JP6079512B2 - Program generating apparatus and program generating method - Google Patents

Description

  The present invention relates to a program generation apparatus that automatically generates a program for processing on a client side.

In recent years, Web applications have become mainstream in the form of information systems, and in order to construct a system in a short period of time, at a low cost and with a high quality in system development, further improvement in development productivity and quality is required.
Therefore, for the purpose of improving development productivity and quality, a technique for automatically generating a program for controlling a Web application from business specifications has been used (Patent Document 1).

Japanese Patent Laying-Open No. 2005-025416

  However, in the conventional technology for automatically generating a Web application program, if the processing content for processing information that only the client side can know is on the server side, the information is transmitted from the client side to the server side. Since information is processed on the side, there is a problem that the possibility of information leakage increases.

The program generation device according to the present invention processes the target data from a server-side program that performs processing on the server side, based on storage area information of a storage area of a database in which target data for which processing is specified by the user is stored. An extraction means for extracting the server-side program to be identified, and a portion on which the target data of the client-side program to be processed on the client side is processed is specified based on the information of the server-side program extracted by the extraction means specifying means, the portion identified in said identifying means, the server-side program for processing the object data extracted by the extraction means, characterized by comprising a generating means for generating as said client-side program .

The present invention extracts a program that processes target data from a server-side program based on storage area information of target data specified by a user, and processes target data of a client-side program based on the extracted server-side program information Specify the part to be. Then, the identified portion of the client-side program, because it generates the extracted server program as a client-side program, for example, the client-side up the information that the client-side only be known, from the client side without sent to the server-side Can be processed programmatically, and information leakage can be prevented.

It is a block diagram of the automatic program generation apparatus 1 in embodiment of this invention. It is a flowchart of the program automatic generation apparatus 1 in embodiment of this invention. It is a figure which shows an example of the block diagram of the class of the server logic 9 and the client logic 10 in embodiment of this invention. It is a figure which shows an example of UserDto24 of the server logic 9 in embodiment of this invention. It is a figure which shows an example of UserForm22 of the server logic 9 updated by the 1st language update part 4 in embodiment of this invention. It is a figure which shows an example of UseLogic23 of the server logic 9 updated by the 1st language update part 4 in embodiment of this invention. It is a figure which shows an example of JSP21 of the client logic 10 updated by the 2nd language update part 6 in embodiment of this invention. It is a figure which shows an example of the processing content memorize | stored in the processing content primary storage part 7 in embodiment of this invention.

Embodiment.
FIG. 1 is a configuration diagram of an automatic program generation device 1 according to an embodiment of the present invention.
In FIG. 1, a program automatic generation apparatus 1 includes a database analysis unit (database analysis unit) 2, a first language analysis unit (extraction unit) 3, a first language update unit (update unit) 4, and a second language analysis unit (specification). Means) 5, a second language update unit (generation unit) 6, and a processing content primary storage unit (storage unit) 7.

  The automatic program generation apparatus 1 is a server on the server side that executes processing on a database 8 that stores data handled by a Web application when processing of target data is instructed by a user for data handled by the Web application. A program for processing target data designated by the user is extracted from the side program (server logic 9), and the extracted program is generated as a client side program (client logic 10) on the client side.

The database 8 stores data handled by the Web application executed by the server logic 9 and the client logic 10.
The server logic 9 is a server-side program in which data processing handled by a Web application is described in Java (registered trademark) as a first language. The server logic 9 is a program that executes the requested processing content on the data stored in the database 8 when a data processing request is received from the user (client side) (when target data is instructed). . Then, the data processing result is passed to the client logic 10.

  The client logic 10 is a program for creating a screen for displaying a Web application on the client side, and is written in JavaScript (registered trademark) as a second language. The client logic 10 is a program that receives the data processing result from the server logic 9 and displays the data processing result on the display screen on the client side.

  For example, the database 8 stores personal information that is centrally managed for use in building management and the like. In building management, for example, personal information is used for entrance / exit management at the entrance of a building or entrance / exit management for each company on each floor of the building. Personal information is data that needs to be encrypted and concealed when stored and managed in the database 8 or when data is transmitted and received. For this reason, in the personal information, for example, when it is necessary to update the name data, the user designates the name data in the Web application.

When target data (for example, name data) is designated by a user using a Web application, the automatic program generation device 1 searches the database 8 for a storage area in which the target data is stored. Then, the storage area information (storage area information) including the column name, data type, and data size of the target data stored in the database 8 is acquired. Then, based on the acquired storage area information, the server logic 9 searches for a path for processing the target data. Then, the server logic 9 program for processing the target data is extracted, the extracted server logic 9 program is stored in the processing content primary storage unit 7, and the program for processing the target data is deleted from the server logic 9.
Next, based on the primary storage area information in the server logic 9 of the target data, the client logic 10 searches for a path for processing the target data. Then, a program for processing the target data stored in the processing content primary storage unit 7 is inserted into the portion after being converted from Java (registered trademark) as the first language into JavaScript (registered trademark) as the second language. .

Therefore, when the user designates the target data to update the target data that needs to be concealed, such as a name, among the personal information, the server logic 9 is constructed to process the data in a unified manner, for example, the encryption A data processing program including conversion and decryption is extracted and automatically generated as a client-side processing program, and the data in the database 8 is updated by the client-side processing program.
In this way, data including data encryption and decryption is automatically transferred to the client logic 10 by automatically transferring the data processing program including encryption and decryption, which has been processed by the server logic 9. Therefore, it is not necessary to send the target data that needs to be kept secret from the client side to the server in a decryptable state, and information leakage can be prevented.

Each configuration of such an automatic program generation device 1 will be described.
When the target data is input from the user, the database analysis unit 2 analyzes the storage area stored in the database 8 and determines the column name, data type, and data size of the area in which the target data is stored. Information to be included (storage area information) is acquired. Then, the storage area information of the acquired target data is output to the first language analysis unit 3.

  When the storage area information of the target data is input from the database analysis section 2, the first language analysis section 3 analyzes the program of the server logic 9, and applies the target data based on the storage area information of the target data. The path of the processing content to be executed is searched and the processing content program for the target data is specified. For example, a processing content program including information on the column name, data type, and data size of the target data is searched and specified. Then, the path for processing the target data is output to the first language update unit 4. Further, a processing content program for the target data is extracted and stored in the processing content primary storage unit 7.

The first language update unit 4 uses the path information for processing the target data input from the first language analysis unit 3 to delete the processing content program for the target data from the server logic 9 and Insert and update the substitution process in the part. Then, the first language update unit 4 outputs the primary storage area information in the server logic 9 of the target data to the second language analysis unit 5.
The primary storage area information in the server logic 9 of the target data is, for example, a class in which the target data after the target data is processed is primarily stored if the name of the personal information described in detail later is the target data. A name (UserForm), a variable name (firstName, lastName), a class name (UserForm) in which target data after updating to substitution processing is temporarily stored, and a variable name (name).

  When the primary storage area information in the server logic 9 of the target data is input from the first language update unit 4, the second language analysis unit 5 receives the primary storage area information in the server logic 9 of the input target data Is used to analyze the client logic 10, search for a path where the target data is processed, and specify a processing portion related to the target data. Then, the information on the path where the target data is processed is output to the second language update unit 6.

  When the path for processing the target data is input from the second language analysis unit 5, the second language update unit 6 acquires a processing content program for processing the target data from the processing content primary storage unit 7. The acquired program is converted from Java (registered trademark), which is the first language, into JavaScript (registered trademark), which is the second language, and is generated as a client-side program. Then, using the information on the path where the target data input from the second language analysis unit 5 is processed, the converted JavaScript (registered trademark) is inserted into the client logic 10 and updated.

  The processing content primary storage unit 7 stores a program to be processed on the target data extracted from the server logic 9 by the first language analysis unit 3. Further, a program to be processed for the stored target data is acquired from the second language update unit 6.

Next, the operation of the automatic program generation device 1 will be described.
FIG. 2 is a flowchart of the automatic program generation device 1 according to the embodiment of the present invention.
The method for analyzing the source code of the automatic program generation device 1 may be static analysis or dynamic analysis.
When target data instructing processing is input from a user by a Web application, the target data is input to the database analysis unit 2 of the automatic program generation device 1.

  Then, the database analysis unit 2 acquires storage area information (including schema name, table name, column name, data type, and data size) of the target data stored in the database 8. Then, the storage area information of the acquired target data is output to the first language analysis unit 3 (S1).

  When the storage area information of the target data is input from the database analysis section 2, the first language analysis section 3 analyzes the server logic 9 using the input storage area information of the target data, and passes the path through which the target data passes. get. Then, the acquired path information is output to the first language update unit 4. Further, the server logic 9 program to be processed for the target data is extracted. (S2).

  Then, the first language analysis unit 3 determines whether or not S4 or S4 to S6 has been executed for all the programs for the target data extracted in S2 (S3).

When it determines with having been performed by S3, the 1st language update part 4 outputs the primary storage area information in the server logic 9 of object data to the 2nd language analysis part 5, and transfers to the process of S7.
If it is determined that the process is not executed in S3, the process of S4 is executed.
The first language analysis unit 3 determines whether or not the processing content for the extracted target data is processing for processing or updating (S4).
When it is determined that the processing content is processing or update processing, processing in S5 is performed.
When it is determined that the processing content is processing that does not process or update, the processing returns to S3. The process that does not process or update is, for example, a case of reference only.

  In the case of a program that processes or updates the target data, the first language analysis unit 3 outputs a program that processes or updates the target data to the processing content primary storage unit 7 and stores it (S5). .

  Then, the first language update unit 4 uses the path information for processing the target data of the server logic 9 input from the first language analysis unit 3, and stores the processing content stored in the processing content primary storage unit 7. Delete from the server logic 9 (S6). The deleted program portion is updated by inserting substitution processing.

  When it is determined in S3 that S4 or S4 to S6 has been executed and primary storage area information in the server logic 9 of the target data is input from the first language update unit 4 to the second language analysis unit 5, the second The language analysis unit 5 analyzes the client logic 10 using the primary storage area information in the server logic 9 of the input target data, and acquires a path for processing the target data. Then, the acquired path is output to the second language update unit 6 (S7).

  When the path for processing the target data of the client logic 10 is input from the second language analysis unit 5, the second language update unit 6 executes the program stored in the processing content primary storage unit 7 in the first language Java. (Registered trademark) is converted into Java Script (registered trademark) in the second language, and is generated as a client-side program. Then, the client-side program for processing the generated target data is inserted into the client logic 10 using the path acquired by the first language analysis unit 3 and updated (S8).

Next, the configuration of the server logic 9 and the client logic 10 will be described in detail.
FIG. 3 is a diagram showing an example of a class configuration of the server logic 9 and the client logic 10 in the embodiment of the present invention.
The server logic 9 and the client logic 10 are composed of program classes that control the Web application. For example, the program that controls the Web application performs control to acquire target data designated by the user from the database 8 and display the result of processing the target data on the screen of the client-side Web application.
The class of the processing program is comprised of JSP21, UserForm22, UserLogic23, UserDto24, and UserDao25.

  When the target data that is requested to be processed by the user in the Web application is input to the JSP 21, the processing request for the target data is input from the Web application. Then, the processing request for the input target data is output to the UserLogic 22. When the result of the processing request for the target data is input from the UserLogic 23, the target data processed by the UserLogic 23 is acquired from the UserForm 22, and the processed target data is displayed on the screen of the Web application.

  The UserForm 22 temporarily stores the result of performing data processing for processing or updating the target data acquired by the UserLogic 23 from the UserDto24.

  The UserLogic 23 outputs a target data acquisition request to the UserDao 25 when a target data processing request is input from the JSP 21. When the processing result of the target data acquisition request is input from UserDao 25, the target data retrieved from the database 8 by UserDao 25 is acquired from UserDto24. Then, data processing for processing or updating the acquired target data is performed, and the result of the data processing is output to the UserForm 22 and temporarily stored. Then, the processing request result of the target data is output to the JSP 21.

  The UserDto 24 temporarily stores the target data that the UserDao 25 has taken out from the database 8.

  The UserDao 25 takes out the target data from the database 8 when an acquisition request for the target data is input from the UserLogic 23. Then, the target data extracted from the database 8 is temporarily stored in the UserDto 24. In addition, the processing result of the acquisition request for the target data is output to UserLogic 23.

  The server logic 9 and the client logic 10 are configured as described above, but each class of the server logic 9 is described in Java (registered trademark), and each class of the client logic 10 is JavaScript ( Registered trademark).

Next, a description example of each class is shown.
FIG. 4 is a diagram showing an example of UserDto 24 of the server logic 9 in the embodiment of the present invention.
In UserDto24 (a), a class having a name attribute for storing a name, for example, of personal information is described in Java (registered trademark). UserDao25 creates an instance of UserDto24, and stores the name of the personal information acquired from the database as a name attribute in UserDto24.

FIG. 5 is a diagram showing an example of the UserForm 22 of the server logic 9 updated by the first language update unit 4 in the embodiment of the present invention.
UserForm 22 (a) of the server logic 9 before being updated by the first language updating unit in FIG. 1 has a firstName attribute for storing the last name of the name of personal information and a lastName attribute for storing the name. The class is described in Java (registered trademark). Then, UserForm 22 (b) after being updated by the first language updating unit has a name attribute for storing the name of the personal information.

FIG. 6 is a diagram illustrating an example of UseLogic 23 of the server logic 9 updated by the first language update unit 4 in the embodiment of the present invention.
The UserLogic 23 (a) of the server logic 9 before being updated by the first language update unit in FIG. 1 is a logic that divides the name attribute value of UserDto24 by a single-byte space and stores it in the firstName attribute and the lastName attribute of UserForm22. It is described in Java (registered trademark).
The UserLogic 23 (b) after being updated by the first language update unit 4 is a logic for storing the name attribute value of UserDto 24 in the name attribute value of UserForm 22, and is written in Java (registered trademark).
The first language updating unit 4 assigns a class name (UserForm) and a variable name (firstName, lastName) in which the target data after the target data is processed in the server logic 9 before the update is temporarily stored. The class name (UserForm) and the variable name (name) in which the target data is temporarily stored in the server logic after updating to the process are output to the second language analysis unit 5.

FIG. 7 is a diagram showing an example of the JSP 21 of the client logic 10 updated by the second language update unit 6 according to the embodiment of the present invention.
The JSP 21 (a) of the client logic 10 before being updated by the second language update unit in FIG. 1 substitutes the firstName attribute of the UserForm22 into an element having the ID of name1 in HTML, and the lastName attribute is set to the ID of name2. This is a logic to be assigned to an element, and is described in JavaScript (registered trademark).

Then, JSP21 (b) after being updated by the second language update unit divides the name attribute value of UserForm22 into single-byte spaces and substitutes them into an element having ID of name1 and an element having ID of name2 in HTML. And is described in JavaScript (registered trademark).
In the example, the processing split for name is expressed in the same way in the first language Java (registered trademark) and the second language JavaScript (registered trademark). Sometimes converted to an expression.

FIG. 8 is a diagram showing an example of the processing content stored in the processing content primary storage unit 7 in the embodiment of the present invention.
The processing content primary storage unit 7 temporarily stores a processing destination 71, a processing source 72, and a processing content 73.
The processing content primary storage unit 7 analyzes the server logic 9 by the first language analysis unit 3 and extracts the processing content for processing the target data (for example, processing for dividing the name of personal information into first name and last name). The data are stored separately in the destination 71, the processing source 72, and the processing content 73. Then, the second language update unit 6 converts the processing content 73 into JavaScript (registered trademark), generates it as a client-side program, and inserts it into the client logic 10.

  As described above, based on the storage area information of the target data specified by the user, the program for processing the target data is extracted from the server logic 9, and the second language analysis unit performs the primary processing within the server logic 9 of the target data. Based on the storage area information, the processing part for the target data of the client logic 10 is specified. Then, the client logic 10 is generated by converting the processing program for the target data extracted from the server logic 9 into the client side program in the specified part. For example, information that only the client side can know is sent from the client side to the server side. Since data can be processed by a client program without being sent to the client, information leakage can be prevented.

  In addition, the processing contents to be processed or updated with respect to the target data are specified and extracted from the server logic, and the client logic 10 generates a process for processing or updating the target data. It can be processed by the program.

  In addition, since the processing content for processing the target data is specified using the storage area information of the target data acquired from the database analysis unit 2, a program can be generated at high speed.

  Further, since the processing content of the target data that has been performed on the server side is deleted, target data that can be known only on the client side is not processed on the server side, and information leakage can be further prevented.

  For example, if the target data that can only be known by the client side is personal information, and the server side program has a processing content that encrypts the personal information and centrally manages it in the database, the user can access the personal information data from the client side program. Therefore, the server side needs to decrypt the personal information data in the server side program. However, since the program generation apparatus 1 transfers the data processing including the encryption and decryption processing performed by the server side program to the client side program, the personal information data is transmitted and received from the client side to the server side. This eliminates the need to perform information leakage and prevents information leakage.

DESCRIPTION OF SYMBOLS 1 Program automatic generation apparatus, 2 Database analysis part, 3 1st language analysis part, 4 1st language update part, 5 2nd language analysis part, 6 2nd language update part, 7 Processing content primary storage part, 8 Database, 9 Server logic, 10 client logic, 21 JSP, 22 UserForm, 23 UserLogic, 24 UserDto, 25 UseDao.

Claims (6)

Extraction that extracts the server-side program that processes the target data from the server-side program that performs processing on the server side, based on the storage area information of the storage area of the database that stores the target data for which the user specified the process Means,
A specifying means for specifying a portion of the client-side program to be processed on the client-side program to be processed based on the information of the server-side program extracted by the extracting means;
The identified portions by said specifying means, the server-side program for processing the object data extracted by the extraction means, the program generating apparatus characterized by comprising a generating means for generating as said client-side program.   The program generation apparatus according to claim 1, wherein the extraction unit extracts a processing program for processing or updating the target data. Further comprising database analysis means for acquiring storage area information of an area where the target data is stored in a database;
The program generation apparatus according to claim 1, wherein the extraction unit extracts a server-side program that processes the target data based on the storage area information acquired by the database analysis unit. Update means for updating the server-side program,
3. The program generation apparatus according to claim 1, wherein the updating unit deletes the server-side program that processes the target data extracted by the extracting unit from the server-side program. The server-side program for processing the target data, the program generating apparatus according to claim 1, characterized in that it comprises an encryption or decryption. In a program generation method of a program generation apparatus that extracts a server side program that processes target data from a server side program that performs processing on the server side, and generates a client side program that performs processing on the client side.
Extraction that extracts the server-side program that processes the target data from the server-side program that performs processing on the server side, based on the storage area information of the storage area of the database that stores the target data for which the user specified the process Steps,
Based on the information of the server-side program extracted in the extraction step, a specifying step of specifying a portion where pre-recording target data of a client-side program to be processed on the client side is processed;
The identified portions by said specifying step, the server-side program for processing the object data extracted by the extraction step, the program generating method characterized by comprising a generation step of generating as the client-side program.

Images