
the login information for accessing the system.

11. The system of claim 8 , the computer-executable instructions when executed further causing the system to:
generating a log, the log including a result of the received login request from the user; and
storing the log.

12. The system of claim 8 , the computer-executable instructions when executed further causing the system to:
receiving a change request on the user attribute; and
updating, based on the received change request, the user attribute.

13. The system of claim 8 , wherein the user attribute includes an organization, a qualification, or an authority.

14. The system of claim 8 , wherein the login information includes a login identifier for accessing the system, and wherein the user identifier is distinct from the login identifier for accessing the system.

15. A computer-readable non-transitory recording medium storing computer-executable instructions that when executed by a processor cause a computer system to:
interactively receiving a login request from a user for accessing the system, wherein the system processes data associated with a crisis;
retrieving, based on the received login request, a combination of at least:
user attribute information associating a user identity and a user attribute,
correspondence information associating the user identity and one or more login-enabled systems for accessing by the user, wherein the one or more login-enabled systems include the system, and
login information for accessing the one or more login-enabled systems based on the user identity, wherein the login information includes a login information of the system;

retrieving, based on the user attribute associated with the user identity of the user, system information of the one or more login-enabled systems;
transmitting, based on the retrieved system information associated with the one or more login-enabled systems, the login information of the system to the system, causing execution of a login operation based on the user identity of the user by the system to transmit the data associated with the crisis.

16. The computer-readable non-transitory recording medium of claim 15 , wherein the user identity is associated with a user accessing a first system, wherein the system identity relates to a second system, and wherein the second system is distinct from the first system.

17. The computer-readable non-transitory recording medium of claim 15 , the computer-executable instructions when executed further causing the system to:
storing the combination of at least:
the user attribute,
the correspondence information, and
the login information for accessing the system.

18. The computer-readable non-transitory recording medium of claim 15 , the computer-executable instructions when executed further causing the system to:
generating a log, the log including a result of the received login request from the user; and
storing the log.

19. The computer-readable non-transitory recording medium of claim 15 , the computer-executable instructions when executed further causing the system to:
receiving a change request on the user attribute; and
updating, based on the received change request, the user attribute.

20. The computer-readable non-transitory recording medium of claim 15 , wherein the user attribute includes an organizat

Assignees

• Nippon Telegraph & Telephone

Inventors

• Yoshida Yoshihiro
• Kura Tsuneko
• Hashimoto Junko
• Takada Shinya
• Kishi Koji

Classifications

• G06F13/00

  Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units (interface circuits for specific input/output devices G06F3/00 {; multiprogram control therefor  G06F9/46}; multiprocessor systems  G06F15/16 ) · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• G06F21/604 Primary

  Tools and structures for managing or administering access control systems · CPC title

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title

• G06Q50/26

  Government or public services (business processes related to the transportation industry G06Q50/40) · CPC title