| Creator |
|
|
|
|
|
|
|
|
|
| Language |
|
| Publisher |
|
|
|
| Date |
|
| Source Title |
|
|
|
| Vol |
|
| Issue |
|
| First Page |
|
| Last Page |
|
| Publication Type |
|
| Access Rights |
|
| Rights |
|
| Related DOI |
|
| Related DOI |
|
|
|
| Related URI |
|
|
|
| Related URI |
|
| Related HDL |
|
| Relation |
|
|
|
| Abstract |
多くの組織で，組織内情報サービスのための利用者認証基盤構築されている．九州大学でも統合認証基盤を構築しており，そのアカウントとして学生には学生番号に基づく利用者 ID を発行してきた．学生番号に基づく利用者 ID にはセキュリティの問題がある．学生用の基本メールアドレスに用いてきたため外部に漏れやすく，また学生番号は学部または大学院で連続した数値等を用いるため利用者 ID が推定されやすい．実際に...学生アカウントを不正利用されるインシデントも発生した．学生番号に基づく ID は，入学前に情報サービスを利用出来ない，大学院進学時にアカウントが不連続になるなどの問題があった．これらの問題を解決するため，学内情報サービス専用の ID を付与する事にした．本稿では，利用者 ID 体系，利用者 ID データベース，認証用 LDAP の構成などについて報告する．
Integrated user authentication platform realizes secure and easy use intra-institutional services. Most universities and academic institutions have an integrated user account database, and construct an authentication platform. In Kyushu University, the user ID of a student was the same with his/her student ID. However, there were some problems around security and availability in user ID based on student ID. Since student ID was used for the mail address of student, it is easy to leak outside. Additionally, student ID includes a serial number, and then it is easy to guess other IDs from one ID. Student ID is issued to a student at the day of entrance ceremony, and then it is impossible to use university information services before entrance. ID continuity is also the problem. Student IDs for a person are deferent in between graduate school and in graduate school. Then, personal data for an account cannot continue during the student life. To solve these problems, Kyushu University decided to introduce another student-long user ID service. This paper reports the new user ID, ID management system, and the effect of introduction of new user ID.show more
|
Export Mendeley
IPSJ-IOT26-1