JP2005242749A - Computer system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide technology for an ISP to totally improve usability. <P>SOLUTION: Each computer device realizing the constitution of each individual user is locally connected to a management server, and the computer device is protected from illegal accesses, viruses, etc. by a network apparatus. Since the computer device is connected to a client terminal through a repeater via a secure network, the computer device is arranged on a safe place. A user can use the computer device through the client terminal as if the user himself (or herself) owns a PC. Since the client terminal can be functioned only by minimum constitution, low cost and easy management can be attained. Since the management server stores contents into a shared disk, the contents can be used by the computer device in response to an instruction from the client terminal. Only contents preferable for the user can be provided by setting access right on the basis of a user's attribute and preference. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a technique used when configuring a computer device set for each user in an ISP (Internet Service Provider) center and performing remote access to the computer device.

  Conventionally, in order to use the Internet, a user has to purchase a personal computer, install necessary software, connect necessary equipment, and make a contract with an ISP. In order to prepare a broadband environment, it may be necessary to make a contract with a telecommunications carrier other than the ISP. Also, in order to deal with computer viruses (including worms) and unauthorized access from the Internet, software with anti-virus and firewall functions is installed, and communication devices such as routers with such functions are installed. There is a need to. In addition, many defects in operating systems and application programs have been reported and must be updated accordingly.

  In order to use the Internet in this way, considerable cost and labor must be spent, which is very burdensome for beginners. On the other hand, a significant factor in the recent widespread use of mobile phones is the fact that access to the Internet is very easy.

  On the other hand, from the viewpoint of reducing TCO (Total Cost of Ownership), a concept of a thin client has also existed in a company system. That is, a server having sufficient processing capacity and storage capacity is prepared and used in combination with a client terminal having the minimum necessary processing capacity and storage device. For example, in Sun Ray Hot Desk technology of Sun Microsystems, Inc., a client terminal having only a Sun Ray 1 Enterprise Appliance interface with a keyboard, mouse, display device, etc. and a network interface with the server, Sun Ray Enterprise Server. It comes to use. In other words, this technology is a technology that combines a server corresponding to a former large host computer and a client terminal corresponding to a console having only a function of connecting to the large host computer and a display / input function. Although such a technique certainly reduces the burden on those who use the client terminal, these techniques are not necessarily widely used. In addition, a function that meets the demands of individual users who are becoming complicated cannot be provided by a server alone.

  There are also many techniques for setting or determining file access authority in accordance with the user. For example, Japanese Patent Application Laid-Open No. 2003-280990 discloses the following technique. The electronic data management server has an access control list (ACL) that associates user attribute information (organizational post information, job authority range, etc.) and access type (eg, reference / revise / update / delete) for each document. In response to an access request from a client, access control is performed by controlling access to a document by ACL. As described above, since the ACL is referred to by the user attribute information, the user attribute can be directly linked to the access right, and the burden of reviewing the group configuration, which has been conventionally required when changing the organization, is reduced. However, the environment assumed by this technology is a general LAN (Local Area Network) environment, and the client is a normal personal computer or the like. Further, it is used as a premise in a specific group such as an employee, and there is no point of view for taking measures against beginners, reducing TCO, and considering user convenience.

Further, Japanese Patent Laid-Open No. 2002-245259 discloses the following technique. In other words, in the present technology, data is stored in a locked private room in a virtual space in a lump, and can be accessed, retrieved, and freely used, viewed, and viewed when necessary. In addition, the contents that are automatically sent to the digital delivery box in the user's personal space in the server, some parts can be viewed and used free of charge Paid unlocking is possible. In addition, the digital home delivery box automatically receives daily, weekly, and monthly periodicals, news, electronic publications, music, video, Digital contents such as animation and games are selected and classified and stored in a predetermined folder in the space. However, the service that stores data in the server is the subject of the present technology, and no special consideration is given to the client terminal, and the total convenience of the user is not necessarily improved.
"Sun Ray 1 Enterprise Appliance Just the Facts", Sun Microsystems, September 1999 JP 2003-280990 A JP 2002-245259 A

  As described above, the conventional technology described above cannot always improve usability in total.

  Therefore, an object of the present invention is to provide a technology for ISP for improving usability in total.

  In the present invention, a computer device and a center server that realize a user-specific configuration are locally connected, and the computer device and the center server are connected to the Internet via a network device having a firewall function and a virus removal function. It is a computer system. Also, a relay device that communicates data related to the external input / output interface of the computer device with the client terminal, and the relay device is connected to the relay device via a secure network, and the data received from the relay device is output in a format suitable for the output device. And a client terminal that outputs to the apparatus and transmits input data from the input apparatus to the relay apparatus. The center server corresponds to a preference data storage unit for storing preference data for each user of the client terminal, a user attribute data storage unit for storing user attributes for each user of the client terminal, and attribute data. Shared disk for storing attached content data, preference data stored in the preference data storage unit, user attributes stored in the user attribute data storage unit, and attribute data of each content data The access authority setting means for setting the access authority of each user to the content data stored on the shared disk, and the access management means for managing access to the content data stored on the shared disk. Note that when a specific user of a specific client terminal instructs the use of specific content data, a specific client terminal that realizes a configuration for a specific user of the specific client terminal and is connected via a relay device The computer device accesses the specific content data according to the instruction, and the access management means confirms the access authority set corresponding to the specific content data according to the access by the specific computer device. Then, it is determined whether or not the computer device can access the specific content data stored in the shared disk.

  The computer device that realizes the individual configuration as described above is connected locally together with the center server and is connected to the Internet, but is protected from unauthorized access and viruses by network devices. In addition, since it is connected to a client terminal via a relay device but via a secure network, the computer device is placed in a safe place, and the user hardly cares about security. . Further, the computer device has an individual configuration, and the user can use the computer device via the client terminal as if holding the personal computer. The client terminal may have a minimum configuration for realizing the input / output interface of the computer device, and is inexpensive and easy to handle as hardware. In other words, even beginners can handle it very easily, improving usability. Further, the center server placed in a secure state stores content data (including moving images, still images, and executable programs) on a shared disk, and a computer device in accordance with instructions from a client terminal However, even if all users can use it in the same way, it does not necessarily lead to an improvement in convenience. In the present invention, by setting access authority based on user attributes and preferences, only content data that is more preferable to the user is provided. As described above, according to the present invention, the user can efficiently and easily access useful data while ensuring safety. Furthermore, the user only needs to manage client terminals that are easy to maintain, and the burden on the user is reduced. Furthermore, since a computer device that realizes its own configuration can be used wherever it is, convenience in this respect is also increasing. That is, a computer system in the ISP that improves the total usability is realized.

  The access authority setting means described above generates distributable data including at least a partial list of accessible content data for each user based on the set access authority, and You may make it transmit in the aspect which can be accumulate | stored in the computer apparatus which implement | achieves the structure for this. By preparing distributable data including a list in this way, user convenience is further improved. However, for example, a configuration in which a shortcut to content data accessible on the desktop is automatically arranged may be used.

  Further, the center server described above stores the identification data of the content data accessed by the computer device or transmitted to the computer device in response to the user instruction from the client terminal in the distribution log storage unit. The access authority setting means described above may generate the distributable data with reference to the distribution log storage unit. In this way, there is no need to recommend content / data that has already been used again, which increases convenience for the user.

  Further, the content data may include update data of at least one of the operating system, driver, and application program of the computer device. That is, the user's intention can be reflected in the update of the computer apparatus. Therefore, it can be determined that the update patch required by some users is not applied.

  It should be noted that the preference data can be updated with reference to the distribution log storage unit, or can be used in various ways such as grid computing using an empty computer device.

  A program executed in the center server according to the present invention can be created, and this program is stored in a storage medium or storage device such as a flexible disk, a CD-ROM, a magneto-optical disk, a semiconductor memory, and a hard disk. Is done. Moreover, it may be distributed as a digital signal via a network or the like. The intermediate processing result is temporarily stored in a storage device such as a memory.

  According to the present invention, usability can be improved in the ISP system in total.

  FIG. 1 shows an example of a computer system according to an embodiment of the present invention. The ISP center 1 managed and operated by the ISP is connected to the Internet 100, a network connection device 10 having a firewall function 11 and an anti-virus function 12, and a mail server for the user of the ISP connected to the Internet 100. 30, a plurality of computer devices 40 connected to the network connection device 10, a management server 60 connected to the network connection device 10, and a relay device 50 connected to the computer device 40 and further connected to the public line network 200 or the like Is included. The network connection device 10 is, for example, a router, and has a firewall function 11 and an anti-virus function 12, and performs unauthorized access from the Internet 100 and removal of computer viruses that attempt to enter from the Internet 100, thereby enabling the computer device 40 and the management server 60 can be simplified. The mail server 30 manages the mail box 31 and manages mail addressed to the user of the ISP. This is the same as the conventional one. Innumerable web (Web) servers 101 exist in the Internet 100, and various data are distributed. The computer device 40 and the management server 60 of the ISP center 1 can access other computers connected to the Internet 100 via the network connection device 10 and download data.

  The computer device 40 in the ISP center 1 is a computer having the same functions as, for example, a normal personal computer. That is, a CPU (Central Processing Unit), a main memory, a hard disk drive (HDD), a display control unit for displaying on a display device, a communication control unit for connecting to the network connection device 10, and the like. Since the user cannot directly use a flexible disk, CD, or DVD, it is not necessary to provide these drive devices, but it is necessary to prepare them for use in ISP maintenance. Further, the computer device 40 has a video output connector, a microphone / speaker connector, a mouse connector, a keyboard connector, and a USB (Universal Serial Bus) connector, and a relay device 50 via a cable connected to them. It is connected to the. It should be noted that the user has a hardware configuration such as a CPU type, a main memory capacity, a hard disk drive capacity, a display control unit capability, etc. for the computer device 40 that the user intends to use remotely, an OS to be installed, and an application. A software configuration such as a program can be designated, and the computer device 40 suitable for its intended use can be held in the ISP center 1. However, the computer device 40 may be a rental contract or a lease contract, and the ownership form differs depending on the ISP service method.

  The relay device 50 has a function of connecting to a secure network 200 such as the public line network 200. However, in some cases, another network connection device may be installed between the relay device 50 and the public line network 200. In this case also, it is assumed that the network device and the relay device 50 are integrated. The public line network 200 may be another network that is not the public line network 200, but is basically a secure network.

  A client terminal 301 is connected to the public line network 200 at the user home 300. As will be described in detail later, the client terminal 301 is a device having only an input / output interface with the computer device 40, and is connected to a display 302, a mouse 303, a keyboard 304, a printer 305, and various drives 306. Yes. However, the printer 305 and the various drives 306 are connected via USB, and whether or not to connect depends on the user's selection. Also, other USB devices can be connected. The client terminal 301 is not limited to the one installed in the user's home 300, and may be a portable client terminal that incorporates an input device such as a keyboard 304 and a mouse 303 and an output device such as a display 302. Good.

  Although the functional configuration of the management server 60 will be described later, the management server 60 has a shared disk 70 in which the content data 71, the access authority data 72, and the content attribute data 73 are stored in pairs, and the user The preference data storage unit 80, the user attribute data storage unit 90 for storing user attribute data, what content data is distributed to which user, and which user (computer device 40) has what content It manages a distribution log data storage unit 95 that stores log data on whether access has been made.

  FIG. 2 shows a functional block diagram of the management server 60 and the like. The management server 60 includes a data registration unit 601 for performing user attribute registration and preference data registration in response to an access from the computer device 40, a preference data storage unit 80, a user attribute data storage unit 90, and a shared disk 70, an access authority setting unit 603 that sets the access authority for each content / data of each user, and an access management unit 605 that determines whether access is possible according to the access to the shared disk 70 from the computer device 40. And a content data acquisition unit 602 that acquires content data from another computer connected to the Internet 100 and stores it in the shared disk 70, for example. For example, the person in charge of the ISP registers the content attribute data 73 for the content data 70 acquired by the content data acquisition unit 602 and stored in the shared disk 71. Then, the access authority setting unit 603 generates access authority data 72 and stores it in the shared disk 70. The access authority setting unit 603 grants access permission to the corresponding user when, for example, new content data 71 is registered in the shared disk 70 or when a new user registers preference data or user attribute data. A notification processing unit 604 for transmitting an e-mail for notifying a list of the content data and the like. The notification processing unit 604 may perform processing with reference to the distribution log data storage unit 95. Further, the access management unit 605 stores log data indicating that access from the computer device 40 or content / data distribution has been performed in the distribution log data storage unit 95.

  As shown in FIG. 3, the management server 60 includes a memory 2501, a CPU 2503, a hard disk drive (HDD) 2505, a display control unit 2507 connected to the display device 2509, and a drive device 2513 for the removable disk 2511. A device 2515 and a communication control unit 2517 for connecting to a network are connected by a bus 2519. An operating system (OS: Operating System) and an application program for performing processing in the present embodiment are stored in the HDD 2505, and are read from the HDD 2505 to the memory 2501 when executed by the CPU 2503. If necessary, the CPU 2503 controls the display control unit 2507, the communication control unit 2517, and the drive device 2513 to perform necessary operations. Further, data in the middle of processing is stored in the memory 2501 and stored in the HDD 2505 if necessary. In the embodiment of the present invention, an application program for realizing the above functions is stored in the removable disk 2511 and distributed, and installed in the HDD 2505 from the drive device 2513. In some cases, the HDD 2505 may be installed via a network such as the Internet and the communication control unit 2517. Such a computer realizes various functions as described below by organically cooperating the hardware such as the CPU 2503 and the memory 2501 described above with the OS and necessary application programs. Note that the computer device 40 may not have some of the computers shown in FIG. 3, but has the same basic configuration.

  FIG. 4 shows an example of a functional block diagram of the relay device 50. The relay device 50 includes, as hardware, an audio interface 508 connected to the audio (microphone / speaker) interface of the computer device 40, a mouse interface 509 connected to the mouse interface of the computer device 40, and the computer device 40. A keyboard interface 510 connected to the keyboard interface, a display interface 511 connected to the display (video) interface of the computer device 40, and an interface to the public line network 200 or a device connected to the public line network 200 A network interface 512, and a USB interface 513 connected to the USB interface of the computer device 40. As drivers corresponding to hardware, there are an audio driver 502 corresponding to the audio interface 508, a mouse driver 503 corresponding to the mouse interface 509, a keyboard driver 504 corresponding to the keyboard interface 510, and a display interface 511. A corresponding display driver 505, a network driver 506 corresponding to the network interface 512, and a USB driver 507 corresponding to the USB interface 513 are included. The OS (Operating System) portion includes an input / output control unit 501.

  The audio data output by the computer device 40 is output to the audio driver 502 via the audio interface 508, and the audio driver 502 outputs data after predetermined processing to the input / output control unit 501. The input / output control unit 501 adds identification information indicating that it is audio data to the audio data received from the audio driver 502 and constructs a packet in accordance with a predetermined protocol, and sets the network driver 506 and the network interface 512. To the client terminal 301. When receiving audio data from the client terminal 301 via the network interface 512 and the network driver 506, the input / output control unit 501 outputs the audio data to the audio driver 502 based on the identification information indicating the audio data. The audio driver 502 outputs data after predetermined processing to the audio interface 508, and the audio interface 508 further outputs to the computer device 40.

  When the input / output control unit 501 receives mouse data from the client terminal 301 via the network interface 512 and the network driver 506, the input / output control unit 501 sends the mouse data to the mouse driver 503 based on the identification information indicating that the data is mouse data. Is output. The mouse driver 503 outputs data after predetermined processing to the mouse interface 509, and the mouse interface 509 further outputs to the computer device 40.

  When the input / output control unit 501 receives keyboard data from the client terminal 301 via the network interface 512 and the network driver 506, the input / output control unit 501 sends the keyboard data to the keyboard driver 504 based on the identification information indicating that the data is keyboard data. Is output. The keyboard driver 504 outputs data after predetermined processing to the keyboard interface 510, and the keyboard interface 510 further outputs to the computer device 40.

  The video data output from the computer device 40 is output to the display driver 505 via the display interface 511, and the display driver 505 outputs data after predetermined processing to the input / output control unit 501. The input / output control unit 501 adds identification information indicating that it is video data to the video data received from the display driver 505 and constructs a packet according to a predetermined protocol. The data is transmitted to the client terminal 301 via the interface 512.

  The USB data output from the computer device 40 is output to the USB driver 507 via the USB interface 513, and the USB driver 507 outputs data after predetermined processing to the input / output control unit 501. The input / output control unit 501 adds identification information indicating that it is USB data to the USB data received from the USB driver 507 and constructs a packet in accordance with a predetermined protocol, and sets the network driver 506 and the network interface 512. To the client terminal 301. When the input / output control unit 501 receives USB data from the client terminal 301 via the network interface 512 and the network driver 506, the input / output control unit 501 outputs the USB data to the USB driver 507 based on identification information indicating that the data is USB data. The USB driver 507 outputs data after predetermined processing to the USB interface 513, and the USB interface 513 further outputs to the computer device 40.

  Next, an example of a functional block diagram of the client terminal 301 is shown. The client terminal 301 includes, as hardware, a voice interface 3018 connected to a microphone / speaker (not shown) (or a built-in microphone / speaker), a mouse interface 3019 connected to the mouse 303, and a keyboard / keyboard of the keyboard 304. A keyboard interface 3020 connected to the interface, a display interface 3021 connected to the display 302, a network interface 3022 that is an interface to the public network 200, and a USB interface connected to the printer 305 and various drives 306 3023. As drivers corresponding to hardware, an audio driver 3012 corresponding to the audio interface 3018, a mouse driver 3013 corresponding to the mouse interface 3019, a keyboard driver 3014 corresponding to the keyboard interface 3020, and a display interface 3021 are provided. A corresponding display driver 3015, a network driver 3016 corresponding to the network interface 3022, and a USB driver 3017 corresponding to the USB interface 3023 are included. The OS (Operating System) portion includes an input / output control unit 3011.

  Audio data output from a microphone (not shown) connected to the client terminal 301 is output to the audio driver 3012 via the audio interface 3018, and the audio driver 3012 outputs data after predetermined processing to the input / output control unit 3011. To do. The input / output control unit 3011 adds identification information indicating that it is audio data to the audio data received from the audio driver 3012 and constructs a packet in accordance with a predetermined protocol, and configures the network driver 3016 and the network interface 3022. To the relay device 50. When the input / output control unit 3011 receives the audio data from the computer device 40 (relay device 50) via the network interface 3022 and the network driver 3016, the input / output control unit 3011 transmits the audio data to the audio driver 3012 based on the identification information indicating the audio data. Output data. The audio driver 3012 outputs data after predetermined processing to the audio interface 3018, and the audio interface 3018 further outputs to a speaker (not shown).

  Mouse data output from the mouse 303 is output to the mouse driver 3013 via the mouse interface 3019, and the mouse driver 3013 outputs data after predetermined processing to the input / output control unit 3011. The input / output control unit 3011 adds identification information indicating that it is mouse data to the mouse data received from the mouse driver 3013 and constructs a packet in accordance with a predetermined protocol. The data is transmitted to the relay device 50 (computer device 40) via the interface 3022.

  The keyboard data output from the keyboard 304 is output to the keyboard driver 3014 via the keyboard interface 3020, and the keyboard driver 3014 outputs data after predetermined processing to the input / output control unit 3011. The input / output control unit 3011 adds identification information indicating that the data is keyboard data to the keyboard data received from the keyboard driver 3014 and constructs a packet according to a predetermined protocol. The data is transmitted to the relay device 50 (computer device 40) via the interface 3022.

  When the input / output control unit 3011 receives video data from the computer device 40 (relay device 50) via the network interface 3022 and the network driver 3016, the input / output control unit 3011 displays the display driver based on the identification information indicating the video data. Video data is output to 3015. The display driver 3015 outputs data after predetermined processing to the display interface 3021, and the display interface 3021 further outputs to the display 302.

  The USB data output from the USB device (various drives 306 and printer 305) connected to the client terminal 301 is output to the USB driver 3017 via the USB interface 3023, and the USB driver 3017 performs input / output control of the data after predetermined processing. Output to the unit 3011. The input / output control unit 3011 adds the identification information indicating that the USB data is received from the USB driver 3017 to the USB data and composes a packet according to a predetermined protocol, and sets the network driver 3016 and the network interface 3022. To the relay device 50 (computer device 40). When the input / output control unit 3011 receives USB data from the computer device 40 (relay device 50) via the network interface 3022 and the network driver 3016, the input / output control unit 3011 sends the USB data to the USB driver 3017 based on the identification information indicating the USB data. Output data. The USB driver 3017 outputs data after predetermined processing to the USB interface 3023, and the USB interface 3023 further outputs to the USB device.

  Next, a processing flow related to a service using the computer system shown in FIG. 1 will be described with reference to FIGS. First, a user who wants to use this service makes a service use application to the ISP, and the ISP accepts the service use application (step S1). The ISP provides the client terminal 301 and the like to the user, and installs the computer device 40 having the configuration designated by the user who uses the service in the ISP center 1 to configure the computer system as shown in FIG. (Step S3). As described above, the computer device 40 may be owned by an ISP, a user, or another person. The same applies to the client terminal 301. Up to this point, it is an artificial preparation stage, so it is indicated by a dotted line block.

  When ready, the user operates the client terminal 301 to log in to the ISP center 1 (step S5). For login, the ID and password are confirmed using a conventional technique at the connection point between the public line network 200 and the ISP center 1. Alternatively, the ID and password are confirmed using the OS function of the computer device 40 or the like. When logging in, the user can remotely operate a personal computer installed in the ISP center 1 by operating the client terminal 301. However, in order to receive services from the management server 60, it is necessary to perform user attribute and preference setting / registration processing. The user operates the client terminal 301 to cause the computer apparatus 40 to access the data registration unit 601 of the management server 60, and to perform user attribute and preference setting / registration processing (step S7). This process is performed by, for example, an exchange between a Web browser installed in the computer device 40 and a Web server included in the management server 60.

  An example of data registered in the user attribute and preference setting / registration process will be described with reference to FIGS. As shown in FIG. 7, the user attributes include personal data, hardware configuration, and software configuration. The personal data includes a user ID, password, name, address, telephone number, age, sex, and other personal attributes. The data registered in step S7 is data that is not included in the service use application, and nothing needs to be registered at this stage. However, additions / modifications are possible. The hardware configuration includes data on the hardware configuration of the computer device 40 used by the user, such as the CPU type, main memory capacity, HDD capacity, and presence / absence of a RAID configuration. Similar to the user attribute, the data registered in step S7 is data not included in the service use application, and nothing may be registered at this stage. Additions and corrections are possible. If the configuration is changed later, correction registration is required. The software configuration includes data of the software configuration of the computer device 40 used by the user, such as an OS type and an installed application program (Appln). Similar to the user attribute, the data registered in step S7 is data not included in the service use application, and nothing may be registered at this stage. If the configuration is changed later, correction registration is required. However, the change may be automatically reflected.

  As shown in FIG. 8, the preference data includes a user ID and data of 1 to n preference items. For example, when the user selects an item that matches his / her hobby / preference from a list of pre-defined items, the code of the selected item is registered as shown in FIG. Additions and modifications can be made later.

  Returning to the description of FIG. 6, when the user attribute and preference setting / registration is completed, or, for example, when new content data is stored in the shared disk 70, the access right setting process is performed by the access right setting unit 603. (Step S9). This process will be described with reference to FIG. Note that FIG. 9 shows processing when setting the access authority of one user for one piece of content data. When setting the access authority of many users for many pieces of content data, FIG. It is necessary to repeat the process.

  The access authority setting unit 603 reads the content attribute data 73 of the specific content data stored in the shared disk 70 (step S21). Further, the user attribute data of the user for which the access authority is set is read from the user attribute data storage unit 90 (step S23). Then, it is determined whether the content data is inappropriate for the user (step S25). For example, if an age limit is attached to the content data, it is determined whether the age limit is met. Further, when the content data is a program, a case where the OS is not compatible or a case where it is determined as inappropriate from a combination of application programs is detected. If it is determined as inappropriate, access permission is not given, and the process returns to the original process.

  On the other hand, when it is not determined that the specific content data is inappropriate for the user according to the user attribute data, the user's preference data is read from the preference data storage unit 80 (step S27). Then, it is determined whether the content attribute data of the content data matches the user's preference data (step S29). In this way, it is determined whether or not the user's hobbies are met. Specifically, it is determined whether the preference item set by the user at least partially matches the attribute item included in the content attribute data. If it is determined that they do not match, the process returns to the original process. On the other hand, if it is determined that the content data matches the user's preference, access permission data for the user is registered as access authority data 72 in the shared disk 70 corresponding to the content data (step). S31). Then, the process returns to the original process.

  Returning to the processing of FIG. 6, using the access authority data 72 set in this way, the notification processing unit 604 included in the access authority setting unit 603 generates a list of content data permitted to be accessed for each user. For example, it is transmitted to the user as an HTML (Hyper Text Markup Language) mail (step S11). At this time, in order not to recommend content data that has already been accessed by the user or content data has been distributed, for example, the list generation may be performed with reference to the distribution log data storage unit 95. .

  Next, a content use process is performed (step S13). This process will be described with reference to FIG. Here, in response to the instruction data from the client terminal 301 operated by the user, the computer device 40 receives, for example, an HTML mail including a link to content data accessible from the mail server 30, and displays it on the display device. It is assumed that processing for display is performed (step S41). Then, video data is transmitted from the computer device 40 to the client terminal 301 via the relay device 50 and the network 200. The client terminal 301 receives the video data and displays it on the display 302 (step S43). The user views the screen to be displayed on the display device of the computer device 40 on the display 302 of the client terminal 301 and selects the content data to be acquired.

  When the user operates the client terminal 301 to perform selection input of specific content data, the client terminal 301 receives selection input of specific content data, and sends instruction data to the public network 200 and the relay device 50. (Step S45). The computer device 40 receives instruction data for specific content data from the client terminal 301 (step S47). Then, the computer device 40 accesses the specific content data related to the instruction data as if it were directly selected and instructed (step S49). The access management unit 605 of the management server 60 refers to the access authority data 72 stored in the shared disk 70 corresponding to the specific content data in response to the access from the computer device 40 to the specific content data. The access authority of the computer device 40 is confirmed (step S51). For specifying the computer device 40 or specifying a user, an IP address (including an IPv6 IP address) may be used, or new authentication may be performed. If it is determined by the access authority data 72 that access is not permitted, an access refusal is returned to the computer device 40. When the computer device 40 receives the access refusal, the computer device 40 transmits video data including an access refusal display to the client terminal 301 via the relay device 50 and the public line network 200. The client terminal 301 displays the video data on the display 302.

  If the access management unit 605 determines that the computer device 40 has access authority, the access management unit 605 reads specific content data from the shared disk 70 and transmits it to the computer device 40 (step S53). In addition, a distribution log indicating that the specific content data is transmitted to the computer device 40 (or user) is stored in the distribution log data storage unit 95 (step S63).

  The computer device 40 receives specific content data from the management server 60, and, for example, activates an application program for the content data on the computer device 40 and performs a process for displaying on the display device ( Step S55). Then, video data for displaying content is transmitted from the computer device 40 to the client terminal 301 via the relay device 50 and the public line network 200. The client terminal 301 receives video data for displaying content and displays it on the display 302 (step S57). The user can view the screen to be displayed on the display device of the computer device 40 on the display 302 of the client terminal 301.

  When the user saves content data in the local HDD of the computer apparatus 40, the user issues a save instruction to the client terminal 301. The client terminal 301 receives the save instruction and transmits the instruction data related to the save instruction via the public network 200 and the relay device 50 (step S59). The computer device 40 stores the content data in the local HDD in accordance with the instruction data received from the client terminal 301 (step S61). Returning to the original process, the user logs off (FIG. 6: step S15).

  In this way, since the user has only the client terminal 301 with a simple configuration, almost no failure occurs, and even if a failure occurs, the problem can be easily identified. In addition, since the computer device 40 of the user is physically installed in the ISP center 1, when the computer device 40 fails, it is possible to easily receive a quick and accurate treatment by a specialist. Further, the contents of the local HDD of the computer device 40 can be easily saved on a backup disk of the management server 60 (not shown), and can be easily restored. Further, as described above, abundant content data stored in the shared disk 70 can be used, and convenience is improved. In addition, since it is easy to know what is suitable for user attributes and preferences, it can be accessed more easily. In addition, since data exchange in the ISP center 1 can effectively use the high-speed network on the premises, the user can obtain a comfortable environment by increasing the speed of the public line network 200. Since the ISP center 1 is protected by high security technology, the user can use the computer device 40 and the client terminal 301 with peace of mind.

  If such a computer system is used, the location of the client terminal 301 is completely unrelated, and if the client terminal 301 is made portable, it can be configured at any time and anywhere via the public network 200 according to its own desire. The apparatus 40 and the management server 60 can be used.

  The ISP center 1 can also increase the number of user contracts and increase sales by providing a new service as described above. Also, by signing a contract with each user, for example, it becomes possible to bundle the empty computer devices 40 and implement a grid computing providing service.

  The embodiment described above is an example, and various modifications can be made. For example, with respect to the computer device 40, a monitor program to be executed in the background is installed so that the management server 60 or the like can monitor / notify the operation status or execute user authentication on the computer device 40. May be.

  In the above example, the accessible content data is notified by HTML mail or the like. However, the notification may be performed by a dedicated program installed in the computer device 40, for example. Furthermore, the management server 60 or a dedicated program may perform processing so as to display a shortcut icon for the newly accessible content on the desktop (or in a dedicated folder).

  Services that can be performed by the management server 60 are not limited to the services described above, and various services that are normally provided by ISPs can be provided.

  Furthermore, although we did not touch on the settlement of content and data above, it may be possible to automatically charge at the time of access, or some kind of charging process may be included, and it seems to be added to the fee for providing this service It may be any shape.

  FIG. 1 shows a configuration in which the configuration of the computer device 40 is not much changed from that of a normal personal computer. For example, video data, mouse data, keyboard data, USB data, etc. For example, a computer device having a function of converting a data format so that communication can be performed by a standard method such as 10 / 100BASE-T, or a function expansion card for expanding the function to have such a function. You may make it use the mounted computer apparatus. Such a computer device can be connected to the public network 200 by a standard connection method.

It is a functional block diagram of the computer system which concerns on one embodiment of this invention. It is a functional block diagram of the management server which concerns on one embodiment of this invention. It is a functional block diagram of a computer. It is a functional block diagram of the relay apparatus which concerns on one embodiment of this invention. It is a functional block diagram of the client terminal which concerns on one embodiment of this invention. It is a figure which shows the main process flow which concerns on one embodiment of this invention. It is a figure which shows an example of user attribute data. It is a figure which shows an example of preference data. It is a figure which shows an example of the processing flow of an access authority setting process. It is a figure which shows an example of the processing flow of a content utilization process.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ISP center 10 Network connection apparatus 11 Firewall function 12 Antivirus function 30 Mail server 31 Mail box 40 Computer apparatus 50 Relay apparatus 60 Management server 70 Shared disk 71 Content data 72 Access authority data 73 Content attribute data 80 Data storage unit 90 User attribute data storage unit 95 Distribution log data storage unit 100 Internet 101 Web server 200 Public line network 300 User house 301 Client terminal 302 Display 303 Mouse 304 Keyboard 305 Printer 306 Various drives

Claims (4)

A computer device and a center server that are configured individually for each user are connected locally, and the computer device and the center server are connected to the Internet via a network device having a firewall function and a virus removal function. In the system,
A relay device for communicating data related to an external input / output interface of the computer device with a client terminal;
Connect to the relay device via a secure network, output data received from the relay device to the output device in a format suitable for the output device, and transmit input data from the input device to the relay device A client terminal,
Further comprising
The center server is
A preference data storage for holding preference data for each user of the client terminal;
A user attribute data storage unit for storing user attributes for each user of the client terminal;
A shared disk for storing content data associated with attribute data;
Content stored in the shared disk based on preference data stored in the preference data storage unit, user attributes stored in the user attribute data storage unit, and attribute data of each content data・ Access authority setting means to set the access authority of each user to the data,
Access management means for managing access to content data stored in the shared disk;
When use of specific content data is instructed by a specific user of a specific client terminal, a configuration for the specific user of the specific client terminal is realized and connected via the relay device A specific computer device accesses the specific content data in response to the instruction;
In response to the access by the specific computer device, the access management means confirms the access authority set corresponding to the specific content data and stores the specific content data stored in the shared disk. And determining whether or not the computer device can access the computer system. The access authority setting means includes:
The computer apparatus that generates distributable data including a list of at least a part of accessible content data for each user based on the set access right, and realizes a configuration for each user The computer system according to claim 1, wherein transmission is performed in a manner that can be stored in the computer system. The center server is
Means for storing identification data of content data accessed by the computer apparatus or transmitted to the computer apparatus in response to a user instruction from the client terminal in a distribution log storage unit;
Have
The access authority setting means includes:
The computer system according to claim 2, wherein the distributable data is generated with reference to the distribution log storage unit.   The computer system according to claim 1, wherein the content data includes update data of at least one of an operating system, a driver, and an application program of the computer device.

Images