Cloud data system and control method thereof

Abstract

To allow a terminal dedicated to cloud storage connected to a closed network as well as an ordinary terminal connected to the Internet to access and safely use a necessary file from anywhere.SOLUTION: A cloud data system comprising a computer network including a closed network includes: an IDP server 22 for providing, for storage and management, user authentication information authenticating a user who accesses a cloud storage 16; an access management service 23 for transmitting, to the IDP server 22, permission / non-permission for the use of the user, from the user authentication information transferred from the IDP server 22; and a setting information management DB 24 which is connected to the IDP server 22 and manages settings of the cloud storage 16 via the IDP server 22.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a highly confidential cloud data system and a control method thereof, and more particularly to a cloud data system and a control method thereof that can be optimally operated in public organizations such as local governments and public corporations that use closed networks. [Background technology]

[0002] Public organizations such as local governments and public corporations handle highly personal information stored on servers, and therefore use a closed network called LGWAN (Local Government Wide Area Network) that interconnects the internal networks of local governments such as prefectures and cities, towns, and villages. In addition to this, various closed networks are used, and the terminal devices operated by local government officials are generally of three types: My Number terminals, LGWAN terminals, and Internet terminals that can connect to the Internet. These terminals are operated and used within the scope of each employee's job authority. Naturally, employees cannot view or operate terminal devices that are not within their job authority. Meanwhile, cloud-based databases are increasingly being introduced by companies and other organizations these days due to their advantages such as low implementation costs, short implementation time, and little maintenance effort.

[0003] These cloud-based systems are generally managed by the service provider, and therefore, under the legal system and in practice, security management of administrative information, including highly personal information, cannot be outsourced. For this reason, with a few exceptions, construction and management of cloud-based databases is rarely introduced in public institutions such as local governments and public corporations. Patent Document 1 discloses an information processing device and system for closed networks. This system connects a terminal device connected to a closed network to an external network via a firewall, an information processing system for closed networks, etc., and safely acquires only pre-authorized data from an external server connected to the external network.

[0004] Patent Document 2 describes an information processing device and a program for remotely updating firmware and the like of devices connected to a restricted network such as an LGWAN. For example, an image forming device for issuing resident's certificates, seal certificates, etc., installed in a user environment of a local government or the like is connected to the restricted network LGWAN, and the LGWAN is connected to a DL server and a management server via a relay system to the Internet. The management server manages the image forming device via the Internet. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Patent No. 6553261 [Patent Document 2] Patent Publication No. 2021-64311 Summary of the Invention [Problem to be solved by the invention]

[0006] Even if each institution individually owns and manages a server to proceed with digitalization, it is inefficient and there is a lot of waste such as duplicate data, so in recent years, there have been cases where private cloud-based databases are adopted. On the other hand, in recent years, work style reform has been promoted, and employees of local governments, etc. are also promoted to work from home without exception. However, since the work content of employees of local governments, etc. varies depending on the job area and they handle information including highly personal information, even if they are employees in charge, they cannot use the dedicated terminals mentioned above at home. Even if they work on a general terminal device connected to the Internet, the work content at home is limited with limited information, data, etc., and there is a risk of leakage of this information, data, etc. The present invention has the following objectives against the above background. The object of the present invention is to provide a cloud data system and a control method thereof that can be used safely from anywhere by connecting to necessary files, regardless of whether the terminal is a dedicated cloud storage terminal connected to a closed network or a normal terminal connected to the Internet. [Means for solving the problem]

[0007] The cloud data system of the present invention 1 is Cloud storage (16), an online file sharing service connected to a computer network (2, 3, 4); a general terminal device (15) connected to said computer network (2, 3, 4) and having an installed browser (21); A cloud data system (1) comprising: User authentication information that authenticates a user who accesses the cloud storage (16); An IDP server (22) for performing authentication and authorization based on additional information from one or more terminal devices selected from a terminal device for a local government network (13) used in a local government where a user directly operates, a terminal device dedicated to My Number (12), and the general terminal device (15); an access management service (23) for transmitting to the IDP server (22) whether the user is permitted to use the service based on the user authentication information transferred from the IDP server (22); and a setting information management DB (24) that is connected to the IDP server (22) and manages the settings of the cloud storage (16) via the IDP server (22).

[0008] The cloud data system of the present invention 2 is characterized in that in the present invention 1, the computer network (2, 3, 4) includes a closed network (2, 3) to which only the limited users can connect. The cloud data system of the present invention 3 is characterized in that, in the present invention 1 or 2, it comprises a WEB server (25) connected to the setting information management DB (24) so ​​that an administrator can manage the setting information management DB (24).

[0009] The cloud data system of the present invention 4 is the system of the present invention 2, The My Number dedicated terminal device (12) is connected to the cloud storage (16) and is connected to the closed network to perform various operations related to the My Number, which is a number given to all persons who have a resident registration. The local government network terminal device (13) is connected to the cloud storage (16) and is connected to the closed network that connects local governments to each other, The general terminal device (15) is connected to the cloud storage (16) and is characterized in that it is an Internet-based terminal device for connecting mainly to the Internet.

[0010] The control method of a cloud data system of the fifth aspect of the present invention is a control method of a cloud data system of one aspect of the present invention selected from the cloud data systems of the first to fourth aspects of the present invention, The cloud data system (1) When a login request is made to the cloud storage (16) from the general terminal device (15) via the browser (21) ((1), (2)), A request for user authentication is made from the cloud storage (16) ((3)), the user authentication is transferred to the access management service (23) ((4)), and the access management service (23) transmits a result of the user authentication to the IDP server (22) ((5)). The control method of a cloud data system of the sixth aspect of the present invention is a control method of a cloud data system of one aspect of the present invention selected from the cloud data systems of the first to fourth aspects of the present invention, The cloud data system (1) A login request is made from the general terminal device (15) to the IDP server (22) via the browser (21), and login authentication is performed based on user data. When the application is started from the general terminal device (15), A user authentication request is made from the general terminal device (15), the IDP server (22) transfers the user authentication to the access management service (23), and the access management service (23) transmits the result of the user authentication to the IDP server (22). It is characterized by:

[0011] A cloud data system control method according to a seventh aspect of the present invention is the cloud data system control method according to the fifth or sixth aspect of the present invention, characterized in that the user authentication is a single sign-on (SSO) request. The control method for a cloud data system of the eighth aspect of the present invention is the control method for a cloud data system of the fifth or sixth aspect of the present invention, characterized in that the IDP server (22) obtains management information from the setting information management DB (24) that manages settings of the cloud storage (16) before returning a result of the single sign-on (SSO) from the access management service (23) to the user, changes ((7)) the settings of the cloud storage (16), and then returns ((8)) the result of the user authentication.

[0012] The outline of the above-mentioned configuration constituting the present invention is as follows. [User, administrator] In this invention, the term "user" refers to a specific person who has the job authority (defined by job title, department, etc.) to use the cloud data system (1) for local governments, etc. In addition, in this invention, the term "administrator" refers to a specific person who has the job authority (defined by job title, department, etc.) to operate the cloud data system (1).

[0013] [browser] In the present invention, the term "browser" refers to general software used to view websites. For example, it refers to "Microsoft Edge" (registered trademark), "Google Chrome" (registered trademark), "Safari" (registered trademark), "Firefox" (registered trademark), "Opera" (registered trademark), etc. The browser used in the present invention may be a general one. However, by installing a dedicated plug-in, it becomes possible to add additional information required in the authorization process to the "HTTPS" header. The additional information here refers to, for example, which network the user is on, whether the user is teleworking at home, the job authority of the user of the terminal device, etc.

[0014] [Computer Networks] In this invention, a "computer network" refers to a communication network in which multiple computers are connected via signal lines or wirelessly, allowing them to send and receive data to each other, and refers to the Internet, LAN (Local Area Network), WAN (Wide Area Network), various closed networks, etc.

[0015] [Closed network] The "closed network" in the present invention is a network with secured security that is separated from Internet connections, such as the LGWAN managed by the Japan Agency for Local Government Information Systems (J-LIS). The closed network may be a LAN or WAN (Wide Area Network) owned by a local government, company, etc. In other words, the closed network in the present invention is a computer network that is isolated or restricted from an external network such as the Internet in order to ensure security, and is a network that blocks various terminal devices and information processing devices connected to the closed network from directly accessing the external Internet, etc. Note that in the present invention, the closed network and the closed type network are treated as synonyms.

[0016] [Cloud Storage] In the present invention, "cloud storage" refers to memory installed on the Internet for storing information, data, various images, various programs, etc., and is also called "online storage" or "file hosting", etc., and includes commercially available services such as Box (registered trademark), OneDrive (registered trademark), and GoogleDrive (registered trademark). In the present invention, document information, data, etc. that require confidentiality in cloud storage are preferably encrypted.

[0017] [Terminal device] The term "terminal device" as used herein refers to a device that is connected to a computer network and / or a closed network, can transmit and receive information, data, programs, etc., and is operated by a human. In the present invention, this also includes smartphones, tablets, mobile PCs, etc. This terminal device is preferably a PC-type device called a thin client terminal that does not have a hard disk device and does not store files or software in the terminal, but is not limited to this. This thin client terminal is equipped with a hard disk device in order to increase the processing speed and communication speed, and for example, the OS, browser, and application are installed on the hard disk of the terminal device, but data, information, etc. may be encrypted and stored in cloud storage (see, for example, WO2020 / 144961). In addition, the device may be restricted so that confidential information and data cannot be downloaded from cloud storage.

[0018] [IDP Server] The "IDP (Identify Provider) server" in this invention is a server that performs authentication and authorization based on authentication information such as the user ID, password, biometric authentication data such as face authentication data, and access authority of the user who mainly accesses cloud services, etc. Authentication at this time is performed by combining one or more pieces of authentication information, but this may be changed depending on the level of confidentiality of the information, data, etc. In this configuration, the IDP server is the "Relaying Party (RP) 2" and acts as a hub that requests actual authentication to the access management service. However, the purpose is to provide authorization in finer units by combining the additional information from the browser mentioned above and the authentication result from the access management service. [Access Management Service] (IDaaS or Azure AD) The "access management service" (Azure AD (Azure Active Directory)) or "IDaaS (Identity as a Service)" referred to in this invention is a cloud-based access management service that provides a function for determining "authentication" and "authorization", and is generally called an ID (Identity) management service or an account management system. The configuration and functions of this access management service are publicly known technologies, and specifically include, for example, Microsoft Azure AD (registered trademark), Microsoft Entra ID (registered trademark), Okta (registered trademark), etc. In this configuration, it is responsible for the "authentication" part.

[0019] [WEB server] The "WEB server" referred to in this invention is a general one that provides HTML files, images, applications, etc., and is usually, but not limited to, a server connected to the Internet. The WEB server of this invention is used and managed by the administrator of the cloud data system of the local government of this invention, a person with official authority, etc. [Authentication information] The "authentication information" or "user authentication information" in this invention is login authentication information required to access applications, various information, data, etc., and refers to information such as a user name, password, face authentication data, etc., and is general authentication information. Therefore, these authentication information are used in combination of one or more predetermined items depending on the job duties, authority, etc. of the user of the terminal device. Effect of the Invention

[0020] The cloud data system and its control method of the present invention have the following advantages. (1) It is possible to block access from terminal devices that do not have plug-ins that extend the browser's functions. (2) If the information, data, etc. can be obtained from a terminal device, the input and output of the information, data, etc. to be used can be restricted or permitted by attaching operating conditions in advance. (3) Since a dedicated browser is not required, there are no restrictions on the type of terminal device that can be used. (4) It is easy to set up controls to impose detailed access restrictions on cloud storage services used by local governments and other entities with highly confidential information. [Brief description of the drawings]

[0021] [Figure 1] FIG. 1 is a system diagram showing an overview of the entire configuration of a cloud data system according to the first embodiment. [Diagram 2] FIG. 2 is a block diagram showing an overview of a cloud storage authentication system 20. As shown in FIG. [Diagram 3] FIG. 3 is a block diagram illustrating another example of a cloud storage authentication system 20. As shown in FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0022] [First embodiment] A first embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is an embodiment of the cloud data system of the present invention, and is a diagram showing an outline of a system showing a cloud data system for a closed network. This cloud data system 1 for a closed network is an example that is assumed to be used in an administrative agency. In administrative agencies, closed networks such as LGWAN 2, which handles various administrative information and data including highly personal information, and LAN (Local Area Network) 3, which is not directly connected to the Internet and can be used only within the building, are used for My Number-related information. Meanwhile, various service terminal devices 14 connected to the Internet are used, which are operated using data in the closed networks 2 and 3, and are used at convenience stores, medical institutions, etc. to issue resident registration cards and seal certificates, and perform face authentication for confirming eligibility for health insurance cards. The service terminal devices 14 are used, for example, in medical institutions, and are terminal devices for confirming health insurance with My Number cards using face authentication, passwords, etc.

[0023] Moreover, the service terminal equipment 14 is placed in convenience stores and the like, and is an output terminal equipment used for issuing resident registration cards and seal certificates. In this way, various service terminal equipment 14 are connected to the external Internet 4. These service terminal equipment 14 and the closed network 3 need to send and receive the minimum information and data necessary for the service. A dedicated terminal equipment 12 for My Number is connected to the closed network (My Number LAN) 3. The dedicated terminal equipment 12 for My Number is intended to be operated only by authorized personnel to perform necessary operations from the information and data stored in the My Number server 10. Naturally, it has a function to record all corrections, modifications, editing, viewing, etc. of information and data, even if it is within the scope of the authorized personnel's duties.

[0024] The closed network 3 is connected to a service terminal device 14 via the Internet 4 and a relay system 6. The relay system 6 has a firewall and the like. Furthermore, it does not directly transfer data acquired from the My Number server 10, or does not directly transfer information, data, etc. acquired from an external network such as the external Internet 4 into the closed network 3. The relay system 6 is a server having these functions. The LGWAN (Local Government Wide Area Network) 2 is a network that connects local governments to each other, and is a closed environment type network system. It was introduced for the purpose of information exchange between local governments. The LGWAN 2 is connected to a LGWAN server 11, and is also connected to the "Government Common Network" (not shown), which is a network system of central government ministries and agencies. The local government network terminal device 13 connected to the LGWAN 2 is a terminal that can only be used by officials with limited authority.

[0025] Table 1 below is an example that specifies the scope, authority, authentication method, etc. of viewing, editing, etc. of documents, data, etc. in the LGWAN server 11. As shown below, documents, data, etc. in the LGWAN server 11 are strictly managed to prevent leakage, tampering, etc. In other words, confidentiality is ensured according to the level of secrecy, the responsible department, and the importance, and the authentication method is also determined. Naturally, even authorized staff cannot view, etc., even if they connect using terminal equipment other than the designated one. Although not shown in Table 1, information of local governments, such as public relations materials that have already been distributed, ordinances and rules, and publicly available assembly bills and minutes, etc., that do not need to be kept secret, can be viewed by anyone without restrictions. [Table 1]

[0026] The LGWAN server 11 has a function of recording all corrections, alterations, editing, viewing, etc. of information and data, even if it is within the scope of the duties of an authorized employee. This LGWAN 2 is connected to the Internet 4 via a relay system 7. The relay system 7 has a firewall and the like. Furthermore, the relay system 7 has a function of not transferring data acquired from the LGWAN server 11, or not transferring data acquired from an external network such as the external Internet 4 directly to the inside, and is a server for achieving these functions. Note that detailed functions of the relay systems 6, 7 are well known technology and are not the gist of the present invention, so explanations will be omitted.

[0027] On the other hand, some tasks performed by employees of local governments and the like do not require confidentiality, such as laws, ordinances, and public relations materials. For these tasks, employees use general-purpose terminal devices 15 rather than dedicated terminals, but these cannot be connected to the closed networks 2 and 3. The same applies even if authorized employees connect using general terminal devices 15. However, in recent years, work-style reform has encouraged people to work from home, but even if authorized employees connect to the Internet using general terminal devices, they cannot connect to the My Number server 10 or the LGWAN server 11. Therefore, in this embodiment, a cloud storage 16 connected to the general Internet 4 is arranged. Although the information and data in the cloud storage 16 require confidentiality, the minimum information and data necessary for employees to work outside the office building, such as at home, is stored.

[0028] This information and data may be, but is not limited to, in the middle of work. In addition, it is preferable that this information and data are encrypted in case of leakage. However, the range of information and data that can be stored in the cloud storage 16 is limited to the minimum necessary, and the content of the limitation is decided at the discretion of the local government that operates it, and it is operated according to this. In addition, information and data obtained from the Internet 4 cannot be transferred or copied to the devices of the closed networks 2 and 3 by the relay systems 6 and 7. Information and data that are generated in the closed networks 2 and 3 and can be stored in the cloud storage 16 are changed in format and encrypted by the relay systems 6 and 7 to increase security. The embodiment of the present invention is premised on the above-mentioned system, and can be used safely in the closed networks 2 and 3, or in the Internet 4 environment such as at home, and on general terminal devices.

[0029] [Overview of Cloud Storage Authentication System 20] FIG. 2 is a block diagram showing an outline of the cloud storage authentication system 20. The general terminal device 15 is connected to the Internet 4, and is equipped with various general browsers that are software used to view websites. In addition, it is equipped with document creation software, table creation software, diagram creation software, etc. for editing and viewing documents. The cloud storage 16 stores and manages data and files that can be used via the Internet 4. In addition to this storage and management, in this example, for example, file sharing within the same workplace is also possible. The cloud storage 16 has the advantage that it is easy to introduce and operate because it is operated by a service provider. However, while there are advantages, there are security risks because it is connected to the Internet.

[0030] The cloud storage 16 is connected to the IDP server 22 via the Internet 4. The IDP server 22 is a cloud service connected to the Internet. The IDP (Identity Provider) server 22 mediates authentication (SSO: Single Sign On), which is an access request from the general terminal device 15 to the cloud storage 16. The IDP (Identity Provider) server 22 is connected to Azure AD 23. The Azure AD 23 judges the authentication (SSO), which is an access request, and returns the authentication result to the IDP server 22. On the other hand, the IDP server 22 is connected to a setting information management DB 24. The setting information management DB 24 is for setting the range, authority, etc. of information, data, etc. that can be accessed by the staff operating the general terminal device 15. This range is taken out from the closed network 2, 3 according to the "classification category" of the document as shown in the above-mentioned Table 1 "Example of an administrative agency". The range that can be stored in the cloud storage 16 is set in advance according to the staff's job title, position, etc. However, regardless of an employee's job title or position, they are not allowed to take out anything highly confidential.

[0031] In this way, the scope and authority of the information, data, etc. that staff can access are set in the setting information management DB 24 and are determined in advance. The setting information management DB 24 normally places more restrictions on documents in the LGWAN server 11 than those shown in Table 1 "Example of a government agency." This is strictly limited to work at home, viewing while on a business trip, etc. Therefore, documents copied from the documents in the LGWAN server 11 to the cloud storage 16 are limited or cannot be copied at all. It is preferable that documents in the cloud storage 16 are encrypted.

[0032] Furthermore, the setting information management DB 24 sets the scope of the employee's job authority to view, edit, etc. the necessary information and data in cloud storage 16. In this way, the scope of viewing, editing, etc. for each individual employee and for each document is predetermined, so documents in cloud storage 16 can be safely viewed, edited, etc. Furthermore, the setting information management DB 24 is connected to a WEB server 25. The WEB server 25 can only be accessed by the system administrator. The administrator operates the setting information management DB 24 via the WEB server 25, not directly. Therefore, the information and data in the setting information management DB 24 is more secure.

[0033] Table 2 is an outline of the operation of the cloud storage authentication system 20 when an authentication request is received from a terminal. It shows the authentication procedure for a user when connecting to the cloud storage 16 from a general terminal device 15 connected to the Internet 4, etc. That is, Table 2 shows the procedure ((1) to (12)) showing transmission and reception between the installed browser 21, the cloud storage 16 connected to the Internet 4, the IDP server 22, Azure AD 23, the setting information management DB 24, and the WEB server 25 by the user from the general terminal device 15. This procedure is used to authenticate whether or not the user is a legitimate user.

[0034] [Table 2]

[0035] [20 Other Examples of Cloud Storage Authentication Systems] FIG. 3 is a block diagram showing another example of the cloud storage authentication system 20. The cloud storage authentication system 20 shown in FIG. 3 is the same as that shown in FIG. 2, and the description of the configuration will be omitted. Table 3 shows the procedure ((20) to (33)) showing transmission and reception between the installed browser 21, the cloud storage 16 connected to the Internet 4, the IDP server 22, the IDaaS 23, the setting information management DB 24, and the WEB server 25 by the user from the general terminal device 15. Authentication of whether or not the user is a legitimate user is performed by this procedure. The authentication procedure of the user in the cloud storage authentication system 20 shown in FIG. 3 and Table 3 is as follows.

[0036] The user operates a general terminal device 15 such as a My Number terminal, a local government network terminal, or an Internet terminal, accesses a browser 21 installed in the general terminal device 15, accesses the IDP server 22, and attempts to log in to the IDP server 22. In detail, the IDP server 22 responds to a request from the browser, and an authentication screen is displayed on the browser. On this authentication screen, the user inputs authentication data such as an authentication identification number and a password, and this authentication data is transmitted to the IDP server 22. The authentication data is stored in an authentication portable device, which is connected to the general terminal device 15, and the authentication data is input automatically or selected by the user into the authentication screen of the browser 21, and transmitted to the IDP server 22.

[0037] An authentication process is performed between the general terminal device 15 and the IDP server 22 by sending and receiving data (including encrypted communication process) between the IDP server 22 and the browser 21. This authentication process is general-purpose, and a detailed description is omitted. As a result, if the user is successfully authenticated and successfully logs in to the IDP server 22, the user becomes able to access My Number-related, local government network-related, or Internet-related services. After logging in, the user clicks on an icon displayed on the screen of the general terminal device 15, or on an icon or link of an accessible application displayed on the browser 21, and attempts to log in to those services.

[0038] When an application is started, it issues an SSO authentication request and transmits it to the IDP server 22. When the IDP server 22 receives this SSO authentication request, it transfers the SSO authentication request to the IDaaS 23. The IDaaS 23 receives the SSO authentication request, performs authentication processing, and returns the result to the IDP server 22. After that, the IDP server 22 transmits the authentication result to the general terminal device 15. Before returning the result of this SSO authentication request to the user (browser 21), the IDP server 22 obtains management information from the setting information management DB 24 that it manages, changes the setting of the cloud storage 16, and then returns the result of the SSO authentication request. In detail, the SSO authentication request is issued from the browser 21 and transmitted to the IDP server 22, the SSO authentication request transmitted in this manner is received by the IDP server 22, and the IDP server 22 transfers the SSO authentication request to the access management service 23. The access management service 23 responds to the IDP server 22 as to whether the SSO authentication request is acceptable or not.

[0039] The IDP server 22, which has received the SSO authentication result from the access management service 23, requests the setting information management DB 24 to obtain authentication information based on the additional information (terminal information) obtained from the browser 21, and obtains the setting information. The IDP server 22 transfers the obtained setting information to the cloud storage 16, and changes the settings in the cloud storage 16. Once the setting changes in the cloud storage 16 are complete, the IDP server 22 responds with the result of the SSO authentication to the browser 21 of the user terminal. This enables the user to access the IDP server 22 and data in the cloud storage 16 from the user's browser 21, and use the above-mentioned services. After that, the user can operate the browser 21 and receive various services of the cloud storage authentication system 20 on the IDP server 22.

[0040] [Table 3] [Explanation of symbols]

[0041] 1. Cloud Data System 2,3...Closed network 4. Internet 6,7…Relay system 10…My Number Server 11…LGWAN server 12…Dedicated terminal equipment for My Number 13...Local government network terminal equipment 14...Service terminal equipment 15...General terminal equipment 16. Cloud storage 20. Cloud Storage Authentication System 21. Browser 22…IDP server 23…Azure AD (IDaaS) 24…Setting information management DB 25…Web server

Claims

1. A cloud storage (16) which is an online file sharing service connected to a computer network (2, 3, 4); a general terminal device (15) connected to said computer network (2, 3, 4) and having an installed browser (21); A cloud data system (1) comprising: User authentication information that authenticates a user who accesses the cloud storage (16); An IDP server (22) for performing authentication and authorization based on additional information from one or more terminal devices selected from a terminal device for a local government network (13) used in a local government where a user directly operates, a terminal device dedicated to My Number (12), and the general terminal device (15); an access management service (23) for transmitting to the IDP server (22) whether the user is permitted to use the service based on the user authentication information transferred from the IDP server (22); a setting information management DB (24) connected to the IDP server (22) and managing settings of the cloud storage (16) via the IDP server (22); A cloud data system comprising:

2. 2. The cloud data system of claim 1, The computer networks (2, 3, 4) include closed networks (2, 3) to which only the limited users can connect. A cloud data system comprising:

3. 3. The cloud data system according to claim 1, a WEB server (25) connected to the setting information management DB (24) so ​​that an administrator can manage the setting information management DB (24); A cloud data system comprising:

4. The method for controlling a cloud data system according to claim 2, The local government network terminal device (13) is connected to the cloud storage (16) and is connected to the closed network in order to carry out various operations related to the My Number, which is a number given to all persons who have a resident registration. The My Number dedicated terminal device (12) is connected to the cloud storage (16) and is connected to the closed network that interconnects local governments, The general terminal device (15) is connected to the cloud storage (16) and is an Internet-based terminal device mainly for connecting to the Internet. A cloud data system comprising:

5. A method for controlling a cloud data system according to any one of claims 1 to 4, comprising: The cloud data system (1) When a login request is made to the cloud storage (16) from the general terminal device (15) via the browser (21) ((1), (2)), A request for user authentication is made from the cloud storage (16) ((3)), the user authentication is transferred to the access management service (23) ((4)), and the access management service (23) transmits the result of the user authentication to the IDP server (22) ((5)). A method for controlling a cloud data system comprising:

6. A method for controlling a cloud data system according to any one of claims 1 to 4, comprising: The cloud data system (1) A login request is made from the general terminal device (15) to the IDP server (22) via the browser (21), and login authentication is performed using user data. When the application is started from the general terminal device (15), A request for user authentication is made from the general terminal device (15), the IDP server (22) transfers the user authentication to the access management service (23), and the access management service (23) transmits the result of the user authentication to the IDP server (22). A method for controlling a cloud data system comprising:

7. 7. The method for controlling a cloud data system according to claim 5, The user authentication is a single sign-on (SSO) request. A method for controlling a cloud data system comprising:

8. 7. The method for controlling a cloud data system for a local government according to claim 5, Before returning the result of the single sign-on (SSO) from the access management service (23) to the user, the IDP server (22) acquires management information from a setting information management DB (24) that manages the settings of the cloud storage (16), changes the settings of the cloud storage (16) ((7)), and then returns the result of the user authentication ((8)). A method for controlling a cloud data system for a local government, comprising:

Images