Method and apparatus for providing credential service related to cloud service

A method for providing a credential service related to a cloud service, performed by a cloud service providing system, the cloud service providing system including an ID provider (IDP) module, an identity and access management (IAM) module, and a first system, the method comprising:

• receiving, by the cloud service providing system from a user terminal, an authentication token issuance request for authentication for the cloud service, the authentication token issuance request including an access key issued by the IAM module, an IDP token issued by the IDP module and valid period information of a temporary key;
• transmitting, by the first system, a verification request for the IDP token to the IDP module in response to the receiving the authentication token issuance request;
• receiving, by the first system, a verification result for the IDP token from the IDP module;
• based on the verification result being successful, issuing an authentication token and transmitting the issued authentication token to the user terminal;
• and matching and storing the access key, the valid period information, and the authentication token, which are included in the authentication token issuance request;
• receiving, by the first system from an application, a request for issuing a temporary key for a credential for calling an application programming interface (API) served by the cloud service, the request including the authentication token;
• and
• performing by the first system, a credential for the application by using the authentication token included in the request for issuing the temporary key;
• based on the credential passed, issuing a temporary key having a valid period corresponding to the valid period information stored in association with the authentication token;
• and transmitting the issued temporary key to the application.

A system for providing a credential service related to a cloud service, the system being configured to provide a first cloud service and comprising:

• one or more processors;
• and
• a memory configured to store instructions,
• wherein the one or more processors are configured to execute the instructions to perform:
• transmitting, to a user terminal, data of a request page including a cloud service selection field for selecting one cloud service from a list of a plurality of cloud services, the plurality of cloud services including a second cloud service and a third cloud service, which are distinguishable from the first cloud service;
• receiving, from the user terminal, a request for issuing a temporary key for a credential for calling an application programming interface (API) served by the second cloud service selected in the cloud service selection field;
• transmitting an account issuance request signal to a system of the second cloud service in response to the receiving the request for issuing the temporary key;
• receiving credential key information for a first account issued to an institution, which manages the system, from the system of the second cloud service in response to the transmitting the account issuance request signal;
• and
• transmitting the credential key information to the user terminal in response to the request for issuing the temporary key.