Access management system, access management method and program

A method performed by a management module of an access management system for managing access to data handled on a data server shared by a plurality of users,

• wherein the management module is configured to keep data in a registered folder on the data server in secret by transforming the data into a meaningless bit sequence using an access key,
• the method comprising, when a folder registration request for a first user is received:
• registering a data path of a folder assigned to the first user on a configuration management database;
• generating an access key;
• splitting the generated access key using threshold secret sharing scheme with a number of shares n and a quorum k into n shares;
• storing i (1≤i<k) shares out of then shares in at least one storage apparatus of the access management system as system shares;
• set at least one remaining share other than the system shares out of the n shares to be a first user share provided to the first user;
• and
• registering identification information of the system share and identification information of the first user share on the configuration management database in association with the data path;
• wherein the first user share and the identification information of the first user share are stored in a memory of the first user,
• the method further comprising, when an access request for a registered folder from the first user is received:
• recovering the access key based on the first user share and the identification information of the first user share received with the access request, the identification information of the system shares registered in association with the identification information of the first user share in the configuration management database, and the system shares obtained from the at least one storage apparatus;
• and
• deploying target data recovered using the recovered access key to the registered folder specified by the data path registered on the configuration management database.

A computer program stored in a computer-readable storage medium for, when executed by a processor of an information processing apparatus, in an access management system for managing access to data handled on a data server shared by a plurality of users, causing the processor to function as

• a management module configured to keep data in a registered folder on the data server in secret by transforming the data into a meaningless bit sequence using an access key,
• wherein the management module is configured to, when a folder registration request for a first user is received:
• register a data path of a folder assigned to the first user on a configuration management database;
• generate an access key;
• split the generated access key using threshold secret sharing scheme with a number of shares n and a quorum k into n shares;
• store i (1≤i<k) shares out of the n shares in at least one storage apparatus of the access management system as system shares;
• set at least one remaining share other than the system shares out of the n shares to be a first user share provided to the first user;
• and
• register identification information of the system share and identification information of the first user share on the configuration management database in association with the data path;
• wherein the first user share and the identification information of the first user share are stored in a memory of the first user,
• wherein the management module is further configured to, when an access request for a registered folder from the first user is received:
• recover the access key based on the first user share and the identification information of the first user share received with the access request, the identification information of the system shares registered in association with the identification information of the first user share in the configuration management database, and the system shares obtained from the at least one storage apparatus;
• and
• deploy target data recovered using the recovered access key to the registered folder specified by the data path registered on the configuration management database.