JPH11195030A - Information managing system and data base server used for the same - Google Patents

Abstract

PROBLEM TO BE SOLVED: To speed up access to a data base and to secure security. SOLUTION: An information managing system contains a client 12 requesting data retrieval from the data base 36, a DB server 16 retrieving pertinent data from the data base 36 in accordance with a retrieval request and a word wide web(WWW) server 10 intermediating between them. In the case of first access from the client 12 through the WWW server 10, the DB server 16 generates peculiar identification information (log-on ID) on access and informs the client 12 of it. When the retrieval request by log-on ID is given by the client 12, the WWW server 10 gives the retrieval request to the DB server 16 at every log-on ID. The DB server 16 retrieves data corresponding to the request from the data base and returns the retrieval result when log-on ID requesting data retrieval is discriminated to be valid.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a client for requesting data retrieval from a database, a database server for retrieving relevant data from the database in response to the retrieval request, and a server interposed between the client and the database server. And an information management system including:

[0002]

2. Description of the Related Art Generally, when searching for information from a database on a WWW (World Wide Web), a WWW browser of a client calls a homepage for database search provided by a WWW server, and on this homepage. This is done by specifying search conditions. At this time, if security is required for database access, a logon procedure with a user password specified on a WWW browser is required.

[0003] A client (WWW browser) sends a search condition specified on a homepage to a WWW server, and requests a database to execute a search corresponding to the search condition.

[0004] On the other hand, when a WWW browser specifies search conditions and instructs to execute a search from a WWW browser, it logs on to a database server that manages a database. In this logon, processing such as database server authentication, process activation (memory area allocation, etc.), and database opening / closing are performed. W
When the WW server can log on to the database server, the WW server sends designated search conditions and the like, and requests execution of search for the corresponding data.

[0005] The database server extracts the corresponding data based on the designated search condition and notifies the WWW server of the extracted data. When the search result notified from the database server is extracted, the WWW server notifies the WWW browser of this data. The WWW browser displays the data received from the WWW server.

[0006] The WWW server logs on to the database server every time there is a search execution request from a client browser. That is, W
In the WW system, HTTP (hyper text transfer pr
otocol), one file (the search result H
This is because the process ends when a WWW server (such as a TML document) is sent from the WWW server to the browser, and the session between the WWW server and the database server is terminated. For this reason, when a search execution request is made from a plurality of clients, or when a search execution request is made repeatedly even from one client (when the search conditions are changed each time, etc.), the logon is performed. Load increases.

[0007]

As described above, in the conventional system, when a client makes a data search request to a database, the WWW server logs on to the database server every time a search request is issued. There is a problem in that data must be read, and if access is frequent, the load for logon to the WWW server increases.

[0008] Security in the WWW system is performed by a user password when a browser logs on to a homepage of the WWW server, and security is provided for execution of a program for database search executed on the WWW server. Security management was required so that the data could not be falsified and the data in the database was not falsified.

The present invention has been made in view of the above problems, and provides an information management system and a recording medium on which an information management program is recorded, which can speed up access to a database and ensure security. The purpose is to do.

[0010]

According to the present invention, there is provided a client for requesting data retrieval from a database, a database server for retrieving corresponding data from the database in response to the retrieval request, and a method for transmitting data between the client and the database server. An intervening server, wherein the database server, when the first access from the client via the server, generates unique identification information about the access, the database server, Identification information generation means for notifying the client via the identification information means, and when there is a data search request by the identification information generated by the identification generation means, identification information determination means for determining whether the identification information is valid When the identification information is determined to be valid by the identification information determination means, Data search means for searching for data in response to a request from the database, wherein the server responds to the database server in response to a data search request by the identification information generated by the identification information generation means from the client. A search request unit for making a search request for each piece of identification information, and continuously managing a data search from the client to the database based on the identification information. In other words, the data search from the client to the database is not performed for each data search, but is performed continuously based on the identification information generated at the time of the first access (logon). Is not performed every time there is a data search request.

Further, the identification information determining means sets the valid time of the identification information generated by the identification information generating means to be finite.

Thus, the state of logon to the database is not continued indefinitely, and after a lapse of a valid time, a resource can be provided for another data search request, and security can be ensured.

[0013] Further, the present invention is characterized in that a valid time of the identification information is extended according to an instruction from the client.

Thus, the logon state can be intentionally continued for a specific client.

Further, the database server has management information for registering identification information generated by the identification information generating means for each client and registering information for continuously accessing the database. It is characterized by.

Thus, access to the database can be managed for each client that has generated identification information, and data search requests from a plurality of clients can be managed in parallel.

[0017]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing a schematic configuration of an information management system according to an embodiment of the present invention. As shown in FIG. 1, the information management system is a WWW (World Wide
A client 12 (WWW browser) is connected to a (Web) server 10 via the Internet 14. Also, the WWW server 10 is connected to the DB server 16 and the LA
It is connected via N18. The WWW server 10, the client 12, and the DB server 16 are configured by a computer which reads programs recorded on various recording media and whose operations are controlled by the read programs, and in which programs, data, and the like are recorded in advance. A storage device having a recording medium is provided.
The recording medium is composed of a magnetic or optical storage medium or a semiconductor memory. This recording medium is fixedly provided in the storage device, or is detachably mounted. Further, the program, data, and the like stored in the recording medium may be configured to be received and stored from another device connected via a communication line or the like. A storage device provided with a recording medium may be provided on the device side, and the program and data stored in the recording medium may be used via a communication line.

The DB server 16 has a large storage capacity and manages a database in which various data are stored, and provides data corresponding to a search request from the client 12 via the WWW server 10. The DB server 16 has a function of generating unique identification information (logon ID) for access from the WWW server 10 and continuously managing access from the WWW server 10 thereafter.

Next, the functional configuration of each unit in the configuration shown in FIG. 1 will be described. FIG. 2 is a block diagram illustrating a functional configuration of the data search system according to the present embodiment.
As shown in FIG. 2, the WWW server 10 is provided with functions of a WWW server 20 and a DB search processing unit 22.

The WWW server 20 is realized by executing WWW server software (program). The WWW server 20 starts storing hypertext information (HTML document) described in HTML (Hyper Text Markup language). In response to the information transmission request, an interface with another program, that is, a service such as provision of a CGI (common gateway interface) 20a is executed. The CGI 20a has a function of executing a program (CGI program) on the WWW server 10 in response to a request from the WWW browser and returning the result to the browser.

The DB search processing unit 22 is a WWW server 20
(CGI 20a) for accessing the database 36 in response to a request from the WWW server 20, generating an HTML document for the data obtained from the database 40, and the like. DB search processing unit 22
Logs on to the database processing unit 34 when accessing the database 36.

The WWW server 10 has a condition input screen 2 for inputting search conditions when performing data search on the database 40 in the client 12.
4. That is, a homepage for database search is prepared. The condition input screen is created by an HTML document.

On the other hand, the client 12 is provided with functions of a WWW browser 30 and a display unit 32.

[0025] The WWW browser 30 is used for the WWW server 10.
(WWW server 20) has a function of searching for and browsing information by accessing a WWW server 20 to display a homepage for database search based on a condition input screen 24 transmitted by the WWW server 20 to search conditions. To request the execution of the database search, and display the data transmitted from the WWW server 20 as the search result on the display unit 32.

The display unit 32 is operated by the WWW browser 30 to display a condition input screen (homepage) or a database 3
This is a display function for displaying the search result for No. 6.

The DB server 16 has a database processing unit 34, a database 36, and logon management information 38.
Is provided.

The database processing unit 34 manages a search for the database 36 from the WWW server 10 (DB search processing unit 22).
D) occurs, and the subsequent access from the DB search processing unit 22 is continuously managed. Database processing unit 34
Uses the logon management information 38 to manage access from the DB search processing unit 22.

Various data are registered in the database 36. The database processing unit 34 searches for data corresponding to the search condition, registers data, and the like.

In the logon management information 38, various kinds of information are registered in order to manage the database processing unit 34 so that access from the DB search processing unit 22 is performed continuously. For example, as shown in FIG. , User name, password, connection extension permission, logon ID, logon management information, subtraction timer, and other information are registered. Use of each information will be described later.

FIG. 4 shows a WWW according to an embodiment of the present invention.
FIG. 3 is a block diagram illustrating a schematic configuration of an electronic circuit of the server 10. The WWW server 10 is configured by a computer which reads programs recorded on various types of recording media and whose operation is controlled by the read programs.

The WWW server 10, as shown in FIG.
It includes a CPU 40, a LAN interface unit 41, a communication unit 42, a storage device 43, and a memory 45.

The CPU 40 controls the entire WWW server 10, and realizes various functions by operating based on programs (information management program), data, and the like stored in the memory 45.

The LAN interface unit 41
A unit that controls communication with the WWW server 10 via the AN 18.

The communication unit 42 is connected to the Internet 14
Is a unit that controls communication with the outside via the.

The storage device 43 stores various programs and data, and has a recording medium 44 in which programs, data, and the like are recorded in advance. The recording medium 44 is constituted by a magnetic or optical storage medium or a semiconductor memory. The recording medium 44 is fixedly provided in the storage device 43 or is detachably mounted. The program, data, and the like stored in the recording medium 44 may be configured to be received and stored from another device connected via a communication line or the like.
A storage device having a recording medium may be provided on another device connected via a communication line or the like, and a program and data stored in the recording medium may be used via the communication line.

The memory 45 stores programs and data to be accessed by the CPU 40, and is read from the storage device 43 and stored as needed. Next, the operation of the information management system according to the present embodiment will be described with reference to the timing chart shown in FIG. 5 and the flowcharts shown in FIGS. First, logon processing in each unit until the client 12 logs on to the DB server 16 will be described with reference to the flowchart shown in FIG.

First, by specifying, for example, a URL (uniform resource locator) on the WWW browser 30 of the client 12, the WWW server 20 is requested to transmit a menu screen or a search condition input screen. The WWW server 20 transmits to the WWW browser 30 a condition input screen 24 designated by the WWW browser 30, that is, a home page described by an HTML document. The WWW browser 30 causes the display unit 32 to display the condition input screen received from the WWW server 20.

The WWW browser 30 inputs a user password for logging on to the database on the displayed homepage (step A1), and when logon execution is instructed, executes a logon process for the WWW server 20 (step A2). 5 (1)).

The WWW server 20 has a WWW browser 30
When a logon execution request (user password) is obtained from the server (step B1), a CGI program for accessing the DB server 16 via the CGI 20a is started, and a logon process (password) to the DB server 16 (database processing unit 34) is started. (Step B2, FIG. 5 (2)).

When the database processing unit 34 logs on from the DB search processing unit 22 and acquires the password (step C1), the database processing unit 34 executes logon processing for the database 36 (step C2, FIG. 5 (3)). Upon receiving the logon approval from the database 36 (FIG. 5 (4)), the database processing unit 34 generates a completely unique logon ID for this access (step C3) and is registered in the logon management information 38. Then, the generated logon ID is registered in association with the user name and password corresponding to the client 12 that has requested logon. Also,
In response to this access, management data necessary for executing a data search to the database 36, for example, information for identifying a search process is registered in association with logon information. Further, the database processing unit 34 holds a state in which data can be searched for in the database 36 (step C4).

As an example of a method of generating a completely unique logon ID, a minimum unit (for example, 1 msec) having no operational problem based on the date and time of the WWW server 20 is used.
Unit).

The database processing unit 34 transmits the generated logon ID to the WWW server 10 (DB search processing unit 22) to notify logon approval (step C).
5, FIG. 5 (5)).

Further, the database processing unit 34 stores the logon management information 3
Then, a subtraction timer is set to 8 and measurement of the elapsed time from the start of logon is started (step C6). The subtraction timer is
This is for setting a time limit for preventing access to the database 36 from being continued without restriction. The connection can be extended for a specific user. The permission / non-permission of the connection extension is determined in advance for each user, and the logon management information 38
For example, a non-permission is set for a general user, and a permission is set for a system administrator. The time set in the subtraction timer may be arbitrarily determined for each user.

On the other hand, the WWW server 10 stores the notified logon ID in the DB search processing unit 22 and the WWW server 20.
(Step B)
4, FIG. 5 (6)).

The WWW browser 30 is used by the WWW server 20
When the logon is completed by acquiring a logon ID from (step A4), the process proceeds to a data search process.

Next, a data search process in each unit until the client 12 acquires desired data from the database 36 will be described with reference to a flowchart shown in FIG.

First, the WWW browser 30 inputs a search condition on the displayed home page (condition input screen) (step A5), and when a search execution is instructed, the logon ID notified to the WWW server 20 is sent to the WWW server 20. (Step A6, FIG. 5)
(7)).

The WWW server 20 has a WWW browser 30
The search condition is received together with the search execution request from the server (step B5), and the DB search processing unit 22 is instructed to execute a search for the database 36 based on the specified search condition. The DB search processing unit 22 requests the DB server 16 to execute a data search process using the logon ID (step B6, FIG. 5 (8)).

The database processing unit 34 acquires the search condition and the logon ID from the DB search processing unit 22 and checks whether the logon ID is valid by referring to the logon ID registered in the logon management information 38. It is determined (step C8, FIG. 5 (8)).

Here, if the logon ID is valid, the database processing unit 34 sends the logon management information 38
The logon management information corresponding to the logon ID registered in the database 36 is obtained (step C9), and the SQL is executed based on the logon management information to the database 36 to perform data search (step C10, FIG. 5 (9)).

When the data corresponding to the search condition is acquired from the database 36 (step C11, FIG. 5 (10)), the database processing unit 34 returns the data search result to the DB search processing unit 22 (step C12, FIG.
(11)).

The DB search processing unit 22 includes a database 36
When the data search result is obtained from (step B7), H
The data is converted into the format of the TML document and notified to the WWW server 20. The WWW server 20 transmits the search result of the database 36 converted into the format of the HTML document to the WWW browser 30 (step B8, FIG. 5 (12)).

On the other hand, if the database processing unit 34 determines that the logon ID from the DB search processing unit 22 is not valid (step C8), the database processing unit 34 36 is notified (step C13, FIG. 5 (11)).

The DB search processor 22 notifies the WWW browser 30 via the WWW server 20 that the logon ID is invalid (step B8, FIG. 5 (12)).

When the WWW browser 30 acquires the data corresponding to the search condition for the database 36 with the valid logon ID, the WWW browser 30 displays the data on the display unit 32 as a search result (step A8).

Similarly, if the elapsed time since the logon is within the time indicated by the subtraction timer corresponding to the logon ID registered in the logon management information 38, a search condition is designated and the search is executed. By instructing, each time
Without performing logon processing from the DB search processing unit 22 to the database processing unit 34, it is possible to perform continuous access and data search based on the logon ID generated at the time of logon. That is, the time required for the logon process can be saved, so that the response time of the data search can be shortened.

By the way, the database processing unit 34 monitors the time since logon, and when the time registered in the subtraction timer of the logon management information 38 elapses, the database processing unit 34 Invalidate the logon ID. That is, the logon ID set for the corresponding user in the logon management information 38 is deleted.

Therefore, for the subsequent access, even if a data search request is made based on the logon ID, the logon ID is invalidated, so that data search cannot be executed and the user is logged off. Therefore, a user other than a user who has performed a valid logon procedure cannot perform operations such as data search or data registration in the database 36, and security can be ensured. That is, even if another unregistered user attempts to use the system after a valid logon is performed, access to the database 36 becomes impossible after a predetermined time has elapsed.

Further, by logging off after a lapse of a predetermined time, the resources of the DB server 16 can be used effectively. For example, when the WWW browser 30 terminates abnormally and the data search for the database 36 cannot be executed, the resource is released by being logged off by the subtraction timer, so that the resource can be provided for access from another source. . Alternatively, even if the user has not performed an operation on the WWW browser 30 for a long time, the user is logged off by the subtraction timer, so that resources can be saved.

Further, since a unique logon ID is generated for each minimum access request and the subsequent data search requests are managed, even if data search requests from a plurality of clients are performed in parallel, each of them is individually Can be processed in parallel.

By the way, a user whose connection extension is set to be disallowed is automatically logged off as described above, but a specific user whose connection extension is permitted is not automatically logged off. Can be.

Next, with reference to the flowchart shown in FIG. 8, a description will be given of the processing of each unit for extending the connection so as not to log off.

In this case, the WWW browser 30 of the user who is permitted to extend the connection is provided with an interval timer function. In the function of the interval timer, before the time of the subtraction timer set in the logon management information 38 elapses, the time is measured so as to specify a timing at which a request for a connection extension request can be given.

When the time measured by the interval timer reaches the time to instruct a request for a connection extension (steps A9 and A10), the WWW browser 30 makes a request to the WWW.
The W server 10 is instructed to extend the connection by the logon ID (step A11, FIG. 5 (13)). As a result, the connection extension procedure is performed in the DB server 16, so that the interval timer is reset and a new time measurement is started (step A12).

Upon receiving the instruction to extend the connection, the WWW server 10 instructs the database processing unit 34 via the DB search processing unit 22 to extend the connection using the logon ID (step B10, FIG. 5 (14)). .

The database processing unit 34 responds to the logon ID registered in the logon management information 38 as shown in FIG.
Valid / invalid processing as shown in (c) is performed. That is, when the connection extension is instructed by the logon ID from the WWW server 10, first, whether the logon ID is valid or not is determined by the logon ID registered in the logon management information 38.
(Step C14).
If the logon ID is invalid, the user logs off and ends the process.

On the other hand, if the logon ID is valid and the instruction is to extend the connection (step C15), the database processing unit 34 determines whether the instruction is from a user permitted to extend the connection by using the logon management information 38. The determination is made with reference to the setting of the connection extension permission corresponding to the logon ID registered in (step C16).

Here, if the instruction is from the user who is permitted to extend the connection, the database processing unit 34 resets the subtraction timer (step C17) and starts measuring the elapsed time of logon from the beginning. Therefore, the time measurement does not reach the time registered in the subtraction timer (step C19), and the logon ID is not invalidated (step C19).
20). That is, the logon ID set for the corresponding user in the logon management information 38 is left as it is.

As described above, by outputting the connection extension instruction from the WWW browser 30 at a predetermined timing using the interval timer, if the logon management information 38 is set to permit the connection extension, the subtraction is performed. The time measurement of the timer is reset, and the valid state of the logon ID is maintained. Therefore, this user remains logged on, and can continuously perform data search and the like on the database 36 (FIG. 5 (15)-).
(FIG. 5 (20)). If the WWW browser 30 terminates abnormally, no instruction to extend the connection is issued, so that the user is automatically logged off as described above, and the resources can be released.

Next, processing of each unit for the client 12 to log off will be described with reference to the flowchart shown in FIG.

First, when log-off is instructed in the WWW browser 30, a log-off request is issued to the WWW server 10 using a log-on ID (step A).
13). When the WWW server 10 acquires the logon ID, the WWW server 10 executes logoff processing using the logon ID for the DB server 16 (database processing unit 34) (step B).
12).

The database processing unit 34 has a logon ID
Together with the logoff instruction (step C2).
1) The corresponding logon ID registered in the logon management information 38 and the logon management information registered corresponding to the logon ID are deleted (step C22). The database processing unit 34 transmits a log-off processing completion notification to the WWW server 10 (step C23).

Upon receiving the completion notification from the database processing unit 34, the WWW server 10 transmits a logoff completion notification to the WWW browser 30 (step B1).
3). The WWW browser 30 receives the notification from the WWW server 10 and confirms the completion of the logoff.

[0075]

As described above, according to the information management system of the present invention, a client for requesting data retrieval from a database, a database server for retrieving relevant data from a database in response to a retrieval request,
An information management system including a server interposed between a client and a database server, wherein unique information is generated for access from the client, and data from the client to the database is generated based on the identification information. Since a logon state is continuously maintained by performing a search request, logon processing for the database server is not performed for each data search request, so that access to the database can be speeded up and security is ensured. Can be.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a schematic configuration of an information management system according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a functional configuration of a data search system according to the embodiment.

FIG. 3 is a diagram showing an example of information included in logon management information 38.

FIG. 4 is a WWW server 10 according to the embodiment of the present invention.
FIG. 2 is a block diagram schematically showing the configuration of the electronic circuit of FIG.

FIG. 5 is a timing chart showing the operation of the information management system according to the embodiment.

FIG. 6 is a flowchart for explaining logon processing in each unit until the client 12 logs on to the DB server 16;

FIG. 7 is a flowchart illustrating a data search process in each unit until the client 12 obtains desired data from the database 36.

FIG. 8 is a flowchart illustrating processing of each unit for extending a connection so as not to log off.

FIG. 9 is a flowchart illustrating processing of each unit for the client 12 to log off.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 ... WWW server 12 ... Client 14 ... Internet 16 ... DB server 18 ... LAN 20 ... WWW server 20a ... CGI20 22 ... DB search processing part 30 ... WWW browser 32 ... Display part 34 ... Database processing part 36 ... Database 38 ... Logon management Information 40 CPU 41 LAN interface unit 42 Communication unit 43 Storage device 45 Memory

Claims (5)

[Claims] 1. Information including a client for requesting data retrieval from a database, a database server for retrieving relevant data from the database in response to the retrieval request, and a server interposed between the client and the database server. A management system, wherein the database server generates, when the first access is made from the client via the server, unique identification information about the access, and notifies the client to the client via the server. Information generating means; identification information determining means for determining whether or not the identification information is valid when a data search request is made based on the identification information generated by the identification generating means; and identification by the identification information determining means. If the information is determined to be valid, the Data retrieval means for retrieving data according to the following. The server, in response to a data retrieval request from the client by the identification information generated by the identification information generating means, transmits identification information to the database server. An information management system comprising: search request means for making a search request every time; and continuously managing data search from the client to the database based on identification information. 2. The information management system according to claim 1, wherein said identification information determining means sets a valid time of the identification information generated by said identification information generating means to be finite. 3. The information management system according to claim 2, wherein a valid time of the identification information is extended according to an instruction from the client. 4. The database server has management information for registering identification information generated by the identification information generating means for each client and registering information for continuously accessing the database. The information management system according to claim 1, wherein: 5. A database server which receives a data search request output from a client connected to a network via an intermediary server and performs a database search, wherein a first access from the client via the intermediary server is performed. Means for generating unique identification information about access, means for notifying the client of the generated identification information via the intermediary server, and a request for data retrieval from the client by the identification information. A database server comprising: means for determining whether the identification information is valid when the identification information is valid; and means for performing a data search in response to a request when the identification information is determined to be valid. .