WO2008038386A1

WO2008038386A1 - Service providing device, service providing system, and service providing method

Info

Publication number: WO2008038386A1
Application number: PCT/JP2006/319362
Authority: WO
Inventors: Tetsuya Okano; Tsutomu Kawai
Original assignee: Fujitsu Limited
Priority date: 2006-09-28
Filing date: 2006-09-28
Publication date: 2008-04-03

Abstract

When a data center (100) measures a service work amount provided to a terminal of a check staff who checks the work amount concerning the provided service and a terminal of a general user, records the measured word amount data as service use log information, and provides a service in response to a service request, a part of the service use log information is transmitted as check information to a terminal as the service providing destination (the data center cannot know whether the terminal is of a monitor staff or a general user). A service provider (200) acquires the check information and the service use log information and compares the check information to the service use log information so as to judge whether the service use log information is tampered.

Description

Specification

SERVICE PROVIDING DEVICE, SERVICE PROVIDING SYSTEM, AND SERVICE PROVIDING METHOD TECHNICAL FIELD

TECHNICAL FIELD [0001] The present invention relates to a service providing apparatus that provides a service to a user terminal, and in particular, a service providing apparatus and a service providing capable of determining the validity of information recording the amount of work involved in service provision The present invention relates to a system and a service providing method.

Background art

[0002] A service provider who wants to provide a service has an infrastructure for providing the service, and in some cases, has an infrastructure to provide the service to a data center. Entrusts management of environmental management and service provision. FIG. 21 is a diagram for explaining a conventional technique.

[0003] As shown in Fig. 21, the data center entrusted with the environmental management 'operation for providing services by the service provider provides services to the service users on behalf of the service providers and provides services. You may have charged your service provider with a fee.

[0004] The billing method charged by the data center to the service provider is a fixed billing method that charges the server, etc. at a fixed fee, or a fee is added according to the amount of work involved in providing the service. Pay-per-use billing is generally used. In recent years, from the viewpoint of effective use of resources, etc., the billing method of charges charged by data centers to service providers is becoming a pay-as-you-go method.

[0005] When a data center charges a fee according to a pay-per-use billing method, the workload when the service is provided to the user is recorded, and a fee corresponding to the workload is calculated. The data center then charges the calculated fee to the service provider and notifies the service pronoida of information that records the amount of work required to provide the service to prove the validity of the charged fee. ! /

[0006] In Patent Document 1, both the customer and the lending company calculate a loan fee based on information on the amount of power used by the customer, and compare the respective loan fees. The technology that determines whether the lending fee charged by a lender to a customer is correct is disclosed.

Patent Document 1: Japanese Patent Application Laid-Open No. 2005-50174

Disclosure of the invention

Problems to be solved by the invention

[0008] However, in the conventional technology described above, the service provider does not directly monitor service exchanges between the data center and an unspecified number of users. If there is no way to determine the legitimacy of the amount of work required to provide services provided by the data center, there is a problem that the amount of work is tampered with by a malicious person and an unfair fee is paid. It was.

[0009] The present invention has been made to solve the above-described problems caused by the prior art, and provides a service providing apparatus and a service providing that can determine the legitimacy of information recording the amount of work involved in providing a service. An object is to provide a system and a service providing method. Means for solving the problem

In order to solve the above-described problems and achieve the object, the present invention provides a service providing program for causing a terminal accessing a computer to function as a service providing apparatus that provides a Web service, the computer When measuring the workload of the service provided to the terminal that has accessed the service, and recording the measured workload data as log data, and providing the service in response to the service request, It is characterized by functioning as transmission control means for transmitting log data recorded by the data recording means as audit data to a terminal that is a service providing destination.

[0011] In the above invention, the present invention further includes digest value generation means for generating a digest value based on the log data, wherein the transmission control means provides a service in response to a service request. The digest value is transmitted to a terminal that provides a service.

[0012] Further, the present invention is characterized in that, in the above invention, the digest value generation means generates a digest value from log data of a predetermined period recorded in the data recording means. [0013] Furthermore, the present invention provides a service providing system in which a service providing apparatus entrusted to provide a service to a service provider provides a service to a user terminal, the service providing apparatus performing a service providing service. When measuring the workload of the service provided to the terminal that has accessed the volume, recording the measured workload data as log data, and providing the service in response to a service request Transmission control means for transmitting the log data recorded by the data recording means to the terminal as a service providing destination as audit data, and the audit terminal obtained by accessing the service providing apparatus Obtaining the audit data and log data recorded in the data recording means, and obtaining the audit data And log data based Dzu, the log data is tampered Te, Ru force whether a determination means, characterized by comprising a.

[0014] Further, the present invention is a service providing method performed by a service providing apparatus and a terminal used by an inspector of a provider who substitutes the Web service to the service providing apparatus, and accesses a work amount related to service provision. The process of measuring the workload of the service provided to the terminal that has been received, recording the measured workload data as log data in the recording device, and providing the service in response to a service request A transmission control step of transmitting the log data recorded by the recording device as audit data to a terminal serving as a provision destination of the data; acquiring the audit data and the log data transmitted to the auditor's terminal; and And a determination step for determining whether or not the data has been tampered with.

The invention's effect

[0015] According to the present invention, the workload of the service provided to the accessed terminal is measured, the measured workload data is recorded as log data, and the service is provided in response to the service request. In this case, log data recorded by the data recording means is transmitted as audit data to a terminal that is a service providing destination, so that falsification of log data can be prevented.

[0016] Further, according to the present invention, when a digest value is generated based on log data and a service is provided in response to a service request, a digest is provided to a terminal serving as a service providing destination. Since the est value is transmitted, falsification of log data can be prevented efficiently.

[0017] Further, according to the present invention, when a digest value is generated based on log data for a predetermined period and a service is provided in response to a service request from a user's terminal, the service is provided. Since the digest value is transmitted to the previous terminal, it becomes more difficult for the malicious data to be altered by the malicious third party, and the log data can be efficiently prevented from being altered.

[0018] Further, according to the present invention, the service providing apparatus measures the work amount of the service provided to the terminal that has accessed the work amount related to the service provision, and obtains the measured work amount data. When the log data is recorded and the service is provided in response to the service request, the log data recorded by the data recording means is transmitted as the audit data to the terminal that provides the service. Whether the audit data acquired by accessing the service providing device and the log data recorded in the data recording means are acquired, and whether or not the log data is falsified based on the acquired audit data and log data. Therefore, falsification of log data can be prevented.

Brief Description of Drawings

FIG. 1 is a diagram for explaining the outline and features of the service providing system according to the first embodiment.

FIG. 2 is a system configuration diagram of the service providing system according to the first embodiment.

FIG. 3 is a functional block diagram of the configuration of the data center according to the first embodiment.

FIG. 4 is a diagram illustrating an example of a data structure of service usage log information.

FIG. 5 is a diagram of an example of a data structure of audit information according to the first embodiment.

FIG. 6 is a functional block diagram of the configuration of the service provider according to the first embodiment.

FIG. 7 is a diagram illustrating an example of a data structure of audit management information according to the first embodiment.

FIG. 8 is an explanatory diagram for explaining the process performed by the log information verification unit according to the first embodiment.

[FIG. 9] FIG. 9 is a flowchart of processing when the data center according to the first embodiment provides a service. It is a flowchart which shows order.

FIG. 10 is a flowchart of a determination process performed by the service provider according to the first embodiment.

FIG. 11 is a diagram for explaining the outline and features of the service providing system according to the second embodiment.

FIG. 12 is a system configuration diagram of the service providing system according to the second embodiment.

FIG. 13 is a functional block diagram of the configuration of the data center according to the second embodiment.

FIG. 14 is a diagram illustrating an example of a data structure of audit information according to the second embodiment.

FIG. 15 is a functional block diagram of the configuration of the service provider according to the second embodiment.

FIG. 16 is a diagram illustrating an example of a data structure of audit management information according to the second embodiment.

FIG. 17 is an explanatory diagram for explaining the process performed by the log information verification unit according to the second embodiment.

FIG. 18 is a flowchart of a process procedure performed when the data center according to the second embodiment provides a service.

FIG. 19 is a flowchart of a determination process performed by the service provider according to the second embodiment.

FIG. 20 is a diagram showing a hardware configuration of a computer constituting the data center or service provider shown in FIG.

FIG. 21 is a diagram for explaining a conventional technique.

Explanation of symbols

10, 20 User terminal

30 input devices

31 Monitor

32 RAM

32a, 37a Various data ROM

Media reader

Network interface

CPU

a Various processes

HDD

b Various programs

Noth

network

, 300 Data center

, 210, 310, 410 Input section

, 220, 320, 420 Output section

, 230, 330, 430 Communication controller

, 240, 340, 440 I / O control IF section

, 250, 350, 450 0

a, 250b, 350a, 450b Service 禾 Log information, 260, 360, 460 Control unit

a, 360a Service Department

b, 360b Service usage log information creation part c, 360c Audit information management part

d, 360e Digital signature creation department

e, 360f B sound processing unit

, 400 Service Provider

a, 450a Audit management information

a, 460a Decryption processor

b, 460b Signature verification part

c, 460c Log information verification unit

d Digest value calculator 460d digest value verification unit

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, preferred embodiments of a service providing apparatus, a service providing system, and a service providing method according to the present invention will be described in detail with reference to the accompanying drawings.

Example 1

First, the outline and features of the service providing system according to the first embodiment will be described. FIG. 1 is a diagram for explaining the outline and features of the service providing system according to the first embodiment. In the service providing system according to the first embodiment, the data center entrusted with service provision to the service provider provides services provided to the terminals of auditors and general user terminals that audit the workload related to the service provision. When the workload is measured, the measured workload data is recorded in the recording device as service usage log information, and a service is provided in response to a service request, a part of the service usage log information is serviced as audit information. The data is sent to the terminal to which the data is provided (the data center does not know whether the terminal is a user of the auditor's terminal power).

[0023] Then, when the service provider is charged a fee corresponding to the workload of the data center (service usage log information), the service provider acquires the audit information and the service usage log information to obtain the audit information and The service usage log information is compared with the service usage log information to determine whether the service usage log information has been tampered with. (If the service usage log information is tampered with, the data center power service provider has an unfair fee. Will be charged).

[0024] As described above, when the data center receives a service request, the service providing system according to the first embodiment transmits the audit information to the terminal that is the service providing destination, and the service provider transmits the audit information and the service. The usage log information is obtained and it is determined whether the service usage log information has been tampered with, so that the problem that the malicious user charges the service usage log information and charges an unauthorized fee is solved. Can do. In addition, when the data center charges the service provider for a fee according to the workload, the service center logs the service usage log information to the service provider and compares it with the audit information sent to the auditor's terminal. You can prove the validity of the fee.

Next, the system configuration of the service providing system according to the first embodiment will be described. The FIG. 2 is a system configuration diagram of the service providing system according to the first embodiment. As shown in the figure, this service providing system includes user terminals 10, 20, a data center 100, and a service router 200. The user terminals 10, 20, the data center 100, and the service provider 200 are connected by a network 50. Although the user terminals 10 and 20 are shown here for convenience of explanation, it is assumed that a plurality of other user terminals are also connected to the network 50 without being limited thereto.

The user terminals 10 and 20 are devices that are operated by an auditor or a general user to access the data center 100 and receive a desired service provision. In addition, when an auditor who operates the user terminal 10 (or the user terminal 20) accesses the data center 100, the auditor acquires the audit information that is also transmitted by the data center, and uses the acquired audit information as a service provider. Send to 200.

The data center 100 is a device that is entrusted with service provision to the service provider 200 and provides the service instead of the service provider 200. In addition, the data center 100 measures the workload of the service provided to the user terminals 10 and 20, generates information on the measured workload, that is, service usage log information, and sends the audit information to the service provider. To the user terminal. Note that the administrator of the data center 100 charges the administrator of the data service provider 200 based on the service usage log information.

[0028] The service provider 200 entrusts the service provision to the data center 100, and when the service provider 200 is charged by the administrator of the data center 100 according to the service usage log information, the service provider 200 operates the auditor. This is a device that obtains audit information from the user terminals 10 and 20, and determines whether or not the service use log information has been falsified based on the obtained audit information and service use log information.

Next, the configuration of the data center 100 shown in FIG. 2 will be described. FIG. 3 is a functional block diagram of the configuration of the data center 100 according to the first embodiment. As shown in the figure, the data center 100 includes an input unit 110, an output unit 120, a communication control unit 130, an input / output control IF unit 140, a storage unit 150, and a control unit 160. Is done.

[0030] Of these, the input unit 110 is an input means for inputting various types of information. Consists of a mouse and a microphone. The monitor (output unit 120) described later also realizes a pointing device function in cooperation with the mouse.

[0031] The output unit 120 is an output unit that outputs various types of information, and includes a monitor (or a display or touch panel), a speaker, or the like. The communication control unit 130 is mainly means for controlling communication between the user terminals 10 and 20 and the service provider 200. The input / output control IF unit 140 includes an input unit 110, an output unit 120, This is a means for controlling data input / output by the communication control unit 130, the storage unit 150, and the control unit 160.

[0032] The storage unit 150 is a storage unit that stores data and programs necessary for various processes by the control unit 160. In particular, as shown in FIG. Log information 150a is provided.

[0033] Here, the service use log information 150a is data in which information on a work amount related to service provision is recorded. FIG. 4 is a diagram showing an example of the data structure of the service usage log information 150a. As shown in the figure, this service usage log information 150a includes the access occurrence time, the IP (Internet Protocol) address of the access source (the user terminal that made the service request to the data center), the access source port (port Number), access destination URL (Uniform Resource Locator), and cumulative access count indicating the cumulative usage count of the service provided. Although not shown, the service usage log information 150a includes a session usage time such as a session-oriented service, a user ID (Idification) used in the case of an authentication type service, and the like.

[0034] The control unit 160 has an internal memory for storing programs and control data defining various processing procedures, and is a control means for executing various processes by these, and is closely related to the present invention. As shown in FIG. 3, the service providing unit 160a, the service usage log information creating unit 160b, the audit information managing unit 160c, the electronic signature creating unit 160d, and the encryption key processing unit 160e are as shown in FIG. Is provided.

[0035] The service providing unit 160a is a processing unit that provides various services to the user terminal of the service request source when a service request is received from the user terminals 10 and 20. For example, the service providing unit 160a provides a variety of information by displaying a Web page on the Web browser of the user terminal of the service request source. [0036] When the service providing unit 160a receives an output command for the service usage log information 150a from the input unit 110, the service providing unit 160a outputs the service usage log information 150a to the service provider 200 (the service usage log information 150a is (It is output after being encrypted by the encryption key processing unit 160e described later). This output command shall be input by the administrator of the data center 100 when, for example, the administrator of the service provider 200 is charged for the fee for providing the service capability of the administrator of the data center 100. .

[0037] The service use log information creation unit 160b is a service workload (service number of accesses to the web page, data transfer amount, access time, registration) performed by the service providing unit 160a on the user terminals 10, 20 This is a processing unit that measures service usage log information 150a (see Fig. 4).

[0038] The audit information management unit 160c creates audit information based on the service usage log information 150a, and the service providing unit 160a transmits the audit information to the user terminal that provides the service. Part. Specifically, the audit information management unit 160c is provided when the service providing unit 160a provides the service, and the service usage log information creation unit 160b records the workload information corresponding to the service in the service usage log information 150a. Then, a part of the information recorded in the service usage log information 150a is extracted, and the extracted information is transmitted as audit information to the corresponding user terminal. The information extracted from the service usage log information 150a may be information corresponding to the user terminal receiving the service provision, or may be a plurality of past information recorded in the service usage log information 150a.

FIG. 5 is a diagram illustrating an example of a data structure of audit information according to the first embodiment. As shown in the figure, this audit information includes an access occurrence time, an IP address, a port, an access destination URL, and an accumulated access count. Although not shown in the figure, the audit information includes a session usage time such as a session-oriented service and a user ID used in the case of an authentication type service.

[0040] The electronic signature creation unit 160d is a processing unit that creates electronic signature data using a public key cryptosystem and attaches the electronic signature data to the audit information created by the audit information management unit 160c. . For example, the electronic signature creation unit 160d creates a message digest from the audit information, and encrypts the powerful message digest with a private key. Attach the data. The encryption key processing unit 160e is a processing unit that encrypts the audit information created by the audit information management unit 160c. That is, the audit information management unit 160c outputs the audit information encrypted with the electronic signature attached thereto to the user terminals 10 and 20.

[0041] Further, when the service providing unit 160a outputs the service usage log information 150a to the service provider 200, the encryption processing unit 160e encrypts the service usage log information 150a.

Next, the configuration of service provider 200 shown in FIG. 2 will be described. FIG. 6 is a functional block diagram of the structure of the service provider 200 according to the first embodiment. As shown in the figure, the service pronoider 200 includes an input unit 210, an output unit 220, a communication control unit 230, an input / output control IF unit 240, a storage unit 250, and a control unit 260. Configured.

[0043] Among these, the input unit 210 is an input means for inputting various types of information, and includes a keyboard, a mouse, a microphone, and the like. The monitor (output unit 220) described later also realizes a pointing device function in cooperation with the mouse.

The output unit 220 is an output unit that outputs various types of information, and includes a monitor (or a display or touch panel), a speaker, or the like. The communication control unit 230 is mainly means for controlling communication between the user terminals 10 and 20 and the data center 100. The input / output control IF unit 240 includes an input unit 210, an output unit 220, This is means for controlling input / output of data by the communication control unit 230, the storage unit 250, and the control unit 260.

[0045] The storage unit 250 is a storage unit that stores data and programs necessary for various types of processing by the control unit 260. Particularly, as closely related to the present invention, as shown in FIG. Information 250a and service usage log information 250b are provided.

[0046] The audit management information 250a is data in which a plurality of pieces of audit information transmitted from the user terminals 10 and 20 operated by the auditor are recorded. FIG. 7 is a diagram illustrating an example of the data structure of the audit management information 250a according to the first embodiment. As shown in the figure, this audit management information 250a records a plurality of audit information.

[0047] Service usage log information 250b is used to charge the data center 100 This data is output to the service provider 200 in order to prove the correctness of the charge billing when it is made to the binder. Since the data structure of the service usage log information 250b is the same as the service usage log information 150a (see FIG. 4) stored in the storage unit 150 of the data center 100, the description thereof is omitted.

[0048] The control unit 260 is a control means that has an internal memory for storing programs and control data that define various processing procedures, and performs various processing using these programs, and is closely related to the present invention. As related items, as shown in FIG. 6, a decryption processing unit 260a, a signature verification unit 260b, and a log information verification unit 260c are provided.

[0049] When the decryption processing unit 260a obtains audit information (encrypted audit information) from the user terminals 10, 20 (or the input unit 2 10) operated by the auditor, the obtained audit information Is a processing unit that decrypts the audit information and stores the decrypted audit information in the audit management information 250a. In addition, the decryption processing unit 260a decrypts the service usage log information (encrypted service usage log information) output from the data center 100, and uses the decrypted service usage log information as the service usage log information 250b. Is stored in the storage unit 250.

[0050] The signature verification unit 260b is a processing unit that acquires the electronic signature data attached to the audit information and determines whether or not the audit information has been tampered with using a public key encryption method or the like. . For example, the signature verification unit 260b creates a message digest from the audit information, decrypts the electronic signature data with the public key, and decrypts the message digest created from the audit information and the electronic signature data. In comparison, if both message digests do not match, it is determined that the audit information has been tampered with. If the signature verification unit 260b determines that the audit information has been tampered with, the signature verification unit 260b deletes the tampered audit information from the audit management information 250a, and displays information indicating that the audit information has been tampered with. Output to the output unit 220.

[0051] The log information verification unit 260c is a processing unit that compares the audit management information 250a and the service usage log information 250b to determine whether or not the service usage log information 250b has been tampered with. FIG. 8 is an explanatory diagram for explaining the process performed by the log information verification unit 260c according to the first embodiment. First, the log information verification unit 260c determines whether or not there is a contradiction in the IP address of the service usage log information 250b (the log information verification unit 260c exists in advance). If the IP address of the user terminal to be obtained (such as the IP address of the user terminal that is the target of service provision) is stored and an IP address other than the IP address to be used exists in the service usage log information 250b, the IP address Judge that there is a contradiction). When there is a contradiction in the IP address of the service usage log information 250b, the log information verification unit 260c outputs that fact to the output unit 220.

[0052] Subsequently, the log information verification unit 260c compares the audit management information 250a with the service usage log information 25 Ob, and data corresponding to the audit information of the audit management information 250a is included in the service usage log information 250b. It is determined whether or not. The log information verification unit 260c determines that the service usage log information 250b has been tampered with when the data corresponding to the audit information of the audit management information 250a is not included in the service usage log information 250b, and the output unit 220 Output to.

[0053] Further, the log information verification unit 260c compares the audit management information 250a with the service usage log information 250b, and determines the access occurrence time in the audit information and the access occurrence in the service usage log information 250b corresponding to the audit information. A difference with time is calculated, and if the calculated difference is equal to or greater than a specified value, it is determined that the service usage log information 250b has been tampered with, and a message to that effect is output to the output unit 220. For example, when the accumulated access count is used as a key, the access occurrence time of the audit information for the accumulated access count “5802 2” is “August 1, 2006 10: 18: 18.015 seconds”. The access occurrence time in the service usage log information 250b corresponding to the audit information is the access occurrence time corresponding to the cumulative access count “58022” in the service usage log information 250b “10:18 on August 1, 2006 18. 015 seconds ", the difference between the access occurrence times of both is calculated, and the calculated difference is compared with the specified value.

In addition, the log information verification unit 260c compares the audit management information 250a with the service usage log information 250b, and determines whether or not the accumulated access count of the service usage log information 250b is appropriate. For example, the log information verification unit 260c compares the IP address corresponding to the cumulative access count of the audit information with the IP address corresponding to the cumulative access count of the service usage log information 250b, and determines whether or not both IP addresses match. Determine whether. If the IP addresses do not match, the log information verification unit 260c determines that the service usage log information 250b has been tampered with, and outputs that fact to the output unit 220. [0055] In addition, the log information verification unit 260c indicates that the number of predetermined IP addresses in the service usage log information 250b (the IP address of the user terminal operated by the auditor) is the number of audit accesses (the auditor is the user). The number of service requests made to the data center 100 by operating the terminal), and if not, it is determined that the service usage log information 250b has been tampered with, and a message to that effect is output to the output unit 220. To do. It is assumed that the log information verification unit 260c acquires in advance the information such as the IP address of the user terminal operated by the auditor and the number of times of audit access by using the input unit 210 and the like, and holds the information that is helpful.

Next, a processing procedure when the data center 100 provides a service will be described. FIG. 9 is a flowchart of a process procedure performed when the data center 100 according to the first embodiment provides a service. As shown in the figure, in the data center 100, the service providing unit 160a receives the service request from the user terminal 10 (or the user terminal 20) (step S101), and the service terminal 160a receives the service request. Start providing service (step S102).

[0057] Then, the service usage log information creation unit 160b measures the amount of work involved in service provision by the service provision unit 160a, creates service usage log information 150a (step S103), and the audit information management unit 160c Audit information is created (step S104).

[0058] Subsequently, the electronic signature creation unit 160d creates electronic signature data (step S105), the encryption processing unit 160e encrypts the audit information (step S106), and the audit information management unit 160c creates the electronic signature. The audit information with data attached and encrypted is output to the user terminal of the service provider (step S107).

[0059] As described above, the data center 100 creates audit information at the time of service provision, and the data center cannot determine whether it is a user terminal serving as a service provider (an auditor's terminal or a general user's terminal). Since the audit information is output to the user terminal), it is possible to prevent the malicious user from falsifying the service usage log information 150a.

Next, the determination process performed by the service provider 200 will be described. FIG. 10 is a flowchart showing the determination process performed by the service provider 200 according to the first embodiment. As shown in the figure, in the service provider 200, the decryption processing unit 260a acquires service usage log information (encrypted service usage log information) and uses the service. After the log information is decrypted, it is stored in the storage unit 250 (step S201), and the log information verification unit 260c determines whether or not there is a contradiction in the IP address of the service usage log information 250b (step S202).

[0061] If there is a contradiction in the IP address in the service usage log information 250b (step S203, Yes), information indicating that the service usage log information 250b is not appropriate is output to the output unit 220 ( Step S204). On the other hand, if there is no contradiction in the IP address (step S203, No), it is determined whether information corresponding to the audit information exists in the service usage log information 250b (step S205).

[0062] If the information corresponding to the audit information does not exist in the service usage log information 250b (step S206, No), the process proceeds to step S204. On the other hand, if the information corresponding to the audit information exists in the service usage log information 250b (step S206, Yes), the difference between the access occurrence time of the corresponding audit information and the access occurrence time of the service usage log information 250b is calculated. It is calculated (step S207), and it is determined whether or not the time difference is greater than or equal to a predetermined value (step S208).

If the time difference is equal to or greater than the predetermined value (step S209, Yes), the process proceeds to step S204. On the other hand, if the time difference is less than the predetermined value (step S209, No), it is determined whether the accumulated access count of the audit information is equal to the accumulated access count of the service usage log information 250b (step S210).

[0064] If the accumulated access counts are not equal (step S211, No), the process proceeds to step S204. On the other hand, when the accumulated access count is equal (step S211, Yes), it is determined whether or not the number of predetermined IP addresses in the service usage log information 250b is equal to the number of audit accesses (step S212).

If the number of predetermined IP addresses in the service usage log information 250b is not equal to the number of audit accesses (step S213, No), the process proceeds to step S204. On the other hand, if the number of predetermined IP addresses in the service usage log information 250b is equal to the number of audit accesses (step S213, Yes), information indicating that the service usage log information is appropriate is sent to the output unit 220. Output (step S214).

[0066] In this way, the log information verification unit 260c and the audit information included in the audit management information 250a The service usage log information 250b obtained from the data center 100 is compared with the service usage log information 250b to determine whether or not the service usage log information 250b has been tampered with. It is possible to solve the problem of paying a certain person.

[0067] As described above, the service providing system according to the first embodiment is a service provided by the data center 100 to a terminal of an auditor who audits a workload related to service provision and a terminal of a general user. When the service amount is recorded in the recording device as service usage log information and a service is provided in response to a service request, a part of the service usage log information is audit information. To the terminal that provides the service (the data center does not know whether it is the terminal of the auditor's terminal power user). The service provider 200 acquires the audit information and the service usage log information, compares the audit information with the service usage log information, and determines whether or not the service usage log information has been tampered with. It is possible to solve the problem that the service usage log information is falsified by a malicious person and an unauthorized fee is charged.

[0068] In addition, when providing the service, the data center 100 does not know whether the access is made by an auditor or a general user, so the number of accesses used for the service use log information 150a is illegally increased. It can be suppressed. Even if the auditor does not access for the audit, the data center 100 cannot deny the existence of the access for the audit, so that fraud is suppressed.

Example 2

Next, the outline and features of the service providing system according to the second embodiment will be described. FIG. 11 is a diagram for explaining the outline and features of the service providing system according to the second embodiment. As shown in the figure, the service providing system according to the second embodiment has a digest value based on information in a predetermined area (predetermined period) among information recorded in the service usage log information by the data center. The audit information and digest value are sent to the terminal that provides the service.

[0070] Then, when the service provider is charged a fee according to the work capacity of the data center, the service provider log information and the service usage log information The digest value generated by the service usage log information is compared with each other to determine whether the service usage log information has been tampered with.

As described above, the service providing system according to the second embodiment generates a digest value based on the service usage log information, and when the data center receives a service request, the service providing system provides the terminal serving as a service providing destination. Audit information and digest values are sent, and the service provider determines whether the service usage log information has been falsified based on the digest value, so it is possible to efficiently prevent falsification of the service usage log information. .

Next, the system configuration of the service providing system according to the second embodiment will be described. FIG. 12 is a system configuration diagram of the service providing system according to the second embodiment. As shown in the figure, this service providing system includes user terminals 10, 20, a data center 300, and a service provider 400. The user terminals 10 and 20, the data center 300, and the service provider 400 are connected by a network 50. Here, for convenience of explanation, the user terminals 10 and 20 are shown, but the present invention is not limited to this, and it is assumed that a plurality of other user terminals are also connected to the network 50.

[0073] The user terminals 10 and 20 are devices operated by an auditor or a general user to access the data center 300 and receive a desired service provision. In addition, when an auditor who operates the user terminal 10 (or the user terminal 20) accesses the data center 300, the auditor acquires the audit information that is also transmitted by the data center, and uses the acquired audit information as a service provider. Sent to 400.

The data center 300 is a device that entrusts the service provider 400 to provide a service and provides the service instead of the service provider 400. Further, the data center 300 measures the workload of the services provided to the user terminals 10 and 20, generates information on the measured workload, that is, service usage log information, and generates a digest value. Then, the data center 300 transmits the digest value and the audit information to the user terminal that is the service providing destination. Note that the administrator of the data center 300 charges the administrator of the data service provider 400 based on the service usage log information.

[0075] The service provider 400 entrusts the data center 300 to provide the service, and When the fee for the service usage log information is charged by the administrator of the data 300, etc., the audit information and digest value are acquired from the user terminals 10 and 20 operated by the auditor, and the acquired audit information and This device determines whether or not the service usage log information has been falsified based on the digest value, the service usage log information, and the digest value generated from the service usage log information.

Next, the configuration of the data center 300 shown in FIG. 12 will be described. FIG. 13 is a functional block diagram of the configuration of the data center 300 according to the second embodiment. As shown in the figure, the data center 300 includes an input unit 310, an output unit 320, a communication control unit 330, an input / output control IF unit 340, a storage unit 350, and a control unit 360. Is done.

Among these, the input unit 310 is an input means for inputting various types of information, and includes a keyboard, a mouse, a microphone, and the like. The monitor (output unit 320), which will be described later, also realizes a pointing device function in cooperation with the mouse.

The output unit 320 is an output unit that outputs various types of information, and includes a monitor (or a display or touch panel), a speaker, or the like. The communication control unit 330 is mainly means for controlling communication between the user terminals 10 and 20 and the service provider 400. The input / output control IF unit 340 includes an input unit 310, an output unit 320, This is a means for controlling input / output of data by the communication control unit 330, the storage unit 350, and the control unit 360.

[0079] The storage unit 350 is a storage unit that stores data and programs necessary for various types of processing by the control unit 360. In particular, as shown in FIG. Log information 350a is provided. Here, the service usage log information 350a is data in which information on a work amount related to service provision is recorded. The data structure of the service usage log information 350a is the same as the data structure of the service usage log information 150a shown in FIG.

The control unit 360 has an internal memory for storing programs and control data defining various processing procedures, and is a control means for executing various processes by these, and is closely related to the present invention. As shown in FIG. 13, the service providing unit 360a, the service usage log information creating unit 360b, the audit information managing unit 360c, the digest value calculating unit 360d, the digital signature creating unit 360e, And an encryption processing unit 360f. [0081] The service providing unit 360a is a processing unit that provides various services to the user terminal of the service request source when a service request is received from the user terminals 10 and 20. For example, the service providing unit 360a provides a variety of information by displaying a web page on the web browser of the user terminal of the service request source.

[0082] When the service providing unit 360a receives an output command of the service usage log information 350a from the input unit 310, the service providing unit 360a outputs the service usage log information 350a to the service provider 400 (the service usage log information 350a It is output after being encrypted by the encryption key processing unit 360f described later). This output command shall be input by the administrator of the data center 300 when, for example, the administrator of the service provider 400 is charged for the fee for providing the administrator power service of the data center 300. .

[0083] The service usage log information creation unit 360b is a service workload that the service providing unit 360a performs on the user terminals 10, 20 (number of accesses to the web page, amount of data transfer, access time, registration) This is a processing unit that measures the number of users) and creates service usage log information 350a (see Fig. 4).

[0084] The audit information management unit 360c creates audit information based on the service usage log information 350a, and the service providing unit 360a transmits the audit information to the user terminal that provides the service. Part. Specifically, the audit information management unit 360c is provided when the service providing unit 360a provides the service, and the service usage log information creating unit 360b records the workload information corresponding to the service in the service usage log information 350a. Then, a part of the information recorded in the service usage log information 350a is extracted, and the extracted information is transmitted as audit information to the corresponding user terminal. The information extracted from the service usage log information 350a may be information corresponding to the user terminal receiving the service provision, or may be a plurality of past information recorded in the service usage log information 350a.

FIG. 14 is a diagram illustrating an example of a data structure of audit information according to the second embodiment. As shown in the figure, this audit information includes access occurrence time, IP address, port, access destination URL, accumulated access count, and digest value (explained about digest value will be described later). . Although not shown, the audit information includes the session usage time for session-oriented services, user IDs used for authentication-type services, etc. The

The digest value calculation unit 360d is a processing unit that calculates a digest value based on the service usage log information 350a. Specifically, the digest value calculation unit 360d uses the no-hash function (for example, MD5 and Message Direct 5>) to obtain the digest value from the information table generated in the predetermined period included in the service usage log information 350a. Calculate (for example, calculate the information power digest value corresponding to the total number of times 58022 to 58026; see Fig. 4). Then, the digest value calculation unit 360d records the calculated digest value in a digest value recording area of audit information (audit information generated by the audit information management unit 360c).

[0087] Note that when the digest value calculation unit 360d records the digest value in the audit information, the digest value calculation unit 360d also records the accumulated access count that is a reference of the information for which the digest value has been calculated. Referring to FIG. 4, when the digest value calculation unit 360d calculates the digest value based on the cumulative access count “58022 to 58026” in the service use log information, the digest value is calculated based on the reference of the information. The total access count “508026” is recorded in the audit information together with the digest value. In the following, the information on the accumulated access as a reference and the digest value are simply referred to as a digest value.

[0088] The electronic signature creation unit 360e is a processing unit that creates electronic signature data using a public key cryptosystem and attaches the electronic signature data to the audit information created by the audit information management unit 360c. . For example, the electronic signature creation unit 360e creates a message digest from the audit information, and attaches electronic signature data obtained by encrypting a powerful message digest with a private key. The encryption key processing unit 360f is a processing unit that encrypts the audit information created by the audit information management unit 360c. That is, the audit information management unit 360c outputs the encrypted audit information attached with the electronic signature to the user terminals 10 and 20.

In addition, when the service providing unit 360a outputs the service usage log information 350a to the service provider 400, the encryption processing unit 360f encrypts the service usage log information 350a.

Next, the configuration of service provider 400 shown in FIG. 12 will be described. FIG. 15 is a functional block diagram of the configuration of the service provider 400 according to the second embodiment. As shown in the figure, the service pronoider 400 includes an input unit 410, an output unit 420, a communication control unit 430, an input / output control IF unit 440, a storage unit 450, and a control unit 460. Configured.

Among these, the input unit 410 is an input unit for inputting various types of information, and includes a keyboard, a mouse, a microphone, and the like. The monitor (output unit 420) described later also realizes a pointing device function in cooperation with the mouse.

The output unit 420 is an output unit that outputs various types of information, and includes a monitor (or a display or touch panel), a speaker, or the like. The communication control unit 430 is mainly means for controlling communication between the user terminals 10 and 20 and the data center 300. The input / output control IF unit 440 includes an input unit 410, an output unit 420, The communication control unit 430, the storage unit 450, and the control unit 460 are means for controlling data input / output.

[0093] The storage unit 450 is a storage unit that stores data and programs necessary for various processes by the control unit 460. As particularly related to the present invention, as shown in FIG. Information 450a and service usage log information 450b are provided.

[0094] The audit management information 450a is data in which a plurality of pieces of audit information transmitted from the user terminals 10 and 20 operated by the auditor are recorded. FIG. 16 is a diagram illustrating an example of the data structure of the audit management information 45 Oa according to the second embodiment. As shown in the figure, the audit management information 450a records a plurality of audit information.

[0095] The service usage log information 450b is a service pronoidae for verifying the legitimate charge billing when the data center 300 administrator charge is charged to the service provider 400 administrator. Data output to 400. The data structure of the service usage log information 45 Ob is the same as that of the service usage log information 150a (see FIG. 4) described in the first embodiment!

[0096] The control unit 460 is a control means that has an internal memory for storing programs and control data that define various processing procedures, and executes various processes by these, and is closely related to the present invention. As shown in FIG. 15, a decryption processing unit 460a, a signature verification unit 460b, a log information verification unit 460c, and a digest value verification unit 460d are provided. [0097] When the decryption processing unit 460a acquires the audit information (encrypted audit information) from the user terminals 10, 20 (or the input unit 4 10) operated by the auditor, the acquired audit information Is a processing unit that decrypts the audit information and stores the decrypted audit information in the audit management information 450a. In addition, the decryption processing unit 460a decrypts the service usage log information (encrypted service usage log information) output from the data center 300, and uses the decrypted service usage log information as the service usage log information 450b. Is stored in the storage unit 450.

[0098] The signature verification unit 460b is a processing unit that acquires the electronic signature data attached to the audit information and determines whether the audit information has been tampered with using a public key encryption method or the like. . For example, the signature verification unit 460b creates a message digest from the audit information, decrypts the electronic signature data with the public key, and decrypts the message digest created from the audit information and the electronic signature data. In comparison, if both message digests do not match, it is determined that the audit information has been tampered with. If the signature verification unit 460b determines that the audit information has been falsified, the signature verification unit 460b deletes the falsified audit information from the audit management information 450a, and displays information indicating that the audit information has been falsified. Output to the output unit 420.

[0099] The log information verification unit 460c is a processing unit that compares the audit management information 450a with the service usage log information 450b to determine whether the service usage log information 450b has been tampered with. FIG. 17 is an explanatory diagram for explaining the process performed by the log information verification unit 460c according to the second embodiment. First, the log information verification unit 460c determines whether there is any contradiction in the IP address of the service usage log information 450b (in advance, the log information verification unit 460c determines the IP address (service provision target If the IP address other than the IP address to be used exists in the service usage log information 450b, it is determined that there is a contradiction in the IP address). When there is a contradiction in the IP address of the service usage log information 450b, the log information verification unit 460c outputs that fact to the output unit 420.

[0100] Subsequently, the log information verification unit 460c compares the audit management information 450a with the service usage log information 45 Ob, and data corresponding to the audit information of the audit management information 450a is included in the service usage log information 450b. It is determined whether or not. The log information verification unit 460c When the data corresponding to the audit information in the information 450a is not included in the service usage log information 450b, it is determined that the service usage log information 450b has been tampered with, and the fact is output to the output unit 420.

[0101] In addition, the log information verification unit 460c compares the audit management information 450a with the service usage log information 450b, and generates the access in the service usage log information 450b corresponding to the audit information access occurrence time and the audit information. A difference with time is calculated, and when the calculated difference is equal to or greater than a specified value, it is determined that the service usage log information 450b has been tampered with, and a message to that effect is output to the output unit 420. For example, when the accumulated access count is used as a key, the access occurrence time of the audit information for the accumulated access count “5802 2” is “August 1, 2006 10: 18: 18.015 seconds”. The access occurrence time in the service usage log information 450b corresponding to the audit information is the access occurrence time corresponding to the cumulative access count “58022” in the service usage log information 450b “10:18 on August 1, 2006 18. 015 seconds ", the difference between the access occurrence times of both is calculated, and the calculated difference is compared with the specified value.

[0102] Further, the log information verification unit 460c compares the audit management information 450a with the service usage log information 450b and determines whether or not the accumulated access count of the service usage log information 450b is appropriate. For example, the log information verification unit 460c compares the IP address corresponding to the accumulated access count of the audit information with the IP address corresponding to the accumulated access count of the service usage log information 450b, and whether or not both IP addresses match. Determine whether. If the IP addresses do not match, the log information verification unit 460c determines that the service usage log information 450b has been tampered with, and outputs that fact to the output unit 420.

[0103] Further, the log information verification unit 460c provides a predetermined IP address in the service usage log information 450b.

Determine whether the number of (IP address of the user terminal operated by the auditor) is equal to the number of audit accesses (number of times the auditor has operated the user terminal and made a service request to the data center 300) If they are not equal, it is determined that the service usage log information 450b has been tampered with and the fact is output to the output unit 420. It is assumed that the log information verification unit 460c obtains in advance information such as the IP address of the user terminal operated by the auditor and the number of times of audit access by the input unit 410 and holds the information that is helpful.

[0104] The digest value verification unit 460d includes the digest included in the audit information of the audit management information 450a. This is a processing unit that compares the service service log information 450b with the digest value calculated from the service use log information 450b and determines whether or not the service use log information 450b has been tampered with. Specifically, the processing performed by the digest value verification unit 460d will be described with reference to FIG. 17.First, the digest value verification unit 460d obtains the digest value of the audit information, and calculates the cumulative access count included in the digest value. Extract information. Taking the audit information shown in the second row of Fig. 17 as an example, the digest value of the strong audit information is extracted. The total number of accesses is “580 26”.

Subsequently, the digest value verification unit 460d obtains a predetermined number of past information from the service usage log information 450b starting from the extracted accumulated access count “58026” (for example, the accumulated access count “58022 to 58026”). ”). The section of information acquired by the digest value verification unit 460d from the service usage log information 450b is matched with the section of information acquired by the service usage log information 350a when the digest value calculation unit 360d calculates the digest value. It is assumed that the information acquisition range (predetermined number) is set beforehand. As described above, when the information corresponding to “58022 to 58026” in the service usage log information 450b is acquired with the accumulated access count “58026” as the starting point, the predetermined number is 5.

[0106] The digest value verification unit 460d uses the information acquired from the service usage log information 450b and the hash function (the same hash function as the hash function used by the digest value calculation unit 360d) and uses the digest value. And the calculated digest value is compared with the digest value included in the audit information of the audit management information 450a (excluding the cumulative access count included in the head part of the digest value), and the digest values of both match. Judge whether it is power or not. If the digest values do not match, the log information verification unit 460c determines that the service usage log information 450b has been tampered with, and outputs that fact to the output unit 420. The digest value verification unit 460d repeatedly executes the above-described processing for each piece of audit information included in the audit management information 450a.

[0107] Next, a processing procedure when the data center 300 provides a service will be described. FIG. 18 is a flowchart of a process procedure performed when the data center 300 according to the second embodiment provides a service. As shown in FIG. The providing unit 360a also receives the service request from the user terminal 10 (or the user terminal 20) (step S301), and starts providing the service to the user terminal of the service providing destination (step S302).

[0108] Then, the service usage log information creation unit 360b measures the amount of work involved in service provision of the service provision unit 360a, creates service usage log information 350a (step S303), and the audit information management unit 360c Audit information is created (step S304).

[0109] Subsequently, the electronic signature creation unit 360e creates electronic signature data (step S305), the digest value calculation unit 360d calculates the digest value from the service usage log information 350a, and records the digest value in the audit information. (Step S306), the encryption processing unit 360f encrypts the audit information (Step S307), and the audit information management unit 360c provides electronically signed data and provides the encrypted audit information. Output to the previous user terminal (step S308).

[0110] In this way, the data center 300 creates audit information at the time of service provision, calculates the digest value, and outputs the audit information (including the digest value) to the user terminal that is the service provision destination. It is possible to prevent the service usage log information 350a from being altered by a certain person.

Next, the determination process performed by the service provider 400 will be described. FIG. 19 is a flowchart showing the determination process performed by the service provider 400 according to the second embodiment. As shown in the figure, the service provider 400 includes a storage unit after the decryption processing unit 460a obtains service usage log information (encrypted service usage log information) and decrypts the service usage log information. The data is stored in 450 (Step S401), and the log information verification unit 460c determines whether or not there is a contradiction in the IP address of the service usage log information 450b (Step S402).

[0112] If there is a contradiction in the IP address in the service usage log information 450b (step S403, Yes), information indicating that the service usage log information 450b is not appropriate is output to the output unit 420 ( Step S404). On the other hand, if there is no contradiction in the IP address (step S403, No), it is determined whether information corresponding to the audit information exists in the service usage log information 450b (step S405). [0113] If the information corresponding to the audit information does not exist in the service usage log information 450b (step S406, No), the process proceeds to step S404. On the other hand, if the information corresponding to the audit information exists in the service usage log information 450b (step S406, Yes), the difference between the access occurrence time of the corresponding audit information and the access occurrence time of the service usage log information 450b is calculated. It is calculated (step S407), and it is determined whether or not the time difference is greater than or equal to a predetermined value (step S408).

[0114] If the time difference is greater than or equal to the predetermined value (step S409, Yes), the process proceeds to step S404. On the other hand, if the time difference is less than the predetermined value (step S409, No), it is determined whether or not the accumulated access count of the audit information is equal to the accumulated access count of the service usage log information 450b (step S410).

[0115] If the accumulated access counts are not equal (step S411, No), the process proceeds to step S404. On the other hand, when the accumulated access count is equal (step S411, Yes), it is determined whether or not the number of predetermined IP addresses in the service usage log information 450b is equal to the audit access count (step S412).

[0116] If the number of predetermined IP addresses in the service usage log information 450b is not equal to the number of audit accesses (step S413, No), the process proceeds to step S404. On the other hand, if the number of predetermined IP addresses in the service usage log information 450b is equal to the number of audit accesses (step S413, Yes), the digest value verification unit 460d uses the digest value from the service usage log information 450b. (Step S414), the digest value included in the audit information of the audit management information 450a is compared with the digest value calculated from the service usage log information 450b, and whether or not the digest values are equal. (Step S415).

[0117] If the digest values are different (step S416, No), the process proceeds to step S404. On the other hand, if the digest values are equal (step S416, Yes), information indicating that the service usage log information is appropriate is output to the output unit 220 (step S417).

[0118] In this way, the digest value verification unit 460d calculates the digest value of the service usage log information 450b, and the digest value included in the audit information of the audit management information 450a Since the digest value calculated from the service usage log information 450b is compared, the legitimacy of the service usage log information 450b can be determined more accurately.

[0119] As described above, the service providing system according to the second embodiment is based on information in a predetermined area (predetermined period) among information recorded in the service usage log information by the data center 300. The digest value is generated, and the audit information and the digest value are transmitted to the terminal that provides the service. Then, when the service provider 400 is charged by the data center 300 according to the workload, the service information 400 includes the audit information and the digest value, the service usage log information, and the digest value generated from the service usage log information. Are compared to determine whether the service usage log information has been tampered with illegally. Therefore, it is possible to determine the validity of the service usage log information 450b and to tamper with the service usage log information 450b. Can be efficiently prevented.

[0120] Although the embodiments of the present invention have been described so far, the present invention may be implemented in various different forms other than the first and second embodiments described above. Therefore, other embodiments included in the present invention will be described below.

[0121] In the above embodiment, after the auditor operates the user terminal to access the data center 100 and obtains the audit information, the auditor transmits the audit information to the service provider 200. A user terminal that is not limited to this may be automatically performed. In other words, the user terminal that performs the audit may access the data center 100, and the user terminal may be configured to transmit the audit information output from the data center to the service provider 200. In addition, the user terminal repeats access to the data center 100 at an interval shorter than the average time interval at which the user accesses the data center 100 (time interval equal to or less than a predetermined value). Unauthorized padding can be generated to prevent unauthorized use of service usage log information.

[0122] This is because the access by the user terminal at a sufficiently short interval increases the possibility that the access is continuously recorded even in the service usage log information (access of the user terminal that performed the audit). In this case, it is possible to determine that fraud has been performed on the service use log information. [0123] In the above embodiment, the data center 100 encrypts the audit information in response to the service request and transmits it to the user terminal. However, the audit information is not limited to this. It can be embedded in information obtained by the user (for example, a created CAD file if the user is an online CAD service) and sent to the user terminal. In addition, by making the audit information invisible using electronic permeability technology, it is possible to prevent the general user from understanding the details of the audit information and solve the problem of information leakage.

By the way, the various processes described in the above embodiments can be realized by executing a prepared program on a computer. Therefore, in the following, an example of a computer that executes a program that realizes the various processes will be described with reference to FIG.

FIG. 20 is a diagram showing a hardware configuration of a computer constituting the data center 100 or the service provider 200 shown in FIG. 2 (the data center 300 shown in FIG. 12 is! / Is the service provider 400). . This computer is an input device 30 that accepts input of data from the user, a monitor 31, a RAM (Random Access Memory) 32, a ROM (Read Only Memory) 33, and a medium reading that reads programs from various recording media. Device 34, network interface 35 that exchanges data with other computers via the network, CPU (Central Processing Unit) 36, and HDD (Hard Disk Drive) 37 are connected via bus 38. The

[0126] The HDD 37 includes the data center 100 or the service provider 200 described above.

Various programs 37b that exhibit functions similar to those of the data center 300 or the service provider 400 are stored. Then, by reading the CPU 36 power various programs 37b from the HDD 37 and executing them, the various processes 36a for realizing the functions of the data center 100 and the service provider function unit described above are started.

Further, the HDD 37 stores various data 37a corresponding to the data stored in the storage unit of the data center 100 or the service provider 200 (data center 300 or service provider 400) described above. The CPU 36 stores various data 37a in the HDD 37, reads the various data 37a from the HDD 37, stores the data 37a in the RAM 32, and executes data processing based on the various data 32a stored in the RAM 32. [0128] By the way, the various programs 37b do not necessarily have the initial power stored in the HDD 37. For example, “portable physical media” such as a flexible disk (FD), CD—ROM, DVD disk, magneto-optical disk, IC card, etc. inserted into a computer, or a hard disk drive (HDD) provided inside or outside the computer Various programs 37b are stored in “fixed physical media” such as “other computers (or servers)” connected to the computer via public lines, the Internet, LAN, WAN, etc. Alternatively, the computer may read and execute the various programs 37b.

[0129] Although the embodiments of the present invention have been described so far, the present invention can be applied to various different embodiments within the scope of the technical idea described in the claims other than the above-described embodiments. May be implemented.

[0130] In addition, among the processes described in the present embodiment, all or a part of the processes described as being automatically performed can be manually performed, or are described as being manually performed. All or part of the processing is done automatically by a known method.

[0131] In addition, the processing procedures, control procedures, specific names, information including various data and parameters shown in the above documents and drawings can be arbitrarily changed unless otherwise specified.

[0132] The constituent elements of the illustrated apparatuses are functionally conceptual, and need not be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to the one shown in the figure, and all or a part thereof is functionally or physically distributed in an arbitrary unit according to various loads and usage conditions. · Can be integrated and configured.

[0133] Furthermore, all or a part of each processing function performed in each device is realized by a program analyzed and executed by the CPU and the CPU, or as hardware by wired logic. Can be realized. Industrial applicability

As described above, the service providing apparatus, the service providing system, and the service according to the present invention. The service provision method is useful for a service provision system in which a service provision device entrusted with service provision to a service provider provides a service to a user terminal, and in particular, provided by the service provision device. This is suitable when it is necessary to accurately determine the validity of the history information related to the service workload.

Claims

The scope of the claims

[1] A service providing program that functions as a service providing device that provides a Web service to a terminal that has accessed a computer,

The computer

Data recording means for measuring the workload of the service provided to the accessed terminal and recording the measured workload data as log data;

A transmission control means for transmitting, as audit data, log data recorded by the data recording means to a terminal that provides the service when providing a service in response to a service request;

Service providing program characterized by functioning as

[2] A digest value generating means for generating a digest value based on the log data is further provided, and the transmission control means becomes a service providing destination when providing a service in response to a service request. The service providing program according to claim 1, wherein the digest value is transmitted to a terminal.

3. The service providing program according to claim 2, wherein the digest value generating unit generates a digest value based on log data of a predetermined period recorded in the data recording unit.

[4] A service providing system in which a service providing apparatus entrusted with service provision to a service provider provides a service to a user terminal,

The service providing apparatus includes:

Data recording means for measuring the workload of the service provided to the terminal that has accessed the workload related to service provision, and recording the measured workload data as log data;

With

The audit terminal The audit data acquired by accessing the service providing apparatus and the log data recorded in the data recording means are acquired, and the log data is falsified based on the acquired audit data and log data, A service providing system comprising: a determination unit that determines whether or not

[5] The service providing apparatus further includes digest value generating means for generating a digest value based on log data recorded in the data recording means, and the transmission control means provides a service in response to a service request. When performing, the digest value is transmitted to a terminal to which the service is provided, and the determination means is based on the digest value transmitted to the auditor's terminal and the digest value generated from the log data. 5. The service providing system according to claim 4, wherein it is determined whether or not the log data has been tampered with.

[6] A service providing method performed by a service providing device and a terminal used by an inspector of a provider who substitutes the Web service to the service providing device,

A recording step of measuring the workload of the service provided to the terminal that has accessed the workload related to service provision, and recording the measured workload data as log data in a recording device;

A transmission control step of transmitting, as audit data, log data recorded by the recording device to a service providing destination when providing a service in response to a service request;

Obtaining the audit data and the log data transmitted to the terminal of the auditor, and determining whether or not the log data has been tampered with;

A service providing method characterized by including:

[7] The service providing device further includes a digest value generating step of generating a digest value based on the log data, and the transmission control step provides a service when providing the service in response to the service request. The digest value is transmitted to the terminal to which the log data is provided, and the log data is falsified based on the digest value transmitted to the auditor's terminal and the digest value generated in the log data force in the determination step. The service providing method according to claim 6, wherein it is determined whether or not the user has power.

8. The service providing method according to claim 7, wherein the digest value generating step generates a digest value based on the log data for a predetermined period recorded in the recording device.

[9] A service providing device that functions as a service providing device that provides a Web service to a terminal that has accessed a computer,

A service providing apparatus comprising:

[10] A digest value generating means for generating a digest value based on the log data is further provided, and the transmission control means provides a service in response to a service request.

10. The service providing apparatus according to claim 9, wherein the digest value is transmitted to a terminal that is a service providing destination.

11. The service providing apparatus according to claim 10, wherein the digest value generating unit generates a digest value based on log data for a predetermined period recorded in the data recording unit.