WO2004055687A1

WO2004055687A1 - Distribution system and service transmission/reception environment formation method

Info

Publication number: WO2004055687A1
Application number: PCT/JP2003/013078
Authority: WO
Inventors: Shigetoshi SAMESIMA; Katsumi Kawano; Takeshi Miyao; Yoshiaki Adachi
Original assignee: Hitachi, Ltd.
Priority date: 2002-12-18
Filing date: 2003-10-10
Publication date: 2004-07-01
Also published as: JP2004199300A; JP4284060B2

Abstract

There is provided a service transmission/reception environment which flexibly shares resources only via a resource group valid for service provision among resource groups dynamically found and satisfies a requested condition. A service formation processing (232) transmits a request service condition (214) and searches resources described in a service list (212) of each device and calculation resources of each device so as to judge the valid service level. Here, the search range can be limited according to a resource disclosure policy (217). In the service formation processing (232) of each device, data to be disclosed to another device is limited. A service session management processing (233) discloses each resource according to the service provided by using the disclosure mode of each resource stored in a mode management table (215).

Description

Description Distributed system and method for forming service transfer environment

The present invention relates to a distributed system in which a plurality of devices each including a processing unit that performs data processing and a communication unit that performs communication between other devices are connected, and each of them performs processing in cooperation with each other. In particular, it relates to technology for building appropriate linkages for computer resources, programs, data, and other resources provided by each device in order to provide services according to the services received. It can be suitably applied to buildings, home systems, social systems such as plant control and manufacturing, logistics, and control systems such as transportation systems. Background art

Flexible use of computer resources permeated by social infrastructure equipment and devices according to the physical environment, time, user status including service users and surrounding people, available computers, network, etc. It is becoming possible to provide services by utilizing and linking. For example, in public spaces such as buildings and towns, any information terminal near the user is used as an information service output destination, or multimedia content is output by combining audio equipment. . Alternatively, data is distributed to maintenance personnel terminals and worker terminals in response to events held by the plant control equipment and events transmitted from the equipment, and the operation status of the equipment is controlled. In such a system, in order to provide a specific service, an appropriate resource that is effective in providing the service is selected from a computer and resources such as input / output devices, software and data connected to the computer, Coordination is required. Here, as the situation changes, it is not possible to determine the appropriate resources until it is time to provide services. This requires dynamic resource discovery and coordination between resources. In addition, in order to discover such resources and link between resources, in addition to the functions provided by each resource in order to provide services, It is also necessary to consider conditions such as energy and performance.

As a means for discovering such dynamic resources, there is a method called plug-and-play as a means for detecting a dynamic resource configuration. This is described in Non-Patent Document 1, for example. Here, the functions that a device can provide are described as a service, and are broadcast to other devices when connected to a network. The device using the service receives the message or broadcasts a message to search for another device by specifying the service to be used, and from the information of the device responding to the message, Search for devices. The broadcast range is the range of network connection and is limited by the number of hops.

As a means for making such guarantees based on specific conditions, there is a control method using a policy. It declaratively describes non-functional requirements such as security and QoS, and controls execution. -As a method of controlling the disclosure range of personal information according to the service, for example, there is P3P (Platform for Privacy Preferences) established by the World Wide Web Consortium (W3C) (for example, Non-Patent Document 2). This is to determine the type of personal information to be used on the service provider site and other servers that disclose the personal information, and decide whether to receive the service by comparing it with the disclosed personal information. . As a method of restricting the access of each resource to other resources, there is, for example, the “The Ponder Policy Specification Language” (for example, Non-Patent Document 3). This describes permission to access a specific resource, data to be released, restrictions on access, and timing switching conditions for the specific resource. Specific resources to which access is permitted can also be registered as a group.

Non-Patent Document 1:

UPnP Forum Introduction to Universal Plug and Play Lo line] [Searched on February 12, 2002], Internet <URL:

http: // www. upnp. org / download / Compressea-UPnP „Forum_Mktg_Presenta tion.zip>

Non-Patent Document 2:

The Platform for Privacy Preferences 1.0 (P3P1.0) Specification W3C Candidate Recommendation 15 December 2000 [on line] [Search on February 12, 2002], Internet URL:

http://www.w3.org/TR/2000/CR-P3P-20001215>

Non-Patent Document 3:

The Ponder Policy Specification Language N. Damianou, N. Dulay, E. Lupu, M Sloman,: The Ponder Specification Language Workshop on Policies for Distributed Systems and Networks (Policy2001), HP Labs Bristol, 29-31 Jan 2001. ] [Searched on February 12, 2002], Internet <URL:

http://www.doc.ic.ac.uk/mss/Papers/Ponder—Po 丄 icy0lV5.pdf

In the plug-and-play technology described above, the service search range is limited only to network connectivity, and there was a problem when personal information was leaked to search for an available service. In addition, since the resources used vary depending on the user and the service as described above, the conventional method that describes the service and the resources to be used as a policy and determines whether the user receives the service or not. In this case, there was a limit to the flexible use of resources to provide services.

In addition, the devices that cooperate to provide services are from widows such as Kiosk terminals that can be used for the public to access control devices that can be controlled only by specific users, servers such as servers that monitor and manage services and charge for them. Security settings span a wide range. These devices range from high-spec devices with security management functions to low-spec devices without such functions. There are various combinations of resources that have data, resources that access data, and resources that guarantee performance, and not all resources can execute the specified policy. Alternatively, performance and security at the time of access can be secured In many cases, it is difficult to check in advance whether or not a combination exists, and it is difficult to describe all combinations as policies. DISCLOSURE OF THE INVENTION-The present invention has been made in view of the above-mentioned problems, and among resources that are dynamically discovered, resources are flexibly shared only by resources that are effective for service provision, and a required condition is satisfied. Provide a service delivery environment that satisfies.

According to the present invention, a plurality of devices each including a processing unit for performing data processing and a communication unit for performing communication with another device are connected, and a required service is provided to a distributed system that performs processing in cooperation with each other. Means for detecting resources required for the above from the plurality of devices, means for determining whether or not the detected resources satisfy a resource disclosure policy, and means for providing a service by linking resources satisfying a resource disclosure policy And with.

By setting the resource disclosure policy as the security capability of either the confidentiality performance or the processing performance of the resource, it is possible to prevent leakage of data, etc. due to unauthorized use, and to secure the speed at which services are provided. it can.

As one aspect of the present invention, a step of limiting the range of resources to be published, that is, the range of granting access rights to resources, according to the assurance capability of resources such as security in a distributed system, and a service can be used. A step of presenting at the level corresponding to the resource and a step of selecting the resource to be used for providing the service by comparing the service with the resource and providing an appropriate service according to the service and the personal information to be disclosed. Services can be exchanged using resources. .

As another aspect, a mode in which a mode corresponding to the service for which each resource is to be disclosed is held in association with the resource, and the service is identified and the resource is accessed. Restricting the public resources according to the request and the mode, and by executing the step, the data is not released to resources other than those effective for providing the desired service, and the required quality is maintained. The necessary services can be formed.

As another aspect, the officer manages the relationship between a service and another service to share information when the service is hierarchically configured with other services, and manages a certain service. The resource disclosure conditions of other services are delegated to the constituent partial services, so that services can be formed without having to describe resource availability for all combinations of resources.

For devices that do not have a mode management function in advance, a step of distributing specific software to each device, and each device must perform data transmission and execution between applications and execution management via the software. Now, it is possible to manage the effective modes for providing services.

Execute the steps of determining the services that can be provided by limiting the disclosure range, and determining the services to be provided by gradually expanding the disclosure range. If the access right of each resource is not disclosed, the service Even if it is not possible to determine whether it is possible, it is possible to determine the effective resource group for service provision in stages. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a diagram showing the overall configuration of a system according to an embodiment of the present invention.

FIG. 2 is a diagram showing a detailed block of the system configuration.

FIG. 3 is a diagram showing a configuration example of the user Cont ext table 21 1. FIG. 4 is a diagram showing a configuration example of the required service condition 2 14.

FIG. 5 is a diagram showing a configuration example of the service list 2 12.

FIG. 6 is a diagram showing a configuration example of the device group management table 2 13.

FIG. 7 is a diagram showing a configuration example of the system configuration management table 2 16. FIG. 8 is a diagram showing a configuration example of the resource disclosure policy 217.

FIG. 9 is a diagram showing the flow of the service forming process 232.

FIG. 10 is a diagram showing a message configuration example.

FIG. 11 is a diagram showing a configuration example of the mode management table 2 15. FIG. 12 is a diagram showing a process flow of the service session management process 2 33. .

FIG. 13 is a diagram showing a processing flow of the embodiment in which the service formation processing distributes software.

Figure 1.4 shows an example of combining distribution software with existing programs.

FIG. 15 is a diagram illustrating an example of a system configuration in a situation where a specific service is realized. BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the following examples,

(1) A method of determining the level of service that can be provided according to the range of resources for which access rights are disclosed.

(2) If the availability of the resource group is difficult to describe in advance, that is, if the available resources cannot be determined without disclosing the access right, try to find and select the available resources by trial. A method to determine the services that can be provided by limiting the disclosure range, and to determine the services to be provided by gradually expanding the disclosure range.

(3) A method in which each resource has a mode corresponding to the service, and the range of resources to be disclosed is limited to share information used for providing the service.

(4) When the transfer of information between devices in the mode corresponding to each service is permitted when the service is hierarchized.

(5) A method for distributing software and managing the mode of the device using the software, as a method when the device does not have a function for mode management.

Will be described in detail.

FIG. 1 shows a configuration example of an embodiment of a system to which the present invention is applied. The service system of the present embodiment includes a gateway 1 1 1, a floor server 1 1 2, It consists of 1 13 and device 1 2 1 to 1 2 4. Devices 1 2 1 to 1 2 4 are equipment that controls the actual environment, such as an information processing device equipped with a display device such as a Kiosk terminal, a voice output device such as speed, or an automatic door / vacuum device. This is a device that is required to provide services such as providing information and controlling the real environment. The gateway 1 1 1, the floor servers 1 1 2 and 1 1 3 and the device 1 2 2 are connected via a communication medium 13 1. The floor server 1 1 2 and the device 1 2 1, the floor server 1 1 3 and the device 1 2 4, the device 1 2 4 and the device 1 2 3 use the wireless communication media 1 3 2, 1 3 3 and 1 3 4 respectively. Connected via The communication medium may be a wire such as an Ethernet (registered trademark) twisted pair cable, or may be a power saving radio or a radio such as infrared.

The devices 14 1 and 14 2 used by the service user operate in conjunction with these floor servers and devices as the service user moves. The service user device 1 4 1 is the floor server 1 1 2 and the device 1 2 1 via the wireless communication medium 1 3 2, and the service user device 1 4 2 is the floor server 1 via the wireless communication medium 1 3 3 13 and device 1 2 4 respectively. Here, the personal information of the service user is stored in the service user device 141, 142 or the gateway 111. These gateway floor servers, devices, and user devices are collectively referred to as devices here.

FIG. 2 shows a detailed configuration of a system in which two devices to which the present invention is applied are connected.

The service requesting device 201 is a communication interface with the outside, software for performing processing in each device, a storage unit for storing various data, and a program read from the storage unit for processing. And each unit is connected by an internal path. The software for performing the processing of the device 201 includes a communication processing 231, a service formation processing 2332, and a processing program 2336. The data used in each process is the user context table 2 1 1, the system configuration management table 2 16 and the required service conditions 2 It has a resource disclosure policy 2 17.

The communication process 231 is a process for exchanging data with another device via a communication interface, and performs encryption of communication between the devices. The service formation process 232 publishes the personal information stored in the user's own user's Content Xt table 211 and uses the system configuration management table 216 and resource disclosure policy 217. Search for other devices and determine service providing devices. The processing program 236 performs service providing processing in cooperation with other devices.

Personal information is stored in the user ConteXt table 2 1 1. The personal information may be generated by some application program, or may be input to the service user through an external input / output unit 243 such as a keyboard. Alternatively, the position information sensor may be acquired by using the external input / output unit 243. Alternatively, it may be obtained from another device via the communication process 231.

The required service condition 2 14 stores the required service and its condition. The requested service and its conditions may be input from the service user via the external input / output unit 243, or may be downloaded via the communication process 231. -The external input / output unit 243 is a device controlled by a processing program 236, such as a sensor actuator or a camera, or a device via a man-machine interface such as a liquid crystal panel, keyboard, or touch panel. It has a function of controlling the processing program 236 executed above and referring to an output value. However, this is not essential, and some devices do not have external input / output units.

The service requesting device 201 may be a service user device 141, 142, or may be a device for the service user to input, or a gateway for providing contents. There may be.

The service provider device 202 runs the processing program 235 A device that provides services. The device 202 is, like the service requesting device 201, provided with a communication interface with the outside, a storage unit for storing software for performing processing in each device and various data, and a storage unit. It consists of a processing unit that reads out and processes the program, and each unit is connected via an internal path. The software that performs the processing of the device 201 includes a communication process 231, a service formation process 2332, a service session management process 2333, and a processing program 235. As data used in each process, there are a user context table 211, a surf and a list 212, a device group management table 211 mode management table 215.

The service formation process 232 searches for the service list 221 of the own device or another device using the personal information provided from the service requesting device 201 or the service providing device 202. The equipment that can provide the service and its interface are presented. ―

The service session management process 2 3 3 links data between devices specified by the service requesting device 201 and uses the resource disclosure mode described in the mode management table 210 to publish data between devices. Restrict resources such as computing resources and processing programs.

The processing program 235 is an application program that operates to provide services, exchanges information with humans and the environment via the external input / output unit 242, and uses the external storage 241. To store and withdraw data.

-The device management table 2 13 stores management information on the devices used to provide the service. The service list 2 12 stores information on interfaces that the processing program 23 S discloses to other processing programs.

The external input / output unit 242 is the same as that described for the external input / output unit 243 of the service using side device.

Although only one service providing device is described here, Exist and are connected to each other via one or more communication media. FIG. 3 shows a configuration example of the user context table 2 1 1. The file 310 is composed of records 311 to 314. Record 311 is an item indicating location information in the real world. Here, it is stored that “Address” indicating the address is “Chiyoda 1” in Chiyoda-ku and “Location” indicating the location is “areal”. You. Record 312 shows personal information on the network. In this case, the e-mail address "E-Mail Address" is "anon@sdl.hitachi.co.jp". Is recorded. Similarly, the record 3 13 indicates the affiliated organization, and stores the religion, affiliated union, and the like. Record 314 is a field for storing a user identifier, and stores, for example, a password ID for using a computer, an electronic signature indicating the user, and the like.

FIG. 4 shows a configuration example of the required service condition 2 14. (A) shows the components of the entire required service condition 2 14. It consists of a service entry 651, a functional condition 652, a data condition 653, and a calculation condition 655.4.

The functional condition 652 is composed of the number of soft resources 612, resource identifiers and use interfaces 613 to 614 as shown in (b). The number of soft resources 612 stores the number of soft resources used by the service represented by the identifier shown in the service entry 652. The number of resources is the same as the number of items 6 13 and 6 14. The resource identifiers and use interfaces 613 and 614 store the index of the software resource, the identifier of the processing program used by the service, and the interface used. Here, 'resource identifier' may or may not be specified. In the example of item 6 13, it is indicated that the processing program is “*”, that is, an arbitrary processing program, and that the processing program indicated by the interface “InfoOut (Map) j is used. Is described using IDL (Interface Definition Language) as described in “Inside CORBA—Corba and its Application to System Development” (ISBN4-7561-2015-6). It is identified using the interface name stored in the repository. Alternatively, it may be defined in WSDL (Web Service Description Language) to describe a series of calling procedures and an interface of calling processing from a processing program.

The data condition 653 is composed of the number of data resources 615 and the data resources 616 and 617 as shown in (c). The number of data resources 6 15 stores the number of data resources used by the service represented by the identifier shown in the service entry 651. The number of resources is the number of items 6 16 and 6 17. The data resources 6 16, 6 and 17 store the identifiers and access conditions of the data used by the service. In item 6 16, item “O n 1 i n e” force S of data U se r C o n t ext is specified, and in item 6 17, data “M a p” is specified. A data resource may be identified using a file name or a unique identifier for each resource.

The calculation condition 654 is composed of the number of calculation resources 6 18 and the calculation resources 6 19 as shown in (d). The number of computational resources 6 18 stores the number of computational resources used by the service represented by the identifier shown in the service entry 651, and is the number of items 6 19. The computational resource 6 19 stores the computational resource and amount used by the service in the device where the processing program specified by the software resource exists. For example, item 6 19 indicates that the device indicated by index 1 of the software resource requires two threads.

FIG. 5 shows a configuration example of the service list 2 12. The service list 2 12 includes a service entry 5 11 1, a processing program 5 12, an interface 5 13 3, and a device identifier 5 14.

The service entry 511 is a finoredo that stores an identifier indicating the type of service.

The processing program '512' is a field for storing an identifier of a processing program which operates to provide the service.

The interface 513 is an interface provided by the processing program. This is a field for storing the identifier of the resource type. The interface 5 13, like the use interface of FIG. 4, is not a call function of the processing program, but a series of call procedures as defined in, for example, WSDL (Web Service Description Language). Also includes the interface of the call processing from the processing program. In some cases, processing programs provide services in cooperation with each other.

The device identifier 514 is a field for storing the identifier of the device in which the processing program indicated by each record is stored. In the case of a processing program stored in the own device, the identifier of the own device is stored. When the processing provider of another device is used to realize the service entry 511, the identifier of the device storing the processing program 512 is stored. When a service is provided in cooperation with processing programs existing on multiple devices, the relationship is established in advance.If δ, the service list 2 1 2 is constructed in this format. There is also.

Records in the service list 211 may have data resource registrations. In this case, the data identifier is stored in the field of the processing program. Record 5 23 shows an example of ^.

The required service conditions and the service list are described as described with reference to FIGS. 4 and 5, and the resources that are effective in providing the service are determined by collating them as described later. In the present embodiment, examples of software resources, data resources, and calculation resources have been described. However, resources of input / output devices and other resources may be explicitly described and managed. In addition, the flow of data between resources may be described, and this may be used for determining effective resources.

FIG. 6 shows a configuration example of the device group management table 2 13. The device group management tape 213 includes fields 711 to 715.

The service session 711 is a field for storing the identifier of the entity of the service being provided, is generated by the service formation process 232, and is used by the service session management process 233. Where the same There are multiple entities with the service identifier of For example, the entity that provides the navigation service indicated by the service identifier “N avi” to user A using the device AA and the entity that provides the navigation service for user B using the device BB Exists. In this way, even if the service identifier is the same, if the device, processing program, or user used is different, it is identified by different service sessions. .

The configuration member 7 12 is a field for storing the configuration member devices of the session.

The device status 711 is a field for storing the status of the device indicated by the record, and the task status 714 is for storing the status of the processing program for executing the service of the device indicated by the record. Field. The fields 713 and 714 can be updated, for example, by using a method as disclosed in Japanese Patent Application Laid-Open No. 2001-145174. The update time 715 stores the latest time when the state of the device and the processing program indicated by the record is detected.

FIG. 7 is a diagram showing an example of the system configuration management table 2 16. (A) is a diagram logically expressing an example of a system configuration to which the present invention is applied. Computers 1901 to 1906 for performing the functions shown in the figure are connected by communication paths 1951 to 1957, respectively. (B) is a part of the configuration management table and displays the assurance capability held by each communication path. A communication path 1911 1 is a field for storing a classification of a communication path between devices. In the evaluation scale 1912 and the assurance level 1913, the evaluation scale and the assurance level of the communication channel indicated by each record are stored. Record 1921 has communication channel "C1", that is, 1951 to 1953, power S, and evaluation scale "Confidentia 1", that is, assurance level "2" regarding confidentiality of communication channel. It has been shown. Here, the assurance level is arbitrarily determined for each system. For example, it can be determined at the following levels:

Assurance level 1: Individual encryption communication between devices Assurance level 2: Encrypted communication shared between multiple devices

Guaranteed Revenue 3: Revenue that can trace messages

On the other hand, (c) is a part of the configuration management table, and displays the assurance capability held by each device. The device 1931 is a field for storing the identifier of the device. The evaluation scale 1932 and the assurance level 1933 are fields for storing the evaluation scale and the assurance level, respectively, similarly to the communication channel. The guarantee level should be the same as described above.

The information described in FIG. 7 may be acquired in the service forming process described in FIG. Alternatively, it may be obtained by some means and stored. FIG. 8 shows a configuration example of the resource disclosure policy 217. Field 2 0 1 1 is a field for storing the identifier of the resource to be published. As with the system configuration management table described in Fig. 7, each of the evaluation scales 201 and 2 and the assurance level 201 are the evaluation scales that are acceptable when disclosing each resource. The assurance level is stored. For example, in record 2021, the resource “UserCont Xt: Oή1ine” must be disclosed to the assurance level “2” for the evaluation scale “Confidentia 1”. And forgive. In the example of FIG. 7, when the resource “Us- erContext: On1ine” is stored in the device 1901, it is made public on the communication channels C1 and C2, but is made public on C3. Is not shown. Although confidentiality is used as the evaluation scale in this example, an evaluation scale such as performance can be used. FIG. 9 shows a processing flow of the service ^ processing 2 32.

In the service requesting device 201, prior to requesting a service from the service providing devices X and Y, the resource release policy, the resource to which the access right is to be disclosed, the evaluation scale, and the assurance level are set in the resource release policy 217 The transmission range of the service providing device search message is set in a range that satisfies the assurance level (step 211). For the transmission range, for example, the system configuration in the system configuration management table 216 is compared with the resource release policy 217, and only devices that satisfy the assurance level are specified. The service requesting device 201 acquires the condition of the requested service from the required service condition 214, generates a unique request identifier, creates a signature, and sends a service providing device search message (step 8 1 1). The request identifier is created to be unique using, for example, the identifier of the own device and the time. This message may be issued to a server that has a list of available services retrieved using a method such as the one found in the Understanding Universal Plug and Play White Paper, or a network segment. You can also cast it to the website.

The service-providing devices X and Y that have received this message search the service list 2 12 to determine whether their devices have resources that match the conditions described in this message. Find out and determine if it can be made public.

In the case of software resources or data resources, it is determined whether or not they are registered in the service list. In the case of a computational resource, the specified resource is reserved. The record of the detected service list or the secured computing resource is registered by adding a record to the mode management table 215. Here, if the detected resource is already reserved for another service, exclusive control may be performed to determine that it cannot be disclosed. Also, access control may be performed.

If it can be made public, it returns to the service requesting device 201 with matching resource information and a signature that matches the request message. If all or some of the resources do not match, the search message is forwarded to another service providing device (step 812). The case where there is no part of the matching resources is, for example, the case where there is no matching processing program which is a part of the element for providing a certain service described in a certain service list.

Here, the search message is transferred to other service providing devices using the Trader service method of “Inside CORBA—Corba and its application to system development” (ISBN4-7561-2015-6). , Turn The number of times of sending may be limited.

The service requesting device 201 receives the response message issued in step 812, and compares the request identifier added to the message with the request identification “” child created in step 810. Check whether the response is to the own device. Also, the resource information contained in the response message is obtained (step 813).

After receiving the response, the system configuration management table 216 and the resource disclosure policy 217 are collated to extract a combination of a resource effective for service provision and a service provision form using the resource. Here, the flow of data between resources is described in the required service condition 2 14, and this may be determined. After that, the equipment to be used as the service providing equipment is selected according to the predetermined criteria (Step 8 14).

Whether the service determined here is valid or not is determined by a predetermined evaluation scale (step 2113). Here, the predetermined evaluation measure is whether or not all resources providing the service described in the required service condition are accessible. If the judgment is valid, the session identifier information indicating the access right and the resource allocation are transmitted to the selected device (step 815), and the service is received. -If the result of the determination in step 211 is not valid, update the resource release policy 217 (step 215) and return to step 181. Updating of the resource disclosure policy is, for example, a process of relaxing the condition of the assurance level 2003 or adding a resource to be disclosed. These may be selected from the difference between the required service conditions 2 14 and the resources that were found. .

Although the selection of the service providing device is omitted in the present embodiment, for example, the attribute of the resource and the like can be registered in the service list 212 and used by returning it together with the resource information. . In addition, authentication and access control of the service requesting device 201 may be performed using data added to the service providing device search message. In addition, provide specific services In this embodiment, a method of distributing a message by adding a session identifier to the specification of the service providing device for the service is described. However, as shown in Japanese Patent Application No. 2002-44411, each service is provided. A session for data sharing between devices may be established and used to identify a particular service. Also, in this embodiment, an example has been described in which the required service conditions are added to the service providing device search message to search for resources that can be provided by the service providing device. The side device 201 may check with the required service condition.

Note that the above processing flow is an example where the availability of resources is difficult to describe in advance, that is, the effectiveness of the service cannot be determined unless the access rights are disclosed (for example, when a specific person is specified). (If personal information is included in the required service conditions and you do not want to send it to an unspecified service providing device) Method to determine the service to be provided by extending the process described in the above section. However, if it is not necessary to perform the process in the above case, this process (steps 2 11 1 and 2 1 1 3 and 2 1 1 5) may be omitted. FIG. 10 shows an example of a message configuration exchanged between devices.

(a) is a diagram showing a configuration example of a search message of a service providing device. This is issued in the message (1) of the service formation process 2 32 described in FIG. This message consists of message header 911, message type 912, required service condition 913, requester signature 914, request identifier 915, and data 916. The message header 911 is used in the communication process 231 and stores information necessary for exchanging data between devices. It also encrypts the message and anonymizes the sender. The message type 912 stores information for identifying the type of the message, and stores information such as a service providing device search message and a response message to the message. The required service condition 9 13 is a condition for searching for a service providing device. The information of condition 2 14 is stored. The request source signature 914 stores the signature at the time of issuing the message in the service using side device that has issued the service providing device search message. The request identifier 915 is information for uniquely identifying the service providing device search message. Data 916 is a field for storing other additional data.

(b) is a diagram showing a configuration example of a response message to the service providing device search message described in (a) '. This is issued in the message (2) of the service formation process 2 32 described in FIG. The message header is the same as in ( _a ), and the message type 9.12 stores that it is a service providing device response message. The request source signature 914 and the request identifier 915 stored in the service providing device search message received as a trigger for transmitting the response are included in the request source signature 914 and the request identifier 915. Are respectively stored. The provided service 921 stores a resource provided by the transmission source device of the response message acquired from the service list 212 or a service identifier and related information.

(c) is a diagram showing a configuration example of a message for determining and specifying a service providing device. This is issued in the message (3) of the service formation process 2 32 described in FIG. The message header 911, the message type 912, the requester signature 914, and the session identifier 932 are the same as the service providing device search message described in (a). Here, as the session identifier 932, a unique identifier that is generated in step 815 and is a key for using the resource for providing the service is stored. The allocation data 931 stores a column of resource identifiers that operate to provide the service. In (c), as an example of a software resource, an example is shown in which a software resource identifier and a use interface are stored in fields 941 to 942. Here, the number of resources constituting the allocation data 931 can be any number.

In this embodiment, the service requesting device 201 has a resource disclosure policy. Although an example in which the resource 217 exists is shown, even if the resource exists in another device, it can be easily implemented by acquiring the resource disclosure policy 217. According to the method described in this embodiment, the level of service that can be provided can be determined according to the range of the resource whose access right is disclosed, and an appropriate service can be formed.

FIG. 11 shows a configuration example of the mode management table 2 15. The mode management table 2 15 is composed of a resource identifier 4 11 1, a public mode 4 12 and a public purpose service 4 13. The resource identifier 411 is an identifier of a resource in the device, and stores an identifier of a processing program, data, a computer resource, or the like. The "open mode" 412 is an item for storing the open mode of the resource specified in each record. For example, the following specification is made.

• P ub l i c: State to publish to any request.

• Private: A state in which the information is disclosed only for the purpose of providing a specific service. • Prottechd: Status actually used to provide a specific service.

The disclosure purpose service 4 13 specifies the identifier of the service that is to release the resource specified in each record. For example, record 422 indicates that the resource "map data" is open to other resources for the service specified by the identifier "Navi". The record 4 2 4 indicates that the thread of the operating system indicated by the resource “K Thread>” indicates that the specific resource of the service “Navi” is selected by the method described in this embodiment, and the session identifier "1" indicates that it is available for the assigned one.

Figure 15 shows the service 1 1 1 1 providing the “video viewing service” for user A and the service 1 1 1 2 providing the service for user B (air-conditioning temperature control). An example of a service configuration is shown. The service 111 uses the resource “speaker” and provides the service using the other service “video playback”. The service "Video playback" is a resource "VCR" And provide services using “speakers”. Here, the users of service 1 1 1 1 and service 1 1 1 2 are different, and the data is not disclosed in these questions. The service 1 1 1 1 and the service 1 1 2 1 are services for the same user A, and data is shared to provide the service. ·

FIG. 12 shows the flow of the service session management process 233 when the service is provided as shown in FIG. 15, for example. Here, the device X on the service providing side is the device 1101 having the user context table 111, and the device Y on the service providing side is the device 1, 0 having the application program for providing the service. 1 is shown. Here, the link between the device X and the device Y is specified by the service formation process 2 32 described above.

The service providing device Y issues a position information request (step 101), and the service providing device Υ receives this (step 101) and confirms the service session identifier in the request message. (Step 1 0 1 3).

After that, the hierarchical relationship between services is searched (step 1 2 1 1). If the resources can be secured (step 101), it is confirmed whether or not the member is the designated member of the requested service (step 104). If the service is formed by the service formation process 2 32, that is, if the service is a combination of a service session and a device registered in the device group management table, request data is returned (step 101). If the resources cannot be secured (step 101) and if the requested service is not the designated member (step 101), the request is rejected (step 101).

Here, the description of the service hierarchy is formed by registering the services formed in the service list 212. In addition, by registering a service as a component in the task state 7 14 of the device group management table 2 13, it is possible to manage the relationship and state with other services.

Data sharing between services is configured in the mode management table 2 15 It can be controlled by registering the identifier of the element service as a resource identifier. Using this, control can be performed according to the following applications. • Data disclosure range restriction: When sharing the user's location data between specific devices, set the service to share data between these devices independently. Set a service that links this service with other devices, and provide other devices only with processing results such as triggers that have arrived at specific locations and content near user locations.

• Restricted resource disclosure: Become a component of one service so that the resource is not directly disclosed to other services. For example, while providing a video playback service that outputs video output to a TV, access to a processing program having an interface such as TV program settings and power settings is suppressed.

In this method, a service can be formed without describing resource availability for all combinations of resources.

In this embodiment, an example in which data is requested from the service providing device Y where the application program exists is described. However, the service session management device X having the user Content X t is provided by the service providing device X. The data corresponding to the application identifier may be voluntarily transmitted. At this time, the service providing device Y controls to pass data only to the resource that provides the service specified by the service session identifier, and not to pass data to other resources. Further, the service session identifier may be used as a key for encrypting the public data, and the public side may perform encryption and the use side may perform decryption.

By the service session management of the present embodiment, it is possible to form a required service while maintaining the required quality without disclosing the access right of the resource other than the resource effective for providing the specific service.

Note that even if the services are hierarchized, if it is not necessary to control the transfer of information between devices in the mode corresponding to each service, step 12 1 1 and the next judgment step can be omitted.

Next, a description will be given of an embodiment in which, when the device does not have a function of performing mode management, software is distributed, and the mode management of the device is performed by the software.

FIG. 13 is a diagram showing a flow of software distribution processing of the service formation processing. A service providing device group is searched between the service requesting device 201 and the service providing device X using a known method such as "Unae: rstanding Universal Plug and Play White PaperJ". Step 1 3 1 1), select a group of devices having functions effective for providing the service, select resources and management functions required for the service to be provided (Step 1 3 1 2), and select the resource management Distribute the software with the function to the selected device (Step 13 13) The distributed service providing device X receives this and cooperates with the software already running on the device. (Steps 1 3 1 4).

Figure 14 is a diagram showing an example of combining distribution software and existing programs. In this implementation (■ おおヽヽ ί \ \ X X X ΐ 説明するするする説明説明する説明説明説明説明説明説明説明説明説明するThere is a service list 2 1 2, which can send and receive data to and from the processing program 2 35 via the communication processing 1 7 1 1. The processing program 2 3 5 includes an external input / output unit 2 4 2 And perform data processing by accessing the external storage 2 41. The distributed software 1 7 1 2 cooperates with the processing program 2 3 5 via the communication processing 1 7 1 1. At this time, the processing program The mode is managed in 1712 by linking with other devices via the distributed software 1712 without directly linking the processing programs of the other devices with the processing programs of the other devices. The software configuration inside is service-reliable via communication processing 1711. The cost 21 2 is acquired and released to other devices only via the distributed software 17 12.

In this embodiment, the software is distributed from the service requesting device. Although an example has been shown, it may be performed from another device. In addition, as software to be distributed in the present embodiment, software for publishing data and processing programs and securing calculation resources, as well as software for monitoring data transmission and reception between devices may be distributed. Good.

According to the method described in this embodiment, even a device that does not have a mode management function in advance can perform mode management effective for providing a service.

According to the embodiment described above, among the dynamically discovered resource groups, the resources can be flexibly linked only with the resource group effective for providing the service according to the service. In particular, the level of services that can be provided can be determined according to the range of resources for which access rights are disclosed, and appropriate services can be formed.

In addition, each resource has a mode to identify whether it is effective for providing a specific service. By using this mode to control public resources, data other than those effective to provide the desired service can be obtained. The required services can be formed with the required quality without being disclosed.

Furthermore, by managing the hierarchical relationship between services and publishing resources accordingly, services can be formed without describing resource availability for all combinations of resources.

Furthermore, resource management software is distributed to each device, and each device performs data transmission and reception between applications and execution management via the software, so that even devices that do not have a mode management function in advance can be used. Modes effective for providing services can be managed. In addition, it is possible to determine services that can be provided by limiting the disclosure range without disclosing resources to unspecified devices, and to determine services to be provided by gradually expanding the disclosure range. Industrial applicability

According to the present invention, among the dynamically discovered resource groups, the resources can be flexibly linked only with the resource groups effective for providing the service according to the service.

Claims

The scope of the claims

1. In a distributed system in which a plurality of devices equipped with a communication unit that communicates with other devices and that performs data processing and communication with other devices are connected and cooperate with each other,

The distributed system comprises:

Means for detecting resources required for the requested service from the plurality of devices;

A distributed system comprising: means for determining whether a detected resource satisfies a resource disclosure policy; and means for providing a service by linking resources satisfying the resource disclosure policy.

2. The distributed system according to claim 1, wherein the resource is one of a processing program, data, a calculation resource, and an external input / output device stored in the device.

3. The distributed system according to claim 1, wherein the resource disclosure policy is a guarantee capability of either concealment performance or processing performance of the resource.

4. The device according to claim 1, further comprising: means for providing the resource of the own device after 'confirming that the device is a device having a resource linked for providing a service when providing the resource from the own device. Distributed system.

5. The distributed system according to claim 1, wherein the device includes: a unit configured to maintain a provision condition of the resource in association with the resource; and a unit configured to provide the resource according to the provision condition.

6. When it is determined that the device that has received the service request does not have all or some of the resources necessary to provide the service in its own device, attach an identifier that identifies the service to other devices. The distributed system according to claim 1, wherein the service request is forwarded.

7. The distributed system according to claim 5, wherein, when sharing the data with another device, the device changes the content of the data to be provided according to the content of the resource providing condition.

8. A service requesting device is a processing program that performs resource management processing. 2. The distributed system according to claim 1, wherein the distributed system distributes the service to service providing equipment.

9. A distributed system characterized in that when resources necessary for a service satisfying the resource disclosure policy are not available, the resource disclosure policy is changed, and it is determined whether or not the changed public policy is satisfied.

10. A distributed system in which a plurality of devices equipped with a processing unit that performs data processing and a communication unit that communicates with other devices is connected, and cooperates with each other to perform processing in the following steps: Service transfer environment forming method: a step of detecting resources required for a requested service from the plurality of devices;

Determining whether the detected resource satisfies the requestor's resource disclosure policy;

A step of providing a service by linking resources satisfying the resource disclosure policy.

11. The method according to claim 10, wherein the resource is one of a processing program, data, a computing resource, and an external input / output device stored in the device.

12. The method for generating a service transfer environment according to claim 10, wherein the resource disclosure policy is a guarantee capability of one of confidentiality performance and processing performance of the resource.

13. The service according to claim 10, wherein the device provides the resource of the own device after confirming that the device is a device having a resource linked for providing a service when providing the resource from the own device. How to create a transfer environment.

14. The service transfer according to claim 10, wherein the device further comprises: a step of holding the provision condition of the resource in association with the resource; and a step of providing the resource according to the provision condition. 14. Environment generation method.

15 5. When it is determined that the device that has received the service request does not have all or a part of the resources necessary for providing the service in its own device, attach an identifier for identifying the service and attach it to another device. Forward service requests to 10. The method for generating a service transfer environment according to claim 10, wherein:

16. The service transfer environment generation according to claim 14, wherein the device changes the content of the data to be provided according to the content of the resource providing condition when sharing the data with another device. Method.

17. The service transfer environment generating method according to claim 10, wherein a processing program for performing resource management processing is distributed from the service requesting device to the service providing device.

18. When resources necessary for a service satisfying the resource disclosure policy are not available, the resource disclosure policy is changed, and it is determined whether or not the changed public policy is satisfied. 10. Service transfer environment generation method.