JP2014067226A - Service control device and service control program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To flexibly provide a service to a user network.SOLUTION: A service control device 1 includes: additional service acceptance means 110 for accepting a request for an additional service to a user network; and additional service control means 120 for acquiring the provision configuration of the identifier of an application to be added, and for transmitting an instruction to provide the additional service to the user network in accordance with the provision configuration to a server device 2. When the provision configuration is an occupancy type indicating the occupied use of the application by the user network, the additional service control means 120 transmits an instruction to secure a user environment for allowing the user network to use the application corresponding to the additional service to the server device 2. Furthermore, the additional service control means 120 transmits an instruction to install the application corresponding to the additional service in the secured user environment to the server device 2.

Description

  The present invention relates to a service control device and a service control program for controlling a server device that provides a service to a user network.

  With recent development of communication networks and information processing terminals, cloud computing is becoming widespread. Conventionally, a user processes data by installing an application on his / her hardware and using the application. On the other hand, in cloud computing, a user processes data by receiving a service via a communication network. In cloud computing, application-dependent data uploading and downloading via a communication network is becoming widespread.

  With the development of cloud computing, functions related to network operation are also being provided as cloud computing network services (see, for example, Non-Patent Document 1). Non-Patent Document 1 lists a routing function, a firewall function, a load balancer function, and the like as functions necessary for network operation provided by a network service. In addition, it is also considered to provide a DDos (Distributed Denial of Service) countermeasure function through a network service.

NTT Communications, “Loud N (features)”, [online], [searched on September 18, 2012], Internet <http://www.ntt.com/cloudn/data/feature.html>

  When providing such a network service to a user, the service provider is realized by preparing a server device capable of providing the service for each individual user or for each user request. For this reason, there has been a problem that costs are increased in the introduction and operation of the server apparatus. In addition, since a server device is prepared for each individual user and for each user request, the server device can be flexibly changed when a user request is changed, or a server device that realizes a predetermined function can be used for other users. It may be difficult to divert it.

  Under such circumstances, in conventional cloud computing, the device lacks flexibility, and it has become difficult to centrally manage server devices that provide network services. Along with this, there is a problem that the maintenance cost in providing the network service becomes enormous.

  Accordingly, an object of the present invention is to provide a service control apparatus and a service control program that can flexibly provide a service to a user network.

  In order to solve the above-described problem, a first feature of the present invention relates to a service control apparatus that controls a server apparatus that provides a service to a user network. The service control device according to the first aspect of the present invention includes an additional service receiving unit that receives a request for an additional service to the user network, and an additional service that transmits an instruction for providing the additional service to the user network to the server device. The additional service control unit includes a control unit, and transmits an instruction for installing an application for providing an additional service to the user network on the server device.

  Here, the instruction for the installation is at least one of starting a virtual machine and operating the operation system in the server device, copying image data in the memory including the operation system, and setting an application license. Preferably it is an indication. Moreover, it is preferable that the application provision form is an occupation type that is occupied and used by the user network.

  When the application providing form is a shared type that is shared and used by a plurality of user networks, the additional service control unit is configured to allow the user network to use a service provided by the application for the application to be added. An instruction to set information may be transmitted to the server device.

  A second feature of the present invention relates to a service control apparatus that controls a server apparatus that provides a service to a user network. That is, the service control device according to the second aspect of the present invention is a function in which an identifier of a function, an identifier of an application that can realize the function, and a priority that uses the application to realize the function are associated with each other. A storage device that stores different priority data, an identifier of a user network, and set application data that associates an identifier of an application that can be provided to the user network; and a function for adding a function to the user network. Additional service reception means for receiving a request for additional service, and the highest priority among the applications that can be provided to the user network and the functions to be added can be realized by reading the priority data for each function and the set application data. Identifies the application and the identified app It instructs to set the information for realizing the functions to be added by Shon, comprising an additional service control means for transmitting to the server device.

  A third feature of the present invention relates to a service control program for controlling a server device that provides a service to a user network. In other words, the service control program according to the third aspect of the present invention provides a computer with an additional service accepting unit that accepts a request for an additional service to the user network and an instruction for providing the additional service to the user network. The additional service control unit transmits an instruction for installing an application for providing an additional service to the user network to the server device.

  Here, the instruction for the installation is at least one of starting a virtual machine and operating the operation system in the server device, copying image data in the memory including the operation system, and setting an application license. Preferably it is an indication. Moreover, it is preferable that the application provision form is an occupation type that is occupied and used by the user network.

  When the application providing form is a shared type that is shared and used by a plurality of user networks, the additional service control unit is configured to allow the user network to use a service provided by the application for the application to be added. An instruction to set information may be transmitted to the server device.

  A fourth feature of the present invention relates to a service control program for controlling a server device that provides a service to a user network. In the fourth feature of the present invention, the computer stores the function-specific priority data in which the function identifier, the identifier of the application capable of realizing the function, and the priority of using the application for realizing the function are associated with each other. And a storage device that stores set application data in which an identifier of a user network is associated with an identifier of an application that can be provided to the user network. According to a fourth aspect of the present invention, there is provided a service control program comprising: an additional service receiving unit that receives a request for an additional service for adding a function to a user network; function-specific priority data and set application data; An instruction to read and specify the application with the highest priority among the applications that can be provided to the user network and can realize the function to be added, and to set information for realizing the function to be added by the identified application And function as additional service control means for transmitting to the server device.

  ADVANTAGE OF THE INVENTION According to this invention, the service control apparatus and service control program which can provide a service flexibly to a user network can be provided.

It is a figure explaining the system configuration | structure of the service provision system which concerns on embodiment of this invention. It is a sequence diagram explaining the service provision method which concerns on embodiment of this invention. It is a figure explaining the hardware constitutions and functional block of the service control apparatus which concerns on embodiment of this invention. It is a figure explaining an example of a data structure and data of application type data concerning an embodiment of the invention. It is a figure explaining an example of a data structure and data of priority data classified by function concerning an embodiment of the invention.

  Next, embodiments of the present invention will be described with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

(Service provision system)
With reference to FIG. 1, a service providing system 5 according to an embodiment of the present invention will be described. The service providing system 5 according to the present invention provides a network service to the user network 3. The service providing system 5 includes a service control device 1, a server system 2, a first user network 3a, a second user network 3b, a first management terminal 6a, and a second management terminal 6b.

  In the service providing system 5 according to the embodiment, the service control device 1, the server system 2, the first user network 3a, and the second user network 3b are connected by a communication network 4 so that they can communicate with each other. The communication network 4 is a public communication network, a dedicated line, a VPN provided in the public communication network, or the like. Further, the service control device 1 may be connected to the server system 2 without going through the communication network 4. In the example illustrated in FIG. 1, the first management terminal 6a is described as being connected to the service control apparatus 1 via the user network 3a and the communication network 4, but is not limited to this example. The same applies to the second management terminal 6b.

  In the embodiment, when the first user network 3a and the second user network 3b are not particularly distinguished, they may be simply referred to as the user network 3. Further, when the first management terminal 6a and the second management terminal 6b are not particularly distinguished, they may be simply referred to as the management terminal 6.

  The user network 3 is a network used by users such as companies and individuals. Specifically, the user network 3 is an in-house network or a public network. In the embodiment of the present invention, various functions in the user network 3 and various applications for realizing the functions are provided to the user network 3 as a network service by the server system 2. At this time, the service control apparatus 1 inputs instructions to the server system 2 to add, delete, and change various functions and various applications.

  The management terminal 6 is a terminal used by a user of the user network 3. The management terminal 6 inputs application information and function information set in the user network 3 to the service control apparatus 1 in accordance with a user operation. The service control device 1 inputs an instruction to provide a network service to the user network 3 to the server system 2 according to the information input from the management terminal 6. Here, the user is a person who uses the user network 3 and is a company or an individual. In the embodiment of the present invention, the management terminal 6 may be present at any position as long as the information on the additional service can be input to the service control apparatus 1. For example, the management terminal 6 may be located in the user network 3 or may be located outside the user network 3.

  The server system 2 provides a service to the user network 3. The server system 2 includes a first server device 21a and a second server device 21b, and realizes so-called cloud computing. The first server device 21a and the second server device 21b are connected to each other by the server communication network 20. In the embodiment, when the first server device 21a and the second server device 21b are not particularly distinguished, the server device 21 may be simply described. In the example illustrated in FIG. 1, the server system 2 will be described as including two server devices 21, but is not limited to this number. In addition, these server devices 21 may physically function as a single server device.

  In the server system 2, the server device 21 of the server system 2 executes various application software. The server system 2 provides the user network 3 with network services using the various application software. The application executed by the server system 2 is, for example, an application that realizes a function necessary for managing the user network 3. Specifically, a router, a cache, a firewall, a DPI (Deep Packet Inspection), a load balancer, and the like. The server system 2 is connected to the service control device 1 and the user network 3.

  The server device 21 may be a virtual host computer that emulates a plurality of virtual machines in order to provide various network services. In the example shown in FIG. 1, the first server device 21a emulates the first virtual machine 211a, the second virtual machine 211b, the third virtual machine 211c, the fourth virtual machine 211d, and the fifth virtual machine 211e. To rate. The second server device 21b emulates the sixth virtual machine 211f and the seventh virtual machine 211g. Which virtual machine the server device 21 emulates may be changed as appropriate depending on the load of the server, the operation status, and the like. In the embodiment, the first virtual machine 211a, the second virtual machine 211b, the third virtual machine 211c, the fourth virtual machine 211d, the fifth virtual machine 211e, the sixth virtual machine 211f, and the seventh When the virtual machine 211g is not particularly distinguished, it may be simply referred to as the virtual machine 211.

  Further, the server device 21 may execute a network service by an application without using a virtual machine. Specifically, one of the server devices 21 constituting the server system 2 may provide a network service by an application such as a proxy server without using a virtual machine, or the virtual machine provides the network service. May be.

  The service control device 1 controls the server device 21 that provides a service to the user network 3. In response to a request from the user, the service control device 1 transmits an instruction to provide a service to the user network 3 to the server system 2 and controls the user network 3 to enjoy the service. The service control apparatus 1 is realized by installing and installing a program for realizing predetermined processing in a general computer.

  The service control apparatus 1 is managed by a provider that provides network services, and controls the operation of the server of the server system 2. For example, the service control device 1 transmits an instruction for starting and executing each service in the server device 21 of the server system 2 to the server system 2 in order to realize a service request of the user network 3. The activation and execution of each service includes OS selection and installation, license information setting, application installation, and the like.

  The service control apparatus 1 may transmit an instruction for control of service provision to the server system 2 or may be transmitted to the server apparatus 21 in the server system 2. When the service control apparatus 1 transmits an instruction for control to the server system 2, the server system 2 specifies the server apparatus 21 that executes the instruction input from the service control apparatus 1, and the server apparatus 21 issues the instruction. Run. When the service control apparatus 1 transmits an instruction to the server apparatus 21, the service control apparatus 1 identifies the server apparatus 21 that executes the instruction, and transmits the instruction to the identified server apparatus 21. The direction to which the service control apparatus 1 transmits an instruction may be appropriately selected based on the application type, the network service provision form, the implementation form, and the like.

  In the embodiment of the present invention, the case where the service control apparatus 1 is located outside the server system 2 will be described, but the present invention is not limited to this. For example, the service control device 1 may be the server device 21 in the server system 2 or the virtual machine 211 that operates on the server device 21.

(Service provision method)
A service providing method in the service providing system 5 shown in FIG. 1 will be described with reference to FIG.

  First, when information on an additional service enjoyed by the user network 3 is input to the management terminal 6, the management terminal 6 transmits the information to the service control device 1 in step S <b> 1. This information includes, for example, an identifier of an additional service to the user network 3 and information necessary for enjoying this additional service. The identifier of the additional service includes an identifier of an application that realizes the additional service, a function name of the additional service, and the like. Information necessary for enjoying the additional service is setting information of an application that provides the additional service.

  The input of these pieces of information may be realized through a plurality of steps. For example, when an identifier of an additional service to the user network 3 is input from the management terminal 6, the service control device 1 displays a screen for inputting information necessary for the user network 3 to enjoy this additional service. Displayed on the management terminal 6. Thereafter, the user inputs necessary information on this screen, and the management terminal 6 may input the input information to the service control apparatus 1.

  In the embodiment of the present invention, the type of additional service requested by the management terminal 6 is determined by providing a network service using a share-type application, providing a network service using an exclusive application, and providing a network service that provides a predetermined function. Think broadly into three. The classification of the type of additional service is merely an example, and is not limited thereto. For example, an appropriate type may be set as appropriate according to the service provision form.

  The shared application is a type of application that can be shared and used by a plurality of users who use the network service by operating one application in the server system 2. In the embodiment of the present invention, it is assumed that when a user requests an additional service using the share type application, the share type application is already installed and licensed and operating in the server system 2. To do. The share type application is, for example, an application that provides a proxy function. Even when the proxy function is provided, when the network service is provided in a range customized for each user, the application that provides the proxy function may be handled as an exclusive application.

  An exclusive application is an application that needs to secure an area occupied by each user who uses this network service. When providing a network service by an exclusive application to the user network 3, the service control apparatus 1 secures a virtual machine for each user. Further, the service control apparatus 1 needs to install software for realizing the network service by the exclusive application in the reserved virtual machine. The exclusive application is an application that provides functions such as document generation and spreadsheet.

  The provision of a network service that provides a predetermined function is in any form as long as the predetermined function can be realized, regardless of the application for realizing the function. For example, when a user wants to deny access from a predetermined IP address in the user network 3, a router, a firewall, etc. can be considered as a method for realizing the function. In the service control method, when only a function is specified in this way, an optimum application that realizes this function is identified and a network service is provided to the user.

  In the embodiment of the present invention, the service control apparatus 1 performs processing according to the type of additional service input from the management terminal 6 in step S1.

  Specifically, first, in step S2, the service control device 1 determines whether or not the service to be added is an addition of a network service by a share type application.

  If it is determined in step S2 that the additional service is the addition of a network service by a share type application, the process proceeds to step S3. In step S <b> 3, the service control apparatus 1 transmits to the server system 2 an instruction to register information of the user network 3 in an application that is already running and can provide an additional service. The server system 2 registers user information of the user network 3 for the share type application, and also provides a network service to the user network 3. The service control device 1 may transmit information set for the management terminal 3 to use the application to the server system 2 and set this information for the share-type application.

  If it is determined in step S2 that the service to be added is not a network service provided by a share-type application, it is determined in step S4 whether or not the service to be added is an addition of a network service by an exclusive application.

  If it is determined in step S4 that the additional service is an addition of a network service by an exclusive application, the process proceeds to step S5. In step S <b> 5, the service control apparatus 1 transmits an instruction to secure a user environment for operating the exclusive application to the server system 2. When the user environment is ensured, the service control apparatus 1 transmits an instruction for enabling the network by the exclusive application to be provided in the user environment secured in step S5. Specifically, in step S6, the service control apparatus 1 sets a license for the exclusive application for the user, and transmits an instruction to install the exclusive application to the reserved user environment to the server system 2. The service control apparatus 1 may transmit information set by the management terminal 6 to the server system 2 so that the user network 3 uses the application, and set this information in the exclusive application.

  If it is determined in step S4 that the additional service is not the addition of the network service by the exclusive application, the process proceeds to step S7. Here, it is assumed that the additional service is not the addition of the network service by the share-type application and the exclusive application, but the addition of a network service that provides a predetermined function. In step S <b> 7, the service control apparatus 1 identifies an optimal application from applications that can realize the function to be added. In order to enjoy the network service related to the function of the user network 3 in step S8, the service control device 1 transmits information set by the management terminal 6 to the server system 2, and the server system 2 sends this information to the identified application. May be set.

  When the processing in step S3, step S6 or step S8 is completed, the server system 2 is in a state where it can provide an additional service to the user network 3. In step S9, the server system 2 transmits a completion response indicating that an additional service can be provided to the service control apparatus 1. In step S <b> 10, the service control device 1 transmits a completion response to the management terminal 6.

  In the example illustrated in FIG. 2, a case where the completion response is transmitted via the service control device 1 will be described. As another example, the server system 2 may transmit a completion response to the management terminal 6 without going through the service control device 1.

  When the user desires to end the network service realized by the process shown in FIG. 2, the user network 3 transmits an identifier of the network service to be ended to the service control apparatus 1. In that case, the service control apparatus 1 inputs an instruction to the server system 2 to delete the application that provided the network service to be terminated, or to delete or invalidate user information. When an instruction to delete an application or delete or invalidate user information is input from the service control apparatus 1, the server system 2 executes the instruction.

(Service control device)
With reference to FIG. 3, the service control apparatus 1 which concerns on embodiment of this invention is demonstrated. The service control device 1 is a general computer including a central processing control device 100, a storage device 130, and a communication control device 140. The service control apparatus 1 includes each unit illustrated in FIG. 3 by a program for causing such a computer to function as a predetermined unit.

  The communication control device 140 is an interface for communicating with the server system 2 and the management terminal 6.

  The storage device 130 stores a service control program, and also stores application type data 131, image accumulation data 132, function-specific priority data 133, and set application data 134.

  The application type data 131 is data for appropriately providing a network service based on a request for an additional service from the management terminal 6, and is data in which an application identifier is associated with a form of providing the application. is there. The application type data 131 includes, for example, an example of the data structure and data shown in FIG.

  The application type data 131 shown in FIG. 4 associates the operation system, license form, and provision form with the application name as a key. The “operation system” is an operation system for executing this application. When the network service is provided to the user network 3, the server device 21 or the virtual machine 211 that operates in the operation system specified by the “operation system” is required.

  The “license” is a form of a license that is necessary for the user network 3 to enjoy a network service by an application. In the example shown in FIG. 4, there are “individual setting” and “network setting”. “Individual setting” indicates an application that requires license setting for each application. “Network setting” indicates that the application requires one license setting on the network regardless of the application provision form. When a network service is provided to the user network 3, a license in a form designated by this “license” is required.

  “Provision form” is data indicating in what form the server system 2 needs to set an application when providing a network service in the user network 3. In the example shown in FIG. 4, there are dedicated applications and share-type applications.

  The image storage data 132 stores, as image data, a memory state in which the exclusive application can be installed in providing a network service by the exclusive application. The image data is, for example, memory state data in which an operation system, a firewall program, etc. are installed and can be operated. The image data may be provided for each type of program required for operation of the operation system or exclusive application. For example, when a virtual machine is newly activated to provide a network service, a memory state in which the operation system can operate is copied to the virtual machine. Thereby, the time required for the operation of the virtual machine can be saved, and the exclusive application can be installed quickly.

  The function-specific priority data 133 is data used to determine an application for realizing the function when the additional service provides a predetermined function that does not specify an application. The function-specific priority data 133 is data in which a function identifier, an application identifier that can realize the function, and a priority that uses the application to realize the function are associated with each other.

  As shown in FIG. 4, the priority data 133 by function gives priority to an application that can realize a predetermined function. For example, as an application for rejecting reception of a packet from a specific IP address, each application of a router and a firewall can be considered. Therefore, in the example shown in FIG. 4, the priority data 133 by function associates the priority “1” by function with “router” and the priority by function “2” with “firewall”. "Is held in correspondence. In this case, if a “router” and “firewall” application has already been assigned to the user who has requested the reception rejection function, the reception rejection function is realized using a “router” having a higher priority. In addition, for a user who has requested the reception rejection function, if a “firewall” application has already been assigned and a “router” application has not been assigned, the “firewall” is used to implement the reception rejection function.

  The set application data 134 is data in which an identifier of the user network 3 is associated with an identifier of an application that can be provided to the user network 3. When a new network service is provided to the user network 3, the service control apparatus 1 updates the set application data 134. Specifically, the service control apparatus 1 stores a record in which the identifier of the user network 3 is associated with the identifier of the application relating to the network service that can be newly provided to the user network 3 in the set application data 134. insert. The set application data 134 may be substituted with log data of the service control device 1 or user attribute data.

  The central processing control apparatus 100 includes an additional service receiving unit 110 and an additional service control unit 120.

  The additional service receiving unit 110 receives a request for additional service from the management terminal 6 to the user network 3. The process of the additional service receiving unit 110 corresponds to step S1 in FIG. The additional service reception unit 110 displays a screen for specifying an additional service or inputting setting information necessary for receiving the additional service on the management terminal 6 as necessary. The additional service receiving unit 110 inputs the information of these additional services input from the management terminal 6 to the additional service control unit 120.

  Here, the additional service accepting unit 110 may also receive from the management terminal 6 information on whether to add the network service to be added to the user network 3 in the share type or the exclusive type. For example, if the proxy network service can be provided by either the share type or the exclusive type, the management terminal 6 inputs the share type or the exclusive type. The additional service reception unit 110 inputs information indicating that the network service is provided in the provision form input by the management terminal 6 to the additional service control unit 120.

  Note that the service control apparatus 1 may determine the application and the form of provision according to the fee structure with which the user contracts with the service provider. In this case, data that associates the identifier of the user's fee structure, the identifier of the application that can be provided by this fee structure, and the provision form of this application is held. In this case, the user inputs an identifier of a desired application to the management terminal 6. The management terminal 6 transmits the application identifier to the service control apparatus 1. The service control apparatus 1 may determine the form of network service provided to the user network 3 of the user from the input application type and the user fee structure.

  The additional service control unit 120 transmits an instruction for providing an additional service to the user network 3 to the server system 2. The process of the additional service control unit 120 corresponds to step S2 to step S10 in FIG. The additional service control unit 120 includes a share type application addition unit 121, an exclusive type application addition unit 122, a function addition unit 123, and the like. Depending on the type of additional service, either means processes the user's request for additional service.

  Further, when the shared service adding unit 121, the exclusive application adding unit 122, the function adding unit 123, and the like add the network service to the user network 3, the additional service control unit 120 sends the status to the management terminal 6. Notice. Further, the additional service control unit 120 updates the set application data 134.

  When the additional service information is input, the additional service control unit 120 determines whether the additional service is an addition of a service by an application or an addition of a function independent of the application. The additional service control means 120 reads the application type data 131 and acquires the provision form of the identifier of the application to be added when the additional service is addition of a service by an application. The additional service control unit 120 transmits an instruction for providing an additional service to the user network 3 to the server device 21 according to the provision form.

  Here, the additional service control unit 120 causes the share-type application adding unit 121 to perform processing when the provision form is a share type shared and used by a plurality of user networks 3. Further, the additional service control unit 120 causes the exclusive application adding unit 122 to process when the provision form is the exclusive type used exclusively by the user network 3. Further, when the additional service is a function addition, the additional service control unit 120 causes the function addition unit 123 to process.

  When the provision form of the additional service by the application is designated from the management terminal 6, the additional service control means 120 causes the processing means corresponding to the designated provision form to process. Specifically, when a share-type provision form is specified from the management terminal 6, the additional service control unit 120 causes the share-type application addition unit 121 to perform processing. When the exclusive provision form is designated from the management terminal 6, the additional service control unit 120 causes the exclusive application addition unit 122 to process.

  The share application adding unit 121 inputs a necessary instruction to the server system 2 in order to newly provide a network service based on the share application to the user network 3. The share-type application adding unit 121 transmits, to the server device 21, an instruction to set information for the user network 3 to use the application for the application to be added that is in operation. For example, it is assumed that the share-type application holds the identifier or usage environment of the user who uses this application. In this case, the share-type application adding unit 121 transmits to the server device 21 an instruction for setting information such as the identifier of the user to be newly used and the user's usage environment in the share-type application. The server device 21 sets information such as the identifier of the user to be newly used and the usage environment of the user in the application to be added, and provides a network service by the application to be added to the user network 3. Further, the share-type application adding unit 121 transmits an instruction to update the license information as necessary.

  The exclusive application adding unit 122 inputs a necessary instruction to the server system 2 in order to newly provide the user network 3 with a network service based on the exclusive application. The exclusive application adding unit 122 transmits to the server system 2 an instruction for installing an application for providing an additional service to the user network 3 in the server system 2. Here, the instruction for installation includes, for example, the activation of the virtual machine 211 and the operation of the operation system in the server system 2, the copy of the image data in the memory including the operation system, and the setting of the license of the application. Is at least one of the instructions.

  As a result, the exclusive application adding unit 122 secures a user environment for providing the user network 3 with a network service based on the exclusive application. Furthermore, the exclusive application adding unit 122 transmits to the server device 21 an instruction to install an application corresponding to the additional service in the user environment.

  When the exclusive application adding unit 122 specifies an application that can realize the additional service, the exclusive application adding unit 122 refers to the application type data 131 and specifies an operation system as an execution environment of the application. Thereafter, the exclusive application adding unit 122 activates the virtual machine 211 and operates the specified operation system on the activated virtual machine 211. At this time, the exclusive application adding unit 122 also operates a program necessary for executing the application in the user environment where the operation system is operating. The exclusive application adding unit 122 refers to the application data 131 and transmits an instruction to set license information as necessary.

  The exclusive application adding unit 122 may use the image storage data 132 without installing an operation system or a program. The exclusive application adding unit 122 reads the image data indicating the memory state in which the operation system and the program for executing the application are installed from the image accumulation data 132 and copies the image data onto the virtual machine 211.

  In order to secure the user environment, a method of securing a virtual machine having sufficient hardware resources in advance for each user may be considered. In this case, the exclusive application adding unit 122 sets a license after installing the operation system or middleware or copying the image data for one of the virtual machines already prepared for the user, You may install an application.

  Thus, after securing the user environment, the exclusive application adding unit 122 transmits an instruction to install the exclusive application in this area to the server. The server device 21 installs the exclusive application in the secured user environment. Thereafter, the server device 21 sets information such as the identifier of the user to be newly used and the usage environment of the user in the application to be added, and provides a network service by the application to be added to the user network 3.

  In order to add a new function to the user network 3, the function adding unit 123 specifies an application capable of realizing the function and inputs an instruction necessary for realizing the function to the server system 2. The function adding unit 123 reads the function-specific priority data 133 and the set application data 134 and identifies the application with the highest priority among the applications that can be provided to the user network 3 and can realize the function to be added. . Further, the function adding unit 123 transmits an instruction to set information for realizing a function added by the identified application to the server device 21.

  For example, consider a case where the user's user network 3 enjoys a network service by a router application and a network service by a firewall application as services that can realize the reception rejection function. In this case, the function adding unit 123 refers to the priority data 133 by function shown in FIG. 5 and identifies “router”, which is a higher priority application, as an application for realizing the reception rejection function. Furthermore, the function adding means 123 transmits an instruction for realizing the reception refusal function desired by the user with this application to the server system 2. Specifically, the function adding unit 123 inputs an instruction to rewrite the access list to the server system 2 in order to reject the address specified by the user for the router application.

  On the other hand, let us consider a case where the user network 3 of the user enjoys a network service by a firewall application as a service capable of realizing the reception rejection function and does not enjoy a network service by a router application. In this case, the function adding unit 123 refers to the function-specific priority data 133 illustrated in FIG. 5 and identifies “firewall” as an application that implements the reception refusal function. Furthermore, the function adding unit 123 transmits an instruction for realizing a reception rejection function in the user network 3 to the server system 2 with this application. Specifically, the function adding unit 123 inputs an instruction to change the setting to the server system 2 in order to reject the reception of the address designated by the user for the firewall application.

  When there is no application that can provide the user network 3 with the additional service requested by the user and can realize the function to be added, the function adding unit 123 displays the fact on the management terminal 6 and displays the desired function. Select one of the feasible applications. The share-type application adding unit 121 or the exclusive-type application adding unit 122 transmits an instruction for enjoying the network service by the selected application to the server system 2 and also provides an instruction for realizing the function to the server system 2. Send to.

  Further, the service control apparatus 1 collects and holds license information that can be centrally managed as license data when the server system 2 provides a network service to the user network 3. For example, the service control apparatus 1 holds a list of license keys for applications executed in the server system 2 as license data.

  Specifically, when a service provider operating the service control apparatus 1 holds a plurality of licenses, the user pays out licenses to the user when the user starts using the application. At this time, the service control apparatus 1 holds the license data in association with the identifier of the user who issued the license and the issued license key. Furthermore, the service control apparatus 1 holds, in the license data, a license key that has not been issued to the user as a license that can be issued. Further, before the user network 3 starts using the application, when purchasing a license from the vendor of the application, the license key of the purchased license and the identifier of the user who uses the license key are used as license data. Hold.

  As described above, in the service providing system 5 according to the embodiment of the present invention, functions required for maintenance management of the user network 3 can be realized by an application executed on a server on the cloud. Thereby, in the user network 3 or the server system 2, it can implement | achieve with the virtual server on a cloud, without installing the server for exclusive use of each user network 3. FIG. Therefore, an application for maintaining and managing the user network 3 can be introduced at a reduced cost.

  Further, in the service providing system 5 according to the embodiment of the present invention, a user can enjoy a desired network service in a short time by inputting information on an additional service to the user network 3 to the management terminal 6.

  Specifically, information on the additional service to the user network 3 input by the user to the management terminal 6 is input to the service control device 1. When the information on the additional service is input, the service control device 1 inputs an instruction for realizing the additional service to the cloud server system 2. As a result, the service control apparatus 1 can perform centralized control from securing a virtual machine for providing a service, installing an operation system, installing an application for realizing the service, and setting a license. In addition, the license management that needs to be registered for each service can be centrally managed by the service control apparatus 1. As a result, the cost required for hardware maintenance and license management can be greatly reduced, and network services can be provided to users in a short period of time.

  Further, not only the addition of services but also the suspension of services can be similarly applied. For example, the service control apparatus 1 transmits an instruction to the server system 2 to cause the server system 2 to release resources used for providing the service to be stopped. As a result, limited hardware resources can be flexibly and effectively used.

  As described above, the service provided by the server system 2 is centrally managed by the service control device 1, whereby the service can be flexibly provided to the user.

(Other embodiments)
As described above, the embodiments of the present invention have been described. However, it should not be understood that the descriptions and drawings constituting a part of this disclosure limit the present invention. From this disclosure, various alternative embodiments, examples, and operational techniques will be apparent to those skilled in the art.

  For example, the service control apparatus described in the embodiment of the present invention may be configured on a single piece of hardware as shown in FIG. 3, or may be configured on a plurality of pieces of hardware according to the functions and the number of processes. May be.

  It goes without saying that the present invention includes various embodiments not described herein. Therefore, the technical scope of the present invention is defined only by the invention specifying matters according to the scope of claims reasonable from the above description.

DESCRIPTION OF SYMBOLS 1 Service control apparatus 2 Server system 3 User network 4 Communication network 5 Service provision system 6 Management terminal 20 Server communication network 21 Server apparatus 100 Central processing control apparatus 110 Additional service reception means 120 Additional service control means 121 Share type application addition means 122 Occupancy Type application adding means 123 function adding means 130 storage device 131 application type data 132 image accumulation data 133 priority data classified by function 134 set application data 140 communication control device 211 virtual machine

Claims (10)

A service control device that controls a server device that provides a service to a user network,
An additional service receiving means for receiving a request for an additional service to the user network;
An additional service control means for transmitting an instruction for providing the additional service to the user network to a server device;
The service control apparatus, wherein the additional service control means transmits an instruction to install an application for providing the additional service to the user network in the server apparatus. The instruction to install is at least one of starting a virtual machine and operating an operation system in the server device, copying image data in a memory including the operation system, and setting a license for the application. The service control apparatus according to claim 1, wherein the service control apparatus is an instruction.   The service control apparatus according to claim 1, wherein a form of providing the application is an exclusive type that is exclusively used by a user network. When the application is provided in a shared type that is shared and used by a plurality of user networks,
The said additional service control means transmits the instruction | indication which sets the information for the said user network to use the service by the said application to the said application of the addition object in operation to the said server apparatus. The service control apparatus according to any one of 1 to 3. A service control device that controls a server device that provides a service to a user network,
Function priority data in which a function identifier, an identifier of an application capable of realizing the function, and a priority of using the application for realizing the function are associated with each other;
A storage device for storing the identifier of the user network and the set application data in which the identifier of the application that can be provided to the user network is associated;
Additional service accepting means for accepting a request for an additional service for adding a function to the user network;
Read the priority data by function and the set application data, identify the application with the highest priority among the applications that can be provided to the user network and can realize the function to be added, and the identified application A service control apparatus comprising: an additional service control means for transmitting an instruction to set information for realizing a function to be added to the server apparatus. A service control program for controlling a server device that provides a service to a user network,
Computer
An additional service receiving means for receiving a request for an additional service to the user network;
An instruction for providing the additional service to the user network is caused to function as an additional service control unit that transmits to the server device,
The service control program, wherein the additional service control means transmits an instruction for installing an application for providing the additional service to the user network on the server device. The instruction to install is at least one of starting a virtual machine and operating an operation system in the server device, copying image data in a memory including the operation system, and setting a license for the application. The service control program according to claim 6, wherein the service control program is an instruction. The service control program according to claim 6 or 7, wherein a form of providing the application is an exclusive type that is exclusively used by a user network. When the application is provided in a shared type that is shared and used by a plurality of user networks,
The said additional service control means transmits the instruction | indication which sets the information for the said user network to use the service by the said application to the said application of the addition object in operation to the said server apparatus. The service control program according to any one of 6 to 8. A service control program for controlling a server device that provides a service to a user network,
Computer
Function priority data in which a function identifier, an identifier of an application capable of realizing the function, and a priority of using the application for realizing the function are associated with each other;
A storage device for storing the identifier of the user network and the set application data in which the identifier of the application that can be provided to the user network is associated;
The computer,
Additional service accepting means for accepting a request for an additional service for adding a function to the user network;
Read the priority data by function and the set application data, identify the application with the highest priority among the applications that can be provided to the user network and can realize the function to be added, and the identified application A service control program that causes an instruction to set information for realizing a function to be added to function as additional service control means for transmitting to the server device.

Images