JP2010165250A - Service cooperation processing system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable a user who requests a service to cooperatively use a Web service with one piece of request information generated according to one format of a protocol regardless of the difference of protocols or the difference of authentication systems in a service component. <P>SOLUTION: An SOAP (Simple Object Access Protocol) request information transferring part 4 or an REST(Representational State Transfer) request information transferring part 5 of an execution control server 1 determines the validity/invalidity of conversion according to information showing the validity/invalidity of protocol conversion registered in a service information table 51 of a profile server 10, and the SOAP request information transferring part 4 or the REST request information transferring part 5 of the execution control server 1 or an SOAP request information conversion part 8 or an REST request information conversion part 9 of a message translator device 7 writes authentication information corresponding to a service component in request information according to information related with authentication processing to be performed by the service component registered in an operation table 52 of the profile server 10. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a service cooperation processing system and method applied to a web service such as a SOAP service or a REST service.

In recent years, mashups for creating new Web services by combining a plurality of Web services on the Internet have been actively performed. There are several web service protocols such as SOAP (Simple Object Access Protocol), REST (Representational State Transfer), and JSON (Java Script Object Notation). Among them, there are many web services using SOAP and REST. Is provided.
When performing a mashup, if the protocol is different for each Web service to be used or if the authentication method is different, a program for sending a Web service request (request information) according to each protocol and the authentication method is required. Costs such as purchase of middleware software for SOAP and middleware software for REST occur.

  Also, when request information is transmitted from a service requester terminal to request a service, the authentication method differs between SOAP and REST. For example, in SOAP, authentication is performed using a certificate indicating the identity, so that setting of the certificate is necessary. In REST, since authentication is performed by the service component, a different password is required for each service component, and authentication is required for each service component manually or by creating a dedicated program.

By the way, in the case where Web services of the same protocol are linked, a method has been proposed in which authentication is performed collectively or non-functional requirement processing (processing other than provision of Web service for request information) is performed.
For example, Non-Patent Document 1 performs SOAP single sign on (SSO) authentication authorization processing when linking Web and telecom, and performs non-functional requirement processing such as service quality monitoring control processing and traffic control processing. An execution control server that performs batch processing has been proposed.
Non-Patent Document 2 proposes an execution control server that performs common processing when a telephone service and a Web service are linked.
On the other hand, as shown in Non-Patent Document 3, a legitimate authority holder who has SAML (Security Assertion Markup Language) authentication single sign-on authentication authorization transfers the authority delegation certificate to the delegated authority and delegates authority. It is becoming common for users to log in to the APL (Application) server with the account of the user whose authority has been transferred, and the merit of this system is that service authorization by authority transfer can be realized. is there.

Yuji Yamato, Hiroyuki Onishi, Hiroshi Sunaga, “Research and Development of Service Execution Control Technology for Web-Telecom Cooperation”, IEICE Transactions B, Vol.J91-B, No.11, p.1417- 1427 Y. Yamato, H. Ohnishi, and H. Sunaga, "Development of Service Control Server for Web-Telecom Coordination Service", IEEE International Conference on Web Services (ICWS 2008), September 23-26, 2008, p.600-607 Makiko Aoyagi, Kenji Takahashi, Takaaki Furumura, Yasuhiro Nagai, “Proposal of Authorization Method Using SAML Extended Specifications”, Proceedings of the IEICE Conference, Vol.2008 Information & System 1, p.157

  However, when the SOAP web service (SOAP service) and the REST web service (REST service) are linked with the conventional technology, single sign-on authentication as shown in Non-Patent Document 3 is performed. The non-functional requirement processing could not be performed at once. That is, when a plurality of SOAP and REST Web services are linked, a program corresponding to each middleware setting and protocol is required due to a difference in protocol between SOAP and REST and a difference in authentication method.

  The present invention has been made in view of such circumstances. The purpose of the present invention is to allow a user who requests a service to have one format regardless of the difference in the protocol and the authentication method between SOAP and REST in the service component. An object of the present invention is to provide a cooperation processing system between a SOAP service and a REST service that can use a Web service in cooperation with a single piece of request information generated according to a protocol.

  The present invention has been made to solve the above-described problems. A service cooperation processing system according to the present invention includes a service component server that provides a web service with a predetermined protocol, and a plurality of web services of the service component server. An authentication process indicating the authentication process performed by the service component server, the certificate authority that issues the authentication information according to the different protocols, and the authentication process performed by the service component server. A profile server that provides information and authentication information corresponding to the protocol of the own terminal is received by requesting the certificate authority, and a definition document corresponding to the protocol of the own terminal is defined among the definition documents of the service component server that uses the service. Public service A request request is received from the server, the request information including the received authentication information is generated and transmitted in the received definition document, and the request information is received from the service requester terminal. When the authentication information is read, single sign-on authentication is performed according to the read authentication information, and the request information is authenticated as valid request information, it is determined whether or not the request information needs to be converted, and conversion is unnecessary. If it is determined, execution control for requesting and receiving the authentication processing information performed by the service component server from the profile server, rewriting the authentication information according to the received authentication processing information, and transmitting to the service component server The server and the execution control server have determined that conversion is necessary. The request information is received from the execution control server, the request information is converted according to the interface specification of the service component server, and the authentication processing information performed by the service component server is requested to the profile server and received. A message translator device that rewrites the authentication information in accordance with the received authentication processing information and transmits the information to the service component server.

  The service cooperation system of the present invention is the service cooperation system described above, wherein the protocol is SOAP or REST, and the execution control server detects the protocol of the received request information, and the detected protocol is When indicating SOAP, the authentication information indicated by the authentication ticket is read from the request information, single sign-on authentication is performed by the read authentication ticket, and when the detected protocol indicates REST, the request information indicates the authentication ticket pointer. The authentication information is read, the read authentication ticket pointer is transmitted to the certificate authority, and an authentication ticket corresponding to the authentication ticket pointer is received from the certificate authority to perform single sign-on authentication.

  Also, the service cooperation system of the present invention is the service cooperation system described above, wherein the profile server authenticates any one of the cooperation type, ID replacement type, and deletion type processes as the authentication process performed by the service component server. Provided as processing information, and when the execution control server determines that the conversion of the request information is unnecessary, if the authentication processing information is an ID replacement type, the authentication information is rewritten to predetermined ID information, and the authentication information When the processing information is a deletion type, the authentication information is deleted. When the authentication processing information is a cooperative type, and the request information is SOAP, the authentication information is not rewritten, and the request information is REST. Requesting and receiving the authentication information indicated by the authentication ticket pointer from the certificate authority, rewriting it with the authentication information, and When the request information is received from the execution control server, the sage translator device deletes the authentication information when the authentication processing information is an ID replacement type, and gives predetermined ID information to the converted request information, When the authentication processing information is a deletion type, the authentication information is deleted, and when the authentication processing information is a cooperative type and the request information is SOAP, the authentication indicated by the authentication ticket included in the request information The information is read, the authentication information is deleted from the request information, the authentication authority is requested to receive the authentication information indicated by the authentication ticket pointer corresponding to the authentication ticket, and the received authentication information is converted from SOAP to REST. In the case where the authentication processing information is included in the request information and the request information is RES At this time, the authentication information indicated by the authentication ticket pointer included in the request information is read, the read authentication ticket pointer is transmitted to the certificate authority, and the authentication ticket corresponding to the authentication ticket pointer is received from the certificate authority, The received authentication ticket is included in request information converted from REST to SOAP.

  The service cooperation system of the present invention is the service cooperation system described above, and among the definition documents, a definition document corresponding to SOAP is a WSDL definition document, and a definition document corresponding to REST is a WADL definition document. In the case of converting from a WADL definition document to a WSDL definition document, the service publishing server has a format in which a SOAP operation name is assigned a serial number to an HTTP method, and in the case of converting a WSDL definition document to a WADL definition document, an HTTP method Is fixed to GET, and a SOAP operation name is converted into a format specified by a query parameter method, and definition documents corresponding to different protocols are generated.

  Further, the service cooperation system of the present invention is the service cooperation system described above, and when the message translator device converts the request information from SOAP to REST, the HTTP method included in the request information has a serial number. If it is assigned, a plurality of HTTP methods are defined and converted into one resource of the REST method in the order of serial numbers, and when the request information is converted from REST to SOAP, the query parameter method is obtained from the GET part of the HTTP method. The operation name of the SOAP specified in (1) is extracted and converted into a SOAP operation.

Also, the service cooperation system of the present invention is the service cooperation system described above, wherein after the execution control server performs single sign-on authentication, authorization processing, throttling, and content filter disturbance prevention are performed on the request information. Non-functional requirement processing means for performing non-functional requirement processing of either processing or traffic control processing is provided.

The service linkage processing method of the present invention is disclosed by a service component server that provides a web service with a predetermined protocol, and a definition document that describes the web service of the service component server with interface definitions corresponding to a plurality of different protocols. A service public server, a certificate authority that issues authentication information according to the plurality of different protocols, a profile server that provides authentication processing information indicating authentication processing performed by the service component server, a service requester terminal, and an execution A service cooperation processing method in a service cooperation processing system including a control server and a message translator device, wherein the service requester terminal requests authentication information corresponding to a protocol of the terminal itself from the certificate authority. A process for requesting the service public server to receive a definition document corresponding to the protocol of the terminal of the service component server that uses the service, and a process requesting the service requester terminal. Generating and transmitting request information including the received authentication information in the received definition document, and the execution control server receiving the request information from the service requester terminal, and authenticating information from the request information. If the request information is authenticated as valid request information, it is determined whether or not conversion of the request information is necessary, and it is determined that conversion is unnecessary. The authentication processing information performed by the service component server. Requesting the profile server to receive, rewriting the authentication information according to the received authentication processing information, and transmitting to the service component server, the message translator device, the execution control server If it is determined that it is necessary, the request information is received from the execution control server, the request information is converted according to the interface specifications of the service component server, and authentication processing information performed by the service component server is requested to the profile server. And rewriting the authentication information according to the received authentication processing information and transmitting it to the service component server.

  According to the present invention, the cooperation processing system between the SOAP service and the REST service replaces authentication information according to the service component, and converts the request information protocol when conversion is necessary, so that single sign-on is possible. In addition, service components of different protocols can be used with one request information generated according to one type of protocol.

It is a schematic block diagram which shows the structure of the cooperation processing system 100 of SOAP service and REST service by one Embodiment of this invention. 5 is a diagram illustrating an example in which a service registration server 12 receives a WADL definition document from a REST service component 28, 29, and 30 and converts it into a WSDL definition document in the embodiment. FIG. 5 is a diagram illustrating an example in which a service registration server 12 receives a WSDL definition document from SOAP service components 20, 26, and 27 and converts it into a WADL definition document in the embodiment. FIG. It is a figure which shows the structure of the profile server 10 in the same embodiment. 4 is a diagram illustrating an example in which SOAP request information is converted into REST request information and a REST response corresponding to the SOAP request information is converted into a SOAP response in the embodiment. FIG. 5 is a diagram illustrating an example in which REST request information is converted into SOAP request information and a SOAP response corresponding to the REST request information is converted into a REST response in the embodiment. FIG. 5 is a flowchart showing an operation in which the execution control server 1 receives SOAP request information and transmits it to the SOAP service components 20, 26, and 27 in the embodiment. FIG. 6 is a flowchart showing an operation in which the execution control server 1 receives REST request information and transmits it to the REST service components 28, 29, and 30 in the embodiment. In the embodiment, the message translator device 7 converts the SOAP request information received via the execution control server 1 into REST request information and transmits it to the REST service components 28, 29, and 30. is there. In the embodiment, the message translator device 7 converts the REST request information received via the execution control server 1 into SOAP request information and transmits it to the SOAP service components 20, 26, and 27. is there.

<Configuration of service linkage processing system>
Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a schematic block diagram showing a configuration of a service cooperation processing system 100 according to an embodiment of the present invention.
1 includes an execution control server 1, a traffic information management server 14, a message translator device 7, a profile server 10, a service registration server 12, a service disclosure server 13, and a certificate authority 6. A network 18, a SOAP service component server 19, a REST service component server 21, a SOAP service requester terminal 16, and a REST service requester terminal 17.
The SOAP service requester terminal 16, the REST service requester terminal 17, the execution control server 1, the message translator device 7, the service disclosure server 13, the service registration server 12, the certificate authority 6, the SOAP service component server 19, and the REST service component server 21 18 is connected.
The profile server 10 is connected to the execution control server 1, the message translator device 7, and the service registration server 12.
The traffic information management server 14 is connected to the execution control server 1.
Note that the profile server 10 and the traffic information management server 14 may be connected via a network 18.

In the SOAP service component server 19, the SOAP service components 20, 26, and 27 are functional units configured by executing respective programs, receive SOAP request information, and transmit a SOAP response. In addition, the SOAP service components 20, 26, and 27 generate a WSDL definition document that defines a service to be provided in WSDL (Web Service Description Language) that is an interface definition.
Here, the SOAP request information is information described based on a transfer protocol such as XML (Extensible Markup Language) or HTTP (Hyper Text Transfer Protocol) in order to request the service component to transmit a response. Also, the format of the SOAP request information for the SOAP service components 20, 26, and 27 is indicated by a WSDL definition document described using WSDL, as in the case of describing the service to be provided.
In the REST service component server 21, the REST service components 28, 29, and 30 are functional units configured by executing respective programs, receive REST request information, and transmit a REST response. In addition, the REST service components 28, 29, and 30 generate a WADL definition document that defines a service to be provided by a Web Application Description Language (WADL) that is an interface definition.
Here, the REST request information is information described using HTTP GET, PUT, POST, and DELETE methods to request the service component to transmit a response. The format of the REST request information for the REST service components 28, 29, and 30 is also indicated by the WADL definition document described using WADL, as in the case of describing the service to be provided.
In the following description, when referring to all of the SOAP service components 20, 26, 27 and the REST service components 28, 29, 30, they are also simply referred to as service components.
Further, when both SOAP request information and REST request information are indicated, it is also simply referred to as request information.
Further, when both a WSDL definition document and a WADL definition document are shown, they are also simply referred to as definition documents.

In the service registration server 12, the service registration unit 41 registers the WSDL definition document received from the SOAP service components 20, 26, and 27 or the WADL definition document received from the REST service components 28, 29, and 30 in the internal storage area. To do.
The component information extraction unit 42 reads a service ID (Identifier), a URI (Uniform Resource Identifier), and an operation name described in the definition document received from the service component. Also, the component information extraction unit 42 determines whether the protocol of the service component that transmitted the definition document is SOAP or REST from the format of the definition document. In addition, the component information extraction unit 42 receives the non-functional requirement processing policy, the ID conversion pattern, the service component specific authentication information, and the information for conversion, which are transmitted from the service component together with the definition document.

Here, the service ID is an identifier for identifying a service component.
The URI is an identifier representing the address of the service component on the network.
The non-functional requirement processing policy is information indicating non-functional requirements that the service component requests to execute. Non-functional requirement processing refers to processing other than processing for returning a response that is direct processing for SOAP request information or REST request information. For example, authorization processing, user block confirmation processing, service block confirmation processing, disturbance Prevention processing and traffic control processing. As authorization processing, service component by detecting whitelist collation of SOAP request information or REST request information, blacklist collation, and ID issued by service component written in SOAP request information or REST request information There is a judgment of access authority to. Disturbance prevention processing is processing that prevents disturbance from the network. In the case of content filtering processing that does not send request information to service components that do not satisfy the conditions described in the request information, so-called spam attacks, etc. There is a throttling process for controlling the amount of communication with a specific user. Examples of the traffic control function process include a priority control process in which priority is given to request information and processing is performed from a higher priority, and a flow control in which the traffic is controlled according to the processing capability of the service component server.
The ID conversion pattern is information representing an authentication method pattern performed by the service component, and includes, for example, a SAML cooperation type, an ID replacement type, and a deletion type, which will be described later.
The service component-specific authentication information is authentication information uniquely issued by the service component, for example, an ID and password issued by the service component. Accordingly, a service component that does not perform authentication or a service component that performs authentication using an authentication ticket that is authentication information common to a plurality of service components does not issue authentication information unique to the service component.
In the following, the authentication information unique to the service component is also simply referred to as unique authentication information.
When the definition document conversion unit 43 receives the WSDL definition document from the service registration unit 41, the definition document conversion unit 43 rewrites the transmission destination address in the WSDL definition document with the address of the execution control server 1, and writes the parameter of the authentication information. When the definition document conversion unit 43 receives input of information indicating that conversion is required together with the WSDL definition document, the definition document conversion unit 43 converts the WSDL definition document into a WADL definition document. When receiving the WADL definition document input from the service registration unit 41, the definition document conversion unit 43 rewrites the transmission destination address in the WADL definition document with the address of the execution control server 1, and writes the parameter of the authentication information. Also, when the definition document conversion unit 43 receives an input requesting conversion together with the WADL definition document, the definition document conversion unit 43 converts the WADL definition document into a WSDL definition document.

In the profile server 10, the profile control unit 11 generates information indicating that conversion is unnecessary (for example, “No”) as information indicating whether protocol conversion is necessary, and receives this from the component information extraction unit 42. The service ID, URI, service component protocol, and name space are associated with each other and registered in the service information table 51. When the profile control unit 11 receives information indicating that the definition document has been converted from the definition document conversion unit 43, the profile control unit 11 receives the service ID, the URI, and the converted definition document received from the component information extraction unit 42. , Information indicating that protocol conversion is necessary (for example, “necessary”), and a name space are associated with each other and registered in the service information table 51. Here, as the protocol corresponding to the converted definition document, SOAP is registered if the converted definition document is a WSDL definition document, and REST is registered if it is a WADL definition document.
In addition, the profile control unit 11 associates the service ID, operation name, ID conversion pattern, service component specific authentication information, and non-functional requirement policy received from the component information extraction unit 42 in the operation table 52. sign up.

  In the service disclosure server 13, the disclosure service control unit 48 receives the WSDL definition document or the WADL definition document before the protocol change from the definition document conversion unit 43 and registers it in the disclosure service storage unit 49. When the definition document conversion unit 43 converts the definition document, the public service control unit 48 receives the definition document after the protocol conversion from the definition document conversion unit 43 and registers it in the public service storage unit 49. . When the definition document conversion unit 43 converts the definition document, the public service control unit 48 receives the external schema file defining the tag set and the name space from the definition document conversion unit 43, and both of them are received. Correspondingly, it is registered in the public service storage unit 49.

In the certificate authority 6, the authentication information control unit 50 determines the validity of the issuance request when receiving the issuance request for the authentication information, and if it is determined to be a valid issuance request, the authentication ticket that is the authentication information for SOAP. Alternatively, an authentication ticket pointer which is authentication information for REST is issued (transmitted). The validity of the issue request is determined by, for example, receiving one of an authentication ticket, an authentication ticket pointer, an ID, and a password, and determining the validity.
Here, the authentication information issued by the certificate authority 6 is authentication information for single sign-on (SSO) that allows a plurality of Web services to be used with a single authentication. For example, a SAML authentication ticket or an authentication ticket is used. Pointer. SAML is a standard established by the standardization organization OASIS (Organization for the Advancement of Structured Information Standards) for safely passing authentication and authentication information such as IDs and passwords, and is defined in the XML specification. The authentication information delivery method in SAML is summarized as the SAML protocol, and HTTP or SOAP is used for message transmission / reception. The SAML authentication ticket is information for credential, and can be used for single sign-on by distributing it. In REST, it is assumed that authentication information can be used only once, and an authentication ticket pointer that is a pointer to the authentication ticket is transferred instead of an authentication ticket.
Further, the authentication information control unit 50 receives, for example, an authentication ticket or an authentication ticket pointer, or receives an ID and password dedicated to the certificate authority 6 and determines whether these are valid. When it is determined that the ID and password are valid, the authentication information control unit 50 issues an authentication ticket pointer associated with the authentication ticket pointer / authentication ticket correspondence table 25 when receiving the authentication ticket. When the authentication ticket pointer is received, the authentication ticket associated with the authentication ticket pointer / authentication ticket correspondence table 25 is issued. When the authentication ticket or the authentication ticket pointer designation is received together with the ID and password dedicated to the certification authority 6, the authentication ticket and the authentication ticket pointer are issued according to the designation, and the issued authentication ticket and the authentication ticket pointer are used as the authentication ticket. The stored authentication ticket or authentication ticket pointer is stored in the pointer / authentication ticket correspondence table 25.

In the SOAP service requester terminal 16, the SOAP service requester 44 requests and receives the WSDL definition document from the service disclosure server 13, and generates SOAP request information based on the WSDL definition document. In addition, the SOAP service requester terminal 16 requests and receives the issuance of an authentication ticket from the certificate authority 6, and writes the authentication ticket as a parameter value in the SOAP request information.
In the REST service requester terminal 17, the REST service requester 45 requests and receives the WADL definition document from the service disclosure server 13, and generates REST request information based on the WADL definition document. Further, the REST service requester terminal 17 requests and receives the issuance of an authentication ticket pointer from the certificate authority 6, and writes the authentication ticket pointer as a parameter value in the REST request information.
In the following description, when both the SOAP service requester 44 and the REST service requester 45 are referred to, they are also simply referred to as service requesters.

The execution control server 1 includes a message proxy unit 3, an authentication unit 36, and a non-functional requirement processing unit 2.
In the message proxy unit 3, the protocol determination unit 33 receives request information from the SOAP service requester 44 or the REST service requester 45, and determines whether the protocol of the request information is SOAP or REST. The determination of SOAP or REST is, for example, SOAP if there is a tag whose element name starts with “soapenv”, and REST if there is a tag.
The SOAP request information transfer unit 4 receives the request information when the protocol of the request information received by the protocol determination unit 33 is SOAP. Also, the SOAP request information transfer unit 4 receives from the profile server 10 information indicating whether or not protocol conversion is necessary and the URI of the service component server for the request information. Send request information to.
When the protocol of the request information received by the protocol determination unit 33 is REST, the REST request information transfer unit 5 receives the input of the request information. Further, the REST request information transfer unit 5 receives from the profile server 10 information on whether or not protocol conversion is necessary and the URI of the service component server for the request information. Send request information to.
Upon receiving the SOAP response, the SOAP response transfer unit 34 transmits the SOAP response to the SOAP service requester 44.
When receiving the REST response, the REST response transfer unit 35 transmits the REST response to the REST service requester 45.

In the authentication unit 36, the authentication ticket pointer resolution unit 46 receives the request information from the protocol determination unit 33, and reads the authentication ticket from the request information when the protocol of the request information is SOAP. Further, when the request information is REST, the authentication ticket pointer resolution unit 46 reads the authentication ticket pointer from the request information, transmits the read authentication ticket pointer to the authentication station 6 and receives the authentication ticket.
The single sign-on unit 47 receives the authentication ticket from the authentication ticket pointer resolution unit 46 and performs authentication by judging the validity of the authentication ticket.
The SOAP service requester 44 writes the ID and password issued by the execution control server 1 in the SOAP request information instead of the authentication ticket, and transmits them to the execution control server 1. The single sign-on unit 47 sends the ID and password. Authentication may be performed by determining the legitimacy of. Similarly, the REST service requester 45 writes the ID and password issued by the execution control server 1 in the REST request information instead of the authentication ticket pointer, and transmits it to the execution control server 1, and the single sign-on unit 47 Authentication may be performed by determining the validity of the password.
The authentication performed by the authentication unit 36 is basic authentication for single sign-on. When the authentication is successful, that is, when it is determined to be a valid authentication ticket, the service requester is exempt from receiving the authentication of the service component directly. The
When the non-functional requirement processing unit 2 receives an input from the authentication unit 36 indicating that the authentication is successful, that is, the authentication ticket or the information indicating that the authentication ticket indicated by the authentication ticket pointer is valid, Perform non-functional requirement processing. Further, the non-functional requirement processing unit 2 confirms that the message proxy unit 3 has succeeded in the non-functional requirement processing, for example, that it is a service requester having access authority to the service component in the authorization processing. The information shown is output.

The message translator device 7 includes a request information conversion unit 37 and a response conversion unit 38.
In the request information conversion unit 37, the SOAP request information conversion unit 8 receives the SOAP request information from the SOAP request information transfer unit 4, converts it into REST request information, and sends a service corresponding to the REST request information to the profile server 10. Request and receive the URI of the component and send REST request information to the service component.
The REST request information conversion unit 9 receives the REST request information from the REST request information transfer unit 5, converts it into SOAP request information, and requests the profile server 10 for the URI of the service component corresponding to the SOAP request information. Receive and send SOAP request information to the service component.
In the response conversion unit 38, when the SOAP response conversion unit 39 receives a SOAP response from any of the SOAP service components 20, 26, and 27, it converts it into a REST response and transmits it to the REST response transfer unit 35.
When receiving the REST response from any of the REST service components 28, 29, and 30, the REST response conversion unit 40 converts it into a SOAP response and transmits it to the SOAP response transfer unit 34.

  In the traffic information management server 14, the service quality monitoring control unit 15 performs service quality monitoring control for checking whether or not the service component is activated and the time required for the response. It transmits to the requirement processing unit 2. Further, the service quality monitoring control unit 15 receives throttling information, priority control information, and flow control information from the non-functional requirement processing unit 2, and executes communication control.

<Example of conversion from WADL definition document to WSDL definition document>
Next, an example in which the service registration server 12 receives a WADL definition document from the REST service components 28, 29, and 30 and converts it into a WSDL definition document will be described with reference to FIG. The WADL definition document indicates the format of the REST request information and cannot be used as it is by the SOAP service requester 44. Therefore, the service registration server 12 converts the WADL definition document into a WSDL definition document indicating the format of the SOAP request information.
The REST service components 28, 29, and 30 that have been operated by the service provider generate a WADL definition document in which the service ID and operation name are written, for example, sample.wadl in FIG. To do. Also, the REST service components 28, 29, and 30 register the non-functional requirement processing policy, the ID conversion pattern, the authentication information specific to the service component, and information indicating whether conversion is requested, together with the WADL definition document. Send to server 12.

The service registration unit 41 of the service registration server 12 registers the received WADL definition document in the internal storage unit. In addition, the service registration unit 41 outputs the received WADL definition document, non-functional requirement processing policy, ID conversion pattern, and service component-specific authentication information to the component information extraction unit 42. In addition, the service registration unit 41 outputs the received WADL definition document to the definition document conversion unit 43.
The component information extraction unit 42 reads out the service ID, the URI, and the operation name described in the WADL definition document received from the REST service components 28, 29, and 30 and transmits them to the profile server 10. In addition, the component information extraction unit 42 determines whether the protocol of the REST service components 28, 29, and 30 that transmitted the definition document is SOAP or REST from the format of the definition document, and transmits it to the profile server 10. Here, information indicating REST is transmitted. Further, the component information extraction unit 42 outputs the non-functional requirement processing policy, the ID conversion pattern, and the authentication information unique to the service component, which are input from the service registration unit 41, to the profile server 10.

The definition document conversion unit 43 rewrites the transmission destination address described in the WADL definition document input from the service registration unit 41 with the address of the execution control server 1 and adds the parameter of the authentication information to the service disclosure server. 13, and is registered in the public service storage unit 49 through the public service control unit 48.
In addition, when the information for requesting conversion is input from the service registration unit 41, the definition document conversion unit 43 converts the WADL definition document input from the service registration unit 41 into a WSDL definition document. Then, the definition document conversion unit 43 rewrites the transmission destination address described in the converted WSDL definition document with the address of the execution control server 1, adds the parameter of the authentication information, and transmits it to the service disclosure server 13. Registration is performed in the public service storage unit 49 through the public service control unit 48.
Further, when the conversion is performed, the definition document conversion unit 43 transmits information indicating that the conversion has been performed to the profile server 10.

The conversion from the WADL definition document to the WSDL definition document performed by the definition document conversion unit 43 is performed according to the following procedure.
(1) In the SOAP namespace (targetNamespace), a fixed prefix is added to the service ID input at the time of service registration. For example, the fixed prefix “urn: nttcs: com” is added to the service ID “com.goo.search”, and the name space is “urn: nttss: com: goo: search”. In the example of FIG. 2, the fixed prefix “nttss” is attached to the service ID “sample”, and the name space is “urn: nttss: sample”.
Here, the name space is an identifier attached to the definition of the tag set used in the SOAP request information, and indicates a registration destination of the definition of the tag set. The uniqueness of the namespace is ensured by procedure (1).

  (2) The end point of the SOAP service component is represented by using the URI of the REST service component, the common part of the URI as the base attribute, the relative path URI from the URI as the path attribute, and the path attribute added to the base attribute. . In the example of FIG. 2, a common path “http: // AAA” of the URI is attached with a relative path “BBB”, and an end point is represented by “http: // AAA / BBB”.

(3) The SOAP operation name is “HTTP method name + # serial number”. In the example of FIG. 2, the serial number “# 1” is added to the HTTP method name “GET” in sample.wadl, and the SOAP operation name is “GET # 1”. For example, “GET # 1” and “GET # 2” are assigned to the same method name.
Here, the SOAP operation name is “HTTP method name plus 10 serial numbers” because REST can define (overload) a plurality of the same method name for one resource.

(4) When the media type of the parameter of the SOAP request information is “application / x-www-form-urlencoded”, each REST query parameter is associated with the SOAP parameter on a one-to-one basis.
When the media type is “application / xml” or “text / xml”, the XML document is associated as one SOAP parameter.
When the message translator apparatus 7 converts SOAP request information into REST request information by associating the parameters one to one before and after the conversion, the parameters are associated one to one before and after the conversion, and the parameters of the REST request information This is because the parameter value of the corresponding SOAP request information can be written.

(5) The parameter representing the SOAP response is the XML document itself defined as the REST response.
Thereby, when the message translator apparatus 7 converts the SOAP request information into the REST request information, the parameter of the REST response is obtained by reading the parameter of the SOAP response.

Also, the definition document conversion unit 43 of the service registration server reads the external schema file indicating the tag set definition from the include statement in the WADL definition document, and corresponds to the external schema file and the name space generated according to the procedure (1). In addition, registration is performed in the public service storage unit 49 via the public service control unit 48 of the service public server 13. Also, the definition document conversion unit 43 registers the name space in the service information table 51 via the profile control unit 11 of the profile server 10.
In the example of FIG. 2, the definition document conversion unit 43 reads the external schema file sample.xsd indicating the definition of the tag set from the include statement “<include href =" sample.xsd ">”, and names the external schema file and name. The space “targetNamespace =“ urn: nttss: sample ”” is registered in the public service storage unit 49. The association between the external schema file and the name space is performed by providing and registering a correspondence table in the public service storage unit 49, for example.
Further, the definition document conversion unit 43 writes the name space in the generated WSDL definition document sample.wswdl.
Thereby, when the SOAP service requester 44 receives the WSDL definition document and generates the SOAP request, the SOAP service requester 44 can transmit the name space to the service public server 13 and receive the external schema file to know the definition of the tag set. .

<Example of conversion from WSDL definition document to WADL definition document>
Next, an example in which the service registration server 12 receives a WSDL definition document from the SOAP service components 20, 26, and 27 and converts it into a WADL definition document will be described with reference to FIG. As in the case of conversion from a WADL definition document to a WSDL definition document, the service registration server 12 converts the WSDL definition document into a WADL definition document that can be used by the REST service requester 45.
The process of registering information in the profile server 10 and the process of registering the definition document in the service disclosure server 13 are based on the WADL definition document except that the service registration server 12 registers the name space in the profile server 10. This is the same as the case of converting to a WSDL definition document. Hereinafter, a configuration for registering a name space and a conversion procedure will be described.
In addition to the service ID and URI described in the WSDL definition document, the component information extraction unit 42 of the service registration server 12 reads the name space and transmits it to the profile server 10. The name space is registered in the service information table 51 of the profile server 10.
The definition document conversion unit 43 of the service registration server 12 converts a WSDL definition document, for example, sample.wsdl in FIG. 3 into a WADL definition document sampleExport.wadl in FIG.
The conversion from the WSDL definition document to the WADL definition document performed by the definition document conversion unit 43 is performed according to the following procedure.

(1) The HTTP method to be used is fixed to GET, and the SOAP operation name is set in the query parameter “nttss: method”. In the example of FIG. 3, “<method name =” GET ”>” is used using the method GET, and the SOAP operation name “search” is set using the “<param name =” nttss: method ”… fixed =“ search ”/> tag. Is shown.
Here, since the meaning of the SOAP operation cannot be automatically determined, automatic conversion is possible by mapping all the http GETs.

(2) All SOAP parameter fields are serialized and converted into query parameters according to the following rules.
1. For an array, element name and array intex are combined with “@” to obtain element name @ <array index (1-)>.
2. For nesting of structures, element names are connected with "@". In the example of FIG. 3, the parameter “condition” is a structure. In sampleExport.wadl, “condition @ elem1” and “conditon @ elem2” in which nesting is combined with “@” are used as element names.
3. Otherwise, the element name is used as it is. In the example of Fig. 3, the parameter "keyword" in sample.wsdl is of type "string" and is not an array or structure, so in sampleExport.wadl, "<param name =" tns: keyword "...>" The element name “keyword” is used as it is.
Thereby, when the message translator apparatus 7 converts the REST request information into the SOAP request information, the message translator apparatus 7 can convert it into the original array or the structure of the structure.

(3) The SOAP response message definition is used as it is as a REST response (XML document).
Thus, when the message translator device 7 converts the REST request information into the SOAP request information, the SOAP response parameter can be obtained by reading the REST response parameter.

Also, the definition document conversion unit 43 of the service registration server 12 reads the definition of the tag set and the name space, which is an identifier attached to the definition of the tag set, from the WSDL definition document, and associates them with each other so that the service disclosure server 13 Registered in the public service storage unit 49 via the public service control unit 48. Also, the definition document conversion unit 43 registers the name space in the service information table 51 via the profile control unit 11 of the profile server 10.
In the example of FIG. 3, the definition document conversion unit 43 generates a tag set definition of a part surrounded by a dotted line and a namespace “targetNamespace =“ http: // AAA ”xmlns: ns1 = from the WSDL definition document sample.wsdl. Read "http: // BBB". The definition of the tag set of the dotted line part is performed by detecting a tag including the characters “Response” and extracting a part surrounded by the tag.
Also, the definition document conversion unit 43 registers the read tag set definition in the public service storage unit 49 as an external schema file searchResponse_schema.xsd in association with the name space. The definition of the tag set and the name space are associated with each other by, for example, providing and registering a correspondence table in the public service storage unit 49.
Also, the definition document conversion unit 43 writes a read statement (include statement) “<include href =“ searchResponse_schema.xsd /> ”” of the external schema file in the generated WADL definition document sampleExport.wadl.
As a result, when the REST service requester 45 receives the WADL definition document and generates a REST request, the REST service requester 45 transmits the external schema file name in the include statement to the service disclosure server 13, receives the external schema file, and defines the tag set. Can know.

Further, the definition document conversion unit 43 transmits the name space to the profile server 10, and the profile control unit 11 of the profile server 10 associates the received name space with the service ID received from the component information extraction unit 42 and performs service. Register in the information table 51.
Thus, when the message translator device 7 converts the REST request into a SOAP request, the service ID in the WADL definition document can be transmitted to the profile server 10 to receive the name space, and can be written in the SOAP request. In addition, the SOAP service components 20, 26, and 27 that have received the SOAP request can transmit the name space in the SOAP request to the service disclosure server 13, receive the external schema file, and know the definition of the tag set.

<Information registered in the profile server>
Next, information registered in the service information table 51 and the operation table 52 of the profile server 10 will be described with reference to FIG.
The service information table 51 includes a “service ID” that is an identifier for identifying a service component, a “protocol” of request information, a “URI” that represents an address on the network of the service component, and a request information to be changed. Information of “necessity of conversion” indicating “no” and “name space” described above are stored.
The item “URI” is used by the execution control server 1 or the message translator device 7 to transmit request information to the service component.
Information described in the item “necessity of conversion” is information used by the execution control server 1 to determine the transmission destination of the request information. The execution control server 1 transmits request information to the message translator device 7 when conversion is necessary, and to the service component when conversion is not necessary.
The item “service ID” is a key for searching the service information table 51 together with the item “protocol”.

The operation table 52 stores “service ID”, “operation name”, “ID conversion pattern”, “unique authentication information”, and “non-functional requirement processing policy”.
The item “operation name” is a key for searching the operation table 52 together with the item “service ID”. In the case of a service for which an operation name is not specified, the operation table 52 is searched using only “service ID” as a key.
The item “ID conversion pattern” is information indicating a pattern of an authentication method performed by the service component. The ID conversion pattern is information of “SAML cooperation type”, “ID replacement type”, or “deletion type”.
Here, in the following description, the SOAP service component 20 and the REST service component 28 are “SAML linkage type”, the SOAP service component 26 and the REST service component 29 are “ID replacement type”, and the SOAP service component 27 and the REST service component 30 are It is assumed that it is “delete type”.
The “SAML cooperation type” SOAP service component 20 is a service component that performs authentication using an authentication ticket issued by the certificate authority 6. The execution control server 1 or the message translator device 7 transmits the request information in which the authentication ticket is written to the SOAP service component 20. Similarly, the SAML-linked REST service component 28 is a service component that performs authentication using an authentication ticket pointer issued by the certificate authority 6, and the execution control server 1 or message translator is used for the REST service component 28. The device 7 transmits the request information in which the authentication ticket pointer is written.
The “ID replacement type” SOAP service component 26 and REST service component 29 are service components that use authentication information unique to the service component, for example, an ID and a password. The execution control server 1 or the message translator device 7 transmits request information in which unique authentication information is written to the SOAP service component 26 and the REST service component 29.
The “deletion type” SOAP service component 27 and the REST service component 30 are service components that do not perform authentication. The execution control server 1 or the message translator device 7 transmits request information from which the authentication information has been deleted to the SOAP service component 27 and the REST service component 30.
The non-functional requirement processing policy is information indicating the content of the non-functional requirement processing performed by the execution control server 1 as described above.
Further, the execution control server 1 and the message translator device 7 are provided with the cache units 31 and 32, and the information of the service information table 51 and the operation table 52 is stored in the respective cache units 31 and 32, so that the profiles are stored. The communication amount with the server 10 may be reduced.

<Example of conversion from SOAP request information to REST request information>
Next, conversion from SOAP request information to REST request information will be described using the example shown in FIG. The SAML cooperation type REST service component 28 will be described below. The same conversion is performed for the ID replacement type REST service component 29 and the deletion type REST service component 30.
FIG. 5 is a diagram illustrating an example in which SOAP request information is converted into REST request information, and a REST response corresponding thereto is converted into a SOAP response.
When the execution control server 1 receives the SOAP request information from the SOAP service requester 44, the execution control server 1 determines that the protocol is SOAP because there is a tag whose element name starts with “soapenv”, and reads the authentication ticket from the SOAP request. Then, single sign-on authentication is performed by verifying the authentication ticket, non-functional requirement processing is executed, and SOAP request information is transferred to the message translator device 7.
When the SOAP request information conversion unit 8 of the message translator apparatus 7 receives the SOAP request information, the SOAP request information conversion unit 8 determines the REST method from the SOAP operation, converts the SOAP request information into the REST request information, and writes it as a parameter in the SOAP request information. And the extracted authentication ticket and other parameter values are extracted. Also, the SOAP request information conversion unit 8 transmits an authentication ticket to the certificate authority 6 to acquire an authentication ticket pointer, and the authentication ticket pointer and other parameter values extracted from the SOAP request information are included in the REST request information. Write and send to REST service component 28.
In the case of FIG. 5, the SOAP request
<soapenv: Envelope ...><soapenv: Header />
<soapenv: Body>
<tns: Get # 1><para1> xxx </ para1><para2> yyy </ para2>
<tns: Get # 1><soapenv:Body></ soapenv: Envelope>
The parameter "<para1> xxx </ para1><para2> yyy </ para2> extracted from the SOAP request information by determining that the REST method is" GET "from the SOAP operation" GET # 1 " ”In the form of“ para1 = xxx & para2 = yyy # 1 ”and put in the query parameter of REST.
This conversion is made possible by following the procedures (1) to (5) described above when converting the WADL definition document to the WSDL definition document.

The SOAP request information conversion unit 8 transmits the converted REST request information to the REST service component 28.
Upon receiving the REST request information, the REST service component 28 transmits a REST response to the message translator device 7.
The REST response converter 40 of the message translator device 7 converts the REST response into a SOAP response by writing the content of the received REST response as a parameter value of the SOAP response.
In the case of FIG. 5, the content of the REST response “<ZZZ><result> 0 </ result></ZZZ>” is written as a parameter value in the SOAP response.
The REST response conversion unit 40 transmits the SOAP response generated by the conversion to the SOAP service requester 44 via the SOAP response transfer unit 34 of the execution control server 1.
As described above, the SOAP service requester 44 can obtain the response from the REST service component 28 as a SOAP response by transmitting the SOAP request information described in SOAP.

<Example of conversion from REST request information to SOAP request information>
Next, conversion from REST request information to SOAP request information will be described using the example shown in FIG. Hereinafter, the SAML cooperation type SOAP service component 20 will be described. The same conversion is also performed for the ID replacement type SOAP service component 26 and the deletion type SOAP service component 27.
FIG. 6 is a diagram illustrating an example in which REST request information is converted into SOAP request information, and a SOAP response to the REST request information is converted into a REST response.
When receiving the REST request information from the REST service requester 45, the execution control server 1 determines that the protocol is REST because there is no tag whose element name starts with “soapenv”, and the authentication ticket pointer from the REST request information. Is transmitted to the certificate authority 6 to obtain an authentication ticket. The execution control server 1 performs single sign-on authentication by verifying the acquired authentication ticket. Since the authentication information can be used only once in the REST, the execution control server 1 transmits the authentication ticket to the certificate authority 6 and acquires the authentication ticket pointer. The authentication ticket pointer information acquired is written in the REST request information. In addition, the execution control server 1 executes non-functional requirement processing and transfers REST request information to the message translator device 7.
When receiving the REST request information, the REST request information converting unit 9 of the message translator apparatus 7 determines the SOAP operation name from the REST method, converts the REST request information into SOAP request information, and also includes a parameter value in the REST request information. The authentication ticket pointer and other parameter values written as are read out. Further, the REST request information conversion unit 9 transmits an authentication ticket pointer to the certificate authority 6 and acquires an authentication ticket. In addition, the REST request information conversion unit 9 writes the acquired authentication ticket and other parameter values in the SOAP request information and transmits them to the SOAP service component 20.

In the case of FIG. 6, it is determined that the SOAP operation name is “search” from the method “nttss: method = search” in the REST request, and a “<tns: search>” tag is generated. In addition, the parameter “tns: keyword = xxx & ns1: condition @ elem1 = yyy & ns1: condition @ elem2 = zzz” read from the REST request is changed to “<tns: keyword> xxx </ tns: keyword><ns1:condition><elem1> yyy </ elem1><elem2> zzz </ elem2></ ns1: condition> ”is written in the SOAP request information.
In the case of the following REST request information, the SOAP operation “makeCallSession” is specified by “method = makeCallSession”, and the parameter connected by & is mapped to the SOAP parameter.
? method = makeCallSession
& loc: callParticipants @ 1 = sip: AAA & loc: callParticipants @ 2 = sjp: BBB
& loc: ca1llngParticipantName = xxx & loc: charging @ description = xxx
& loc: charging @ currency = xxx & loc: charging @ amount = 100
& loc: charging @ code = xxx & loc: mediaInfo @ media = Audio
& loc: mediaInfo @ mediaDirection = InOut & loc: changeMediaNotAllowed = false
This conversion is made possible by following the procedures (1) to (3) described above when converting the WSDL definition document to the WADL definition document.

The REST request information conversion unit 9 converts the REST request information into SOAP request information according to the following procedure.
The REST request information conversion unit 9 transmits the converted SOAP request information to the SOAP service component 20.
Upon receiving the SOAP request information, the SOAP service component 20 transmits a SOAP response to the message translator device 7.
The SOAP response conversion unit 39 of the message translator device 7 converts the SOAP response into a REST response by using the parameter value of the received SOAP response as the content of the REST response.
In the case of FIG. 6, the parameter value “<tns: searchRseponse><tns:result> 0 </ tns: result><tns:serarchResponse>” of the SOAP response is used as the content of the REST response, and the destination address is written in this REST. A response is being generated.
The SOAP response conversion unit 39 transmits the REST response generated by the conversion to the REST service requester 45 via the REST response transfer unit 35 of the execution control server 1.
As described above, the REST service requester 45 can obtain the response from the SOAP service component 20 as the REST response by transmitting the REST request information described by the REST.
Next, the operation of the service cooperation processing system 100 when the SOAP service requester 44 and the REST service requester 45 transmit request information and acquire a response will be described.

<First Embodiment: Operation when the execution control server 1 receives SOAP request information and transmits SOAP request information to the SOAP service components 20, 26, 27>
In the first embodiment, the operation of the service cooperation processing system 100 when the SOAP service requester 44 transmits SOAP request information and is received by the SOAP service components 20, 26, and 27 via the execution control server 1 is illustrated in FIG. This will be described with reference to FIG.
The SOAP service requester 44 of the SOAP service requester terminal 16 operated by the user acquires the WSDL definition document registered in the public service storage unit 49 of the service public server 13 and issues an authentication ticket to the certificate authority 6. Request and get.
Also, the SOAP service requester 44 generates SOAP request information including the service ID and operation name of the service component to be used in accordance with the format defined in the WSDL definition document, and writes the authentication ticket information in the authentication information parameter. Then, it transmits to the execution control server 1 (Sa1).

The protocol determination unit 33 of the execution control server 1 determines that the protocol of the request information is SOAP because there is a tag whose element name begins with “soapenv” in the request information received from the SOAP service requester 44. The received SOAP request information and information indicating that the protocol is SOAP are output to the sign-on unit 47 (Sa2).
The single sign-on unit 47 performs authentication by determining the validity of the authentication ticket read from the input SOAP request information. When the authentication is successful, that is, when it is determined as a valid authentication ticket, the single sign-on unit 47 outputs SOAP request information and information indicating the protocol of the request information to the non-functional requirement processing unit 2 (Sa3).
Here, for example, the single sign-on unit 47 knows in advance the method of decrypting the authentication ticket, decrypts the authentication ticket, and determines the validity of the authentication ticket. The single sign-on unit 47 may transmit an authentication ticket to the certificate authority 6 and the certificate authority 6 may authenticate.
The non-functional requirement processing unit 2 reads the service ID from the input SOAP request information, transmits the service ID to the profile server 10, and sets the non-functional requirement processing policy registered in the operation table 52 from the profile server 10. Receive and execute non-functional requirement processing. Further, when the non-functional requirement processing unit 2 succeeds in the non-functional requirement processing such as the authorization processing, the non-functional requirement processing unit 2 outputs the SOAP request information and information indicating the protocol of the request information to the SOAP request information transfer unit 4 (Sa4).
Information from the operation table is received by using “service ID” and “operation name” as keys for a service with an operation name specified, and only “service ID” for a service with no operation name specified. By sending as a key. The same applies to the following description.

The SOAP request information transfer unit 4 reads the service ID from the SOAP request information, transmits the service ID and information indicating the protocol of the request information to the profile server 10, and the SOAP service component registered in the service information table 51 The URI of any one of 20, 26, and 27 and information indicating that conversion is unnecessary are acquired. In addition, the SOAP request information transfer unit 4 transmits the service ID to the profile server 10, and the ID conversion pattern information registered in the operation table 52 and the unique authentication information when the ID conversion pattern is an ID replacement type Are acquired (Sa5).
Further, when the ID conversion pattern is the SAML cooperation type, the SOAP request information transfer unit 4 does not delete the authentication ticket in the SOAP request information as it is (Sa6) and transmits it to the SOAP service component 20 (Sa9).
If the ID conversion pattern is an ID replacement type, the SOAP request information transfer unit 4 rewrites the authentication ticket in the SOAP request information with unique authentication information (Sa7) and transfers it to the SOAP service component 26 (Sa9).
If the ID conversion pattern is a deletion type, the SOAP request information transfer unit 4 deletes the authentication ticket in the SOAP request information (Sa8) and transfers it to the SOAP service component 27 (Sa9).
Upon receiving the SOAP request information, the SOAP service components 20, 26, and 27 send a SOAP response to the SOAP service requester 44 via the SOAP response transfer unit 34 of the execution control server 1.

<Second Embodiment: Operation when the execution control server 1 receives the REST request information and transmits the REST request information to the REST service components 28, 29, 30>
In the second embodiment, the operation of the service cooperation processing system 100 when the REST service requester 45 transmits REST request information and is received by the REST service components 28, 29, and 30 via the execution control server 1 is shown in FIG. This will be described with reference to FIG.
The REST service requester 45 operated by the user acquires the WADL definition document registered in the public service storage unit 49 of the service public server 13, and requests the certification authority 6 to issue an authentication ticket pointer.
The REST service requester 45 generates REST request information including the service ID of the service component to be used in accordance with the format specified in the WADL definition document, writes the authentication ticket pointer information in the authentication information parameter, and executes it. It transmits to the control server 1 (Sb1).

The protocol determination unit 33 of the execution control server 1 determines that the request information received from the REST service requester 45 does not have a tag whose element name begins with “soapenv”, so that the protocol of the request information is REST. The received REST request information and information indicating that the protocol is REST are output to the authentication ticket pointer resolution unit 46 (Sb2).
The authentication ticket pointer resolution unit 46 reads the authentication ticket pointer information from the REST request information and transmits it to the certificate authority 6 to request the issue of the authentication ticket. The authentication station 6 generates an authentication ticket corresponding to the received authentication ticket pointer using the authentication ticket pointer / authentication ticket correspondence table 25, and transmits it to the authentication ticket pointer resolution unit 46 (Sa3). Further, the authentication ticket pointer resolution unit 46 writes the received authentication ticket in the REST request information and outputs it to the single sign-on unit 47 (Sb4).
The single sign-on unit 47 performs authentication using the authentication ticket read from the input REST request information. If it is determined that the authentication ticket is valid, the single sign-on unit 47 outputs REST request information and information indicating the protocol of the request information to the non-functional requirement processing unit 2 (Sb5).
The non-functional requirement processing unit 2 reads the service ID from the input REST request information, transmits the service ID to the profile server 10, and sends the non-functional requirement processing policy registered in the operation table 52 from the profile server 10. Receive and execute non-functional requirement processing. Further, when the non-functional requirement processing unit 2 succeeds in the non-functional requirement processing such as the authorization processing, the non-functional requirement processing unit 2 outputs the REST request information and the information indicating the protocol of the REST request information to the REST request information transfer unit 5 (Sb6). .

The REST request information transfer unit 5 reads the service ID from the REST request information, transmits the service ID and information indicating the protocol of the request information to the profile server 10, and is registered in the service information table 51. One of the URIs 28, 29, and 30 and information indicating that conversion is unnecessary are acquired. Further, the REST request information transfer unit 5 transmits the service ID to the profile server 10 and registers the ID conversion pattern information registered in the operation table 52, and the unique authentication information when the ID conversion pattern is an ID replacement type. Are obtained (Sb7).
Further, the REST request information transfer unit 5 reads the authentication ticket from the REST request information, and deletes the authentication ticket pointer in the REST request information (Sb8).
Further, when the ID conversion pattern is the SAML cooperation type, the REST request information transfer unit 5 transmits the read authentication ticket to the authentication station 6 and associates it with the authentication ticket on the authentication ticket pointer / authentication ticket correspondence table 25. The obtained authentication ticket pointer is acquired (Sb9). Further, the REST request information transfer unit 5 writes the acquired authentication ticket pointer in the REST request information (Sb10) and transmits it to the REST service component 28 (Sb12).
If the ID conversion pattern is an ID replacement type, the REST request information transfer unit 5 writes unique authentication information in the REST request information (Sb11) and transfers it to the REST service component 29 (Sb12).
If the ID conversion pattern is a deletion type, the REST request information transfer unit 5 transfers the REST request information to the REST service component 30 without adding new authentication information to the REST request information (Sb12).
When receiving the REST request information, the REST service components 28, 29, and 30 transmit a REST response to the REST service requester 45 via the REST response transfer unit 35 of the execution control server 1.

<Third Embodiment: Operation for Converting SOAP Request Information into REST Request Information>
In the third embodiment, the SOAP service requester 44 transmits SOAP request information, and via the execution control server 1, the message translator device 7 receives this and converts it into REST request information, and the REST service component 28, The operation of the service cooperation processing system 100 when transmitting to 29 and 30 will be described with reference to FIG.
The SOAP service requester 44 of the SOAP service requester terminal 16 operated by the user acquires the WSDL definition document registered in the service disclosure server 13 and requests the certificate authority 6 to issue an authentication ticket.
The SOAP service requester 44 generates SOAP request information in which the service ID and the operation name are written according to the format defined in the WSDL definition document, writes the authentication ticket information in the authentication information parameter, and executes the execution control server. 1 (Sc1).

The protocol determination unit 33 of the execution control server 1 determines that the request information protocol is SOAP because the request information received from the SOAP service requester 44 includes a tag whose element name starts with “soapenv”. The received SOAP request information and information indicating that the protocol is SOAP are output to the single sign-on unit 47 (Sc2).
The single sign-on unit 47 performs authentication using the authentication ticket read from the input SOAP request information. When the authentication is successful, that is, when it is determined as a valid authentication ticket, the single sign-on unit 47 outputs SOAP request information and information indicating the protocol of the request information to the non-functional requirement processing unit 2 (Sc3).
The non-functional requirement processing unit 2 reads the service ID from the input SOAP request information, transmits the service ID to the profile server 10, receives the non-functional requirement processing policy registered in the operation table 52, Perform functional requirement processing. Further, when the non-functional requirement processing unit 2 succeeds in the non-functional requirement processing such as the authorization processing, the non-functional requirement processing unit 2 outputs the SOAP request information and the information indicating the request information protocol to the SOAP request information transfer unit 4 (Sc4).

The SOAP request information transfer unit 4 reads out the service ID from the SOAP request information, transmits the service ID and information indicating the protocol of the request information to the profile server 10, and the SOAP service component 20 registered in the service information table. , 26, 27, and information indicating that conversion is necessary. In addition, the SOAP request information transfer unit 4 transmits the service ID to the profile server 10 and registers the ID conversion pattern information registered in the operation table, and the unique authentication information when the ID conversion pattern is an ID replacement type. Is acquired (Sc5).
Further, when the ID conversion pattern is the SAML cooperation type, the SOAP request information transfer unit 4 does not delete the authentication ticket in the SOAP request information (Sc6), and keeps the SOAP request information as the SOAP of the message translator device 7. It transmits to the request information conversion part 8 (Sc8).
In addition, when the ID conversion pattern is an ID replacement type, the SOAP request information transfer unit 4 rewrites the authentication ticket in the SOAP request information with unique authentication information (Sc7), and the SOAP request information conversion unit 8 of the message translator device 7 (Sc8).
Further, when the ID conversion pattern is the SAML cooperation type, the SOAP request information transfer unit 4 deletes the authentication ticket in the SOAP request information and transmits it to the SOAP request information conversion unit 8 of the message translator device 7 (Sc8). .

The SOAP request information conversion unit 8 of the message translator apparatus 7 receives the SOAP request information (Sc9), determines the REST method from the SOAP operation in the request information, and converts the SOAP request information into the REST request information (Sc10). ).
In addition, when the ID conversion pattern is the SAML cooperation type, the SOAP request information conversion unit 8 transmits an authentication ticket to the certificate authority 6, acquires a corresponding authentication ticket pointer, and writes it in the parameter of the REST request information (Sc12). ) To the REST service component 28 (Sc14).
In addition, when the ID conversion pattern is the ID replacement type or the deletion type, the SOAP request information conversion unit 8 sets all parameter values of the SOAP body part in the SOAP request information as REST parameters (Sc13), and the REST service component 28 (Sc14). The parameters of the SOAP body part include unique authentication information in the case of the ID replacement type.
When receiving the REST request information, the REST service components 28, 29, and 30 transmit a REST response to the message translator device 7. The REST response conversion unit 40 of the message translator device 7 converts the REST response into a SOAP response, and transmits the SOAP response to the SOAP service requester 44 via the SOAP response transfer unit 34 of the execution control server 1.

<Fourth Embodiment: Operation when REST Request Information is Converted to SOAP Request Information>
In the fourth embodiment, the REST service requester 45 transmits the REST request information, and the message translator device 7 receives and converts it into the SOAP request information via the execution control server 1, and the SOAP service component 20, The operation of the service cooperation processing system 100 when transmitting to 26 and 27 will be described with reference to FIG.
The REST service requester 45 operated by the user acquires the WADL definition document registered in the service disclosure server 13 and requests the certificate authority 6 to issue an authentication ticket pointer.
The REST service requester 45 generates REST request information in which the service ID and the operation name are written according to the format defined in the WADL definition document, writes the information of the authentication ticket pointer in the parameter of the authentication information, and executes the execution control. It transmits to the server 1 (Sd1).

The protocol determination unit 33 of the execution control server 1 determines that the request information received from the REST service requester 45 does not have a tag whose element name begins with “soapenv”, so that the protocol of the request information is REST. The received REST request information and information indicating that the protocol is REST are output to the authentication ticket pointer resolution unit 46 (Sd2).
The authentication ticket pointer resolution unit 46 reads the authentication ticket pointer information from the REST request information and transmits it to the certificate authority 6 to request the issue of the authentication ticket. The authentication station 6 generates an authentication ticket corresponding to the received authentication ticket pointer using the authentication ticket pointer / authentication ticket correspondence table 25 and transmits the generated authentication ticket to the authentication ticket pointer resolution unit 46. Further, the authentication ticket pointer resolution unit 46 writes the received authentication ticket in the REST request information and outputs it to the single sign-on unit 47 (Sd3).
The single sign-on unit 47 performs authentication using the authentication ticket read from the input REST request information. When the authentication is successful, that is, when it is determined as a valid authentication ticket, the single sign-on unit 47 outputs the REST request information and information indicating the protocol of the request information to the non-functional requirement processing unit 2 (Sd4).
The non-functional requirement processing unit 2 reads the service ID from the input REST request information, transmits the service ID to the profile server 10, receives the non-functional requirement processing policy registered in the operation table 52, Perform functional requirement processing. Further, when the non-functional requirement processing unit 2 succeeds in the non-functional requirement processing such as the authorization processing, the non-functional requirement processing unit 2 outputs the SOAP request information and the information indicating the protocol of the request information to the REST request information transfer unit 5 (Sd5).

The REST request information transfer unit 5 reads the service ID from the REST request information, transmits the service ID and information indicating the protocol of the request information to the profile server 10, and registers the REST service component 28 registered in the service information table. , 29, and 30 and information indicating that conversion is necessary. Further, the REST request information transfer unit 5 transmits the service ID to the profile server 10 and registers the ID conversion pattern information registered in the operation table, and the unique authentication information when the ID conversion pattern is an ID replacement type. Is acquired (Sd6).
Further, when the ID conversion pattern is the SAML cooperation type, the REST request information transfer unit 5 reads the authentication ticket from the REST request information, and deletes the authentication ticket pointer in the REST request information. Further, the REST request information transfer unit 5 transmits the read authentication ticket to the certificate authority 6 and acquires a corresponding authentication ticket pointer (Sd7). Further, the REST request information transfer unit 5 writes the acquired authentication ticket pointer in the parameter of the REST request information (Sd8) and transmits it to the REST request information conversion unit 9 of the message translator device 7 (Sd10).
In addition, when the ID conversion pattern is an ID replacement type, the REST request information transfer unit 5 writes unique authentication information in the parameter of the REST request information (Sd9) and transmits it to the REST request information conversion unit 9 of the message translator device. (Sd10).
If the ID conversion pattern is a deletion type, the REST request information transfer unit 5 deletes the authentication ticket pointer in the REST request information and transmits it to the REST request information conversion unit 9 of the message translator device (Sd10).

The REST request information converter 9 of the message translator device 7 receives the REST request information (Sd11), determines the SOAP operation from the parameter method in the REST request information, and converts the REST request information into SOAP request information ( Sd12).
In addition, when the ID conversion pattern is the SAML cooperation type, the REST request information conversion unit 9 transmits an authentication ticket pointer to the certificate authority 6 to acquire a corresponding authentication ticket, and writes it in the SOAP request information (Sd13). The other parameter values in the REST request information are also written in the SOAP request information (Sd14) and transmitted to the SOAP service component 20 (Sd15).
In addition, when the ID conversion pattern is the ID replacement type or the deletion type, the REST request information conversion unit 9 writes the parameter value in the REST request information in the SOAP request information (Sd14) and stores it in the SOAP service components 26 and 27. Transmit (Sd15).
The parameters in the REST request information include unique authentication information in the case of the ID replacement type. Upon receiving the SOAP request information, the SOAP service components 20, 26, and 27 transmit a SOAP response to the message translator device 7. The SOAP response conversion unit 39 of the message translator device 7 converts the SOAP response into a REST response, and transmits the REST response to the REST service requester 45 via the REST response transfer unit 35 of the execution control server 1.

As described above, according to the embodiment of the present invention, the service requesters 44 and 45 can acquire both the SOAP response and the REST response by the request information described in one format protocol. The SOAP service and the REST service can be linked according to the information.
Further, since the non-functional requirement processing unit 2 performs non-functional requirement processing in a lump, the service component does not need to perform non-functional requirement processing individually.
Further, since the SOAP service requester 44 and the REST service requester 45 can receive single sign-on authentication, even when using service components of different protocols for the SOAP service and the REST service, the authentication information may be input only once. .
In addition, the SOAP service requester 44 and the REST service requester 45 can receive a service from a service component having a protocol different from that of the own requester without newly preparing and setting middleware, thereby reducing the application development cost. Moreover, the development period can be shortened. In addition, since many Web services provided by SOAP and REST can be used, it is possible to develop a new application that cannot be developed from only a Web service provided by one format protocol.
Further, since the service cooperation system of this embodiment executes processing for controlling network stability such as traffic control processing, the SOAP service requester 44 and the REST service requester 45 can receive a stable service.

  1, the SOAP service requester 44 of the SOAP service requester terminal 16, the REST service requester 45 of the REST service requester terminal 17, the message proxy unit 3 of the execution control server 1, the protocol determination unit 33, and the SOAP request information transfer Unit 4, REST request information transfer unit 5, SOAP response transfer unit 34, REST response transfer unit 35, authentication unit 36, authentication ticket pointer resolution unit 46, single sign-on unit 47, non-functional requirement processing Unit 2, authentication information control unit 50 of certificate authority 6, authentication ticket pointer / authentication ticket correspondence table 25, request information conversion unit 37 of message translator device 7, SOAP request information conversion unit 8, and REST request information conversion Part 9 and Ponce conversion unit 38, SOAP response conversion unit 39, REST response conversion unit 40, profile control unit 11 of profile server 10, service information table 51, operation table 52, and public service control unit of service public server 13 48, a public service storage unit 49, a service registration unit 41 of the service registration server 12, a component information extraction unit 42, and a program for realizing the functions of the definition document conversion unit 43 are recorded on a computer-readable recording medium. Then, the program recorded in the recording medium may be read into the computer system and executed to execute the processing of each unit. The “computer system” here includes an OS and hardware such as peripheral devices.

Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The “computer-readable recording medium” refers to a portable medium such as a flexible disk, a magneto-optical disk, a ROM, and a CD-ROM, and a storage device such as a hard disk built in the computer system. Furthermore, the “computer-readable recording medium” dynamically holds a program for a short time like a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line. In this case, a volatile memory in a computer system serving as a server or a client in that case, and a program that holds a program for a certain period of time are also included. The program may be a program for realizing a part of the functions described above, and may be a program capable of realizing the functions described above in combination with a program already recorded in a computer system.

  The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes design changes and the like within a scope not departing from the gist of the present invention.

  The present invention is suitable for use in a cooperative processing system between a SOAP service and a REST service.

DESCRIPTION OF SYMBOLS 1 ... Execution control server 2 ... Non-functional requirement process part 3 ... Message proxy part 4 ... SOAP request information transfer part 5 ... REST request information transfer part 6 ... Authentication station 7 ... Message translator apparatus 8 ... SOAP request information conversion part 9 ... REST Request information conversion unit 10 ... Profile server 11 ... Profile control unit 12 ... Service registration server 13 ... Service disclosure server 14 ... Traffic information management server 15 ... Service quality monitoring control unit 16 ... SOAP service requester terminal 17 ... REST service requester terminal 18 ... Network 19... SOAP service component server 21... REST service component server 20, 26, 27... SOAP service component 28, 29, 30. Ticket pointer / authentication ticket corresponding table 51 ... service information table 52 ... operation table 31 ... cache unit (in the execution control server)
32 ... Cache unit (in the message translator)
33 ... Protocol determination unit 34 ... SOAP response transfer unit 35 ... REST response transfer unit 36 ... Authentication unit 37 ... Request information conversion unit 38 ... Response conversion unit 39 ... SOAP response conversion unit 40 ... REST response conversion unit 41 ... Service registration unit 42 ... component information extraction part 43 ... definition document conversion part 44 ... SOAP service requester 45 ... REST service requester 46 ... authentication ticket pointer resolution part 47 ... single sign-on part 48 ... public service control part 49 ... public service storage part 50 ... authentication information Control unit 100 ... service cooperation processing system

Claims (7)

A service component server that provides a web service with a predetermined protocol;
A service publishing server that publishes a web service of the service component server by a definition document described in an interface definition corresponding to a plurality of different protocols;
A certificate authority that issues authentication information according to the plurality of different protocols;
A profile server that provides authentication processing information indicating authentication processing performed by the service component server;
Requests and receives authentication information corresponding to the protocol of the own terminal from the certificate authority, requests a definition document corresponding to the protocol of the own terminal from the definition document of the service component server that uses the service to the service public server A service requester terminal that receives and generates request information including the received authentication information in the received definition document; and
When receiving the request information from the service requester terminal, reading authentication information from the request information, performing single sign-on authentication according to the read authentication information, and authenticating that the request information is valid request information, When it is determined whether or not the request information needs to be converted and it is determined that conversion is unnecessary, the service component server requests and receives authentication processing information performed by the service component server, and the authentication information is received according to the received authentication processing information. An execution control server that rewrites authentication information and sends it to the service component server;
When the execution control server determines that conversion is necessary, the request information is received from the execution control server, the request information is converted according to the interface specifications of the service component server, and the authentication process performed by the service component server A message translator device that requests and receives information from the profile server, rewrites the authentication information according to the received authentication processing information, and transmits the information to the service component server;
A service linkage processing system characterized by comprising: The protocol is SOAP or REST,
The execution control server is
When the protocol of the received request information is detected and the detected protocol indicates SOAP, the authentication information indicated by the authentication ticket is read from the request information, single sign-on authentication is performed using the read authentication ticket, and the detected protocol is When indicating REST, the authentication information indicated by the authentication ticket pointer is read from the request information, the read authentication ticket pointer is transmitted to the certificate authority, and the authentication ticket corresponding to the authentication ticket pointer is received from the certificate authority. The service cooperation processing system according to claim 1, wherein single sign-on authentication is performed. The profile server
As the authentication processing performed by the service component server, any one of the linkage type, ID replacement type, and deletion type processing is provided as authentication processing information.
The execution control server is
If it is determined that conversion of the request information is unnecessary,
When the authentication processing information is an ID replacement type, the authentication information is rewritten with predetermined ID information,
If the authentication processing information is a deletion type, the authentication information is deleted,
When the authentication processing information is cooperative, the authentication information is not rewritten when the request information is SOAP, and when the request information is REST, the authentication information indicated by the authentication ticket pointer is sent to the certification authority. Request and receive, rewrite with authentication information,
The message translator device
When receiving the request information from the execution control server,
If the authentication processing information is an ID replacement type, the authentication information is deleted, and predetermined ID information is given to the converted request information,
If the authentication processing information is a deletion type, the authentication information is deleted,
When the authentication processing information is a cooperative type and the request information is SOAP, the authentication information indicated by the authentication ticket included in the request information is read, the authentication information is deleted from the request information, and the authentication information is deleted. Requesting and receiving the authentication information indicated by the authentication ticket pointer corresponding to the authentication ticket from the station, including the received authentication information in the request information converted from SOAP to REST,
When the authentication processing information is a cooperative type and the request information is REST, the authentication information indicated by the authentication ticket pointer included in the request information is read, and the read authentication ticket pointer is transmitted to the certificate authority. The service cooperation processing system according to claim 2, wherein an authentication ticket corresponding to the authentication ticket pointer is received from the certificate authority, and the received authentication ticket is included in request information converted from REST to SOAP. Among the definition documents, a definition document corresponding to SOAP is a WSDL definition document, a definition document corresponding to REST is a WADL definition document,
The service public server is
When converting from a WADL definition document to a WSDL definition document, the SOAP operation name is a format that assigns a serial number to the HTTP method.
When converting a WSDL definition document to a WADL definition document, the HTTP method is fixed to GET, and the SOAP operation name is converted into a format specified by the query parameter method to generate a definition document corresponding to a different protocol. Item 4. The service cooperation processing system according to Item 2 or 3. The message translator device
When the request information is converted from SOAP to REST, if a serial number is assigned to the HTTP method included in the request information, a plurality of HTTP methods are defined and converted into one resource of the REST method in the order of the serial number. 5. When converting the request information from REST to SOAP, the SOAP operation name specified by the query parameter method is extracted from the GET part of the HTTP method and converted into a SOAP operation. The service linkage processing system described. Non-functional requirement processing for performing non-functional requirement processing of authorization processing, throttling and content filter disturbance prevention processing, and traffic control processing on the request information after the execution control server performs single sign-on authentication The service cooperation processing system according to claim 1, further comprising: means. A service component server that provides a web service with a predetermined protocol, a service publication server that publishes a web service of the service component server with a definition document described in an interface definition corresponding to a plurality of different protocols, and the plurality of different protocols A certificate authority that issues authentication information according to the profile, a profile server that provides authentication processing information indicating authentication processing performed by the service component server, a service requester terminal, an execution control server, and a message translator device. A service cooperation processing method in a service cooperation processing system,
The service requester terminal requests and receives authentication information corresponding to its own protocol from the certificate authority, and
A process in which the service requester terminal requests and receives a definition document corresponding to a protocol of the terminal among service component server definition documents that use a service;
A process in which the service requester terminal generates and transmits request information including the received authentication information in the received definition document;
The execution control server receives the request information from the service requester terminal, reads authentication information from the request information, performs single sign-on authentication according to the read authentication information, and the request information is valid request information. If it is authenticated, it is determined whether or not the request information needs to be converted. If it is determined that conversion is not required, authentication processing information performed by the service component server is requested and received from the profile server, and the received authentication is received. Rewriting the authentication information according to the processing information and sending it to the service component server;
When the message translator device determines that the execution control server requires conversion, the message translator device receives the request information from the execution control server, converts the request information according to the interface specifications of the service component server, and Requesting and receiving authentication processing information performed by the component server from the profile server, rewriting the authentication information according to the received authentication processing information, and transmitting to the service component server;
A service cooperation processing method comprising:

Images