JPH08314856A - Distributed computing system - Google Patents

Abstract

(57) [Summary] [Purpose] To improve operability related to service use without compromising service security quality. [Configuration] Terminals 50 and 60 have means (external storage devices 70 and 80) for pre-registering connection information (server lists 71 and 81) to each server (database servers 10 and 20) having user information 31 and 41. , The user information 31 and 41 corresponding to the user name is input from the server connected based on the server lists 71 and 81 when the user name and password are input.
And the acquired user information and server list 71,
81, and user information reconfiguration functions 51 and 61 for reconfiguring new user information based on 81, and connection information of the programs 53 and 63 to be started, user information reconfiguration function 5
A distributed computing system, wherein the distributed computing system is obtained from user information reconfigured in steps 1 and 61.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a distributed computing system composed of a plurality of servers and a plurality of terminals (clients), and particularly, to improve the operability in using the service without degrading the security quality of the service. The present invention relates to a distributed computing system suitable for the above.

[0002]

2. Description of the Related Art A plurality of servers and a plurality of terminals,
In a distributed computing system that can be used by an unspecified large number, in order to prevent unauthorized use of services, for example, a magazine “Nikkei Electronics 1990 6-11”
(No. 502) "(1990, published by Nikkei BP), pages 130 to 138, the server manages user names, passwords, program names, and network addresses, and requests are made. Technology has been developed to check whether or not the user (operator of the client terminal) is qualified to use the program (service).

The connection technology between the user and each server is
(A) The user himself / herself determines the connection destination (server) according to the content of the service to be used, and operates the connection.
(B) A terminal and a processing server are fixedly determined and connected according to the type of business, or (c) the first connected server processes depending on the content of the business instructed by the user. There is a method of determining a distribution destination server of, and connecting a terminal to the determined distribution destination server.

In the technique (c), when the user inputs user connection information such as a user name and password, the terminal (client) is connected to the first server. When the user gives an instruction to start a business (start a business program), the first server connected refers to user information indicating a list of programs (services) available to each user according to the content of the business. , The execution authority is checked, the distribution destination server for processing is determined based on the check result, and the terminals are connected to the determined distribution destination server. Then, the corresponding processing is performed by the connected distribution destination servers.

However, in such a system in which the first connected server and the server that performs the actual business processing service or database service are different, if the first connected server fails or the power supply If it is not started due to disconnection, the process cannot be executed even if the distribution destination server that performs the process is started. Also, when modifying the user information, it is necessary to modify the user information in the server to which the terminal first connects and the user information in the distribution destination server that actually performs the process. Is complicated.

Further, as described in (a) above, when the user himself / herself determines the distribution destination server according to the content of the processing and performs the connection operation, the connection processing occurs for each connection destination, or the user connects to the connection destination for each business. It is necessary to keep in mind that the work load and the operation becomes complicated. Further, as described in (b) above, when the processing server is fixedly determined and connected to the type of business, a malicious user can execute processing beyond his / her authority. appear.
Also, in this way, when fixing the user used for the terminal, it is not possible to dynamically change the user or the connection destination, and when the user uses another terminal, the authority that the user can execute is Despite the existence, the work cannot be executed and the work can be restricted. As a result, when the terminal used by the user becomes unusable due to a failure or the like, there arises a problem that operability is deteriorated such that processing cannot be executed.

[0007]

The problem to be solved by the prior art is that in the conventional technology, the connection between the user and the server that provides the service desired by the user is simplified without degrading the quality of security. This is a point that cannot be done by operation. An object of the present invention is to provide a distributed computing system that solves the problems of the conventional techniques and that can improve the operability associated with service use without impairing the security quality of the service.

[0008]

To achieve the above object, the distributed computing system of the present invention comprises:
(1) A distributed computing system including a plurality of servers and a plurality of terminals, at least one of the plurality of servers having user information including at least a connectable user name and a program name usable by this user name In the terminal 50, 60, means (external storage device 70, 80) for pre-registering connection information (server list 71, 81) to each server (database server 10, 20) having user information 31, 41; When the user name and password are entered, the user information corresponding to this user name is acquired from the server (database server 10, 20) registered in the server list 71, 81, and the acquired user information and the registered connection information (server List 71, 81), and user information reconstructing functions 51, 61 for reconstructing new user information. , Start target program 53,6
The connection information of No. 3 is acquired from the user information reconfigured by the user information reconfiguration functions 51 and 61. (2) In the distributed computing system described in (1) above, the user information reconstruction functions 51, 61
Creates a program ready list in which at least the server name, connection string, and database owner information included in the connection information (server list 71, 81) are added to the program name included in the user information acquired from the server. It is characterized in that the program ready list created for the server is associated with the user name and password and the user information is reconfigured. (3) In the distributed computing system according to any one of (1) or (2) above, the terminals 50 and 60 are:
A menu display function 52, 62 for hierarchically displaying an operable program based on the user information reconfigured by the user information reconfiguration function 51, 61 is provided, and the program is started from the displayed menu. To do.

[0009]

In the present invention, all the servers in which the user information including the user name, the program name that can be operated by this user name, and the connection destination of the program are registered in the terminal in advance are connected to each server. Register with. Then, when the user of the terminal inputs the user name and password, the terminal refers to the connection information to the server,
It connects to each server having user information, acquires each user information corresponding to the input user from each server, and reconstructs this user information using the connection information. For example,
The information consisting of the program name, server name, connection string, and database owner is associated with the user name and password.

When a program activation request is input, the terminal determines whether this program is associated with the user name and password in the reconstructed user information, and checks the user's authority for this program. To do. For example, if not associated,
Outputs a message to that effect without connecting to the server. Thus, since the user information is dynamically constructed in each terminal and the connection information of the program can be acquired from this user information, the program can dynamically determine the connection destination.
As a result, the user can use the service of the distribution destination server having the execution authority, regardless of which terminal is used and when the server to be connected first is not operating. Further, since the program that is not associated with the user information is not connected to the server, the security quality is not deteriorated.

Further, by displaying dynamically operable programs in a menu in a hierarchical structure from the dynamically reconfigured user information, the user can perform the business in distributed processing without being aware of the server. be able to.
In addition, the program started from this program menu can specify the connection destination based on the reconfigured user information, and it is possible to eliminate duplicate input of connection information and duplicate definition. .

[0012]

Embodiments of the present invention will now be described in detail with reference to the drawings. FIG. 1 is a block diagram showing an embodiment of the configuration according to the present invention of the distributed computing system of the present invention. In this example, management of user information on multiple servers,
FIG. 1 shows an example of security by the terminal.
In the figure, 10 and 20 are database servers that provide database services, 50 and 60 are terminals (clients) used by users, and 90 is a line connecting each server to the terminal. In this example, there are 2 servers and 2 terminals, respectively.
Although only a stand is shown, it goes without saying that more servers and terminals are connected by the line 90.

The database servers 10 and 20 are provided with external storage devices 30 and 40, respectively, and the external storage devices 30 and 40 store a list of programs that each user can run, as shown in detail in FIG. User information 31, including
41. The terminals 50 and 60 include external storage devices 70 and 80, respectively.
2 has server lists 71 and 81 that list connection information of all the servers for which user information is registered, as shown in detail in FIG. In addition, the terminals 50 and 60 have user information reconstruction functions 51 and 61 that perform the operations according to the present invention.
And menu display functions 52 and 62, and business programs 53 and 63 that use the database servers 10 and 20.
have.

The user information reconstructing function 51 provides the user with
Enter the user name and password that are the server connection information. Then, it connects to the database servers 10 and 20 based on the input connection information and the server list 71.
Each user information corresponding to the user name input by the user is acquired from the user information 31, 41 of the connected database server 10, 20. The acquisition destination of the database corresponding to the server list (server connection information) 71 is added to each acquired user information to reorganize the user information.

The menu display function 52 refers to the user information reconfigured by the user information reconfiguration function 51 and displays a list of programs that the user can run. Then, the business program 53 started by the user confirms whether or not the own program is registered in the user information reorganized by the user information reconstructing function 51, and if registered, the self-program is reconstructed from the reconstructed user information. The connection information corresponding to the program is acquired and connected to the database server 10, 20. If the self program is not registered in the reorganized user information, the business program 53 cannot acquire the connection information from the user information reconstructing function 51, displays a message to that effect, and ends the process.

Next, the management of the user information 30, 41 on the database server 10, 20 and the reconstruction of the user information by the security technology of the terminal 50 will be described with reference to FIG. FIG. 5 is a flowchart showing an example of processing relating to the operation of reconstructing user information according to the present invention of the terminal in FIG. In this example, the user at the terminal 50 of FIG.
It is shown that the user information reconstruction function 51 is activated and a menu is displayed.

The user activates the user information reconstructing function 51 on the terminal 50 in FIG. 1 when starting the work. When the user name (USER_1) and the password, which are the connection information of the user, are input (step 101), the activated user information reconfiguration function 51 receives the user information registered server list 71 (server The list) is read (step 102). 1 from the server list 71 using the user connection information entered by the user
One server name (DB_SERVER1) is read out, and this server name is used to connect to the database server 10 (step 103).

At this time, if the database server 10 cannot be connected due to power failure or failure, step 1
When it is connected to the database server 10, the user information reconstructing function 51 determines that the user name (USER
_1) is passed to the database server 10. The database server 10 corresponds to this user name (USER_1) and reads the user information (PRO) read from the external storage device 30.
G01, PROG02) to the user information reconstruction function 51
(Step 104). Then, the user information reconfiguration function 51, the user information (PROG01, PROG02) passed from the database server 10, and the connection information to the database server 10 in the server list (server name: DB_SERVER1, connection character string T: SERVER).
A program ready list is created based on R01, database owner: DBA001) (step 1).
05).

Further, the user information reconstruction function 51 determines whether the acquisition of the user information from all the servers registered in the server list 71 has been completed (step 10).
6). If there is a server that is not yet connected to the server list 71, the database server 20 that is not yet connected is extracted from the list and the process returns to step 102. However, if the connection with all the servers is completed, each connected server As shown in FIG. 4, all the acquired user information is combined into one and the user information is reconfigured (step 107). In this way, when the user information is reconstructed, the menu display of the user-operable program is activated (step 108).

Next, the operation of checking the operation of the business program will be described with reference to FIG. FIG. 6 is a flowchart showing an operation example according to the present invention when the business program of the terminal in FIG. 1 is started. The business program 53 is activated by the user (step 201). The business program 53 may be a program started from the menu of step 108 in FIG. 5 or a program executed by the user by uniquely designating a file name. The business program 53 first makes an inquiry to the user information reconfiguration function 51 as to whether or not the own program is registered, in order to obtain connection information to the database server 10 (step 202).

The user information reconstructing function 51 confirms whether the inquired business program 53 is registered in the reconstructed user information (step 203). If it is registered, the process proceeds to step 205, but if it is not registered, information indicating that it is not registered is transmitted to the business program 53. When the business program 53 acquires this information indicating that it is not registered, it displays a message indicating that it does not have execution authority (step 204), and ends the processing. As described above, the business program 53 cannot be started in any way unless the user information reconstructing function 51 acquires the connection information.

In step 203, if the business program 53 (PROG01) is registered in the user information reconstructing function 51, the user information reconstructing function 51 determines the connection information to the database (server name: DB_SERVER).
1, the connection character string T: SERVER01, the database owner: DBA001) are passed to the business program 53 (step 205). The business program 53 acquires the connection information to the database server 10 from the user information reconstruction function 51 (step 206), and connects to the corresponding database server 10 based on this connection information (step 207). The database server 10 starts the service for the business program 53 (step 20).
8), the business program 53 is the database server 10
Connect to and work will start.

As described above with reference to FIGS. 1 to 6, in the distributed computing system of this embodiment,
Based on the dynamically reconfigured user information, the started program checks the operation confirmation of whether it is operable and acquires the connection information to the server, thereby achieving the security by the terminal. That is, the terminal side can manage the work that can be executed at that time without the user designating the connection destination and regardless of the operating status of the connection destination. Further, since the user does not need to input the connection information for each work, the user's terminal operation can be simplified.

Also, by displaying dynamically operable programs in a menu in a hierarchical structure from the dynamically reconfigured user information, the user can perform business without being aware of the server in distributed processing. be able to.
Further, the program started from this program menu can specify the connection destination based on the reconfigured user information, and it is possible to eliminate double input and double definition of the connection information. The present invention is not limited to the embodiments described with reference to FIGS. 1 to 6, and various modifications can be made without departing from the scope of the invention.

[0025]

According to the present invention, it is possible to improve the operability for using a service without degrading the security quality of the service.

[Brief description of drawings]

FIG. 1 is a block diagram showing an embodiment of a configuration according to the present invention of a distributed computing system of the present invention.

FIG. 2 is an explanatory diagram showing a detailed configuration example of a server list in FIG.

FIG. 3 is an explanatory diagram showing a detailed configuration example of user information in FIG.

FIG. 4 is an explanatory diagram showing a configuration example of user information reconfigured by a user information reconfiguration function in FIG.

5 is a flowchart showing a processing example relating to a user information reconstructing operation according to the present invention of the terminal in FIG. 1. FIG.

FIG. 6 is a flowchart showing an operation example according to the present invention when the business program of the terminal in FIG. 1 is started.

[Explanation of symbols]

10, 20: database server, 30, 40: external storage device, 31, 41: user information, 50, 60: terminal,
51, 61: user information reconstruction function, 52, 62: menu display function, 53, 63: business program, 70, 8
0: external storage device, 71, 81: server list, 90: connection line.

 ─────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Ho Okumura 12 890 Kashimada, Sachi-ku, Kawasaki-shi, Kanagawa Hitachi, Ltd. Information Systems Division (72) Inventor Tsunehiro Okazaki 3-2 Omorikita, Ota-ku, Tokyo No. 16 within Hitachi System Engineering Co., Ltd.

Claims (3)

[Claims] 1. A plurality of servers and a plurality of terminals,
In the distributed computing system, wherein at least one of the plurality of servers has user information including at least a connectable user name and a program name usable by the user name, wherein the terminal is each server having the user information. Means for registering connection information in advance, and when inputting a user name and password, acquires user information corresponding to the user name from the server connected based on the registered connection information, and acquires the acquired user information and the registration. A user information reconstructing unit that reconstructs new user information based on the connection information that was created, and obtains the connection information of the program to be started from the user information reconstructed by the user information reconstructing unit. Characterized distributed computing system. 2. The distributed computing system according to claim 1, wherein the user information reconstructing unit includes a program name included in the user information acquired from the server, a server name included in the connection information, and a connection character. Columns,
Create a program ready list with at least database owner information, associate the user name and password with the created program ready list created for all the above servers, and reconstruct the user information. A distributed computing system characterized by. 3. The distributed computing system according to claim 1, or 2.
The terminal includes means for hierarchically displaying a menu of the operable programs based on the user information reconstructed by the user information reconstructing means, and the program is activated from the displayed menu. Distributed computing system.