JPH11232114A - Client server system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a client server system which suppresses and reduces the extension of the hardware scale, the increase in cost and man-hour of software maintenance and management even in the case of increase in the number of client terminals by performing centralized management of clients on the server side. SOLUTION: A server device 1 connected to an external network 11 and plural client devices 2 to 7 connected to the server through an internal network 10 are provided, and a memory device 8 and an auxiliary storage device which are accessed from the server device 1 and client devices 2 to 7 are connected to the internal network 10, and the memory device 8 is provided with a monitor/ limiting function for a network request, and plural operating systems OS and applications AP are registered in a disk device 9, and they are selected and used for every purpose on the client side.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a network system, and more particularly to a client server system in which a client terminal and a server are interconnected via a network.

[0002]

2. Description of the Related Art In a client-server system in which a plurality of client terminals and a server are interconnected via a network, a memory device and a disk device are mounted for each server and each client, and each server and each client are mounted. It is necessary to set the operating system (OS) and the application (AP) in the disk device. And software update /
When adding / changing, it is necessary to perform it for each client.

[0003]

As described above, the conventional client-server system has a memory and a disk device for each device constituting the system, and sets and updates the OS and AP for each device. Needs to be implemented, and as the number of clients increases, the hardware scale,
There is a problem that the cost increases and the number of steps for software maintenance management work increases.

[0004] Further, when data is shared and accessed between all devices, or when there is a waste / illegal network request from each device, the network usage becomes enormous, and the network transfer efficiency, There is a problem that the system performance is reduced.

[0005] Therefore, the present invention has been made in view of the above problems, and an object of the present invention is to suppress an increase in hardware scale and an increase in cost even when the number of client terminals increases, and to reduce the cost. An object of the present invention is to provide a client-server system that suppresses and reduces an increase in software maintenance management man-hours.

Another object of the present invention is to provide a client-server system in which clients can be centrally managed on a server side and software updates / additions / changes are facilitated.

Another object of the present invention is to provide a client-server system that achieves network security protection and improves network transfer efficiency.

[0008]

In order to achieve the above object, there is provided a server device connected to an external network, and a plurality of client devices connected to the server via an internal network. A memory device and an auxiliary storage device accessed from the server device and the client device are connected, the memory device has a monitoring / restriction function for a network request, and the disk device has an operating system ( A plurality of OSs) and applications (APs) are registered, and the client side selects and uses them for each purpose.

[0009]

DESCRIPTION OF THE PREFERRED EMBODIMENTS In a preferred embodiment of the present invention, in a client / server system interconnected by a network, a memory device and a disk device used by a server and a client are integrated, and the memory device is provided with a network. By providing a request monitoring / restriction function, protection and waste of the internal network and prevention of unauthorized use of the network are provided.

In the embodiment of the present invention, preferably, a plurality of operating systems (OSs) and applications (APs) used by the client are registered in the centralized disk device, and the client side separately registers for each purpose. By the selection / use, the server can be centrally managed, and the software can be easily updated / added / changed. Hereinafter, the present invention will be described in detail with reference to examples.

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a diagram showing the overall system configuration of a client-server system according to one embodiment of the present invention.

Referring to FIG. 1, an internal network 10
In addition, a server 1 for controlling the inside of a network, PCs (personal computers) 2 to 7 having a communication function as clients, a memory device 8 having a network monitoring / restriction function, and a disk device 9 are connected. ing. An external network 11 is connected to the server 1.

FIG. 2 shows an example of the configuration of the memory device 8 in one embodiment of the present invention. Referring to FIG. 2, an area 21 used by the server, a disk usage area 22, a network usage area 23, and areas 24 to 29 used by the PCs 2 to 7 are secured in the memory device 8.

The disk usage area 22 stores commands (eg, a data 61 read request 30, a data 62 read request 31, and a data 62 read request 31 in the disk device 9) requested from each device (server 1, PCs 2 to 7) or via an external network.
Data 65 read request 32, data 61 write request 33, etc.) are registered as needed, and a request is issued to the disk device 9.

In the network use area 23, a command for requesting an external network from each device (the server 1, the PCs 2 to 7) or a command which is requested to the server 1 via the external network (eg, a network request) 34, 35, 36, etc.) are registered at any time, and are executed after determining whether or not they can be executed.

In each of the PC use areas 23 to 29, an OS use area 37, an AP use area 38, and a data use area 39 required for each PC are arranged.

FIG. 3 shows an example of the configuration of the disk device 9 in one embodiment of the present invention. Referring to FIG. 3, an OS area 5 exclusively used for the server 1 is provided in the disk device 9.
1. The AP area 52 is arranged. OS areas used by the PCs 2 to 7 (for example, PC OS areas 53 to 55);
An AP area (for example, PC AP areas 56 to 59) and a data area 60 are provided. The data area 60 includes data 61 to 65 and the like.

Next, the operation of one embodiment of the present invention will be described.

First, in the server 1, areas used in the memory device 8 (server use area 21, disk use area 2
2. Network usage area 23, PC2-7 usage area 2
4 to 29) are set. Further, for each of the PCs 2 to 7, an OS and an AP to be used are selected, an OS / AP / data use area is set, and a memory area as shown in FIG. 2 is secured.

Executability is set for a request via the external network, that is, a request from the external network or a request from a device connected to the internal network to the external network. Executability setting includes authentication of a request source / request destination of a network request (for example, authentication based on the address of a terminal) and setting of availability of execution contents (file read / write, data transmission / reception, execution). Do. The setting contents are stored in the memory device 8, and the determination as to whether or not the network request can be executed is executed by the memory device 8.

Referring to FIG. 3 as a configuration inside the disk device 9, an OS area 51 and an AP area 52 used exclusively for the server 1 are arranged in the disk device 9. Also, P
Multiple OSs and APs used on the C side (OSs 53 to 5 for PCs)
5, PC APs 56 to 59) are arranged. On the PC side,
The OS and the AP are selected and used according to the application. The setting of the OS and the AP is performed by the server 1. Further, a data area 60 shared and used by the server and each PC is arranged. In the data area 60, data 61 to 65 to be shared and used
Etc.

Here, it is assumed that the OS and the AP are set in the PC 2 to use the PC OS 54 and the PC APs 56 and 58, respectively.

When the above settings are made and the PC 2 is started while the server 1 is operating, the PC is stored in the memory device 8.
Memory area 24 for 2 (capacity is set in server 1)
Is secured, and the PC OS 54 is loaded into the OS use area 37. Next, in the AP use area 38 of the memory device 8,
The PC APs 56 and 58 are loaded from the disk device 9, and the PC 2 enters the operating state.

According to the above configuration, the OS and AP on the PC side can be selected / used for each purpose, and the addition / change of software can be centrally managed on the server side.

Next, network processing in one embodiment of the present invention will be described.

A command for a request to the server 1 via the external network 11, or a command from the server 1, the PCs 2 to 7, and the disk device 9 under the internal network 10 to another server via the external network 11. The command, which is a request for the request, is stored in the network use area 23 in the memory device 8, for example, as network requests 34, 35, 36, and the like.

Network use area 2 in memory device 8
In response to the command stored in No. 3, the memory device 8 authenticates the request source / request destination of the network. Discard commands that do not allow the request. Further, the execution of the command (file read / write, data transmission / reception, execution) is confirmed.
Commands that are not permitted for execution contents are also discarded.

The permitted commands are sequentially processed.

Server 1 via external network 11
In the case of the execution request command, the command is transferred to the server 1 (that is, transferred to the server use area 21), and then the process is performed.

Further, via the external network 11,
The command requested by the disk device 9 is transferred to the disk usage area 22.

In the case of a command requested from a device (server 1, PCs 2 to 7, disk device 9) under the internal network, the external network 1
A command is sent to 1.

Next, processing of the disk device 9 according to one embodiment of the present invention will be described.

A command requested from each device (server 1, PCs 2 to 7) or via the external network 11, that is, a command stored and permitted in the network use area, is stored in the disk use area 2 in the memory device 8.
2, the data 61 read request 30, the data 62
These are stored as a read request 31, a data 65 read request 32, a data 61 write request 33, and the like.

A request for the command stored in the disk usage area 22 is output to the disk device 9 as needed. The disk device 9 receives this request and performs processing internally. At this time, if the request is a write request, the data is written and the end of the data is notified to the request source.
The data is transferred to the use area of the request source in the.

If the request source is a PC, the data is transferred to a data use area in the PC use area (for example, the data use area 39 in the case of PC2).

When the request source comes from the external network 11, one network request (command)
Is transferred to the network use area 23 and processed. That is, after the determination of the feasibility, it is sent to the external network 11 via the server 1.

Here, it is assumed that the PC 2 issues a data 61 read request into the disk device 9. After the PC 2 generates a command for the data 61 read request (including the file name, the file transfer destination (within the data use area 39), and the request source (PC 2)), the command is transferred to the disk use area 22. .

The transferred command (data 61 read request 30) is issued to the disk device 9.

Upon receiving this request, the disk device 9 reads the data 61 and stores the data 6 in the transfer destination (the data use area 39 of the PC 2) specified in the read request 30.
Transfer 1

Thereafter, when writing after editing the data 61 on the PC 2, similarly, after generating a command on the PC 2 (file name, data location (in the data use area 39), etc.), the command Only the (data 61 write request 33) is issued to the disk device 9 via the disk use area 22.

Upon receiving this request, the disk device 9 takes out the data 61 from the data use area 39, writes the data 61, and after the writing is completed normally,
Notify PC2 of completion.

According to the above processing, a request for a terminal connected to the internal network to the external network is sent to the terminal via the external network (to the internal network 10).
It is possible to limit the requests that are sent. Because of this, internal network security,
It is possible to limit useless / illegal network requests.

[0043]

As described above, according to the present invention,
For network requests, ie external access,
By providing the authentication / executability function in the memory device, the security of the internal network can be protected from unauthorized external access, and the waste /
It is possible to limit unauthorized network requests,
This has the effect.

Further, in the present invention, by integrating the memory device and the disk device, the data transfer between the devices can be performed in the memory device, so that the use amount of the internal network is reduced and the system performance is reduced. It has the effect of improving.

Further, according to the present invention, a plurality of operating systems and applications to be used by a client are registered in a centralized disk device, and the client side selects and uses the operating system and application for each purpose, so that the server side performs centralized management. This makes it possible to easily update / add / change software.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an embodiment of the present invention.

FIG. 2 is a diagram illustrating an example of a configuration of a memory device according to an embodiment of the present invention.

FIG. 3 is a diagram illustrating an example of a configuration of a disk device according to an embodiment of the present invention.

[Explanation of symbols]

 Reference Signs List 1 server 2-7 client (PC) 8 memory device 9 disk device 10 internal network 11 external network 21 server use region 22 disk use region 23 network use region 24-29 PC use region 30-33 data write request 34-36 network request 37 OS use area 38 AP use area 39 Data use area 51 Server OS area 52 Server AP area 53-55 PC OS area 56-59 PC AP area 60 Data area 61-65 data

Claims (4)

[Claims] 1. A server device connected to an external network, and a plurality of client devices connected to the server via an internal network, wherein the internal network is shared by the server device and each of the client devices. The memory device to be accessed and the auxiliary storage device are connected, the memory device includes means for monitoring and limiting network requests, and the disk device has an operating system (OS) and an application (AP) used by each of the clients. ) Are registered in advance, and each client selects and uses the OS and / or AP for each purpose. 2. The memory device is provided with a memory area used by each of the server device and each of the client devices, and a memory area storing an access request and a network access request of the auxiliary storage device. The client-server system according to claim 1, wherein: 3. An access request from the external network and a network request as an access request from the server and the client connected to the internal network to the external network are temporarily stored in the memory device. 3. The client-server system according to claim 1, wherein the device determines whether the request can be executed. 4. The method according to claim 1, wherein the setting of the feasibility is performed by the memory device to authenticate the request source / request destination of the network request and to determine whether or not to execute the execution contents such as file read / write and data transmission / reception requests. 2. The client-server system according to claim 1, wherein a setting is made, and a determination is made as to whether or not the request can be executed in response to a network request.