JP2005107810A - Intra-company deferred service providing system and server, and its program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an intra-company deferred service providing system for charging service charge matched with a service provided by a service providing server set in a service receiver side enterprise for preventing the tampering of processing history data showing provided service quantity. <P>SOLUTION: When a service request is transmitted from a user terminal 10, this service providing server 20 executes processing according to this, and returns the processing result. Furthermore, the service providing server 20 generates processing history data showing service quantity provided to the user terminal 10, and encrypts and stores the processing history data in a history data storing part, and transmits the stored encrypted processing history data to a charging server 30 in a predetermined timing such as the end of month. The charging server 30 decodes the processing history data, and checks the validity. Then, the charging server 30 prepares a bill on the basis of the processing history data when the processing history data are normal, and executes error processing in the other case. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention is provided by a service provider server in which a service provider company installs a service provider server in a service beneficiary company to perform processing such as natural language translation of text data, conversion of multimedia data, and synthesis. The present invention relates to an in-house stationary service providing system that charges a fee corresponding to a service.

  2. Description of the Related Art Conventionally, a service provider company lends a billing object to a service beneficiary company and charges a fee according to the usage record (pay-as-you-go billing). As a conventional technique of this type, for example, the following technique is known (for example, see Patent Document 1).

  The conventional technology described in Patent Document 1 is a technology that uses a billing object as a program. A service beneficiary company is provided with a use record management unit that manages the use record of the program. A billing device is installed in the company.

  The use record management unit installed in the service beneficiary company stores the use start time and use end time when the client uses the program in the log storage unit as processing history data. At a predetermined time every day, the processing history data for one day stored in the log storage unit is transmitted to the bill issuing device installed in the service provider side company.

The invoice issuing device in the service provider side company stores the processing history data for one day from the usage record management unit. When a certain date is reached every month, the billing fee for the previous month is calculated based on the processing history data, and an invoice is issued to the service beneficiary company.
JP 2002-73191 A

  By the way, in the conventional technology described above, in order to prevent processing history data from being falsified, when processing history data stored in the log storage unit is transmitted to the bill issuing device, it is encrypted before being transmitted. By doing so, the confidentiality on the network is increased, so that it is possible to prevent an unauthorized third party from falsifying the processing history data on the network.

  However, since the conventional technology described above stores the processing history data as it is without encryption when storing the processing history data in the log storage unit, the processing history data stored in the log storage unit There is a problem that it is difficult to prevent tampering. That is, there is a problem that it is difficult to prevent falsification of the processing history data stored in the log storage unit, which is performed by a service beneficiary or the like.

(Object of invention)
Accordingly, an object of the present invention is to make it very difficult to tamper with processing history data.

In order to achieve the above object, the first in-house stationary service providing system according to the present invention provides:
An in-house stationary service providing system including a user terminal, a service providing server, and a billing server,
The user terminal has a configuration for transmitting a service request including processing target data to the service providing server,
When the service providing server receives a service request including processing target data from the user terminal, the service providing server processes the processing target data according to the service request and returns the processing result to the user terminal. When processing according to the processing is completed, processing history data indicating the service amount provided in response to the service request is generated, the generated processing history data is processed, and the processed processing history data is processed as processing history data. Storing in the storage unit, and when the predetermined date and time is reached, the processing history data after processing stored in the history data storage unit is transmitted to the billing server,
When the billing server receives a bill issuing request including the processed history data after processing from the service providing server, the processing history data after processing included in the bill issuing request is processed. Returning to the state and checking its validity, if valid, it creates a bill based on the processing history data returned to the state before processing, and if not valid, it has a configuration to perform error processing To do.

  In this configuration, when processing history data is stored in the processing history data storage unit, the processing history data is stored after being subjected to processing such as encryption. Therefore, the processing stored in the processing history data storage unit Tampering with history data can be extremely difficult.

More specifically, the second in-house stationary service providing system according to the present invention is:
An in-house stationary service providing system including a user terminal, a service providing server, and a billing server,
The user terminal has a configuration for transmitting a service request including processing target data to the service providing server,
The service providing server is
A processing history data storage unit;
Data processing means for processing the processing target data according to the service request when a service request including processing target data is sent from the user terminal, and returning the processing result to the user terminal;
When the processing by the data processing means is completed, processing history data indicating the amount of service provided in the service request is generated and the generated processing history data is encrypted and stored in the processing history data storage unit. Processing history data management means for transmitting a billing issue request including encrypted processing history data stored in the processing history data storage unit to the accounting server when the date and time are reached,
The billing server is
Decryption means for decrypting the encrypted processing history data included in the bill issue request sent from the service providing server;
And a means for checking the validity of the processing history data decrypted by the decrypting means, generating a bill based on the processing history data if valid, and performing error processing if invalid. It is characterized by.

The third in-house stationary service providing system according to the present invention can prevent the processing history data stored in the processing history data storage unit from being altered more reliably. In the provision system,
The charge server generates a new encryption key at a predetermined cycle and transmits it to the service providing server, and manages a decryption key for decrypting the processing history data encrypted by the encryption key With
The processing history data management means has a configuration for encrypting the processing history data using the latest encryption key sent from the key management means,
The decryption means has a configuration for decrypting encrypted processing history data in a billing issue request sent from the service providing server using a decryption key managed by the key management means. And

  According to this configuration, since the encryption key used when encrypting the processing history data is changed at a predetermined cycle, tampering with respect to the processing history data stored in the processing history data storage unit can be prevented more reliably. It becomes possible.

The fourth in-house stationary service providing system according to the present invention is:
In the first to third in-house stationary service providing systems,
The service amount provided in response to the service request is a data amount of processing target data included in the service request.

  The first effect of the present invention is that tampering with processing history data can be made extremely difficult. The reason is that when processing history data is stored in the processing history data storage unit, it is stored after processing such as encryption. That is, since the confidentiality of the processing history data can be enhanced not only on the network but also on the processing history data storage unit, it is possible to make it extremely difficult to tamper with the processing history data.

  The second effect of the present invention is that tampering with the processing history data can be made more difficult. The reason is that the encryption key used when encrypting the processing history data is changed at a predetermined cycle.

  Next, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing an overall configuration of an embodiment of an in-house stationary service providing system according to the present invention.

  Referring to FIG. 1, the present embodiment includes a user terminal 10 and a service providing server 20 installed in a service beneficiary company, and a billing server 30 installed in the service provider company. Yes. The user terminal 10, the service providing server 20, and the billing server 30 are connected to each other via a network 100 such as an intranet and a network 200 such as the Internet.

  The user terminal 10 is an information processing apparatus such as a personal computer. The user terminal 10 has a function of accessing a data processing service provided on the network 100 by the service providing server 20. More specifically, the user terminal 10 transmits a service request including a service type, processing target data, a user ID, and a department ID to the service providing server 20, or returns from the service providing server 20 in response to the service request. And a function for receiving the processing result. Examples of data processing services provided by the service providing server 20 on the network 100 include various services such as a service for translating Japanese documents into English, a service for translating English documents into Japanese, and a format conversion processing service for video content. Includes service.

  The service providing server 20 is realized by a computer. The service providing server 20 performs data processing of the type indicated by the service type in the service request on the processing target data in the service request sent from the user terminal 10, and the processing result is sent to the requesting user terminal. 10, a function of encrypting and managing processing history data indicating the service amount provided in response to a service request, a function of transmitting the managed processing history data to the accounting server 30, and the like.

  FIG. 2 is a block diagram showing a configuration example of the service providing server 20, which includes a transmission / reception unit 21, a data processing unit 22, a processing history data management unit 23, a processing history data storage unit 24, and a recording medium K1. Has been.

  The transmission / reception means 21 has a function of exchanging data via the networks 100 and 200.

  The data processing unit 22 performs a process of the type indicated by the service type in the service request on the processing target data in the service request sent from the user terminal 10, and the process result is sent to the requesting user terminal. 10 to reply to

  The processing history data management means 23 is stored in the key storage unit 231 and a function for creating processing history data indicating the service amount provided for the service request every time the data processing means 22 performs processing for the service request. A function for storing the processing history data encrypted using the encryption key stored in the processing history data storage unit 24 or the encrypted processing history data stored in the processing history data storage unit 24 to the accounting server 30 Each time a new encryption key / key ID pair is sent from the billing server 30, the encryption key / key ID pair stored in the key storage unit 231 is changed to the new pair. Has a function to replace.

  FIG. 3 is a diagram showing an example of the contents of the processing history data storage unit 24. The encryption includes a key ID, a processing start date and time, a processing end date and time, a data amount of processing target data, a service type, a user ID and a department ID. Stored processing history data is stored. However, the key ID is not encrypted, and the other items are encrypted with the encryption key specified by the key ID in the same row. For example, the processing history data on the first and second lines in FIG. 3 are both encrypted with the encryption key specified by the key ID “Kid1”. Also, for example, the processing history data in the second row in FIG. 3 is processing history data for service requests sent from users with user IDs and department IDs “Uid2” and “Bid2”, respectively. , The end dates and times are “T3” and “T4”, respectively, and the data amount and service type of the processing target data included therein are “D2” and “S2”, respectively.

  The recording medium K1 is a disk, semiconductor memory, or other recording medium, and stores a program for causing the computer to function as a service providing server. This program is read by a computer and the operation thereof is controlled to realize a transmission / reception means 21, a data processing means 22, and a processing history data management means 23 on the computer.

  The accounting server 30 is realized by a computer. The billing server 30 has a function of creating and issuing a bill based on processing history data sent from the service providing server 20, a function of transmitting a new encryption key to the service providing server 20, and the like.

  For example, as shown in FIG. 4, the accounting server 30 having such a function includes a transmission / reception unit 31, a decryption unit 32, a billing unit 33, a key management unit 34, a key storage unit 35, and a recording medium K2. And.

  The transmission / reception means 31 has a function of exchanging data via the network 200.

  The key management unit 34 has a function of transmitting a pair of a new encryption key and key ID to the service providing server 20 at a predetermined cycle, and a decryption used when decrypting the processing history data encrypted by the encryption key. It has a function of storing a pair of a key and the key ID in the key storage unit 35.

  The decrypting means 32 has the encrypted processing history data sent from the service providing server 20 having the same decryption key registered in the key storage unit 35 (the same key ID as the key ID in the processing history data). A decryption key).

  The billing means 33 has a function for checking the validity of the processing history data decrypted by the decrypting means 32, a function for creating and issuing a bill based on the processing history data if it is valid, a processing history If the data is not valid, it has a function to perform error processing.

  The recording medium K2 is a disk, a semiconductor memory, or other recording medium, and stores a program for causing the computer to function as the accounting server 30. This program is read by a computer, and the operation is controlled to realize a transmission / reception means 31, a decryption means 32, a claim means 33, and a key management means 34 on the computer.

[Description of Operation of Embodiment]
Next, the operation of the present embodiment will be described in detail.

  First, an operation when the user of the user terminal 10 uses a service provided by the service providing server 20 will be described.

  Referring to FIG. 5, the user uses the user terminal 10 to access the service providing server 20 (step S51). Thereby, the service providing server 20 transmits a menu screen 61 as shown in FIG. 6 to the user terminal 10 (step S52).

  The menu screen 61 shown in FIG. 6 includes a selection field 62 for selecting a service type to be used, an input field 63 for inputting a file name of a file storing processing target data, and an input field for a user ID. 64, a department ID input field 65, and a send button 66 are provided. The user selects a service type to be used using the selection column 62, inputs necessary items in the input columns 63 to 65, and then operates the transmission button 66. Thereby, the user terminal 10 transmits a service request including the service type, processing target data, user ID, and department ID to the service providing server 20 (step S53). Now, for example, if the user selects Japanese-English translation in the selection field 62 and inputs the file name “F1”, the user ID “Uid2”, and the department ID “Bid2” in the input fields 63, 64, 65, respectively. The user terminal 10 receives the service request including the data stored in the file with the file name “F1” as the processing target data and including the service type “Japanese-English translation”, the user ID “Uid2”, and the department ID “Bid2”. It is transmitted to the service providing server 20.

  When the data processing means 22 in the service providing server 20 receives the service request from the user terminal 10 via the transmission / reception means 21, the data processing means 22 performs Japanese-English translation processing on the processing target data, and the processing result is sent to the requesting user. It returns to the terminal 10 (steps S54 and S55). In the user terminal 10, the processing result returned from the service providing server 20 is displayed and stored (step S56).

  On the other hand, the processing history data management unit 23 in the service providing server 20 creates processing history data when the processing of the data processing unit 22 is completed (step S57). This processing history data is stored in the key storage unit 231 at the current time, the service type “Japanese-English translation” being requested for processing, the user ID “Uid2” and the department ID “Bid2”, the amount of data to be processed. The key ID, the processing start date and time of the English-Japanese translation process, and the processing end date and time of the English-Japanese translation process are included.

  Thereafter, the processing history data management unit 23 encrypts the processing history data created in step S57 using the encryption key stored in the key storage unit 321 (step S58), and the encrypted processing history data is processed into processing history data. It is additionally stored in the storage unit 24 (step S59). However, when the process history data is encrypted in step S58, the key ID is not encrypted. The above is the processing when the user uses the service provided by the service providing server 20.

  Next, an operation for updating an encryption key used when processing history data is encrypted will be described with reference to FIG.

  The key management means 34 in the accounting server 30 generates an encryption key at a predetermined cycle (for example, every day, once in the middle of the night), and generates a key ID that uniquely identifies the encryption key (step S71). Thereafter, the key management unit 34 transmits the pair of the encryption key and the key ID generated in step S71 to the service providing server 20 (step S72), and further, the process encrypted with the key ID and the encryption key. A pair with a decryption key for decrypting the history data is stored in the key storage unit 35 (step S73). Depending on the encryption method used, the encryption key and the decryption key may be the same or different.

  On the other hand, when the processing history data management unit 23 in the service providing server 20 receives the pair of the encryption key and the key ID sent from the charging server 30 via the transmission / reception unit 21, it is stored in the key storage unit 231. The pair of the encryption key and the key ID that has been received is replaced with the pair of the encryption key and the key ID received this time (step S74). The above is the processing for updating the encryption key.

  Next, the operation when the administrator of the service beneficiary company refers to the processing history data will be described with reference to FIG. In the following description, it is assumed that the administrator uses the user terminal 10.

  When referring to the processing history data, the administrator accesses the service providing server 20 from the user terminal 10 (step S81). Thereby, the service providing server 20 transmits the menu screen 61 to the user terminal 10 (step S82).

  Accordingly, a menu screen as shown in FIG. 6 is displayed on the display unit (not shown) of the user terminal 10. When the menu screen is displayed, the administrator checks the selection field corresponding to “reference processing history data” in the selection field 62 and then operates the send button 66. Thereby, the user terminal 10 transmits a processing history data reference request to the service providing server 20 (step S83).

  When the processing history data management unit 23 in the service providing server 20 receives the processing history data reference request from the user terminal 10 via the transmission / reception unit 21, the processing history data management unit 23 stores each processing history data stored in the processing history data storage unit 24. Extraction (step S84), a decryption request including each extracted processing history data is transmitted to the accounting server 30 (step S85).

  When receiving the decryption request from the user terminal 10 via the transmission / reception unit 31, the decryption unit 32 in the billing server 30 decrypts each processing history data included in the decryption request (step S86), and the decryption result is sent to the service providing server. It returns to 20 (step S87). Here, the process of step S86 will be described in detail as follows. First, focus on the first processing history data in the processing history data included in the decryption request. Next, the key storage unit 35 is searched using the key ID in the processing history data of interest as a key, and a decryption key paired with the key ID is acquired. Thereafter, using the acquired decryption key, the processing history data of current attention is decrypted. However, the key ID is not decrypted. Next, paying attention to the second processing history data, the same processing is performed. The above-described processing is performed on all processing history data included in the decryption request. The above is the details of the process performed in step S86.

  When the processing history data management means 23 in the service providing server 20 receives the decryption result from the accounting server 30 via the transmission / reception means 21, it transmits it to the user terminal 10 that made the reference request (step S88).

  As a result, the user terminal 10 displays a list of processing history data sent from the service providing server 20 on the display unit (step S89). The above is the processing when referring to the processing history data.

  Next, the operation at the time of charging will be described with reference to FIG. The process shown in the flowchart of FIG. 9 is performed at a predetermined timing such as the end of the month, for example.

  The processing history data management means 23 in the service providing server 20 extracts each processing history data encrypted from the processing history data storage unit 24 at a predetermined timing such as the end of the month (step S91). A bill issuing request including each processing history data is transmitted to the accounting server 30 (step S92).

  When receiving the bill issuing request from the service providing server 20 via the transmitting / receiving unit 31, the decrypting unit 32 in the billing server 30 decrypts each processing history data included therein and sends the decrypted result to the claiming unit 33. Pass (step S93).

  The billing unit 33 checks the validity of each decoded processing history data (step S94). In this step S94, for example, the validity is checked by checking whether or not the value of each item in the processing history data is within a range determined to be valid. That is, if the processing history data is not encrypted using a valid encryption key, the decryption result will not make sense, so whether or not falsification has been performed as described above. Can be determined. In addition, when checking the validity, it is further checked whether there is a contradiction between the start date and time and the end date and time of the process, or is indicated by the expected processing time and processing history data based on the data amount and the service type. You may make it investigate whether the difference with processing time (= end date-time-start date-time) is in tolerance level.

  The billing unit 33 performs the process of the next step S95 only when it is determined that all the processing history data included in the bill issuing request is valid. If it is determined that it is not valid, for example, a message indicating that there is a possibility of falsification on the display unit (not shown), the name of the company in which the service providing server 20 is installed, and processing after decryption Display errors including a list of history data.

  In step S95, a service fee is calculated based on each processing history data included in the invoice issue request (step S95). Various methods can be used as the service charge calculation method. For example, the total value of the data amount in each processing history data included in the billing request is obtained, and the obtained total value and unit. The method of calculating the service charge by multiplying the charge per data amount, the number of processing history data included in the invoicing request (number of processed service requests) and the charge per service request It is possible to adopt a method of calculating a service fee by accumulating In addition, there is a method of setting a charge per unit data amount for each service type and a charge per service request, calculating a service charge for each service type, and making the total charge for the service charge. It can also be adopted.

  Thereafter, the billing means 33 transmits a bill including the service fee calculated in step S95 to the bill receiving department of the service beneficiary company by e-mail or the like (step S96).

[Other Embodiments]
In the above-described embodiment, the service charge is charged to the service beneficiary company in a lump. However, in the billing unit 33, based on the user ID and department ID included in the processing history data. A bill may be issued for each user or for each department.

It is a block diagram which shows the whole structure of embodiment of this invention. 3 is a block diagram illustrating a configuration example of a service providing server 20. FIG. 4 is a diagram illustrating an example of contents of a processing history data storage unit 24. FIG. 3 is a block diagram illustrating a configuration example of a billing server 30. FIG. It is a flowchart which shows the process example in case the user terminal 10 utilizes the service which the service provision server 20 provides. It is a figure which shows an example of a menu screen. It is a flowchart which shows the process example when changing the encryption key which the service provision server 20 uses. It is a flowchart which shows the process example when referring process history data. It is a flowchart which shows the process example at the time of charge.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... User terminal 20 ... Service provision server 21 ... Transmission / reception means 22 ... Data processing means 23 ... Processing history data management means 231 ... Key storage part 24 ... Processing history data storage part K1 ... Recording medium 30 ... Billing server 31 ... Transmission / reception means 32 ... Decryption means 33 ... Claiming means 34 ... Key management means 35 ... Key storage unit K2 ... Recording medium 100, 200 ... Network

Claims (8)

An in-house stationary service providing system including a user terminal, a service providing server, and a billing server,
The user terminal has a configuration for transmitting a service request including processing target data to the service providing server,
When the service providing server receives a service request including processing target data from the user terminal, the service providing server processes the processing target data according to the service request and returns the processing result to the user terminal. When processing according to the processing is completed, processing history data indicating the service amount provided in response to the service request is generated, the generated processing history data is processed, and the processed processing history data is processed as processing history data. Storing in the storage unit, and when the predetermined date and time is reached, the processing history data after processing stored in the history data storage unit is transmitted to the billing server,
When the billing server receives a bill issuing request including the processed history data after processing from the service providing server, the processing history data after processing included in the bill issuing request is processed. Returning to the state and checking its validity, if valid, it creates a bill based on the processing history data returned to the state before processing, and if not valid, it has a configuration to perform error processing In-house stationary service provision system. In the in-house stationary service providing system according to claim 1,
An in-house stationary service providing system characterized in that the processing for the processing history data is encryption for the processing history data. An in-house stationary service providing system including a user terminal, a service providing server, and a billing server,
The user terminal has a configuration for transmitting a service request including processing target data to the service providing server,
The service providing server is
A processing history data storage unit;
Data processing means for processing the processing target data according to the service request when a service request including processing target data is sent from the user terminal, and returning the processing result to the user terminal;
When processing by the data processing means is completed, processing history data indicating the service amount provided for the service request is generated and the generated processing history data is encrypted and stored in the processing history data storage unit, Processing history data management means for transmitting a billing issue request including the encrypted processing history data stored in the processing history data storage unit to the billing server when a predetermined date and time is reached,
The billing server is
Decryption means for decrypting the encrypted processing history data included in the bill issue request sent from the service providing server;
A billing unit that checks the validity of the processing history data decrypted by the decrypting unit, creates a bill based on the processing history data if it is valid, and performs error processing if it is invalid In-house stationary service providing system characterized by In the in-house stationary service providing system according to claim 3,
The charge server generates a new encryption key at a predetermined cycle and transmits it to the service providing server, and manages a decryption key for decrypting the processing history data encrypted by the encryption key With
The processing history data management means has a configuration for encrypting the processing history data using the latest encryption key sent from the key management means,
The decryption means has a configuration for decrypting encrypted processing history data in a billing issue request sent from the service providing server using a decryption key managed by the key management means. In-house deferred service provision system. The in-house stationary service providing system according to any one of claims 1 to 4,
An in-house stationary service providing system, wherein the service amount provided in response to the service request is a data amount of processing target data included in the service request. In the in-house stationary service providing system according to any one of claims 1 to 5,
The user terminal and the service providing server are installed in a service beneficiary company,
An in-house stationary service providing system, wherein the billing server is installed in a service provider side company. A processing history data storage unit;
Data processing means for processing the processing target data according to the service request when a service request including processing target data is sent from the user terminal, and returning the processing result to the user terminal;
When the processing by the data processing means is completed, processing history data indicating the amount of service provided in the service request is generated and the generated processing history data is encrypted and stored in the processing history data storage unit. And a processing history data management means for transmitting a billing issue request including the encrypted processing history data stored in the processing history data storage unit to the billing server when the date and time are reached. Service providing server. A computer equipped with a processing history data storage unit
Data processing means for processing the processing target data in accordance with the service request when a service request including processing target data is sent from the user terminal, and returning the processing result to the user terminal;
When the processing by the data processing means is completed, processing history data indicating the amount of service provided in the service request is generated and the generated processing history data is encrypted and stored in the processing history data storage unit. A program for functioning as processing history data management means for transmitting a billing issue request including encrypted processing history data stored in a processing history data storage unit to a billing server when the date and time comes.

Images