JP2017183930A - Server management system, server device, server management method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a server management system, server device, server management method, and program, capable of easily setting a right for executing the program while ensuring security of a communication path.SOLUTION: A server management system 100 comprises a management device 10 and a server device 40. The management device 10 comprises: a separation signature generation unit 20 for generating an encrypted separation signature for each program to be executed in the server device; and a communication unit 30 for transmitting the separation signature to the server device 40 through an encrypted communication path. The server device 40 comprises: a communication path decryption unit 50 that, when the management device 10 transmits a separation signature via the encrypted communication path, executes decryption of the communication path using a first public key; and a program execution unit 60 that uses a second public key to verify the separation signature, when the decryption of the communication path is successful, and executes a program to which the separation signature corresponds when the verification is successful.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a server management system and a server management method for managing a plurality of server devices by a management device, and further relates to a server device to be managed and a program for realizing the server device.

  In recent years, the use of cloud computing has increased. According to cloud computing, a user can receive various services from the other side of the Internet, so that it is not necessary to prepare necessary facilities for the service, and only a connection environment is prepared.

  And in this cloud computing, it is necessary to manage a server apparatus remotely, and the management technology of this remote server apparatus becomes important (for example, refer patent document 1). Specifically, Patent Document 1 discloses a system that starts a program in response to a request from a remote location. The system disclosed in Patent Literature 1 includes a user computer and a computer that executes a program.

  In the system disclosed in Patent Document 1, the latter computer first obtains a list in which the program URL, user identification information, and access authority information are set. Next, the latter computer performs signature verification and user identification using the signature and public key certificate transmitted from the former computer. When signature verification and user identification are successful, the latter computer reads the URL and access authority information from the obtained list and executes the program. As described above, according to the system disclosed in Patent Document 1, it is considered that the server device can be appropriately managed remotely because the program requested by the user can be executed while preventing unauthorized access.

JP 2006-58994 A

  However, in the system disclosed in Patent Document 1, it is necessary to give a signature, URL, and access authority information to the module body, and there is a problem that setting work required for management is troublesome. In addition, the system disclosed in Patent Document 1 has a problem that the security of the communication path between the computer on the user side that instructs execution of the program and the computer that executes the program cannot be secured.

  An example of an object of the present invention is to provide a server management system, a server device, a server management method, and a program capable of solving the above-described problems, ensuring security of a communication path, and at the same time easily setting the execution authority of the program. Is to provide.

In order to achieve the above object, a server management system according to one aspect of the present invention includes:
A management device and a server device to be managed;
The management device
A separate signature creating unit that creates an encrypted separate signature for each program executed in the server device;
A communication unit that transmits the separated signature to the server device via an encrypted communication path;
With
The server device
A communication path decryption unit that performs decryption of the communication path using a first public key when the management apparatus has transmitted the separation signature via an encrypted communication path;
A program that executes verification of the separated signature using a second public key when the communication path is successfully decrypted, and executes a program corresponding to the separated signature when the verification is successful Execution part,
With
It is characterized by that.

In order to achieve the above object, a server device according to one aspect of the present invention provides:
When the separated signature is transmitted via the encrypted communication path from the management apparatus that creates the separated signature encrypted for each program, the communication path is decrypted using the first public key. A communication path decoding unit for executing
A program that executes verification of the separated signature using a second public key when the communication path is successfully decrypted, and executes a program corresponding to the separated signature when the verification is successful The execution part;
With
It is characterized by that.

In order to achieve the above object, a server management method according to one aspect of the present invention includes:
A server management method using a management device and a server device to be managed,
(A) creating an encrypted separated signature for each program executed in the server device by the management device;
(B) The management device transmits the separation signature to the server device via an encrypted communication path;
(C) When the management apparatus transmits the separation signature via the encrypted communication path, the server apparatus performs decryption of the communication path using the first public key. , Step and
(D) When the decryption of the communication path is successful, the separation signature is verified using a second public key, and when the verification is successful, the program corresponding to the separation signature is executed. Step, and
It is characterized by having.

Furthermore, in order to achieve the above object, a program according to one aspect of the present invention is provided.
On the computer,
(A) When the separated signature is transmitted via the encrypted communication path from the management device that creates the separated signature encrypted for each program, the communication is performed using the first public key. Performing path decoding; and
(B) When the decryption of the communication path is successful, verification of the separated signature is executed using a second public key, and when the verification is successful, the program corresponding to the separated signature is executed Step,
Is executed.

  As described above, according to the present invention, it is possible to easily set the execution authority of the program while ensuring the security of the communication path.

FIG. 1 is a block diagram showing a schematic configuration of a server device and a server management system according to an embodiment of the present invention. FIG. 2 is a block diagram showing a specific configuration of the server device and the server management system in the embodiment of the present invention. FIG. 3 is a flowchart showing the operation of the management apparatus according to the embodiment of the present invention. FIG. 4 is a flowchart showing the operation of the server apparatus in the embodiment of the present invention. FIG. 5 is a block diagram illustrating an example of a computer that implements the management device and the server device according to the embodiment of the present invention.

(Embodiment)
Hereinafter, a server device, a server management system, and a program according to an embodiment of the present invention will be described with reference to FIGS.

[Device configuration]
First, a schematic configuration of the server device and the server management system in the present embodiment will be described with reference to FIG. FIG. 1 is a block diagram showing a schematic configuration of a server device and a server management system according to an embodiment of the present invention.

  As shown in FIG. 1, the server management system 100 in this Embodiment is provided with the management apparatus 10 and the server apparatus 40 used as management object. In the present embodiment, the management device 10 is connected to the server device 40 via the network 80. Further, there are a plurality of server devices 40 to be managed by the management device 10.

  As shown in FIG. 1, the management apparatus 10 includes a separation signature creation unit 20 and a communication unit 30. The separate signature creating unit 20 creates an encrypted separate signature for each program executed in the server device 40. The communication unit 30 transmits the separation signature to the server device 40 via the encrypted communication path.

  Further, as illustrated in FIG. 1, the server device 40 includes a communication path decoding unit 50 and a program execution unit 60. The communication path decryption unit 50 executes the decryption of the communication path by using the first public key when the management apparatus 10 transmits the separation signature via the encrypted communication path. The program execution unit 60 performs verification of the separation signature using the second public key when the communication path is successfully decrypted, and executes the program corresponding to the separation signature when the verification is successful. .

  As described above, in this embodiment, since the program is executed on the condition that the separation signature has been sent from the management apparatus, the execution authority of the program can be set without giving authority information to the program itself. It can be easy. Further, since the separation signature is not transmitted unless the communication path is combined, the security of the communication path is also ensured at the same time.

  Next, the configuration of the server device and the server management system in the present embodiment will be described more specifically with reference to FIG. FIG. 2 is a block diagram showing a specific configuration of the server device and the server management system in the embodiment of the present invention. In FIG. 2, only a single server device is shown for explanation.

  First, in the present embodiment, a program that is scheduled to be executed in the server device 40 is verified in advance by a third party. Then, as shown in FIG. 2, the program passed by the verification is arranged in the server device 40 as the execution module 70.

  As shown in FIG. 2, in the management apparatus 10, the separated signature creating unit 20 creates a separated signature 22 for each execution module 70 using PGP (Pretty Good Privacy). Further, the separated signature creating unit 20 encrypts the created separated signature 22 using the PGP private key 21 arranged in the management apparatus 10.

  In the present embodiment, the communication unit 30 performs data communication with the server device 40 using SSH (Secure SHell). Specifically, the communication unit 30 creates an SSH public key 51, transmits this to the server device 40, and establishes a session with the server device 40. Thereafter, the communication unit 30 encrypts the data to be transmitted with the SSH private key, and transmits the encrypted data to the server device 40. As a result, the communication path is encrypted. For example, when the data to be transmitted is the separation signature 22, the communication unit 30 transmits the separation signature 22 encrypted using the SSH private key 31 to the server device 40.

  As shown in FIG. 2, in the server device 40, when the communication path decryption unit 50 receives the SSH public key 51 and establishes a session with the management device 10, the data transmitted from the management device 10. Is decrypted with the SSH public key 51 and the decrypted data is input to the program execution unit 60. As a result, the communication path is decoded.

  In this embodiment, the program execution unit 60 is constructed by a module dispatcher, and the execution instruction of each execution module 70 can be performed only by the program execution unit 60. In addition, a PGP public key 61 is arranged in advance in the program execution unit 60.

  When the execution instruction of the execution module 70 and the separation signature 22 are transmitted from the management device 10 via the SSH established by the communication unit 30 and the communication path decryption unit 50, the program execution unit 60 receives the PGP. Verification of the separation signature 22 is executed using the public key 61. If the verification of the separation signature 22 is normal, the program execution unit 60 executes the execution module 70 because the execution module 70 has been signed and has not been tampered with.

[Device operation]
Next, the operation of the server management system 100 according to the embodiment of the present invention will be described with reference to FIGS. In the following description, FIGS. 1 and 2 are referred to as appropriate. In the present embodiment, the server management method is implemented by operating the server management system 100. Therefore, the description of the server management method in the present embodiment is replaced with the following description of the operation of the server management system 100.

  First, the operation of the management apparatus 10 will be described with reference to FIG. FIG. 3 is a flowchart showing the operation of the management apparatus according to the embodiment of the present invention. As a premise, in the management apparatus 10, the separated signature creating unit 20 creates a separated signature 22 for each execution module 70, and encrypts the created separated signature 22 using the PGP private key 21. .

  As shown in FIG. 3, first, when the execution of the execution module 70 is instructed from the outside, the communication unit 30 establishes a session with the server device 40 in which the instructed execution module is arranged ( Step A1). Specifically, the communication unit 30 creates an SSH public key 51 and transmits it to the server device 40. Then, when the server device 40 creates a session key encrypted with the SSH public key 51 and transmits it to the management device 10, a session is established.

  Next, when the separation signature creation unit 20 instructs the communication unit 30 to transmit the separation signature of the execution module instructed to execute, the communication unit 30 uses the SSH private key 31 to execute the execution instruction and the separation signature. Are transmitted to the server device 40 (step A2).

  By executing step A2, the process in the management apparatus 10 is temporarily terminated. Steps A1 and A2 are executed each time execution of the execution module 70 is instructed.

  Next, the operation of the server device 40 will be described with reference to FIG. FIG. 4 is a flowchart showing the operation of the server apparatus in the embodiment of the present invention.

  As shown in FIG. 4, first, the communication path decryption unit 50 receives the SSH public key 51 transmitted from the management apparatus 10 and establishes a session with the management apparatus 10 (step B1).

  Next, the communication path decryption unit 50 receives the execution instruction of the execution module 70 and the separation signature transmitted from the management apparatus 10, and decrypts them with the SSH public key (step B2).

  Next, the communication path decoding unit 50 determines whether or not the decoding in step B2 is successful (step B3). If the result of determination in step B3 is that decoding has not succeeded, the communication path decoding unit 50 executes step B7 described later.

  On the other hand, if the result of determination in step B <b> 3 is that decoding has been successful, the communication path decoding unit 50 activates the program execution unit 60. Thereby, the program execution unit 60 verifies the separation signature received in Step B2 using the PGP public key 61 (Step B4).

  Next, the program execution unit 60 determines whether the verification of the separation signature is successful (step B5). As a result of the determination in step B6, if the verification is successful, the program execution unit 60 executes the execution module (step B6). On the other hand, if the verification is not successful as a result of the determination in step B6, the program execution unit 60 notifies the communication path decoding unit 50 of this. Thereby, the communication path decoding unit 50 executes Step B7.

  In step B <b> 7, the communication path decoding unit 50 transmits a message indicating that the execution module cannot be executed to the management apparatus 10.

  By executing step B6 or B7, the processing in the server device 40 is temporarily terminated. Steps B1 to B7 are executed each time execution of the execution module 70 is instructed from the management apparatus 10.

[Effects of the embodiment]
As described above, in the present embodiment, only the program execution unit 60 that is a module dispatcher can receive an execution instruction of the execution module 70 from the management apparatus 10 via SSH. In the server device 40, only the program execution unit 60 can operate with privileges. That is, in the present embodiment, the execution module 70 cannot be directly executed by anyone other than the program execution unit 60, and the execution module 70 itself cannot acquire the privilege alone. Further, in the present embodiment, security between the management device 10 and the server device 40 is ensured by SSH.

  For this reason, in the present embodiment, operations requiring privileges are securely automated, so that the operator of the management device 10 does not need to cover the method of acquiring the privileges of each server device 40 and executes it in advance. Just verify the module. Furthermore, even when the execution module is automatically executed from an upper layer, that is, when there is no human judgment, the execution module can be safely executed while being a privileged operation.

  In addition, an execution module can be prepared in order to modify, add, delete, etc. the execution module 70. In this case, the expansion and adjustment of the function is easy and safe. Furthermore, this embodiment exhibits a greater effect as the number of server devices 40 to be managed by the management device 10 increases and as the specifications become standardized.

  Since the above effects are obtained, the server management system 100 according to the present embodiment is useful for, for example, centralized management of distributed data centers. The server management system 100 is also useful when managing various devices arranged in an office or the like, for example, a multifunction device, a vending machine, or the like.

[Modification]
In the present embodiment, in the management device 10, the communication unit 30 can present an account and transmit the separation signature 22 to the server device 40. In this case, in the server device 40, the program execution unit 60 determines whether or not the execution module 70 corresponding to the separation signature is permitted to be executed with the presented account. Then, the program execution unit 60 executes the program corresponding to the separation signature only when the execution with the presented account is permitted. In such an aspect, it is possible to perform authority management by account.

[program]
The first program in the present embodiment may be a program that causes a computer to execute steps A1 and A2 shown in FIG. The management apparatus 10 according to the present embodiment can be realized by installing and executing this program on a computer. In this case, a CPU (Central Processing Unit) of the computer functions as the separate signature creation unit 20 and the communication unit 30 to perform processing.

  In addition, the first program in the present embodiment may be executed by a computer system constructed by a plurality of computers. In this case, for example, each computer functions as either the separated signature creation unit 20 or the communication unit 30.

  The 2nd program in this Embodiment should just be a program which makes a computer perform step B1-B7 shown in FIG. By installing and executing this program on a computer, the server device 40 in the present embodiment can be realized. In this case, a CPU (Central Processing Unit) of the computer functions as the communication path decoding unit 50 and the program execution unit 70 to perform processing.

  Also, the second program in the present embodiment may be executed by a computer system constructed by a plurality of computers. In this case, for example, each computer functions as either the signal path decoding unit 50 or the program execution unit 70, respectively.

[Physical configuration]
Here, FIG. 5 illustrates a computer that implements the management apparatus 10 by executing the first program in the present embodiment and a computer that implements the server apparatus 40 by executing the second program. explain. FIG. 5 is a block diagram illustrating an example of a computer that implements the management device and the server device according to the embodiment of the present invention.

  As shown in FIG. 5, the computer 110 includes a CPU 111, a main memory 112, a storage device 113, an input interface 114, a display controller 115, a data reader / writer 116, and a communication interface 117. These units are connected to each other via a bus 121 so that data communication is possible.

  The CPU 111 performs various calculations by developing the program (code) in the present embodiment stored in the storage device 113 in the main memory 112 and executing them in a predetermined order. The main memory 112 is typically a volatile storage device such as a DRAM (Dynamic Random Access Memory). Further, the program in the present embodiment is provided in a state of being stored in a computer-readable recording medium 120. Note that the program in the present embodiment may be distributed on the Internet connected via the communication interface 117.

  Specific examples of the storage device 113 include a hard disk drive and a semiconductor storage device such as a flash memory. The input interface 114 mediates data transmission between the CPU 111 and an input device 118 such as a keyboard and a mouse. The display controller 115 is connected to the display device 119 and controls display on the display device 119.

  The data reader / writer 116 mediates data transmission between the CPU 111 and the recording medium 120, and reads a program from the recording medium 120 and writes a processing result in the computer 110 to the recording medium 120. The communication interface 117 mediates data transmission between the CPU 111 and another computer.

  Specific examples of the recording medium 120 include general-purpose semiconductor storage devices such as CF (Compact Flash (registered trademark)) and SD (Secure Digital), magnetic storage media such as a flexible disk, or CD- An optical storage medium such as ROM (Compact Disk Read Only Memory) can be used.

  As described above, according to the present invention, it is possible to easily set the execution authority of the program while ensuring the security of the communication path. The present invention is useful in a field where it is necessary to remotely execute an application program.

DESCRIPTION OF SYMBOLS 10 Management apparatus 20 Separation signature preparation part 21 PGP private key 22 Separation signature 30 Communication part 31 SSH private key 40 Server apparatus 50 Communication path decryption part 51 SSH public key 60 Program execution part 61 PGP public key 70 Execution module 100 Server management system 110 Computer 111 CPU
112 Main Memory 113 Storage Device 114 Input Interface 115 Display Controller 116 Data Reader / Writer 117 Communication Interface 118 Input Device 119 Display Device 120 Recording Medium 121 Bus

Claims (8)

A management device and a server device to be managed;
The management device
A separate signature creating unit that creates an encrypted separate signature for each program executed in the server device;
A communication unit that transmits the separated signature to the server device via an encrypted communication path;
With
The server device
A communication path decryption unit that performs decryption of the communication path using a first public key when the management apparatus has transmitted the separation signature via an encrypted communication path;
A program that executes verification of the separated signature using a second public key when the communication path is successfully decrypted, and executes a program corresponding to the separated signature when the verification is successful Execution part,
With
A server management system characterized by that. In the management device, the communication unit presents an account, and transmits the separation signature to the server device,
In the server device, the program execution unit determines whether execution of the account corresponding to the separation signature is permitted, and executes the program corresponding to the separation signature if permitted. To
The server management system according to claim 1. When the separated signature is transmitted via the encrypted communication path from the management apparatus that creates the separated signature encrypted for each program, the communication path is decrypted using the first public key. A communication path decoding unit for executing
A program that executes verification of the separated signature using a second public key when the communication path is successfully decrypted, and executes a program corresponding to the separated signature when the verification is successful The execution part;
With
The server apparatus characterized by the above-mentioned. When the management device presents an account and the separation signature is transmitted,
The program execution unit determines whether execution of the account for the program corresponding to the separation signature is permitted, and if permitted, executes the program corresponding to the separation signature.
The server device according to claim 3. A server management method using a management device and a server device to be managed,
(A) creating an encrypted separated signature for each program executed in the server device by the management device;
(B) The management device transmits the separation signature to the server device via an encrypted communication path;
(C) When the management apparatus transmits the separation signature via the encrypted communication path, the server apparatus performs decryption of the communication path using the first public key. , Step and
(D) When the decryption of the communication path is successful, the separation signature is verified using a second public key, and when the verification is successful, the program corresponding to the separation signature is executed. Step, and
A server management method comprising: In the step (b), an account is presented, and the separation signature is transmitted to the server device,
In the step (d), it is determined whether execution of the program corresponding to the separation signature is permitted, and if permitted, the program corresponding to the separation signature is executed.
The server management method according to claim 5. On the computer,
(A) When the separated signature is transmitted via the encrypted communication path from the management device that creates the separated signature encrypted for each program, the communication is performed using the first public key. Performing path decoding; and
(B) When the decryption of the communication path is successful, verification of the separated signature is executed using a second public key, and when the verification is successful, the program corresponding to the separated signature is executed Step,
A program that executes When the management device presents an account and the separation signature is transmitted,
In the step (b), it is determined whether execution of the program corresponding to the separation signature is permitted, and if permitted, the program corresponding to the separation signature is executed.
The program according to claim 7.

Images