# US 10,454,920 B2 · Non-transitory computer-readable recording medium, connection management method, and connection management device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,454,920 B2 - Document ID: US10454920B2 - Status: Granted - Kind: B2 - Application number: 15/663,911 - Filed: 2017-07-31 - Published: 2018-02-08 - Granted: 2019-10-22 - Earliest claimed: 2016-08-03 - Assignees: Fujitsu Limited - Applicants: Fujitsu Limited - Inventors: Ryohei Morishita; Kan Yamamoto; Yuriko Koseki; Yoshie Nehashi; Norie Tachibana; Hiroyoshi Kasai - Web page: https://patentgrep.com/patent/US10454920B2 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) - H04L 67/146: Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A non-transitory computer-readable recoding medium having stored therein a connection management program that causes a computer to execute a process that includes receiving registrations of a plurality of certificates, the plurality of certificates respectively being used to establish connections to a plurality of external systems, respectively, the plurality of external systems respectively relating to a plurality of tenants, respectively, whose connections are managed by the computer, and establishing a connection to a specific external system using a specific certificate when a information processing terminal associated with a specific tenant is connecting to the specific external system, the specific certificate corresponding both to the specific tenant and the specific external system, the specific external system being included in the plurality of external systems. ## Claims ### Claim 1 A non-transitory computer-readable recoding medium having stored therein a connection management program that causes a computer to execute a process comprising: receiving registrations of a plurality of certificates, the plurality of certificates respectively being used to establish connections to a plurality of external systems, respectively, the plurality of external systems respectively relating to a plurality of tenants, respectively, whose connections are managed by the computer; and establishing a connection to a specific external system using a specific certificate when a information processing terminal associated with a specific tenant is connecting to the specific external system, the specific certificate corresponding both to the specific tenant and the specific external system, the specific external system being included in the plurality of external systems. ### Claim 2 (depends on 1) The non-transitory computer-readable recoding medium according to claim 1, wherein when the registrations of the plurality of certificates have been received, the plurality of certificates are stored independently of an execution platform for an application, the execution platform being shared by the plurality of tenants. ### Claim 3 (depends on 1) The non-transitory computer-readable recoding medium according to claim 1, wherein the plurality of certificates are respectively stored in different storages. ### Claim 4 (depends on 1) The non-transitory computer-readable recoding medium according to claim 1, wherein one of the plurality of certificates is stored in a storage of one of the plurality of external systems that corresponds to the one of the plurality of certificates. ### Claim 5 (depends on 1) The non-transitory computer-readable recoding medium according to claim 1, wherein an identifier of one of the plurality of tenants and one of the plurality of certificates are associated with each other and stored when the registrations of the plurality of certificates have been received. ### Claim 6 (depends on 1) The non-transitory computer-readable recoding medium according to claim 1, wherein an authentication token is received from the information processing terminal associated with one of the plurality of tenants, the authentication token is verified so as to verify whether the one of the plurality of tenants is authorized to use the specific external system, and when the one of the tenants has been determined to be authorized to use the specific external system, a connection to the specific external system is established using one of the plurality of certificates which corresponds to the one of the tenants. ### Claim 7 A connection management method conducted by a computer, the connection management method comprising: receiving registrations of a plurality of certificates, the plurality of certificates respectively being used to establish connections to a plurality of external systems, respectively, the plurality of external systems respectively relating to a plurality of tenants, respectively, whose connections are managed by the computer; and establishing a connection to a specific external system using a specific certificate when a information processing terminal associated with a specific tenant is connecting to the specific external system, the specific certificate corresponding both to the specific tenant and the specific external system, the specific external system being included in the plurality of external systems. ### Claim 8 A connection management device comprising: a processor configured to execute a process including: receiving registrations of a plurality of certificates, the plurality of certificates respectively being used to establish connections to a plurality of external systems, respectively, the plurality of external systems respectively relating to a plurality of tenants, respectively, whose connections are managed by the processor; and establishing a connection to a specific external system using a specific certificate when a information processing terminal associated with a specific tenant is connecting to the specific external system, the specific certificate corresponding both to the specific tenant and the specific external system, the specific external system being included in the plurality of external systems.