Information processing device, information processing method, information processing program, and information processing system

Abstract

The present invention reduces a workload of generating a key pair used for public key authentication in a virtualization system. This information processing device is connected to a plurality of uninterruptible power supply devices that supply power to a server device on which a virtual machine group including a management virtual machine that manages other virtual machines operates. The information processing device comprises a control unit that, in response to a key generation instruction from a user, causes each of the plurality of uninterruptible power supply devices to generate a key pair of a public key and a private key used for public key authentication of the server device and the management virtual machine by each of the plurality of uninterruptible power supply devices.

Description

Information Processing Apparatus, Information Processing Method, Information Processing Program and Information Processing System

[0001] The present invention relates to an information processing apparatus, an information processing method, an information processing program, and an information processing system.

[0002] In a virtualization system, a remote connection is sometimes made to a virtualization server and a physical server on which the virtualization server is deployed, to shut down the virtualization server and the physical server (see Patent Documents 1 and 2).

[0003] Japanese Patent No. 7063315, Japanese Patent No. 7276526

[0004] In virtualization systems, SecureShell (SSH) connection is used as a secure connection means for virtual machines and information processing apparatuses that run virtual machines. Various authentication methods can be employed for SSH connections, and public key authentication is cited as a more secure authentication method. In public key authentication, a key pair of a public key and a private key respectively generated by each information processing apparatus serving as a connection source is used. Therefore, when the number of information processing apparatuses serving as connection sources increases, it becomes necessary to connect to each of the connection source information processing apparatuses to generate key pairs, which increases the work burden of generating key pairs.

[0005] One aspect of the disclosed technology aims to provide an information processing apparatus, an information processing method, an information processing program, and an information processing system that can reduce the work burden of generating key pairs used for public key authentication in a virtualization system.

[0006] One aspect of the disclosed technology is exemplified by the following information processing apparatus. The information processing apparatus is connected to a plurality of uninterruptible power supply apparatuses that supply power to a server apparatus on which a virtual machine group including a management virtual machine that manages other virtual machines operates. The information processing apparatus includes a control unit that, in response to a key generation instruction from a user, causes each of the plurality of uninterruptible power supply apparatuses to execute generation of a key pair of a public key and a private key used for public key authentication to the server apparatus and the management virtual machine from each of the plurality of uninterruptible power supply apparatuses.

[0007] This information processing device, in response to a key generation instruction from the user, causes each of the multiple uninterruptible power supplies to generate the key pair. Therefore, the user does not need to log in to each of the multiple uninterruptible power supplies to generate the key pair. Thus, this information processing device can reduce the workload of generating the key pair used for public key authentication. The information processing device may also generate the key pair in response to a key generation instruction from the user.

[0008] This information processing device may further have the following features: When the control unit receives a download instruction from the user, it downloads the generated public keys from each of the multiple uninterruptible power supplies. According to an information processing device with such features, the public keys generated by each of the multiple uninterruptible power supplies in response to the download instruction can be downloaded all at once.

[0009] The information processing device may further have the following features: The control unit causes each of the multiple uninterruptible power supplies to perform at least one of the following in response to instructions from the user: changing the passphrase of the key pair or deleting the key pair. According to an information processing device having such features, at least one of the following can be performed from the information processing device: changing the passphrase of the key pair or deleting the key pair.

[0010] The information processing device may further have the following features: The control unit outputs a key pair generation screen to the output unit of the information processing device, which accepts a key pair generation instruction to cause each of the multiple uninterruptible power supplies to generate the key pair. With an information processing device having such features, the generation of the key pair can be easily performed via a user interface called the key pair generation screen.

[0011] The information processing device may further have the following features: The control unit causes the output unit of the information processing device to output a key pair management screen that accepts at least one of the following instructions: a download instruction to instruct the download of the public key, a passphrase change instruction to instruct the change of the passphrase set on the private key, and a key pair deletion instruction to instruct the deletion of the key pair. With an information processing device having such features, the public key can be easily downloaded, the passphrase set on the private key can be changed, and the key pair can be easily deleted via a user interface called the key pair management screen.

[0012] Disclosure techniques can also be understood from the perspectives of information processing methods, information processing programs, and information processing systems.

[0013] According to the disclosed technology, it is possible to reduce the workload of generating key pairs used in public key authentication in virtualized systems.

[0014] Figure 1 is a diagram showing an example of a virtualization system according to an embodiment. Figure 2 is a diagram showing an example of the hardware configuration of a user terminal according to an embodiment. Figure 3 is a diagram showing an example of the hardware configuration of a network card according to an embodiment. Figure 4 is a diagram showing an example of the processing block of a network card according to an embodiment. Figure 5 is a diagram showing an example of the processing block of a user terminal according to an embodiment. Figure 6 is a diagram showing an example of a connection destination setting screen output to the output unit by the setting unit according to an embodiment. Figure 7 is a diagram showing an example of a key pair generation screen output to the output unit by the key pair management unit according to an embodiment. Figure 8 is a diagram showing an example of a key pair management screen output to the output unit by the key pair management unit according to an embodiment. Figure 9 is a diagram showing an example of the processing sequence from key pair generation to download of the generated public key in the virtualization system according to an embodiment. Figure 10 is a diagram showing an example of the processing sequence of passphrase reset processing in the virtualization system according to an embodiment. Figure 11 is a diagram showing an example of the processing sequence of deleted generated key pairs in the virtualization system according to an embodiment. Figure 12 is a diagram showing an example of a virtualization system according to a first modification. Figure 13 is a diagram showing an example of the hardware configuration of a management server according to a first modification. Figure 14 is a diagram showing an example of the processing block of a management server according to a first modification. Figure 15 shows an example of a management screen output to the user terminal's output unit by the UI provision unit of the management server in the first modified example.

[0015] <Application Examples> An example of the application of the present invention will now be described. An example of the application of the present invention is the virtualization system 1 illustrated in Figure 1. In the virtualization system 1, virtual machines VM11, VM12 and the management virtual machine VM13 run on physical server PV1, and virtual machines VM21, VM22 and the management virtual machine VM23 run on physical server PV2. Physical servers PV1 and PV2 receive power from UPS 30 and 40.

[0016] When power is interrupted from the power line P1 during a power outage, UPS 30 and 40 instruct the management virtual machines VM13 and VM23 and the physical servers PV1 and PV2 to shut down. This shutdown instruction is given, for example, via an SSH connection established between UPS 30 and 40 and the management virtual machines VM13 and VM23 and the physical servers PV1 and PV2. In addition to instructing shutdown during a power outage, UPS 30 and 40 also perform system startup processing when power is restored, and in this case, the startup processing is also performed via the SSH connection.

[0017] UPS 30 and 40 are equipped with network cards 10 and 20. SSH connections between UPS 30 and 40 and management virtual machines VM13 and VM23 and physical servers PV1 and PV2 are performed using, for example, public key authentication using a public and private key pair generated by network cards 10 and 20. In public key authentication, a key pair is generated on each of the connecting devices (network cards 10 and 20 in the example in Figure 1). Therefore, the workload of generating key pairs increases as the number of connecting devices increases.

[0018] In this application example, a user terminal 50 connected to the same network (network N1) as the network cards 10 and 20 of UPS 30 and 40 is used. The user terminal 50 may be a physical machine or a virtual machine. In response to a key pair generation instruction from the user, the user terminal 50 causes network cards 10 and 20 to generate public and private key pairs for public key authentication to the management virtual machines VM13 and VM23 and the physical servers PV1 and PV2, respectively.

[0019] In this application example, in response to a key pair generation instruction, the generation of key pairs on network cards 10 and 20 is performed simultaneously. Therefore, this application example reduces the workload of generating key pairs used for public key authentication in virtualization systems.

[0020] <Embodiments> Embodiments will be described below with reference to the drawings. Figure 1 is a diagram showing an example of a virtualization system 1 according to an embodiment. The virtualization system 1 comprises physical servers PV1 and PV2, network cards 10 and 20, UPS 30 and 40, and a user terminal 50.

[0021] Physical servers PV1 and PV2 are information processing devices that operate hypervisors HV1 and HV2. Physical servers PV1 and PV2 are connected to network N1. Network N1 is a network that connects information processing devices so that they can communicate with each other, for example, a Local Area Network (LAN). Three virtual machines run on hypervisor HV1: virtual machine VM11, virtual machine VM12, and management virtual machine VM13. Three virtual machines run on hypervisor HV2: virtual machine VM21, virtual machine VM22, and management virtual machine VM23. Management virtual machine VM13 is a virtual machine provided for the management of virtual machines VM11 and VM12. Management virtual machine VM23 is a virtual machine provided for the management of virtual machines VM21 and VM22. Physical servers PV1 and PV2 are examples of "server devices". Management virtual machines VM13 and VM23 are examples of "management virtual machines".

[0022] The physical servers PV1 and PV2, and the management virtual machines VM13 and VM23, operate an SSH service that accepts SSH connections from network cards 10 and 20. Examples of authentication methods accepted by the SSH service include password authentication and public key authentication. In this embodiment, public key authentication is used for security reasons, but password authentication may also be permitted.

[0023] UPS30 and 40 are uninterruptible power supplies. Power is supplied to UPS30 and 40 from the commercial power supply via wire P1. UPS30 is connected to physical server PV1 by wire P11 and to physical server PV2 by wire P12. Similarly, UPS40 is connected to physical server PV1 by wire P21 and to physical server PV2 by wire P22. UPS30 supplies power to physical servers PV1 and PV2 based on the power supplied via wire P1. Similarly, UPS40 supplies power to physical servers PV1 and PV2 based on the power supplied via wire P1.

[0024] UPS 30 and 40 are equipped with network cards 10 and 20. Network cards 10 and 20 are interfaces to network N1. UPS 30 and 40 are connected to network N1 via network cards 10 and 20.

[0025] In this embodiment, when the power supply from the power line P1 is lost, UPS 30 and 40 supply power from their batteries to the physical servers PV1 and PV2. The network cards 10 and 20 of UPS 30 and 40 connect to the management virtual machines VM13 and VM23 via network N1 and instruct the management virtual machines VM13 and VM23 to shut down each of the virtual servers VM11, VM12, VM21, and VM22. Once the shutdown of each of the virtual servers VM11, VM12, VM21, and VM22 is complete, the network cards 10 and 20 connect to the management virtual machines VM13 and VM23 (or hypervisors HV1 and HV2) via network N1 and instruct the management virtual machines VM13 and VM23 (or hypervisors HV1 and HV2) to shut down the management virtual machines VM13 and VM23. Subsequently, the network cards 10 and 20 send shutdown commands to the hypervisors HV1 and HV2 via the network N1, thereby executing the shutdown process for the hypervisors HV1 and HV2, as well as the physical servers PV1 and PV2.

[0026] For authentication when connecting to physical servers PV1, PV2 and management virtual machines VM13, VM23 via the network cards 10, 20 of UPS 30, 40, for example, SSH public key authentication is used. In this embodiment, each of the network cards 10 and 20 is a type of information processing device, as will be described later. The public key and private key pair used for public key authentication in SSH connections, with network cards 10 and 20 as the source and physical servers PV1, PV2 and management virtual machines VM13, VM23 as the destination, is generated on each of the network cards 10 and 20.

[0027] The user terminal 50 is an information processing device that accepts user operations. The user terminal 50 is connected to network N1. In Figure 1, the user terminal 50 does not receive power from UPS 30 and 40, but the user terminal 50 may receive power from UPS 30 and 40. Furthermore, the user terminal 50 is not limited to a physical server, but may be implemented as a virtual machine running on physical servers PV1 and PV2.

[0028] Alternatively, the user terminal 50 may instruct the network cards 10 and 20 to shut down each virtual machine. In this case, the user terminal 50 connects to the management virtual machines VM13 and VM23 via network N1 and instructs the management virtual machines VM13 and VM23 to shut down each virtual server VM11, VM12, VM21, and VM22. Once the shutdown of each virtual server VM11, VM12, VM21, and VM22 is complete, the user terminal 50 or network cards 10 and 20 connects to the management virtual machines VM13 and VM23 (or hypervisors HV1 and HV2) via network N1 and instructs the management virtual machines VM13 and VM23 (or hypervisors HV1 and HV2) to shut down the management virtual machines VM13 and VM23. Subsequently, network cards 10 and 20 execute the shutdown process for hypervisors HV1 and HV2 and physical servers PV1 and PV2 by sending shutdown commands to hypervisors HV1 and HV2 via network N1. If user terminal 50 instructs management virtual machines VM13 and VM23 (or hypervisors HV1 and HV2) to shut down the management virtual machines VM13 and VM23, network cards 10 and 20 send shutdown commands to hypervisors HV1 and HV2 after receiving notification from user terminal 50 that the shutdown is complete.

[0029] Furthermore, as described later, the user terminal 50 can receive user operations and instruct the network cards 10 and 20 of the UPS 30 and 40 to generate key pairs, etc., or it may perform key pair generation, etc. in the same way as the network cards 10 and 20. For example, if the user terminal 50 instructs the shutdown of each virtual server of each virtual machine, and the network cards 10 and 20 instruct the shutdown of the management virtual machine and hypervisors HV1 and HV2, and physical servers PV1 and PV2, then the user terminal 50 and the network cards 10 and 20, which are the source of the connection, need to be connected via SSH to the destination. In this case, key pair generation is performed on both the user terminal 50 and the network cards 10 and 20.

[0030] Figure 2 shows an example of the hardware configuration of a user terminal 50 according to the embodiment. The user terminal 50 includes a CPU 51, a main memory unit 52, an auxiliary memory unit 53, a communication unit 54, an output unit 55, an input unit 56, and a connection bus B1. The CPU 51, main memory unit 52, auxiliary memory unit 53, communication unit 54, output unit 55, and input unit 56 are interconnected by the connection bus B1.

[0031] The CPU 51 is also called a microprocessor unit (MPU) or processor. The CPU 51 is not limited to a single processor and may be in a multiprocessor configuration. A single CPU 51 connected via a single socket may also have a multicore configuration. At least a portion of the processing performed by the CPU 51 may be performed by a processor other than the CPU 51, such as a dedicated processor like a Digital Signal Processor (DSP), Graphics Processing Unit (GPU), numerical processor, vector processor, or image processing processor. At least a portion of the processing performed by the CPU 51 may also be performed by an integrated circuit (IC) or other digital circuit. Furthermore, at least a portion of the CPU 51 may include analog circuitry. Integrated circuits include Large Scale Integrated Circuits (LSIs), Application Specific Integrated Circuits (ASICs), and Programmable Logic Devices (PLDs). PLDs include, for example, Field-Programmable Gate Arrays (FPGAs). The CPU 51 may be a combination of a processor and an integrated circuit. Such combinations are called, for example, a microcontroller unit (MCU), a System-on-a-chip (SoC), a system LSI, or a chipset. In the user terminal 50, the CPU 51 deploys the program stored in the auxiliary storage unit 53 to the work area of ​​the main storage unit 52 and controls peripheral devices through program execution. This allows the user terminal 50 to perform processing that matches a predetermined purpose. The main memory unit 52 and the auxiliary memory unit 53 are recording media that can be read by the CPU 51. The CPU 51 is an example of a "control unit".

[0032] The main memory unit 52 is exemplified as a memory unit that is directly accessed by the CPU 51. The main memory unit 52 includes Random Access Memory (RAM) and Read Only Memory (ROM).

[0033] The auxiliary storage unit 53 stores various programs and various data on a recording medium in a read / write manner. The auxiliary storage unit 53 is also called an external storage device. The auxiliary storage unit 53 stores the operating system (OS), various programs, various tables, etc. The OS includes a communication interface program that exchanges data with external devices connected via the communication unit 54. External devices include, for example, other information processing devices and external storage devices connected by a computer network. The auxiliary storage unit 53 may also be, for example, part of a cloud system, which is a group of computers on a network.

[0034] The auxiliary storage unit 53 is, for example, an Erasable Programmable ROM (EPROM), a Solid State Drive (SSD), a Hard Disk Drive (HDD), etc. Alternatively, the auxiliary storage unit 53 may be a Compact Disc (CD) drive, a Digital Versatile Disc (DVD) drive, a Blu-ray® Disc (BD) drive, etc. Furthermore, the auxiliary storage unit 53 may be provided by a Network Attached Storage (NAS) or a Storage Area Network (SAN).

[0035] The communication unit 54 is, for example, an interface with the network N1. The communication unit 54 communicates with external devices via the network N1.

[0036] The output unit 55 outputs data processed by the CPU 51 and data stored in the main memory unit 52. Examples of the output unit 55 include a display, printer, speaker, etc.

[0037] The input unit 56 receives operation instructions from the user, etc. Examples of the input unit 56 include a keyboard, mouse, trackball, touch panel, microphone, etc.

[0038] Figure 3 shows an example of the hardware configuration of network cards 10 and 20 according to the embodiment. Network card 10 includes a CPU 11, a main memory unit 12, an auxiliary memory unit 13, a communication unit 14, and a connection bus B2. Network card 20 includes a CPU 21, a main memory unit 22, an auxiliary memory unit 23, a communication unit 24, and a connection bus B3. The CPUs 11 and 21, main memory units 12 and 22, auxiliary memory units 13 and 23, communication units 14 and 24, and connection buses B2 and B3 are the same as the CPU 51, main memory unit 52, auxiliary memory unit 53, communication unit 54, and connection bus B1 of the user terminal 50, respectively, so their explanation is omitted.

[0039] <Processing Blocks of Network Cards 10 and 20> Figure 4 shows an example of the processing blocks of network cards 10 and 20 according to the embodiment. Network card 10 includes a key pair generation unit 101 and a passphrase change unit 102. The CPU 11 executes a computer program that has been loaded into the main memory unit 12 to perform processing as each part of the network card 10, such as the key pair generation unit 101 and the passphrase change unit 102.

[0040] The key pair generation unit 101 generates a key pair of a public key and a private key used for public key authentication in SSH connections from the network card 10 to physical servers PV1, PV2, and management virtual machines VM13 and VM23. The key pair generation unit 101 generates a key pair in response to a key pair generation instruction from, for example, the user terminal 50. The key pair generation instruction includes, for example, a passphrase used in the key pair. The key pair generation unit 101 stores the generated key pair in the auxiliary storage unit 13. The key pair generation unit 101 may also delete the generated key pair from the auxiliary storage unit 13 in response to a key pair deletion instruction from the user terminal 50.

[0041] The passphrase modification unit 102 modifies the passphrase of the key pair generated by the key pair generation unit 101. The passphrase modification unit 102 modifies the passphrase, for example, in response to a passphrase modification instruction from the user terminal 50.

[0042] The network card 20 includes a key pair generation unit 201 and a passphrase change unit 202. Since the key pair generation unit 201 and the passphrase change unit 202 are the same as the key pair generation unit 101 and the passphrase change unit 202 of the network card 10, description thereof will be omitted.

[0043] <Processing block of user terminal 50> FIG. 5 is a diagram showing an example of a processing block of the user terminal 50 according to the embodiment. The user terminal 50 includes a setting unit 501 and a key pair management unit 502. The user terminal 50 executes processing as each unit such as the setting unit 501 and the key pair management unit 502 of the user terminal 50 by causing a CPU 51 to execute a computer program expansively deployed in an executable manner in a main storage unit 52.

[0044] The setting unit 501 accepts designation of information used for connection to a device that is a target of a key pair generation instruction. In the present embodiment, the setting unit 501 accepts setting of information used when connecting from the user terminal 50 to the network cards 10 and 20 that are targets of a key pair generation instruction.

[0045] FIG. 6 is a diagram showing an example of a connection destination setting screen 5011 output to an output unit 55 by the setting unit 501 in the embodiment. The connection destination setting screen 5011 has IP address input fields R11 and R14, user name input fields R12 and R15, and password input fields R13 and R16. In the IP address input field R11, the user name input field R12, and the password input field R13, the IP address of the network card 10, a user name used for authentication when connecting to the network card 10, and a password used for authentication when connecting to the network card 10 are respectively input. Further, in the IP address input field R14, the user name input field R15, and the password input field R16, the IP address of the network card 20, a user name used for authentication when connecting to the network card 20, and a password used for authentication when connecting to the network card 20 are respectively input. Note that FIG. 6 illustrates the connection destination setting screen 5011 when password authentication is used for connection from the user terminal 50 to the network cards 10 and 20, but authentication used for connection from the user terminal 50 to the network cards 10 and 20 is not limited to password authentication.

[0046] Returning to Figure 5, the key pair management unit 502 generates key pairs for network cards 10 and 20, collects generated key pairs, deletes generated key pairs, and changes the passphrase of generated key pairs. Figure 7 shows an example of the key pair generation screen 5021 output to the output unit 55 by the key pair management unit 502 in this embodiment. The key pair generation screen 5021 has an encryption method selection field R21, a passphrase input field R22, a passphrase re-input field R23, and a key pair generation button R24. The encryption method selection field R21 accepts the selection of the encryption method to be used for key pair generation. In the key pair generation screen 5021 illustrated in Figure 7, one encryption method is selected by radio buttons from two types of encryption methods: RSA and ECDSA, both with a key length of 2048 bits. The passphrase input field R22 and the passphrase re-input field R23 accept the input of a passphrase to be used for the private key of the key pair. If the passphrases entered in the passphrase input field R22 and the passphrase re-entry field R23 do not match, the key pair management unit 502 outputs an error message to the user indicating that the passphrases do not match.

[0047] When the key pair generation button R24 is pressed on the key pair generation screen 5021, the key pair management unit 502 sends a key pair generation instruction to the devices configured on the connection destination setting screen 5011, using the encryption method and passphrase set on the key pair generation screen 5021. In other words, a key pair is generated with a common passphrase on each of the devices configured on the connection destination setting screen 5011. The key pair generation instruction is an example of a "key generation instruction".

[0048] Returning to Figure 5, the key pair management unit 502 accepts requests for downloading the public key from the network cards 10 and 20 to the user terminal 50, resetting the passphrase of the generated private key, and deleting the generated key pair. Figure 8 shows an example of the key pair management screen 5022 output to the output unit 55 by the key pair management unit 502 in this embodiment. The key pair management screen 5022 has a download button R31, a new passphrase input field R32, a new passphrase (re-enter) field R33, a setting button R34, and a delete button R35.

[0049] When the download button R31 is pressed, the key pair management unit 502 downloads the generated public key from the network cards 10, 20 to the user terminal 50. The key pair management unit 502 stores the downloaded public key in, for example, the auxiliary storage unit 53.

[0050] When the setting button R34 is pressed in a state where the changed passphrase is entered in the new passphrase input field R32 and the new passphrase (re-input) field R33, the key pair management unit 502 transmits, to the network cards 10, 20, a passphrase change instruction that causes the network cards 10, 20 to change the passphrase of the generated private key to the passphrase entered in the new passphrase input field R32.

[0051] When the delete button R35 is pressed, the key pair management unit 502 transmits, to the network cards 10, 20, a key pair deletion instruction that causes the generated key pair to be deleted. When the key pair is deleted from the network cards 10, 20, the setting unit 501 may accept generation of a new key pair by outputting, for example, the setting unit 5012.

[0052] FIG. 9 is a diagram showing an example of a processing sequence from generation of a key pair to downloading of the generated public key in the virtualization system 1 according to the embodiment. With reference to FIG. 9, an example of a processing sequence from generation of a key pair to downloading of the generated public key in the virtualization system 1 will be described.

[0053] In step S1, the setting unit 501 of the user terminal 50 causes the output unit 55 to output a connection destination setting screen 5011. The setting unit 501 accepts setting of information used for connection to the network cards 10, 20.

[0054] In step S2, the key pair management unit 502 of the user terminal 50 causes the output unit 55 to output a key pair generation screen 5021. The key pair management unit 501 accepts specification of an encryption method and a passphrase via the key pair generation screen 5021.

[0055] In step S3, when the key pair generation button R24 on the key pair generation screen 5021 of the user terminal 50 is pressed, the key pair management unit 502 of the user terminal 50 connects to the network cards 10 and 20 using the information received in step S1 and sends a key pair generation instruction to the network cards 10 and 20.

[0056] In step S4, the key pair generation unit 101 of the network card 10 generates a key pair consisting of a public key and a private key in response to the key pair generation instruction received in step S3.

[0057] In step S5, the key pair generation unit 201 of the network card 20 generates a key pair consisting of a public key and a private key in response to the key pair generation instruction received in step S3.

[0058] In step S6, the key pair management unit 502 of the user terminal 50 outputs the key pair management screen 5022 to the output unit 55. When the download button R31 is pressed, the key pair management unit 502 downloads the key pair generated in step S4 from the network card 10 and the key pair generated in step S5 from the network card 20. After that, the user of the user terminal 50 can place the public keys downloaded from the network cards 10 and 20 to the connection destinations (for example, physical servers PV1 and PV2, and management virtual machines VM13 and VM23) to which they connect using SSH public key authentication.

[0059] Figure 10 is a diagram showing an example of the processing sequence for the passphrase reset process in the virtualization system 1 according to the embodiment. Hereinafter, an example of the processing sequence for the passphrase reset process in the virtualization system 1 will be described with reference to Figure 10.

[0060] In step S11, the key pair management unit 502 of the user terminal 50 outputs the key pair management screen 5022 to the output unit 55. The key pair management unit 502 accepts the specification of a new passphrase on the key pair management screen 5022.

[0061] In step S12, when the setting button R34 on the key pair management screen 5022 of the user terminal 50 is pressed, the key pair management unit 502 sends a passphrase change instruction to the network cards 10 and 20 to change the passphrase of the private key to the new passphrase accepted in step S11.

[0062] In step S13, the passphrase change unit 102 of the network card 10 changes the passphrase of the secret key stored in the auxiliary storage unit 13 to the passphrase specified in the passphrase reset instruction, in response to the passphrase reset instruction received in step S12.

[0063] In step S14, the passphrase change unit 202 of the network card 20 changes the passphrase of the secret key stored in the auxiliary storage unit 23 to the passphrase specified in the passphrase reset instruction, in response to the passphrase reset instruction received in step S12.

[0064] Figure 11 is a diagram showing an example of the processing sequence for deleting generated key pairs in the virtualization system 1 according to the embodiment. Hereinafter, an example of the processing sequence for deleting generated key pairs in the virtualization system 1 will be described with reference to Figure 11.

[0065] In step S21, the key pair management unit 502 of the user terminal 50 outputs the key pair management screen 5022 to the output unit 55.

[0066] In step S22, the key pair management unit 502 of the user terminal 50 sends a key pair deletion instruction to the network cards 10 and 20 when the delete button R35 is pressed on the key pair management screen 5022 output in step S21.

[0067] In step S23, the key pair generation unit 101 of the network card 10 deletes the key pair stored in the auxiliary storage unit 13 in response to the key pair deletion instruction received in step S22.

[0068] In step S24, the key pair generation unit 201 of the network card 20 deletes the key pair stored in the auxiliary storage unit 23 in response to the key pair deletion instruction received in step S22.

[0069] <Effects of the Embodiment> According to this embodiment, by selecting an encryption method and entering a passphrase on the key pair generation screen 5021 of the user terminal 50, and then pressing the key pair generation button R24, a key pair for use in public key authentication is generated on the network cards 10 and 20. Therefore, according to this embodiment, the workload for generating a key pair for use in public key authentication in the virtualization system 1 can be reduced compared to the case where a key pair is generated by logging into each of the network cards 10 and 20. Furthermore, by generating a key pair on multiple network cards 10 and 20 (including the user terminal 50 if the user terminal 50 itself creates the key pair), a common passphrase is used among the multiple network cards 10 and 20 (and the user terminal 50), so it is not necessary to manage a passphrase for each device that creates a key pair.

[0070] According to this embodiment, when the download button R31 on the key pair management screen 5022 is pressed, the public keys of the key pairs generated on network cards 10 and 20 are downloaded to the user terminal 50. The user on user terminal 50 simply needs to place the downloaded public keys on the devices (physical servers PV1 and PV2, management virtual machines VM13 and VM23) connected via SSH from network cards 10 and 20. Therefore, according to this embodiment, the workload for collecting public keys can be reduced compared to logging into each of network cards 10 and 20 and downloading the public keys.

[0071] Furthermore, in this embodiment, the user terminal 50 can perform operations such as key pair generation. Once the key pair is generated on the user terminal 50, SSH connections become possible to each virtual server, hypervisor HV1, HV2, and physical servers PV1, PV2. Therefore, shutdown commands can be issued to each virtual server, hypervisor HV1, HV2, and physical servers PV1, PV2, either jointly by the user terminal 50 and network cards 10, 20, or solely by the user terminal 50.

[0072] In this embodiment, shutdown commands for physical servers PV1 and PV2 and management virtual machines VM13 and VM23 from UPS 30 and 40 are issued using the SSH connection established between network cards 10 and 20 and physical servers PV1 and PV2 and management virtual machines VM13 and VM23. This SSH connection uses public key authentication with a key pair generated by network cards 10 and 20 in response to a key pair generation command from user terminal 50. By using public key authentication, the connection between network cards 10 and 20 and physical servers PV1 and PV2 and management virtual machines VM13 and VM23 can be made more secure than when password authentication is used.

[0073] <First Modification> In the embodiments described above, for example, instructions such as key pair generation were given from the user terminal 50 to the network cards 10 and 20. The first modification describes a modification in which instructions such as key pair generation are given to the network cards 10 and 20 via a user interface provided by a web server. Components identical to those in the embodiments are denoted by the same reference numerals, and their descriptions are omitted. The first modification will be described below with reference to the drawings.

[0074] Figure 12 shows an example of a virtualization system 1A according to the first modification. In the virtualization system 1A, the management server 80 is connected to network N1 instead of the user terminal 50. Also, in the virtualization system 1A, the user terminal 50A is connected to the management server 80 via network N2. In the example of Figure 12, networks N1 and N2 are separate networks, but networks N1 and N2 may be the same network. In other words, it is sufficient that the user terminal 50A and the management server 80 are connected by a network.

[0075] The user terminal 50A is an information processing device that connects to the management server 80, for example, via a web browser. The user terminal 50A issues instructions to the network cards 10 and 20, such as key pair generation, via a user interface provided by a web service running on the management server 80.

[0076] Figure 13 shows an example of the hardware configuration of the management server 80 according to the first modified example. The management server 80 includes a CPU 81, a main memory unit 82, an auxiliary memory unit 83, a communication unit 84, and a connection bus B4. The CPU 81, main memory unit 82, auxiliary memory unit 83, communication unit 84, and connection bus B4 are the same as those of the user terminal 50, except that the communication unit 84 is connected to the network N2, so their explanation is omitted.

[0077] Figure 14 shows an example of a processing block of the management server 80 according to the first modification. The management server 80 includes a UI provisioning unit 801, a key pair generation instruction unit 802, and a passphrase change instruction unit 803. The management server 80 performs processing as each part of the management server 80, such as the UI provisioning unit 801, the key pair generation instruction unit 802, and the passphrase change instruction unit 803, by having the CPU 81 execute a computer program that has been expanded in executable form in the main memory unit 82.

[0078] When the UI provider 801 receives access from a user terminal 50A via a web browser, it displays a management screen used for key pair management on the user terminal 50A's web browser. Figure 15 shows an example of the management screen 8011 output to the output unit 55 of the user terminal 50A by the UI provider 801 of the management server 80 in the first modified example. The UI provider 801 accepts the generation of key pairs and the management of the generated key pairs by displaying the management screen 8011 on the user terminal 50A's web browser. The management screen 8011 has an encryption method selection field R41, a passphrase input field R42, a passphrase re-entry field R43, a key pair generation button R44, a download button R45, a new passphrase input field R46, a new passphrase (re-entry) field R47, a setting button R48, and a delete button R49. The encryption method selection field R41, passphrase input field R42, passphrase re-entry field R43, key pair generation button R44, download button R45, new passphrase input field R46, new passphrase (re-entry) field R47, settings button R48, and delete button R49 are the same as the encryption method selection field R21, passphrase input field R22, passphrase re-entry field R23, key pair generation button R24, download button R31, new passphrase input field R32, new passphrase (re-entry) field R33, settings button R34, and delete button R35, respectively.

[0079] The key pair generation instruction unit 802 instructs the network cards 10 and 20 to generate a key pair. The key pair generation instruction unit 802 receives the selection of the encryption method to be used in the key pair via the encryption method selection field R41. The key pair generation instruction unit 802 also receives the specification of the passphrase to be used for the private key of the key pair via the passphrase input field R42 and the passphrase re-input field R43. Then, the key pair generation instruction unit 802 specifies the selected encryption method and the specified passphrase and instructs the network cards 10 and 20 to generate the key pair. Upon receiving the instruction, the network cards 10 and 20 generate a key pair of public and private keys to be used for public key authentication in SSH connections from the network cards 10 and 20 to physical servers PV1 and PV2 and management virtual machines VM13 and VM23, for example, via the key pair generation units 101 and 201.

[0080] When the download button R45 is pressed after the key pair has been generated, the key pair generation instruction unit 802 retrieves the generated public key from the network cards 10 and 20 and downloads the retrieved public key to the user terminal 50A.

[0081] The passphrase change instruction unit 803 accepts a change to the passphrase of the generated key pair. The passphrase change instruction unit 803 receives the specified new passphrase via the new passphrase input field R46 and the new passphrase (re-entry) field R47. The passphrase change instruction unit 803 then instructs the network cards 10 and 20 to change to the specified passphrase. Upon receiving the instruction, the network cards 10 and 20 perform the change to the specified passphrase, for example, via the passphrase change units 102 and 202.

[0082] Furthermore, when the delete button R49 is pressed, the key pair generation instruction unit 802 instructs the network cards 10 and 20 to delete the generated key pair. Upon receiving this instruction, the network cards 10 and 20 delete the key pair that has been generated by the key pair generation units 101 and 201.

[0083] According to the first modification, any terminal that can access the management server 80 via a web browser, such as user terminal 50A, can issue instructions to the network cards 10 and 20 to generate, delete, and download key pairs. In the first modification, the management server 80 was a physical server, but the management server 80 may be a virtual machine. If the management server 80 is a virtual machine, it may be a virtual machine running on physical servers PV1 and PV2, or it may be a virtual machine running on a physical server different from physical servers PV1 and PV2.

[0084] <Other Modifications> In the embodiments described above, the devices that serve as the source of the SSH connection were two network cards 10 and 20 (i.e., UPS 30 and 40), but there may be three or more devices that serve as the source of the SSH connection, or there may be just one device.

[0085] In the embodiments described above, key pairs were generated by the network cards 10 and 20 of UPS 30 and 40, respectively. However, the generation of key pairs is not limited to the network cards 10 and 20; hardware other than the network cards 10 and 20 provided by UPS 30 and 40 may also perform the generation of key pairs.

[0086] In the embodiments described above, public key authentication was used for all SSH connections between network cards 10 and 20 and physical servers PV1 and PV2, and management virtual machines VM13 and VM23. However, other authentication methods (e.g., password authentication) may be used in some cases. For example, public key authentication may be selected for servers requiring a more secure environment, while password authentication may be selected for other servers.

[0087] The embodiments and variations disclosed above can be combined in any way.

[0088] <Computer-readable recording medium> An information processing program that enables a computer or other machine or device (hereinafter referred to as "computer, etc.") to perform any of the above functions can be recorded on a computer-readable recording medium. By having the computer, etc. read and execute the program on this recording medium, it can provide the function.

[0089] Here, a recording medium that can be read by a computer refers to a recording medium that stores information such as data and programs through electrical, magnetic, optical, mechanical, or chemical means and can be read by a computer. Examples of such recording media that can be removed from a computer include flexible disks, magneto-optical disks, Compact Disc Read Only Memory (CD-ROM), Compact Disc-Recordable (CD-R), Compact Disc-ReWritable (CD-RW), Digital Versatile Disc (DVD), Blu-ray Disc (BD), Digital Audio Tape (DAT), 8mm tape, flash memory, external hard disk drives, and Solid State Drives (SSDs). Furthermore, there are internal hard disk drives, SSDs, and ROMs as storage media fixed to computers and other devices.

[0090] <Note 1> An information processing device (50) connected to a plurality of uninterruptible power supplies (30, 40) that supply power to server devices (PV1, PV2) on which a group of virtual machines, including management virtual machines (VM13, VM23) that manage other virtual machines (VM11, VM12, VM21, VM22), are running, the information processing device comprising a control unit (51) that causes each of the plurality of uninterruptible power supplies (30, 40) to generate a key pair of a public key and a private key used for public key authentication to the server devices (PV1, PV2) and the management virtual machines (VM13, VM23) in response to a key generation instruction from a user. <Note 2> The information processing device according to Note 1, wherein the control unit (51) downloads the generated public key from each of the plurality of uninterruptible power supplies (30, 40) when it receives a download instruction from a user. <Note 3> The information processing device according to Note 1 or 2, wherein the control unit (51) causes each of the plurality of uninterruptible power supplies (30, 40) to perform at least one of changing the passphrase of the key pair and deleting the key pair in response to instructions from the user. <Note 4> The information processing device according to Note 1 or 2, wherein the control unit (51) causes the output unit (55) of the information processing device (50) to output a key pair generation screen (5021) that accepts a key pair generation instruction causing each of the plurality of uninterruptible power supplies (30, 40) to generate the key pair. <Note 5> The information processing device according to Note 3, wherein the control unit (51) causes the output unit (55) of the information processing device (50) to output a key pair management screen (5022) that accepts at least one of the following instructions: a download instruction instructing the download of the public key, a passphrase change instruction instructing the change of the passphrase to be set on the private key, and a key pair deletion instruction instructing the deletion of the key pair.<Note 6> The information processing device (50) executes the generation of the key pair in response to a key generation instruction from the user, as described in Note 1 or 2. <Note 7> An information processing method in which an information processing device connected to a plurality of uninterruptible power supplies (30, 40) that supply power to a server device (PV1, PV2) on which a group of virtual machines including management virtual machines (VM13, VM23) that manage other virtual machines (VM11, VM12, VM21, VM22) are running, executes a key pair generation process in response to a key generation instruction from the user, causing each of the plurality of uninterruptible power supplies (30, 40) to generate a key pair of a public key and a private key used for public key authentication to the server device (PV1, PV2) and the management virtual machines (VM13, VM23). <Note 8> An information processing program that causes an information processing device (50) connected to a plurality of uninterruptible power supplies (30, 40) that supply power to a server device (PV1, PV2) on which a group of virtual machines, including management virtual machines (VM13, VM23) that manage other virtual machines (VM11, VM12, VM21, VM22), are running, to execute a key pair generation process in response to a key generation instruction from a user, causing each of the plurality of uninterruptible power supplies (30, 40) to generate a key pair of a public key and a private key used for public key authentication to the server device (PV1, PV2) and the management virtual machines (VM13, VM23).<Note 9> An information processing system (30, 40) comprising: server devices (PV1, PV2) on which a group of virtual machines including management virtual machines (VM13, VM23) that manage other virtual machines (VM11, VM12, VM21, VM22) are running; a plurality of uninterruptible power supplies (30, 40) that supply power to the server devices (PV1, PV2); and an information processing device (50) connected to the uninterruptible power supplies (30, 40), wherein the information processing device (50) has a control unit that causes each of the plurality of uninterruptible power supplies (30, 40) to generate a key pair of a public key and a private key used for public key authentication to the server devices (PV1, PV2) and the management virtual machines (VM13, VM23) in response to a key generation instruction from a user.

[0091] 1...Virtualization system 10, 20...Network card 11, 21, 51...CPU 12, 22, 52...Main memory 13, 23, 53...Auxiliary memory 14, 24, 54...Communication unit 30, 40...UPS 50, 50A...User terminal 55...Output unit 56...Input unit 80...Management server 101...Key pair generation unit 102...Passphrase change unit 201...Key pair generation unit 202...Passphrase change unit 501...Setting unit 502...Key pair management unit 5011...Connection destination setting screen 5021...Key pair generation screen 5022...Key pair management screen 8011...Management screen HV1, HV2...Hypervisor N1, N2...Network P1, P11, P12, P21, P22... Power lines PV1, PV2... Physical servers VM11, VM12, VM21, VM23... Virtual machines VM13, VM23... Management virtual machines

Claims

1. An information processing device connected to a plurality of uninterruptible power supplies that supply power to a server device on which a group of virtual machines, including a management virtual machine that manages other virtual machines, is running, the information processing device comprising a control unit that, in response to a key generation instruction from a user, causes each of the plurality of uninterruptible power supplies to generate a key pair of a public key and a private key used for public key authentication to the server device and the management virtual machine.

2. The information processing apparatus according to claim 1, wherein the control unit, upon receiving a download instruction from a user, downloads the generated public key from each of the plurality of uninterruptible power supplies.

3. The information processing apparatus according to claim 1 or 2, wherein the control unit causes each of the plurality of uninterruptible power supplies to perform at least one of changing the passphrase of the key pair or deleting the key pair in response to instructions from the user.

4. The information processing apparatus according to claim 1 or 2, wherein the control unit causes the output unit of the information processing apparatus to output a key pair generation screen that receives a key pair generation instruction causing each of the plurality of uninterruptible power supplies to generate the key pair.

5. The information processing apparatus according to claim 3, wherein the control unit causes the output unit of the information processing apparatus to output a key pair management screen that accepts at least one of the following instructions: a download instruction for instructing the download of the public key, a passphrase change instruction for instructing the change of the passphrase to be set on the private key, and a key pair deletion instruction for instructing the deletion of the key pair.

6. The information processing device according to claim 1 or 2, wherein the information processing device generates the key pair in response to an instruction from a user to generate a key.

7. Information processing method comprising: an information processing device connected to a plurality of uninterruptible power supplies (UPS) that supply power to a server device on which a group of virtual machines, including a management virtual machine that manages other virtual machines, is running, and which executes a key pair generation process instructing each of the plurality of UPS to generate a key pair of a public key and a private key used for public key authentication to the server device and the management virtual machine, in response to a key generation instruction from a user.

8. An information processing program that, in response to a user instruction to generate a key, causes each of the multiple uninterruptible power supplies to generate a key pair of a public key and a private key used for public key authentication to the server and the management virtual machine, on an information processing device connected to a multiple uninterruptible power supply that supplies power to a server device on which a group of virtual machines, including a management virtual machine that manages other virtual machines, is running.

9. An information processing system comprising: a server device on which a group of virtual machines, including a management virtual machine that manages other virtual machines, runs; a plurality of uninterruptible power supplies that supply power to the server device; and an information processing device connected to the uninterruptible power supplies, wherein the information processing device has a control unit that causes each of the plurality of uninterruptible power supplies to generate a key pair of a public key and a private key used for public key authentication to the server device and the management virtual machine, in response to a key generation instruction from a user.

Images