JP2006331126A - Network distribution type mobile agent system, its constituting method, and its constituting program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To make various services provided through a network easily usable to users while ensuring security without complicating a network environment and without increasing in burdens on users. <P>SOLUTION: LAN segments 1, each of which is connected via a WAN 4, are provided with agent information terminal devices 10. Each of the agent information terminal devices is provided with a request reception means 21 which receives requests from a client and a server in its own LAN segment; a response reception means 34 which receives responses from a client and the server in its own LAN segment; a request-perpetuating means 22 which converts a request to a perpetuated data format; and a response-perpetuating means 35 which converts a response to a perpetuated data format. The agent information terminal devices generate mobile agents 100 carrying the perpetuated requests 202 and responses 302 by means of agent generation means 11, movement instruction means 12 and agent platforms 13 to move the requests 202 and responses 302 to other agent information terminal devices. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a client / server network distributed mobile agent system in which a plurality of LAN segments are connected via a network and a technology for constructing the client / server network distributed mobile agent system.

  Mobile agent technology that moves a mobile agent between multiple agent platforms via a network and operates autonomously enables data processing using the network to be easily realized while reducing the burden on the user who operates each computer. It is being used in a wide range of fields.

  Further, with the recent spread of network usage, there is an increasing demand for security of data exchanged on the IP network. In general, when the importance of security is high, the IP network is divided according to the security level, and the unit of each IP network is reduced to a small unit. Alternatively, in a connection method adopted in a system with strict requirements for security, for example, networks that increase convenience by being interconnected are not intentionally connected to each other, the tendency of dividing the network is significant.

  In the prior art, in such a divided network environment, in order to expand the range of use of various services that can be used via the network, an application gateway is started for each target service, and different networks are connected. Alternatively, a high-performance firewall is used so that only specific service data can be transmitted and received between different networks.

JP 2000-215180 A JP2003-22189A

  However, in the conventional segmented network as described above, there is a problem that the range of use of various services that can be used via the network is limited due to differences in platforms and functions.

  For example, when a new function is added to a computer arranged in one LAN segment connected to the network, the computer uses a function on a different computer via the network, and the network load In the case where transmission / reception in a unique format is necessary while avoiding an increase in network traffic, special measures such as installing a new LAN are required.

  In addition, when an application gateway is started up for each target service, it is necessary to start up the gateway for each service.

  In addition, for the purpose of ensuring security on the network, when using a highly functional firewall to allow only specific service data to be transmitted and received between different networks, each time the number of services handled increases, The problem was that it was difficult to maintain the rules, and security weaknesses were easily introduced.

  In addition, when performing a recovery operation in the event of a network failure, it is also a problem that data recovery becomes difficult due to the divided network configuration and the location of the firewall.

  The present invention has been made to solve the above-described problems, and its purpose is not limited to platform and function differences, avoids the complexity of the network environment and the increase in user burden, and To provide a network-distributed mobile agent system, a construction method thereof, and a construction program in which various services provided via a network can be easily used by a user while ensuring security.

  In order to achieve the above object, the present invention makes it possible to perpetuate a request from a client and a response from the server in each LAN segment in which the client and the server are arranged, and to carry it to a mobile agent on the network. Without being limited by the difference in function, the user can easily use the desired service, and the data transmitted / received on the network is limited to the data that can be compressed / encrypted without depending on the transmission means. .

  The network distributed mobile agent system according to the present invention is a client / server type network distributed mobile agent system in which a plurality of LAN segments are connected via a network. In each LAN segment, agent information terminal devices that generate and move mobile agents are respectively arranged as client side information terminal devices and server side information terminal devices, and these information terminal devices are configured as follows. It is characterized by being.

  That is, the client-side information terminal device first has a request receiving means, a request persistence means, an agent generation means, and an agent platform. The request receiving means is an arbitrary service provided by the request destination server from the request source client to the request destination server with the client in the local LAN segment as the request source client and the server in the other LAN segment as the request destination server. When a request for requesting is transmitted, the request is received. The request perpetuating means is a means for converting a request into a perpetuating request in a data format when receiving the request. The agent generation means is means for generating a mobile agent that carries a persistence request. Based on the service requested by the persistence request, the agent platform transmits / receives the mobile agent via the network to / from the server-side information terminal device in the other LAN segment including the request destination server that provides the service. , Means for realizing movement of the mobile agent.

  The server-side information terminal device includes an agent platform, a request reception / inverse conversion unit, a request transmission unit, a response reception unit, and a response perpetuation unit. The agent platform is means for realizing movement of the mobile agent by transmitting / receiving the mobile agent to / from a client side information terminal device in another LAN segment via the network. When receiving a mobile agent from a client-side information terminal device, the request reception / inverse conversion means receives a persistence request from the mobile agent and reversely converts the received persistence request into a request in the data format before persistence. It is means to do. The request transmission means is means for transmitting the request to a request destination server that provides the service in the local LAN segment based on the service requested by the reversely converted request. The response receiving means is means for receiving a response corresponding to the request from the request destination server that is the transmission destination of the request. The response persistence unit is a unit that, when receiving a response, converts the response to a persisted response in a persisted data format and passes the persisted response to the mobile agent.

  Further, the client-side information terminal device has a response reception / inverse conversion means and a response transmission means in addition to the above means. When receiving a mobile agent from the server-side information terminal device, the response reception / inverse conversion means receives a permanent response from the mobile agent, and reverse-converts the received permanent response into a response in the data format before persistence. It is means to do. The response transmission unit is a unit that transmits the response based on the request corresponding to the reversely converted response, with the request source client of the request in the local LAN segment as a response destination client.

  The network distributed mobile agent system construction method and the network distributed mobile agent system construction program according to the present invention grasp the characteristics of the system from the viewpoint of the method and the viewpoint of the program.

  According to the present invention as described above, a request from a client is converted into a permanent request by a client-side information terminal device arranged in the same LAN segment as the client, and is carried to the mobile agent via the network, thereby requesting A persistence request can be passed to the server-side information terminal device arranged in the same LAN segment as the destination server. Then, the server-side information terminal device converts the response from the request destination server into a permanent response and carries it to the mobile agent via the network, so that the permanent response can be passed to the client-side information terminal device.

  In this way, the client and server platforms and interface types are converted by converting the request from the client and the response from the server into data in the form of persistence, that is, the persistence request and the persistence response. The request and the response can be easily passed between the client side information terminal device and the server side information terminal device arranged in different LAN segments. Therefore, the user who operates the client can easily use the desired service without being limited by the difference in platform and function between the client and the requested server.

  In addition, the same range of transmission and reception of conventional requests and responses can be achieved by transporting persistent requests and persistent responses to the mobile agent via the network between the client-side information terminal device and the server-side information terminal device. The data that is localized in each LAN segment and transmitted / received over a wide area network can be limited to a permanent request and a permanent response. Therefore, data transmitted and received on a wide area network can be limited to data in a permanent format that can be compressed and encrypted without depending on the transmission means, and can be carried to the mobile agent. It can be used to reduce costs and ensure scalability, reduce traffic on a wide area network, and ensure security.

The definitions of important terms in the present invention are as follows.
“Service” means data processing provided from a server to a client through a network. Specifically, various services including data acquisition processing for acquiring target data based on data acquired from the client and transaction processing are provided. It is a program execution process. The target data of the data acquisition process is various data including file data of software that realizes some function on a computer connected to a network.

“Permanent” means to convert the entire target data into a permanent data format that can be processed as a single data unit and does not depend on the means of data transmission. Means conversion.
The “request” is a collection of various data transmitted from the client to request an arbitrary service from the server. In the present invention, the “request” means a conventional request that is not persisted.
The “response” is an aggregate of various data indicating the result of executing the service transmitted from the server that executed the service in response to the request to the requesting client.

The “agent” is software that has a certain authority and controls the computer to operate autonomously as a user agent and perform continuous data processing.
A “mobile agent” is an agent that performs data processing while moving in a network.
“Agent platform” means an individual platform resource such as an OS (operation system), middleware, hardware, or the like, which is a basis of a system for operating an agent, or a combination of these platform resources.

  According to the present invention, various services provided via the network can be provided while avoiding the complexity of the network environment and the increase in the burden on the user without being restricted by the difference in platform and function, and ensuring security. It is possible to provide a network distributed mobile agent system that can be easily used by a user, a construction method thereof, and a construction program.

  Embodiments according to the present invention will be described below with reference to the drawings. However, the embodiment described here does not limit the present invention in any way, but merely illustrates one aspect of the present invention. The present invention is typically realized by controlling a computer with software. The software in this case realizes the functions and operational effects of each computer of the present invention by physically utilizing the hardware of the computer, and is suitable for the conventional technology to which the conventional technology can be applied. Applies. Furthermore, specific types and configurations of hardware and software that realize the present invention, a range processed by software, and the like can be freely changed. For example, a program that implements the present invention is one aspect of the present invention.

[First Embodiment]
[System configuration]
FIG. 1 is a configuration diagram showing a network distributed mobile agent system (hereinafter abbreviated as “system” as appropriate) according to a first embodiment to which the present invention is applied.

  As shown in FIG. 1, the network distributed mobile agent system includes a plurality of LAN segments 1, that is, a first LAN segment 1a in which a client 2 is arranged and a second LAN segment 1b in which a server 3 is arranged. The LAN segment 1 includes a plurality of LAN segments 1, and these LAN segments 1 are connected via a network (WAN) 4. In the first and second LAN segments 1a and 1b, first and second agent information terminal devices 10a and 10b for generating and moving mobile agents are arranged, respectively.

  In practice, a large number of LAN segments 1 are connected to the WAN 4, and a plurality of clients 2 and one or more servers 3 are often arranged in the same LAN segment 1. In the figure, from the viewpoint of simplifying the description, only one LAN segment 1a in which a single client 2 is arranged and another LAN segment 1b in which a single server 12 is arranged are referred to as “first LAN. Segments 1a "and" second LAN segment 1b "are shown respectively.

  Here, the client 2, the first agent information terminal device 10 a, and the second agent information terminal device 10 b are a personally owned personal computer, or a graphics function and an arithmetic function called EWS (Engineering Workstation). It consists of a high-performance computer with enhanced performance. The server 3 includes a high-performance computer specialized for servers, which has high-speed processing performance and a large-capacity storage device.

  In the following, from the viewpoint of simplifying the description, when an unspecified LAN segment in which the client 2 or the server 3 is arranged is generally expressed, it is indicated as “LAN segment 1”. In general, an unspecified agent information terminal device arranged in the LAN segment is indicated as “agent information terminal device 10”.

  As shown in FIG. 1, the first agent information terminal apparatus 10a arranged in the first LAN segment 1a and the second agent information terminal apparatus 10b arranged in the second LAN segment 1b are the same. It has a configuration. That is, in this embodiment, each agent information terminal device 10 arranged in each LAN segment 1 in which the client 2 or the server 3 is arranged has the same configuration.

  First, the agent information terminal device 10 includes an agent generation unit 11, a movement instruction unit 12, and an agent platform 13 as units for generating and moving a mobile agent.

  Here, the agent generation unit 11 is a unit that generates the mobile agent 100 that carries the persistence request 202 or the persistence response 302, and the movement instruction unit 12 causes the mobile agent 100 to move to the destination. This is means for holding necessary information as movement instruction data. The agent platform 13 is means for realizing movement of the mobile agent 100 by transmitting / receiving the mobile agent 100 to / from the agent information terminal device in another LAN segment via the WAN 4.

  The agent information terminal device 10 also includes a request receiving unit 21, a request perpetuating unit 22, a response receiving unit 23, a response reverse converting unit 24, and a response transmitting unit 25 as units used for processing on the client 2 side.

  Here, the request receiving means 21 receives a request 201 for requesting an arbitrary service provided by the request destination server 3 from the client 2 as a request source in the local LAN segment 1 to the server 3 in the other LAN segment. It is a means for receiving the request 201 when transmitted. When the request 201 is received, the request persistence means 22 is a means for converting the request into a persistence request 202 having a permanent data format.

  When receiving the mobile agent 100 from the other agent information terminal device 10 in the other LAN segment 1 in which the server 3 that is the request destination of the request 201 is arranged, the response receiving unit 23 receives the request request destination from the mobile agent 100. This is means for receiving a persistence response 302 obtained by persisting the response 301 of the server 3. The response reverse conversion means 24 is a means for reversely converting the received permanent response into a response in a data format before being permanent.

  The response transmission unit 25 is a unit that transmits the response 301 based on the request 201 corresponding to the reversely converted response 301 with the client 2 that has requested the request 201 in the local LAN segment 1 as a response destination client.

  The agent information terminal device 10 also includes a request receiving unit 31, a request reverse converting unit 32, a request transmitting unit 33, a response receiving unit 34, and a response perpetuating unit 35 as units used for processing on the server 3 side.

  Here, when the request receiving means 31 receives the mobile agent 100 from the other agent information terminal device 10 in the other LAN segment 1 in which the client 2 requesting the request 201 is arranged, the request receiving means 31 permanently This is means for receiving the request for merging 202. The request reverse conversion means 32 is means for reversely converting the received persistence request 202 into a request 203 having a data format before persistence.

  The request transmission unit 33 is a unit that transmits the request 201 to the server 3 that is the request destination of the request 201 that provides the service in the local LAN segment 1 based on the service requested by the reversely converted request 201.

  The response receiving unit 34 is a unit that receives a response 301 corresponding to the request 201 from the server 3 that is the request destination of the request 201 in the local LAN segment 1. When the response 301 is received, the response persistence means 35 is a means for converting the response 301 into a persistence response 302 having a permanent data format.

[Normal operation]
FIG. 2 is a flowchart showing the normal operation of the network distributed mobile agent system according to the first embodiment as described above. FIG. 3 is a flowchart showing a normal operation of a mobile agent that is generated and moved by the agent information terminal device.

  Among these, as shown in FIG. 2, in normal client-side processing, the first agent information terminal apparatus 10a sequentially performs client-side request processing (S110) and client-side response processing (S120). Further, in normal server-side processing, the second agent information terminal apparatus 10b sequentially performs server-side request processing (S210) and client-side response processing (S220). As shown in FIG. 3, the mobile agent 100 generated in the client-side request process (S110) disappears after sequentially performing the agent request process (S310) and the agent response process (S320).

  That is, the first agent information terminal device 10a first receives a request 201 from the client 2 arranged in the same first LAN segment 1a by the request receiving means 21 in the request processing (S110) on the client side. When received (YES in S111), the request 201 is converted into a permanent request 202 in a data format that is made permanent by the request permanent means 22 (S112).

  Here, the request 201 from the server is a collection of data necessary for executing the service, and is data in a conventional non-persistent data format. On the other hand, the persistence request 202 is data in a permanent data format that can process the entire target data as one data unit and does not depend on the data transmission means. For example, the persistence request 202 is data in various file formats. is there.

  Next, the first agent information terminal device 10a generates the mobile agent 100 carrying the persistence request 202 by the agent generation means 11, and passes the persistence request 202 (S113). The mobile agent 100 generated in this way first receives the persistence request 202 in the agent request process (S310) (S311).

  Here, the mobile agent 100 is a computer program that can operate as an operating subject in combination with hardware resources on the agent information terminal device 10, and interacts with the agent information terminal device 10. It is possible to respond to various requests from 10. The mobile agent 100 can also request other mobile agents, and can flexibly determine the next operation in response to a response to the request. Further, the mobile agent 100 can move on the network while maintaining the cooperation procedure / data / state and execute another program at the destination.

  Next, the first agent information terminal apparatus 10a passes the information necessary for moving to the movement destination to the mobile agent 100 by the movement instruction unit 12 as movement instruction data (S114). That is, the mobile agent 100 receives the movement instruction data (S312). This movement instruction data includes designation information of the destination agent information terminal apparatus 10 (in this example, the second agent information terminal apparatus 10b) and designation information of the server 3 having the service to be executed (request destination server). It is a collection of data including. The agent information terminal device and server designation information is information including specific information such as a name and an identification number.

  Next, the first agent information terminal device 10a sends the mobile agent 100 to the instructed destination agent information terminal device via the WAN 4 according to the movement instruction data given by the movement instruction means 12 by the agent platform 13. 10, that is, in this example, it is transmitted to the second agent information terminal apparatus 10b (S115). The first agent information terminal device 10a terminates the client-side request processing (S110) by the transmission of the mobile agent 100 having such a persistence request 202, and as client-side response processing (S120), A standby state is prepared for reception of the transmitted mobile agent 100 (S121).

  Then, the second agent information terminal device 10b transmits the mobile agent 100 transmitted from the first agent information terminal device 10a by the agent platform 13 via the WAN 4 in the request processing (S210) on the server side. Receive (YES in S211). By such transmission / reception between the agent platforms 13, movement of the mobile agent 100 from the first agent information terminal apparatus 10a to the second agent information terminal apparatus 10b is realized.

  That is, in this case, the mobile agent 100 moves to the agent platform 13 of the second agent information terminal device 10b that is the designated destination while holding the persistence request 202 (YES in S313 and S314). It operates autonomously on the agent platform 13. The mobile agent 100 takes out the persistence request 202 possessed and passes it to the request receiving means 31 through the agent platform 13 (S315), thereby ending the agent request processing (S310) and the agent response processing (S320). As a standby state in preparation for receipt of the permanent response 302 (S321).

  In this case, the second agent information terminal apparatus 10b waits the mobile agent 100 on the agent platform 13 after receiving the persistence request 202 from the mobile agent 100 on the agent platform 13 by the request receiving means 31 (S212). .

  Next, the second agent information terminal apparatus 10b reversely converts the received persistence request 202 to the original request, that is, the request in the data format before persistence, by the request reverse conversion means 32 (S213). Here, the data format of the original request is the same format as the request 201 received by the request receiving means 21, and the request 201 is a collection of data necessary for executing the service as described above. .

  The second agent information terminal apparatus 10b sends the original request 201 reversely converted by the request reverse conversion means 32 in this way by the request transmission means 33 to the own LAN segment 1, that is, here the second The data is transmitted to the designated request destination server 3 (the server providing the service requested by the request) in the LAN segment 1b (S214). The second agent information terminal device 10b terminates the server-side request process (S210) by transmitting the request 201 to the request-destination server 3, and as the server-side response process (S220), the request-destination server 3 enters a standby state in preparation for receiving a response from S3 (S221).

  In this case, the request destination server 3 executes the service, and sends a response 301 indicating the result of executing the service to the second agent that is the request transmission source in the second LAN segment 1b that is the local LAN segment 1 It returns to the information terminal device 10b. Here, the response is a collection of data including data required by the request requesting client, and is data in a conventional non-persistent data format.

  When the second agent information terminal device 10b receives the response 301 from the request destination server 3 in the second LAN segment 1b, which is its own LAN segment 1, by the response receiving means 34 (YES in S222), the response 301 Is converted into a persistence response 302 in the data format that is persisted by the response persistence means 35 (S223). Here, the data format of the persistence response 302 may be different from the data format of the persistence request 202. However, in general, from the viewpoint of simplification of processing, Is done.

  Next, the second agent information terminal device 10b passes the persistence response 302 obtained by the response persistence means 35 to the mobile agent 100 waiting on the agent platform 13 (S224, S322), The agent platform 13 transmits the mobile agent 100 to the first agent information terminal device 10a that is the movement source via the WAN 4 (S225). Then, the first agent information terminal device 10a receives the mobile agent 100 transmitted from the second agent information terminal device 10b via the WAN 4 (YES in S122). By such transmission / reception of the agent platform 13, the movement of the mobile agent 100 from the second agent information terminal apparatus 10b to the first agent information terminal apparatus 10a is realized.

  In this case, the mobile agent 100 carrying the persistence request 202 from the first agent information terminal apparatus 10a to the second agent information terminal apparatus 10b has the persistence response 302 from the second agent information terminal apparatus 10b. Thus, the process returns to the agent platform 13 of the first agent information terminal device 10a that is the generation / movement source (YES in S323 and S324).

  The mobile agent 100 that has returned to the agent platform 13 of the first agent information terminal device 10a that is the generation / movement source extracts the persisted response 302 that it possessed and passes it to the response receiving means 23 through the agent platform 13 ( S325). Thereafter, the mobile agent 100 disappears by itself.

  When the first agent information terminal device 10a receives the permanent response 302 from the mobile agent 100 received by the agent platform 13 by the response receiving unit 23 (S123), the first permanent agent information terminal device 10a converts the received permanent response 302 into a response reverse conversion unit. 24, the original response, that is, the response in the data format before perpetuation is inversely converted (S124). Here, the data format of the original response is the same format as the response 301 received by the response receiving unit 34.

  The first agent information terminal device 10a sends the original response reversely converted by the response reverse conversion means 24 in this way to the own LAN segment 1, that is, here the first LAN, by the response transmission means 25. The request is sent to the requesting client 2 in the segment 1a (S125).

  FIG. 4 is a schematic diagram showing a data flow between devices during normal operation of the network distributed mobile agent system according to the first embodiment as described above.

  As shown in FIG. 4A, when the request 201 transmitted from the client 2 in the first LAN segment 1a is received by the first agent information terminal device 10a, the first agent information terminal device 10a. , Request 201 is converted to persistence request 202, and mobile agent 100 carrying persistence request 202 is generated.

  The mobile agent 100 possessing the persistence request 202 receives the second agent in the second LAN segment 1b in which the request destination server 3 of the request 201 is arranged from the first agent information terminal apparatus 10a via the WAN 4. Move to the information terminal device 10b. When the second agent information terminal device 10b receives the persistence request 202 from the mobile agent 100 that has moved, the persistence request 202 is converted back to the original request 201 and transmitted to the request destination server 3.

  As shown in FIG. 4B, when the response 301 to the request 201 is received from the server 3 in the second LAN segment 1b by the second agent information terminal device 10b, the second agent information terminal device 10b. The response 301 is converted into a permanent response 302 and passed to the waiting mobile agent 100 that has carried the persistence request 202.

  The mobile agent 100 possessing the persistence response 302 transfers from the second agent information terminal apparatus 10b to the first agent information terminal apparatus 10a in the first LAN segment 1a that is the generation / movement source via the WAN 4. Moving. When the first agent information terminal apparatus 10 a receives the permanent response 302 from the returned mobile agent 100, the permanent response 302 is converted back to the original response 301 and transmitted to the request source client 2.

[Function and effect]
According to the network distributed mobile agent system according to the first embodiment as described above, the following operational effects can be obtained.

[Ease of service use]
By converting the request from the client and the response from the server into the persistence format data of the persistence request and the persistence response, and carrying it to the mobile agent, it does not depend on the platform and interface type of the client and server. A request and a response can be easily passed between agent information terminal devices arranged in different LAN segments.

  Therefore, the user who operates the client can easily use the desired service without being limited by the difference in platform and function between the client and the requested server.

[Cost reduction / enhancement, traffic reduction, security]
By transmitting the persistent request and the persistent response to the mobile agent via the WAN between the agent information terminal devices arranged in different LAN segments, the same LAN segment can be used for transmitting and receiving the conventional request and response. The data that is localized in the network and transmitted / received on the WAN can be limited to the persistence request and the persistence response.

  Therefore, since the data sent / received on the WAN can be transported to the mobile agent by limiting the data to the permanent format that can be compressed and encrypted without depending on the transmission means, the existing general-purpose transmission means can be used as they are. Thus, cost reduction and expandability can be ensured, traffic can be reduced for the WAN, and security can be ensured. Below, the detail of these effects is demonstrated one by one.

  First, by transmitting the request and response in a persistence format, it is possible to transmit the persistence request and the persistence response using the existing general transmission means such as a message transmission means (such as a mail system) as it is. it can. Therefore, since general-purpose techniques such as transmission path control and retransmission control can be used as they are, cost reduction and securing of expandability can be realized.

  In addition, since persistent requests and responses that are sent and received on the WAN can be compressed appropriately, a large amount of data is once sent to the mobile agent by data compression when there is a lot of request and response network traffic. Can be held.

  That is, as shown in FIG. 5A, when the conventional request / response communication is performed between the client and the server, the number of times of communication on the WAN increases according to the amount of data. On the other hand, in this embodiment, by using a mobile agent, a large amount of data can be compressed and held in the mobile agent as shown in FIG. Since the number of communications can be greatly reduced, the traffic given to the WAN can be reduced.

  Further, since the persistence data of the persistence request and the persistence response is a data format that can be encrypted, it is possible to prevent data interception and alteration on the WAN. Therefore, even when the importance of security is high, security can be ensured using cryptographic techniques.

[Easy data recovery in case of failure, flexible network support]
Since requests and responses are converted into a permanent format and transmitted / received, processing parallelization and queuing are easy, so data recovery processing and parallel processing in the event of a network failure can be easily realized. In addition, since parallel processing and queuing are easy in this way, the WAN portion is not limited to a network that is always connected, and can be easily handled even in a dial-up network.

[Ease of using legacy systems]
When converting a request from a client into a permanent request, the request from the client can be realized by an interface of a new technology such as a Web interface. Therefore, even when the service to be used is an old system (legacy system), the service of the legacy system can be easily used with the interface of the new technology from the viewpoint of the user who operates the client.

[Ease of using application services]
From the viewpoint of the user operating the client, a request to an arbitrary server in another LAN segment can be freely used via the agent PC in the local LAN segment. Therefore, the user can freely use a new composite and applied service composed of a plurality of services by causing a client to transmit a plurality of requests for using a plurality of services in an existing system.

  Here, FIG. 6 shows, as an example, a plurality of basic services A when a plurality of different basic services A to C are provided by a plurality of servers 3A to 3C respectively arranged in different LAN segments 1bA to 1bC. It is a schematic diagram which shows provision of the composite and applied new service D which combined -C. The outline of the data flow between devices in this case is as follows.

  First, as shown in FIG. 6, the user causes the client 2 to transmit a plurality of requests 201 </ b> A to 201 </ b> C for requesting a new composite / applied service (application service) D combining a plurality of basic services A to C. Then, in the agent information terminal device 10a in the local LAN segment 1a, those requests 201A to 201C are made permanent, and the mobile agent 100 holding the permanent requests 202A to 202C is transmitted.

  The mobile agent 100 that holds the persistence requests 202A to 202C sequentially moves the LAN segments 1bA to 1bC in which the servers 3A to 3C are arranged, and sequentially moves the agent information terminal devices 10bA to 10bA to the LAN segments 1bA to 1bC. 10 bC is moved, and the respective permanent responses 302A to 302C obtained by perpetuating the responses 301A to 301C of the execution results of the basic services A to C from the servers 3A to 3C are received.

  The mobile agent 100 possessing a plurality of persistence responses 302A to 302C for a plurality of basic services A to C constituting the request target service D is finally in the LAN segment 1a where the request requesting client 2 is arranged. Returning to the agent information terminal device 10a, a plurality of permanent responses 302A to 302C are passed to the agent information terminal device 10a. The agent information terminal device 10a reversely converts the plurality of permanent responses 302A to 302C into the original responses 301A to 301C, and transmits them to the request requesting client.

  That is, the request requesting client 2 receives the responses 301A to 301C indicating the execution results of the plurality of basic services A to C. This means that a response indicating the execution result of the application service D combining a plurality of basic services A to C is received.

  Therefore, from the viewpoint of the user operating the client 2, a request for requesting a new complex / applicable new service can be made by freely defining a desired complex / applicable new service composed of a plurality of services. By causing the client to transmit, it is possible to freely use a desired new composite / applied service.

[Simplification of system configuration by using a common agent information terminal]
Each agent information terminal device includes both means used for processing on the client side and means used for processing on the server side, that is, the configuration of both the client side information terminal device and the server side information terminal device according to the present invention. It is configured as a common agent information terminal device provided.

  Therefore, since both the client-side process and the server-side process can be performed by the same agent information terminal device, at least one agent information is included in a single LAN segment in which both the client and the server are arranged. The system of this embodiment can be easily configured only by arranging the terminal device, which leads to simplification of the entire system configuration. The use of such a common agent information terminal device is particularly effective when both the client and the server are arranged in many LAN segments constituting the system.

  As a modification of the present embodiment, the client side information terminal device and the server side information terminal device can be provided separately, but generally, at least a LAN in which both the client and the server are arranged For agent information terminal devices arranged in a segment or in a LAN segment where both a client and a server are assumed to be arranged in the future, it is desirable to use a common agent information terminal device for the above reasons. .

[Modifications for ensuring security]
Hereinafter, as a modification of the first embodiment as described above, a plurality of modifications using a specific technique for ensuring security will be sequentially described.

[Modification using public key encryption technology]
FIG. 7 shows a unique public key 401, private key 402, and public key for each agent information terminal device 10 arranged in each LAN segment in the network distributed mobile agent system according to the first embodiment shown in FIG. An example of a network distributed mobile agent system having a key list 403 is shown.

  That is, as shown in FIG. 7, the first agent information terminal apparatus 10a possesses a unique public key 401A, a private key 402A, and a public key list 403, and the second agent information terminal apparatus 10b. Possesses its own public key 401B, private key 402B, and public key list 403.

  Here, the public key list 403 includes a “third party approved organization signed public key in which public keys possessed by all agent information terminal devices 10 in the system are registered and signed in advance by the third party certification authority 5. "List" and "key ring" of public keys. The public key list 403 is distributed in advance from the third party authentication organization 5 to each agent information terminal device 10.

  In addition, the unique public key 401 possessed by each agent information terminal apparatus 10 is registered in the public key list 403 if the agent information terminal apparatus 10 is in a normal state. When one of the agent information terminal devices 10 is stolen or the like, when the system is in a state of not being a valid agent information terminal device 10, the agent is retrieved from the public key list 403 by operating in a human system. The public key 401 of the information terminal device 10 is deleted.

  Further, the unique private key 402 possessed by each agent information terminal device 10 is held only in the agent information terminal device 10 in its internal storage means.

  Further, the request persistence means 22 of each agent information terminal device 10 encrypts the persistence request 202 by using the public key 401 acquired by referring to the public key list 403, and displays “encrypted persistence request”. The request encryption unit 41 is set to “203”, and the request reverse conversion unit 32 decrypts the “encrypted persistence request” 203 using the private key 402 to obtain the original persistence request. Request decrypting means 42 for returning to 202 is provided.

  Similarly, the response persistence unit 35 encrypts the persistence response 302 using the public key 401 acquired with reference to the public key list 403, and makes a response “encrypted persistence response” 303. The encryption means 43 is provided, and the response reverse conversion means 24 decrypts the “encrypted persistent response” 303 using the private key 402 and returns it to the original persistent response 302. An activating means 44 is provided.

  In the example shown in FIG. 7, the configuration of the other parts in each agent information terminal apparatus 10 is the same as that of the first embodiment. However, from the viewpoint of simplifying the drawing, The description is omitted.

  Next, the normal operation according to the encryption technology of the network distributed mobile agent system of FIG. 7 will be described. Similar to the first embodiment, the first agent information terminal apparatus 10a arranged in the first LAN segment 1a receives the request 201 from the client 2 in the same LAN segment 1a, and receives the request server 3 The operation when transmitting / receiving the mobile agent 100 to / from the second agent information terminal apparatus 10b in the second LAN segment 1b in which is arranged will be described.

  First, the request persistence means 22 of the first agent information terminal device 10a refers to the public key list 403 by the request encryption means 41 when converting the request 201 into the persistence request 202, and sends the request destination The public key 401B unique to the second agent information terminal device 10b is acquired, and the persistence request 202 is encrypted using the public key 401B to create an “encrypted persistence request” 203. In this case, the request encryption unit 41 encrypts the persistence request 202 using a typical public key algorithm such as RSA. The “encrypted persistence request” 203 is carried by the mobile agent 100 to the second agent information terminal device 10b.

  The “encrypted persistence request” 203 carried to the second agent information terminal apparatus 10b is encrypted using a public key 401B unique to the second agent information terminal apparatus 10b. Therefore, in the request reverse conversion means 32 of the second agent information terminal apparatus 10b, the request decryption means 42 uses the private key 402B unique to the own agent information terminal apparatus 10b to “encrypted persistent request”. 203 can be decrypted and returned to the original persistence request 202. In this case, the request decryption unit 42 decrypts the “encrypted persistent request” 203 using a public key algorithm corresponding to the public key algorithm used by the request encryption unit 41.

  Further, the encryption of the persistence response 302 by the response encryption means 43 of the response persistence means 35 and the decryption of the “encrypted persistence response” 303 by the response decryption means 44 of the response reverse conversion means 24 are: Except for using the public key 401A and the private key 402A unique to the first agent information terminal device 10a, the description is omitted because it is the same as the encryption / decryption of the persistence request 202 described above.

  FIG. 8 is a schematic diagram showing a data flow between devices during normal operation of the network distributed mobile agent system shown in FIG. 7 as described above.

  As shown in FIG. 8A, when the request 201 transmitted from the client 2 in the first LAN segment 1a is received by the first agent information terminal apparatus 10a, the first agent information terminal apparatus 10a. The request 201 is persisted and then encrypted to become an “encrypted persistence request” 203, and the mobile agent 100 carrying the “encrypted persistence request” 203 is generated.

  The mobile agent 100 possessing the “encrypted persistence request” 203 receives the second LAN segment 1b in which the request destination server 3 of the request 201 is arranged from the first agent information terminal device 10a via the WAN 4. Move to the second agent information terminal device 10b. When the second agent information terminal device 10b receives the "encrypted persistence request" 203 from the mobile agent 100 that has moved, the "encrypted persistence request" 203 is decrypted and then the original To the request 201 and transmitted to the request destination server 3.

  As shown in FIG. 8B, when the response 301 to the request 201 is received from the server 3 in the second LAN segment 1b by the second agent information terminal device 10b, the second agent information terminal device 10b. The response 301 is persisted and then encrypted to become an “encrypted persistence response” 303, which is passed to the waiting mobile agent 100 that has carried the “encrypted persistence request” 203. .

  The mobile agent 100 possessing the “encrypted persistent response” 303 receives the first agent in the first LAN segment 1a that is the generation / movement source from the second agent information terminal device 10b via the WAN 4. Move to the agent information terminal device 10a. When the first agent information terminal device 10a receives the “encrypted persistence response” 303 from the returned mobile agent 100, the “encrypted persistence response” 303 is decrypted and then the original The response 301 is reversely converted and transmitted to the requesting client 2.

  According to the network distributed mobile agent system of FIG. 7 using the public key encryption technique as described above, the following operational effects can be obtained in addition to the operational effects of the first embodiment.

  First, it is not necessary to embed a public key encryption processing function in each server or each client, but only a public key encryption processing function is incorporated in the agent information terminal device in each LAN segment where each server or each client is arranged. Thus, the security of the public key method between the client and the server can be enjoyed. That is, wiretapping on the network can be prevented. Alternatively, it is possible to ensure the same security as that of the VPN even if the network is not VPN (Virtual Private Network).

  Also, since the encrypted persistence request can be decrypted only by a legitimate agent information terminal device in the same LAN segment as the server, it is possible to prevent impersonation of the server side agent information terminal device.

  Also, since the encrypted permanent response can be decrypted only by the request requesting agent information terminal device, the client side can also be prevented from impersonating the agent information terminal device.

  The public key of each agent information terminal apparatus is fixedly incorporated in a one-to-one correspondence with each agent information terminal apparatus when the environment of each agent information terminal apparatus is constructed, and a list of valid public keys is third. Since the certificate is signed by the user certificate authority, the valid public key list can be prevented from being falsified.

  Moreover, since the private key of each agent information terminal device can be stored in a physical token, leakage of the private key can be effectively prevented. In addition, since the private key theft can be detected at an early stage, information regarding the invalidation of the public key of the stolen private key can be easily notified to each agent information terminal device in the system in the form of a revocation list.

  In addition, the presence or absence of encryption processing can be specified in detail for each target server or server service according to the settings on the agent information terminal device, so that encryption processing can be performed according to the importance of server and service security. The presence or absence can be selected appropriately.

[Modification using public key revocation list]
FIG. 9 shows a network distributed mobile agent system using the public key encryption technique shown in FIG. 7, and a public key revocation list 404 is added to each agent information terminal device 10 arranged in each LAN segment. An example of the possessed system is shown.

  That is, as shown in FIG. 9, each agent information terminal device 10 uses the revocation list in which the public keys registered in the public key list 403 are registered with the public keys that have become invalid within a preset validity period. In addition to possessing 404, revocation list updating means 45 for updating the revocation list 404 to the latest one is provided.

  Further, the request persistence means 22 of the agent information terminal apparatus 10 that has received the request 201 from the client 2 refers to the public key list 403 by the request encryption means 41, and the public key of the destination agent information terminal apparatus 10. When acquiring 401, it is checked whether or not the public key 401 is registered in the latest revocation list 404. If the public key 401 of the destination agent information terminal apparatus 10 is registered in the revocation list 404, the processing of the request is interrupted. In this case, a message or the like indicating that there is a security problem is transmitted from the response transmission unit 25 of the agent information terminal device 10 that has received the request 201 to the requesting client 2.

  Further, the system shown in FIG. 9 is operated so that all the agent information terminal devices 10 in the system always maintain the latest revocation list 404 having the same contents. Such identification of the revocation list 404 is such that the latest revocation list 404 uses the movement of the mobile agent 100 every time the public key 401 of any agent information terminal device 10 in the system becomes invalid. In each agent information terminal device 10, the revocation list update unit 45 updates the existing revocation list 404 to the latest one. Hereinafter, a system operation related to the update of the revocation list 404 and the operation of the mobile agent 100 will be described.

  First, the representative agent information terminal device 10 for managing the revocation list is determined in advance from all the agent information terminal devices 10 constituting the network distributed mobile agent system. The public key revocation list 404 is operated by the human system so as to be in the latest state in the representative agent information terminal device 10.

  When the revocation list 404 of the representative agent information terminal device 10 is updated by the revocation list updating means 45 according to the operation of the human system, the mobile agent 100 carrying the revocation list 404 is generated by the revocation list updating means 45, and this mobile The agent 100 has the latest revocation list 404 that has been updated and starts moving.

  In this case, the movement destination of the mobile agent 100 carrying the revocation list 404 is all other agent information terminal devices 10 having the public key 401 listed in the public key list 403. The revocation list 404 is distributed by visiting the terminal devices 100 one after another.

  Alternatively, the destination agent information terminal device 10 is divided into a plurality of groups, a plurality of individual mobile agents 100 for each group carrying the revocation list 404 are generated, and the plurality of mobile agents 100 are simultaneously added to each group. The revocation list 404 may be distributed more efficiently by moving to the agent information terminal 10.

  Regardless of which distribution method is adopted, each mobile agent 100 that has moved to the target agent information terminal apparatus 10 sends the latest revocation list brought to the revocation list update means 45 of the destination agent information terminal apparatus 10. 404 is delivered. The revocation list updating means 45 to which the latest revocation list 404 is passed from the mobile agent 100 overwrites the existing revocation list 404 in the self-agent information terminal device 10 with the latest revocation list 404 that has been passed, so that the latest revocation list 404 is updated. The revocation list 404 is updated.

  The mobile agent 100 that has finished moving to all destinations disappears after completing the delivery of the copy of the revocation list 404 at the last destination.

  As an example, in FIG. 9, when the revocation list 404 is updated in accordance with the operation of the human system in the first agent information terminal device 10a, the revocation list updating means 45 sets the first destination to the second agent. A case where distribution of the revocation list 404 is started as the information terminal device 10b is shown.

  In this example, the revocation list update unit 45 of the first agent information terminal apparatus 10a encrypts the “latest revocation list” with the public key 401B of the second agent information terminal apparatus 10b, which is the next destination, The latest encrypted revocation list ”405 is carried to the mobile agent 100. The revocation list updating means 45 of the second agent information terminal device 10b receives the “encrypted latest revocation list” 405 from the mobile agent 100, decrypts it using the private key 402B, and generates the original “latest revocation list”. The existing revocation list 404 is updated with this latest revocation list.

  Next, when the revocation list is distributed to the third agent information terminal apparatus 10c (not shown), the revocation list update means 45 of the second agent information terminal apparatus 10b sets the “latest revocation list” to the third. The information is encrypted with the public key 401C of the agent information terminal device 10b of the agent information terminal device 10b to obtain the “encrypted latest revocation list” 405, which is carried to the mobile agent 100.

  In FIG. 9, the mobile agent 100 carrying the “encrypted latest revocation list” 405 is generated separately from the mobile agent 100 carrying the “encrypted persistent request / persistent response” 203, 303. In this case, the single mobile agent 100 may carry the “encrypted persistence request / persistence response” 203 and 303 and the “encrypted latest revocation list” 405. In that case, the permanent request / persistent response and the latest revocation list may be encrypted collectively.

  According to the network distributed mobile agent system of FIG. 9 using the revocation list as described above, the following operational effects can be obtained in addition to the operational effects of the system of FIG.

  First, the public key revocation list is different from the public key list and is not signed by the third-party certification authority 5, so it can be issued quickly on any of the agent information terminal devices in the system. When a security problem occurs in an information terminal device, the agent information terminal device can be quickly separated from the system to maintain security.

  If only the revocation list of one representative agent information terminal device in the system is updated and a mobile agent that carries it is generated, all other agent information terminal devices in the system move the generated mobile agent. Can automatically update the revocation list. Therefore, since all the agent information terminal devices in the system can always keep the latest revocation list having the same contents, the reliability of the revocation list in each agent information terminal device can be ensured and the security can be maintained. .

[Modified example of encrypting only user-specific information]
FIG. 10 shows a network distributed mobile agent system using the public key encryption technique shown in FIG. 7, and each agent information terminal device 10 arranged in each LAN segment further receives the request 201 from the request 201. 1 shows an example of a system in which user identification information for identifying a user of a request source client 2 is extracted and only the extracted user identification information is encrypted.

  That is, the request perpetuation means 22 of each agent information terminal device 10 includes user identification information for identifying the user of the request source client 2 from the data group of the original request 201 when the persistence request 202 is encrypted. User information extraction means 46 is provided for extracting. Then, only the user identification information such as the user name and password extracted by the user information extraction means 46 is encrypted by the request encryption means 41, and a “persistence request in which only user information is encrypted” 204 is generated. The

  Further, the request reverse conversion means 32 of each agent information terminal device 10 is provided with an encrypted part extraction means 47 for extracting only the encrypted part of the “persistence request encrypted only for user information” 204. It has been. Then, only the encrypted part extracted by the encrypted part extracting unit 47, that is, the information such as the user name and the password which is the user specifying information is decrypted by the request decrypting unit 42.

  According to the network distributed mobile agent system of FIG. 10 that encrypts only the user identification information as described above, the following operational effects can be obtained in addition to the operational effects of the system of FIG. In other words, by limiting the information to be encrypted, user identification information such as the user name and password that should ensure the most safety while minimizing the increase in computer load accompanying encryption and decryption by the public key method Can be prevented from leaking onto the network.

[Modification using client certificate]
FIG. 11 shows a network distributed mobile agent system using the revocation list shown in FIG. 9. Further, for each client 2 arranged in each LAN segment, a client certificate (hereinafter referred to as a client certificate) 1 shows an example of a system in which a request 406 is issued from the agent information terminal device 10 to the requesting client 2 when the request 201 is requested.

  In other words, each agent information terminal device 10 requests the requesting client 2 to present the certificate 406 when the request persisting means 22 converts the request 201 from the client 2 into the persistence request 202. Certificate request means 48 is provided. Then, the request persistence means 22 attaches the certificate 406 presented from the client 2 in response to the request to the “encrypted persistence request” 203.

  In this case, the certificate 406 of each client 2 is issued from the third-party authentication authority 5 and registered in each client 2 in advance as data for certifying the validity of the client. The certificate 406 is data encrypted with the certification authority public key 407 held by the third party certification authority 5. Specifically, the third-party authentication authority 5 is managed to issue the certificate 406 only to the client 2 permitted to use the mobile agent.

  Further, the certificate request means 48 can be easily realized by using the certificate request means built in various existing Web server software as it is. In addition, the certificate 406 from the client 2 is a certificate registered in the client 2 by using a client certificate transmission function built in a general-purpose browser generally possessed by the computer or a function corresponding thereto. 406 is performed by being transmitted to the certificate request means 48.

  Each agent information terminal device 10 is provided with a certification authority public key holding unit 49 that holds a certification authority public key 407 for decrypting the certificate 406. When the request decryption unit 42 of the request reverse conversion unit 32 receives the “encrypted persistence request” 203 with the certificate 406, the request decryption unit 42 first receives the certificate authority public key from the certificate authority public key holding unit 49. 407 is received and the certificate 406 attached to the “encrypted persistence request” 203 is opened (decrypted).

  After the certificate 406 is opened, the request reverse conversion unit 32 checks the client identifier described to confirm that it is in a certain permitted format and is not registered in the revocation list 404. The certificate 406 that has passed this confirmation means that it is a valid certificate issued to a client that is permitted to use the mobile agent. After confirming the pass, the “encrypted persistence request” 203 is decrypted into a persistence request by the request decryption means 42 and returned to the original request.

  On the other hand, if the certificate 406 has not been accepted (failed), the request reverse conversion unit 32 stops the subsequent operation and receives the received “encrypted persistence request” 203. Is discarded.

  According to the network distributed mobile agent system of FIG. 11 using the client certificate as described above, the following operational effects can be obtained in addition to the operational effects of the system of FIG.

  First, since the issuer of a request can be limited to only clients that have been granted permission by a third-party certification authority, unauthorized use of services by unauthorized users can be prevented. In addition, no changes are required for the function of each server itself.

  In addition, since a revocation list indicating an unauthorized client can be quickly distributed in the same manner as in the system of FIG. 9, a specific client certificate issued by a third-party certification authority has been stolen by an unauthorized user by unauthorized copying or the like. Even in this case, since the client certificate can be immediately revoked, the unauthorized use of the service by an unauthorized user can also be prevented from this point.

[Modified example using client certificate / access list]
FIG. 12 shows a list of services that can be accessed for each client to each agent information terminal device 10 arranged in each LAN segment in the network distributed mobile agent system using the client certificate shown in FIG. An example of a system that holds a client access list (hereinafter abbreviated as an access list) 408 is shown.

  That is, each agent information terminal device 10 is provided with an access list holding means 50 for holding the access list 408 issued from the third party authentication organization 5. Here, the access list 408 is a list certified by attaching a certificate by the third party certification authority 5, and the certificate of the access list 408 is also a certification authority public key held by the third party certification authority 5. This data is encrypted by 407. Hereinafter, the normal operation in the system of FIG. 12 will be described.

  Upon receiving the “encrypted persistence request” 203 with the certificate 406, the request reverse conversion means 32 decrypts the certificate 406 using the certification authority public key 407, as in the system of FIG. In this case, the access list 408 is received from the access list holding means 50, and the access list is opened (decrypted) by the certification authority public key 407.

  Then, the request reverse conversion means 32 checks the list of services accessible by the client 2 from the decrypted access list 408, and confirms whether the transfer destination service of the persistence request 202 is included. In the access list 408, if the target service is included in the list of services accessible by the client 2, the request is returned to the original request 201. If the target service is not included, the persistence request is returned. 202 is discarded, and the subsequent operation is stopped.

  According to the network distributed mobile agent system of FIG. 12 using the client certificate and the client access list as described above, the following operational effects can be obtained in addition to the operational effects of the system of FIG.

  First, by using an access list, access restriction management for each client and each service can be easily realized.

  In addition, since the contents of the access list for each user are guaranteed by a certificate from a third-party certification authority, there is no possibility that the access list itself will be tampered with, so the security against access restrictions on a client basis is high.

[Second Embodiment]
[System configuration]
FIG. 13 is a configuration diagram showing a network distributed mobile agent system according to the second embodiment to which the present invention is applied.

  As shown in FIG. 13, in this embodiment, when the first and second LAN segments 1a and 1b are respectively connected to the first and second WANs 4a and 4b that are separated from each other, A proxy agent information terminal device 6 for generating first and second mobile agents 100a and 100b operating on the WANs 4a and 4b is provided between the first and second WANs 4a and 4b.

  In practice, a large number of LAN segments 1 are connected to each of the first and second WANs 4a and 4b, and a plurality of clients 2 and one or more servers 3 are included in the same LAN segment 1. However, in the figure, from the viewpoint of simplifying the explanation, as in the first embodiment, the first LAN segment 1a in which a single client 2 is arranged and the single LAN segment 1a are arranged. Only the second LAN segment 1b in which the server 3 is arranged is shown.

  In this case, the proxy agent information terminal device 6 receives the persistence request 202 and the persistence response 302 between the first and second mobile agents 100a and 100b operating on the first and second WANs 4a and 4b, respectively. In order to pass, it has an agent generation means 61, a movement instruction means 62, an agent platform, a request / response receiving means 64, and an agent waiting means 65.

  Here, the agent generation means 61 generates one of the first mobile agent 100a operating on the first WAN 4a and the second mobile agent 100b operating on the second WAN 4b. The movement instruction means 62 is a means for causing the generated first or second mobile agent 100a, 100b to hold information necessary for moving to the movement destination as movement instruction data.

  The agent platform 63 is a platform capable of operating both the first and second mobile agents 100a and 100b. The agent platform 63 transmits / receives the first mobile agent 100a to / from the first agent information terminal apparatus 10a via the first WAN 4a, and also transmits to / from the second agent information terminal apparatus 10b. This is means for realizing movement of the first or second mobile agent 100a, 100b by transmitting / receiving the second mobile agent 100b via the second WAN 4b.

  When receiving the first or second mobile agent 100a, 100b from the first or second agent information terminal apparatus 10a, the request / response receiving unit 64 sends a permanent request 202 from the mobile agent 100a or 100b. When receiving the first or second mobile agent 100a, 100b from the first or second agent information terminal apparatus 10a, the means for receiving a permanent response 302 from the mobile agent 100a or 100b.

  When one of the first and second mobile agents 100a and 100b carries the persistence request 202, the agent standby unit 65 sends the persistence request 202 from the one mobile agent 100a or 100b. It is means for temporarily storing the one mobile agent after receiving it, and waiting until the other mobile agent carries the persistence response 302.

  The first and second WANs 4a and 4b separated from each other as described above, the first and second mobile agents 100a and 100b operating in these WANs 4a and 4b, and the persistence request 202 and the persistence, respectively. The configuration other than the proxy agent information terminal device 6 that passes the response 302 between the mobile agents 100a and 100b is the same as that of the first embodiment.

[Normal operation]
FIG. 14 is a flowchart showing a normal operation of the network distributed mobile agent system according to the second embodiment as described above. As shown in FIG. 14, the proxy agent information terminal device 6 sequentially performs a boundary request process (S410) and a boundary response process (S420).

  That is, when the client-side request processing (S110) as described above is performed by the first agent information terminal apparatus 10a in the normal client-side processing, the persistence request 202 is carried on the first WAN 4a. A first mobile agent 100a is generated. Here, in a case where the request destination server 3 of the persistence request 202 is arranged in the second LAN segment 1b connected to the second WAN 4b separated from the first WAN 4a, the persistence request 202 The destination of the first mobile agent 100a that possesses is the proxy agent information terminal device 6.

  In this case, the proxy agent information terminal device 6 first determines the first mobile agent 100a transmitted from the first agent information terminal device 10a by its own agent platform 63 in the boundary request processing (S410). And received via the first WAN 4a (YES in S411). Then, after receiving the persistence request 202 from the received first mobile agent 100a by the request / response receiving means 64, the operation of the first mobile agent 100a is stopped and temporarily stored in the agent waiting means 65, A standby state is set (S412).

  Next, the proxy agent information terminal device 6 generates the second mobile agent 100b carrying the persistence request 202 on the second WAN 4b by the agent generation means 61, and passes the persistence request 202 (S413). Next, the proxy agent information terminal device 6 passes the information necessary for moving to the destination to the second mobile agent 100b by the movement instruction means 62 as movement instruction data (S414).

  The proxy agent information terminal device 6 sends the second mobile agent 100b to the instructed destination agent information terminal via the second WAN 4b in accordance with the movement instruction data given by the movement instruction means 62 by the agent platform 63. The information is transmitted to the device 10, that is, in this example, the second agent information terminal device 10b (S415). The proxy agent information terminal device 6 terminates the boundary request process (S410) by the transmission of the second mobile agent 100b that has such a persistence request 202, and performs the boundary response process (S420). Then, a standby state is prepared for the reception of the transmitted second mobile agent 100b (S421).

  When the server-side request process (S210) and the server-side response process (S220) as described above are performed by the second agent information terminal apparatus 10b in the normal server-side process, the permanent response The second mobile agent 100 b possessing 302 is transmitted to the proxy agent information terminal device 6.

  In this case, the proxy agent information terminal device 6 receives, via the second WAN 4b, the second mobile agent 100b transmitted from the second agent information terminal device 10b by the agent platform 63 (YES in S422). ). Then, the permanent response 302 is received by the request / response receiving means 64 from the received second mobile agent 100b, and then the second mobile agent 100b disappears itself (S423).

  The proxy agent information terminal device 6 uses the agent waiting unit 65 to activate the first mobile agent 100a that is waiting in the storage state, and passes the persistence response 302 to the first mobile agent 100a (S424). The agent platform 63 transmits the first mobile agent 100a to the first agent information terminal device 10a that is the movement source via the first WAN 4a (S425).

  Thereafter, the client-side response process (S120) as described above is performed by the first agent information terminal apparatus 10a.

  In the normal operation as described above, the first and second mobile agents 100a and 100b basically perform the same operation except that the source and destination agent information terminal devices are different. That is, both the first and second mobile agents 100a and 100b sequentially perform the agent request process (S310) and the agent response process (S320) as shown in FIG.

  FIG. 15 is a schematic diagram showing a data flow between devices during normal operation of the network distributed mobile agent system according to the second embodiment as described above.

  As shown in FIG. 15, when the request 201 transmitted from the client 2 in the first LAN segment 1a is received by the first agent information terminal device 10a, the request is received by the first agent information terminal device 10a. 201 is converted into a persistence request 202, and a first mobile agent 100a carrying the persistence request 202 is generated on the first WAN 4a.

  Here, in a case where the request destination server 3 of the persistence request 202 is arranged in the second LAN segment 1b connected to the second WAN 4b separated from the first WAN 4a, the persistence request 202 The first mobile agent 100a possessing the information from the first agent information terminal device 10a to the proxy agent information terminal device 6 provided between the first and second WANs 4a and 4b via the first WAN 4a. Moving.

  The first mobile agent 100a that has moved to the proxy agent information terminal device 6 passes the persistence request 202 to the proxy agent information terminal device 6 and waits once. In this case, when the proxy agent information terminal device 6 receives the persistence request 202 from the moved first mobile agent 100a, the second mobile agent 100b carrying the persistence request 202 is generated on the second WAN 4b. The

  The second mobile agent 100b possessing the persistence request 202 sends the second mobile agent 100b from the proxy agent information terminal device 6 via the second WAN 4b to the second LAN segment 1b in which the requested server 3 is located. Move to the agent information terminal device 10b. When the second agent information terminal device 10b receives the persistence request 202 from the mobile agent 100 that has moved, the persistence request 202 is converted back to the original request 201 and transmitted to the request destination server 3.

  Further, although the flow of the permanent response 302 when the response 301 from the request destination server 3 is received is not shown, the proxy agent information terminal device 6 is connected by the second mobile agent 100b via the second WAN 4b. The first mobile agent 100a carries it to the first agent information terminal device 10a via the first WAN 4a, and then returns to the original response 301 to be transmitted to the requesting client 2.

  In FIG. 13 and FIG. 15, for the sake of simplification, the request 201 is made with the client 2 in the first LAN segment 1a as the request source client and the server 3 in the second LAN segment 1b as the request destination server. Although only the flow of data when transmitted is indicated by an arrow, as described above, in many cases, both the client 2 and the server 3 are actually arranged in each LAN segment 1. Therefore, when the request 201 is actually transmitted with a client (not shown) in the second LAN segment 1b as a request source client and a server (not shown) in the first LAN segment 1a as a request destination server. There is also.

  In this case, the request 201 is received by the second agent information terminal device 10b and converted into a persistence request 202, and the second mobile agent 100b sends the request 201 to the proxy agent information terminal device 6 via the second WAN 4b. Carried. Also in this case, the second mobile agent 100b carrying the persistence request 202 waits in the stored state in the agent waiting means 65, and the first mobile carrying the persistence request 202 by the agent generation means 61. An agent 100a is generated, receives movement instruction data from the movement support means 62, and is carried to the first agent information terminal apparatus 10a via the first WAN 4a.

[Function and effect]
According to the network distributed mobile agent system according to the second embodiment as described above, the following operational effects can be obtained in addition to the operational effects of the first embodiment.

  First, even if the networks are separated from each other, any server belonging to any other network from any client belonging to any one network by using the mobile agent generated by the proxy agent information terminal device Can be easily used.

  In other words, in a mobile agent environment consisting of a plurality of networks separated from each other, when a user operating the client intends to use a service provided on another network different from the network to which the client is connected. The user can easily use a service provided on another network only by performing the same operation as when using the service on the network to which the client is connected.

  As a modification of the present embodiment, when combined with the configuration of FIG. 9 using a public key revocation list, the revocation list can be easily distributed even in networks that are separated from each other. Can be secured.

[Third Embodiment]
[System configuration]
FIG. 16 is a block diagram showing a network distributed mobile agent system according to the third embodiment to which the present invention is applied.

  As shown in FIG. 16, in the present embodiment, when a plurality of different (A type and B type) agent platforms are used in the first and second WANs 4a and 4b separated from each other, The configuration of the proxy agent information terminal device 6 in the embodiment is changed.

  That is, the proxy agent information terminal device 6 has the A type and the different types of agent platforms for operating the first and second mobile agents 100a and 100b operating on the first and second WANs 4a and 4b, respectively. B type agent platforms 63A and 63B are provided, respectively. Agent generation means 61A and 61B, movement instruction means 62A and 62B, and request / response reception means 64A and 64B corresponding to these A type and B type agent platforms 63A and 63B are provided, respectively.

  Note that “different types of agent platforms” may be different in the basic platform configured by OS, middleware, etc., but not limited thereto, even if the basic platform itself is the same, the agent on the platform This includes the case where different agent operating environments are configured by different software for configuring the operating environment.

  In the present embodiment, there is further provided message exchange means 66 for exchanging messages between the first and second mobile agents 100a and 100b operating on the first and second WANs 4a and 4b separated from each other. . This message exchanging means 66 passes the persistence request 202 received by either one of the A type and B type request / response receiving means 64A, 64B to the WAN mobile agent including the request destination server 3 and The message exchange is realized by passing the response to the mobile agent for WAN including the request source client (response destination client).

[Normal operation]
For example, in FIG. 16, when the persistence request 202 is received by the A-type request / response receiving means 64A from the first mobile agent 100a operating on the first WAN 4a, the message exchanging means 66 performs the persistent request. The activation request 202 is transferred to the second mobile agent 100b generated by the B type agent generation means 61B.

  Next, when the persistence response 302 is received by the B type request / response receiving means 64B from the second mobile agent 100b operating on the second WAN 4b, the message exchanging means 66 makes the persistence response 302. Is passed to the first mobile agent 100a waiting by the agent waiting means 65.

  FIG. 17 is a schematic diagram showing a data flow between devices during normal operation of the network distributed mobile agent system according to the third embodiment as described above.

  In FIG. 16 and FIG. 17, for simplification, the request 201 is made with the client 2 in the first LAN segment 1a as the requesting client and the server 3 in the second LAN segment 1b as the requesting server. Although only the flow of data when transmitted is indicated by an arrow, as described above, a client (not shown) in the second LAN segment 1b is actually a request source client, and the first LAN segment The request 201 may be transmitted by using a server (not shown) in 1a as a request destination server.

  In this case, the request 201 is received by the second agent information terminal device 10b and converted into a persistence request 202, and the second mobile agent 100b sends the request 201 to the proxy agent information terminal device 6 via the second WAN 4b. Carried. In this case, the second mobile agent 100b carrying the persistence request 202 waits in the storage state in the agent waiting means 65, and the A type agent generation means 61A carries the persistence request 202. One mobile agent 100a is generated, receives movement instruction data from the movement support means 62A, and is carried from the A type agent platform 63A to the first agent information terminal apparatus 10a via the first WAN 4a.

[Function and effect]
According to the network distributed mobile agent system according to the third embodiment as described above, the following operational effects can be obtained in addition to the operational effects of the first embodiment.

  In other words, messages can be exchanged between mobile agents running on different agent platforms, so even if the agent platforms are different on a divided network, the agent platforms are provided on different networks. You can easily use the services you have.

[Fourth Embodiment]
[System configuration]
FIG. 18 is a configuration diagram showing a network distributed mobile agent system according to the fourth embodiment to which the present invention is applied.

  As shown in FIG. 18, this embodiment uses a plurality of different types (A type and B type) of agent platforms in a single WAN 4 to create a logical group of the same type of agent platforms. Is configured, the configuration of the proxy agent information terminal device 6 in the third embodiment is changed.

  That is, the proxy agent information terminal device 6 determines the type of the agent platform of the agent information terminal device 10 arranged in the same LAN segment 1 as the request destination server 3 instead of the message exchanging means 66 of FIG. Platform discriminating / message exchanging means 67 for exchanging messages is provided. In this case, the agent generation means generates a mobile agent according to the determined type of agent platform. The other configuration is the same as that of the third embodiment.

  FIG. 19 is a schematic diagram showing the flow of data between devices during normal operation of the network distributed mobile agent system according to the fourth embodiment as described above, and is a logical group consisting of the same kind of agent platforms. As shown, a first group 7a composed of an A type agent platform and a second group 7b composed of a B type agent platform are shown.

  In FIG. 18 and FIG. 19, from the viewpoint of simplification, the request 201 is made with the client 2 in the first LAN segment 1a as the request source client and the server 3 in the second LAN segment 1b as the request destination server. Only the flow of data when transmitted is shown by an arrow, but a client (not shown) in the second LAN segment 1b is a request source client, and a server (not shown) in the first LAN segment 1a is As described above, the request 201 may be transmitted as the request destination server.

[Function and effect]
According to the network distributed mobile agent system according to the fourth embodiment as described above, the following operational effects can be obtained in addition to the operational effects of the first embodiment.

  In other words, even when the requesting client and the requesting server belong to different agent platform groups on the same network, the service provided by the server can be easily used by the client.

[Other Embodiments]
The present invention is not limited to the above-described embodiments and modifications, and various other modifications can be implemented within the scope of the present invention. For example, the modification described for the first embodiment can be appropriately combined with the second to fourth embodiments.

  Furthermore, the configuration and processing procedure of the network distributed mobile agent system and the agent information terminal device constituting the network distributed mobile agent system shown in the above embodiment are merely examples, and the client and server are arranged in each LAN segment where the client and the server are arranged. As long as the request and the response from the server are made permanent and carried to the mobile agent on the network, the specific configuration and processing procedure can be freely changed.

1 is a configuration diagram showing a network distributed mobile agent system according to a first embodiment to which the present invention is applied. 6 is a flowchart showing a normal operation of the network distributed mobile agent system according to the first embodiment. The flowchart which shows the normal operation | movement of the mobile agent which is produced | generated and moved by the agent information terminal device which concerns on 1st Embodiment. FIG. 5 shows a data flow between devices during normal operation of the network distributed mobile agent system according to the first embodiment, and shows a flow of (A) a request and a permanent request, and (B) a flow of a response and a permanent response. FIG. The traffic reduction effect by the network distributed-type mobile agent system which concerns on 1st Embodiment is shown, (A) Conventional communication and (B) The schematic diagram which compares and shows communication of 1st Embodiment. The schematic diagram which shows the effect of utilization of the application service by the network distributed mobile agent system which concerns on 1st Embodiment. The block diagram which shows an example of the network distributed mobile agent system using the encryption technique of a public key system as a modification of 1st Embodiment. FIG. 8 shows the flow of data between devices during the normal operation of the network distributed mobile agent system shown in FIG. 7; (A) request and persistent request flow; (B) response and persistent response flow; FIG. The block diagram which shows an example using the revocation list | wrist of a public key as a modification of the network distributed mobile agent system shown in FIG. The block diagram which shows an example which encrypted only user specific information as a modification of the network distributed mobile agent system shown in FIG. The block diagram which shows an example using a client certificate as a modification of the network distributed mobile agent system shown in FIG. The block diagram which shows an example using an access list as a modification of the network distributed mobile agent system shown in FIG. The block diagram which shows the network distributed mobile agent system which concerns on 2nd Embodiment to which this invention is applied. 9 is a flowchart showing normal operation of the network distributed mobile agent system according to the second embodiment. The schematic diagram which shows the flow of the data between the apparatuses at the time of normal operation | movement of the network distributed mobile agent system which concerns on 2nd Embodiment. The block diagram which shows the network distributed mobile agent system which concerns on 3rd Embodiment to which this invention is applied. The schematic diagram which shows the flow of the data between the apparatuses at the time of normal operation of the network distributed mobile agent system which concerns on 3rd Embodiment. The block diagram which shows the network distributed mobile agent system which concerns on 4th Embodiment to which this invention is applied. The schematic diagram which shows the flow of the data between the apparatuses at the time of normal operation | movement of the network distributed mobile agent system which concerns on 4th Embodiment.

Explanation of symbols

1a, 1b, 1bA to 1bC ... LAN segment 2 ... client 3 ... server 4, 4a, 4b ... WAN
5 ... Third-party authentication authority 6 ... Proxy agent information terminal devices 10a, 10b, 10bA to 10bC ... Agent information terminal device 11 ... Agent generation means 12 ... Movement instruction means 13 ... Agent platform 21 ... Request reception means 22 ... Request persistence Means 23 ... Response receiving means 24 ... Response reverse conversion means 25 ... Response transmission means 31 ... Request reception means 32 ... Request reverse conversion means 33 ... Request transmission means 34 ... Response reception means 35 ... Response perpetuation means 41 ... Request encryption means 42 ... request decryption means 43 ... response encryption means 44 ... response decryption means 45 ... revocation list update means 46 ... user information extraction means 47 ... encrypted portion extraction means 48 ... certificate request means 49 ... certificate authority public key holding Mean 5 ... access list holding means 61, 61A, 61B ... agent generation means 62, 62A, 62B ... movement instruction means 63, 63A, 63B ... agent platforms 64, 64A, 64B ... request / response receiving means 65 ... agent waiting means 66 ... message Exchange means 67 ... Platform discrimination / message exchange means 100, 100a, 100b ... Mobile agents 201, 201A to 201C ... Request 202, 202A to 202C ... Persistence request 203 ... Encrypted persistence request 204 ... Only user information is encrypted Permanent request 301, 301A to 301C ... Response 302, 302A to 302C ... Permanent response 303 ... Encrypted permanent response 401A, 401B ... Public key 402 , 402B ... private key 403 ... public key list 404 ... Revocation List 405 ... encrypted latest revocation list 406 ... certificate 407 ... certificate authority public key 408 ... access list

Claims (14)

In a client / server network distributed mobile agent system in which a plurality of LAN segments are connected via a network,
In each LAN segment in which each client is arranged and in each LAN segment in which each server is arranged, an agent information terminal device for generating and moving a mobile agent is arranged as a client side information terminal device and a server side information terminal device, respectively. ,
The client-side information terminal device is
A request requesting an arbitrary service provided by the request destination server from the request source client to the request destination server, with the client in the local LAN segment as the request source client and the server in the other LAN segment as the request destination server. A request receiving means for receiving the request when transmitted,
A request persistence means for converting the request into a persistence request having a persisted data format when the request is received;
Agent generating means for generating a mobile agent carrying the persistence request;
Based on the service requested by the persistence request, a mobile agent is transmitted / received via the network to / from the server side information terminal device in another LAN segment including the requested server that provides the service. By having an agent platform that realizes the movement of the mobile agent,
The server side information terminal device,
An agent platform that realizes movement of the mobile agent by transmitting / receiving the mobile agent via the network to / from the client side information terminal device in another LAN segment;
When the mobile agent is received from the client-side information terminal device, the request is received / reversed to receive the persistence request from the mobile agent and reversely convert the persistence request into the request in the data format before persistence. Conversion means;
Based on the service requested by the reverse-converted request, a request transmission unit that transmits the request to the request destination server that provides the service in its own LAN segment;
Response receiving means for receiving a response corresponding to the request from the request destination server that is the transmission destination of the request;
When the response is received, the response is converted into a persistence response in a persisted data format, and the response persistence means for passing the persistence response to the mobile agent,
The client-side information terminal device is
When the mobile agent is received from the server-side information terminal device, the persistent response is received from the mobile agent, and the persistent response is reversely converted into the response in the data format before persistence. Conversion means;
A network-distributed mobile agent, comprising: a response transmission unit configured to transmit the response based on the request corresponding to the inversely converted response, using the requesting client of the request in the local LAN segment as a response destination client system. An agent information terminal device having a configuration of both the client side information terminal device and the server side information terminal is arranged in each LAN segment where at least both the client and the server are arranged, The network distributed mobile agent system according to claim 1. The plurality of LAN segments are respectively disposed in any one of a plurality of different environments due to the division of the network or the difference in the agent platform,
In order to transfer the persistence request and the persistence response between the multiple environments, an agent information terminal device that generates and moves a mobile agent individually corresponding to each environment relays to each boundary portion of the multiple environments Arranged as an information terminal device,
The relay information terminal device,
An agent platform for multiple environments that transmits and receives mobile agents individually corresponding to each of the multiple environments;
Request receiving means for receiving the persistence request from the mobile agent when the mobile agent is received from the client-side information terminal device arranged in one environment;
A response receiving means for receiving the persistence response from the mobile agent when the mobile agent is received from the server side information terminal device disposed in an environment different from the client side information terminal device;
3. The agent generating means for generating a mobile agent that carries the persistence request and the persistence response in an environment including the request destination server of the persistence request. Network distributed mobile agent system. The plurality of LAN segments are respectively connected to any one of a plurality of networks separated from each other,
The network distributed mobile agent system according to claim 3, wherein the agent platform of the relay information terminal device constitutes an agent platform common to the plurality of networks. The plurality of LAN segments are respectively connected to any one of a plurality of networks separated from each other, and are configured to use different types of the agent platforms between the plurality of networks.
The relay information terminal device,
A plurality of agent platforms for individual networks that respectively transmit and receive mobile agents individually corresponding to the networks of the divided plurality of networks;
A plurality of said agent generation means for individual networks, each generating a mobile agent corresponding to each network carrying said persistence request and said persistence response within each network;
Passing the persistence request to a mobile agent for the network based on the network including the request destination server of the persistence request and passing the persistence response to the network including the response destination client of the persistence response 4. The network distributed type according to claim 3, further comprising message exchange means for realizing message exchange between mobile agents operating on networks separated from each other by passing to the mobile agent for the network. Mobile agent system. The plurality of LAN segments are connected to the same network and use any one of a plurality of different types of agent platforms to form a logical plurality of groups each consisting of the same type of agent platforms. And
The relay information terminal device,
A plurality of the agent platforms for individual groups that respectively transmit and receive mobile agents individually corresponding to each group of the plurality of logical groups;
A plurality of the agent generation means for individual groups that respectively generate mobile agents corresponding to each group carrying the persistence request and the persistence response within each group;
Passing the persistence request to the mobile agent for the type based on the type of the agent platform of the group that includes the requested server of the persistence request, and passing the persistence response to the response of the persistence response Message exchange means for realizing message exchange between mobile agents operating on different types of agent platforms on the same network by passing to the mobile agent for the type based on the type of agent platform of the group including the destination client The network distributed mobile agent system according to claim 3, wherein: The client-side information terminal device and the server-side information terminal device have a public key and a private key that are unique to the own agent information terminal device, and as a public key list, public information possessed by all agent information terminal devices in the system Has a list of public keys with keys registered and pre-signed by a third party certification authority,
The request perpetuation means of the client side information terminal device, when converting the request into the perpetuation request, discloses the public information possessed by the server side information terminal device in another LAN segment in which the request destination server is arranged. It is configured to encrypt the persistence request with a key,
The request reception / inverse conversion means of the server-side information terminal device, when reverse-converting the encrypted persistence request into the request in the data format before persistence, the private key of the server-side information terminal device Is configured to decrypt the persistence request,
The response perpetuation means of the server side information terminal device, when converting the response into the perpetual response, is a public possessed by the client side information terminal device in another LAN segment where the requesting client is placed It is configured to encrypt the persistent response with a key,
The response reception / inverse conversion means of the client-side information terminal device, when reverse-converting the encrypted persistent response into the response in the data format before being permanent, the private key of the client-side information terminal device The network distributed mobile agent system according to any one of claims 1 to 6, wherein the persistent response is decoded. The client-side information terminal device and the server-side information terminal device, among the public keys registered in the public key list, a revocation list in which a public key that has become invalid within a preset validity period is registered, Revocation list update means for updating an existing revocation list to the latest revocation list, and generating a mobile agent carrying the latest revocation list by the agent generation means and the agent platform of the agent information terminal device, The network distributed mobile agent system according to claim 7, wherein the mobile agent system is configured to transmit the mobile agent to another agent information terminal device. The request perpetuating means of the client side information terminal device, when converting the request into the perpetuating request, extracts user specifying information for specifying the user of the requesting client from the request, It is configured to encrypt only the user specific information,
The request reception / inverse conversion means of the server-side information terminal device encrypts the persistent response encrypted when reversely converting the encrypted permanent response into the response in the data format before being permanent. 9. The network distributed mobile agent system according to claim 7 or 8, wherein only the user specific information is decrypted. Each of the clients has a client certificate that is digitized data given in advance by a third party certification authority,
When the client-side information terminal device converts the request into the persistence request by the request persistence means, a certificate request means that requests the requesting client of the request to present the client certificate Have
The request perpetuating means of the client side information terminal device is configured to give the client certificate as attached data of the persistence request when the client certificate is presented. The network distributed mobile agent system according to any one of claims 7 to 9. At least the server-side information terminal device has an access level list in which an access level indicating whether or not each client is permitted to send a request to each server is registered and pre-signed by a third party certification authority ,
The server-side information terminal device decrypts the persistence request by the request reception / inverse conversion means, and reversely converts the request to the data format before the persistence, referring to the access level list, Only when there is a request transmission permission to the request destination server for the request source client of the request, by permitting the transmission of the request to the request destination server by the previous period request transmission means of the server side information terminal device, The network distributed mobile agent system according to any one of claims 7 to 10, further comprising an access restriction unit that implements an access restriction in accordance with an access level of each client. In a method for constructing a client / server network distributed mobile agent system in which a plurality of LAN segments are connected via a network,
In each LAN segment in which each client is arranged and in each LAN segment in which each server is arranged, an agent information terminal device for generating and moving a mobile agent is arranged as a client side information terminal device and a server side information terminal device, respectively. ,
By the client side information terminal device,
A request requesting an arbitrary service provided by the request destination server from the request source client to the request destination server, with the client in the local LAN segment as the request source client and the server in the other LAN segment as the request destination server. A request receiving step for receiving the request when it is transmitted;
When the request is received, a request persistence step for converting the request into a persistence request having a persisted data format;
An agent generation step of generating a mobile agent carrying the persistence request;
Based on the service requested by the persistence request, a mobile agent is transmitted / received via the network to / from the server side information terminal device in another LAN segment including the requested server that provides the service. To perform the agent platform step to realize the movement of the mobile agent,
By the server side information terminal device,
An agent platform step for realizing movement of the mobile agent by transmitting / receiving the mobile agent to / from the client side information terminal device in another LAN segment via the network;
When the mobile agent is received from the client-side information terminal device, the request is received / reversed to receive the persistence request from the mobile agent and reversely convert the persistence request into the request in the data format before persistence. A conversion step;
A request transmission step of transmitting the request to the request destination server providing the service in the local LAN segment based on the service requested by the reversely converted request;
A response receiving step of receiving a response corresponding to the request from the request destination server that is the transmission destination of the request;
When the response is received, the response is converted into a persistence response in a persisted data format, and a response persistence step for passing the persistence response to the mobile agent is performed.
By the client side information terminal device,
When the mobile agent is received from the server-side information terminal device, the response reception / reverse is performed to receive the persistence response from the mobile agent and reversely convert the persistence response into a previous response in a data format before persistence. A conversion step;
A network distributed mobile agent characterized by performing a response transmission step of transmitting the response using the request source client of the request in the local LAN segment as a response destination client based on the request corresponding to the reversely converted response System construction method. In a program for constructing a client / server network distributed mobile agent system in which a plurality of LAN segments are connected via a network,
In each LAN segment in which each client is arranged and in each LAN segment in which each server is arranged, an agent information terminal device for generating and moving a mobile agent is arranged as a client side information terminal device and a server side information terminal device, respectively. If you have
In the computer constituting the client side information terminal device,
A request requesting an arbitrary service provided by the request destination server from the request source client to the request destination server, with the client in the local LAN segment as the request source client and the server in the other LAN segment as the request destination server. When received, a request receiving function that receives the request,
When the request is received, a request persistence function that converts the request into a persistence request having a persisted data format;
An agent generation function for generating a mobile agent carrying the persistence request;
Based on the service requested by the persistence request, a mobile agent is transmitted / received via the network to / from the server side information terminal device in another LAN segment including the requested server that provides the service. Agent platform function to realize the movement of the mobile agent,
When the mobile agent is received from the server-side information terminal device, the mobile agent receives a permanent response obtained by converting the response of the request destination server corresponding to the request into a permanent data format. Response reception / reverse conversion function that reversely converts the persistence response to the corresponding response in the data format before persistence;
A network-distributed mobile characterized in that, based on the request corresponding to the reversely converted response, a response transmission function for transmitting the response using the requesting client of the request in the local LAN segment as a response destination client is realized. Agent system construction program. In a program for constructing a client / server network distributed mobile agent system in which a plurality of LAN segments are connected via a network,
In each LAN segment in which each client is arranged and in each LAN segment in which each server is arranged, an agent information terminal device for generating and moving a mobile agent is arranged as a client side information terminal device and a server side information terminal device, respectively. ,
The client-side information terminal device is
A request requesting an arbitrary service provided by the request destination server from the request source client to the request destination server, with the client in the local LAN segment as the request source client and the server in the other LAN segment as the request destination server. A request receiving means for receiving the request when transmitted,
A request persistence means for converting the request into a persistence request having a persisted data format when the request is received;
Agent generating means for generating a mobile agent carrying the persistence request;
Based on the service requested by the persistence request, a mobile agent is transmitted / received via the network to / from the server side information terminal device in another LAN segment including the requested server that provides the service. By having an agent platform that realizes movement of the mobile agent,
In the computer constituting the server-side information terminal device,
An agent platform function for realizing movement of the mobile agent by transmitting / receiving the mobile agent via the network to / from the client side information terminal device in another LAN segment;
When the mobile agent is received from the client-side information terminal device, the request is received / reversed to receive the persistence request from the mobile agent and reversely convert the persistence request into the request in the data format before persistence. Conversion function,
Based on the service requested by the reverse-converted request, a request transmission function for transmitting the request to the request destination server that provides the service in its own LAN segment;
A response reception function for receiving a response corresponding to the request from the request destination server that is the transmission destination of the request;
When the response is received, the response is converted into a persistence response in a persisted data format, and a response persistence response persistence function for passing the persistence response to the mobile agent is realized. Network distributed mobile agent system construction program.

Images