JP2001265689A - Network service utilization right management method and system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform detailed access management for each service of a user and charging for a utilization result in a closed area network. SOLUTION: At the time of receiving a service utilization request from a user terminal 101, an access management device 102 specifies the user from communication contents and requests user information to a user information management device 103. The user information management device 103 reads the information of the user and returns it to the access management device 102. The access management device 102 decides the propriety of service provision on the basis of the returned information. In the case of deciding that the service can be provided, counting by a timer is started simultaneously with access permission to a service provision device 104 or 106 and utilization time is measured.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a closed network user terminal using a service provided by a service providing device connected to the closed network by a service providing device connected to the closed network or an opening device. The present invention relates to a network service usage right management method and system for managing usage rights.

[0002]

2. Description of the Related Art A closed network represented by a company's intranet is laid to achieve the purpose of a closed network installer, such as a business purpose, and is generally used only for a purpose other than a private purpose or self-development. I was not allowed. Depending on the network, a sign-on server and / or content filter may be installed to deny or restrict access to servers that are likely to be used for private purposes, and management aimed at using the network based on its original intention is implemented. are doing. These devices are devices that achieve the purpose of improving security and improving network use efficiency by eliminating use other than the purpose rather than active use of the network.

[0003]

However, today, networks are infrastructures similar to water and electricity, and during activities using the networks, their use is restricted and access to information is significantly restricted. On the contrary, if the service that the user enjoys at home is used in a company with a closed network, etc. It must be solved by direct access to other than the closed network. Furthermore, when such a network cannot be used, physical means such as going out must be used even though there is a network available in front of the user.

At the same time, by actively accepting the use of private networks, such as e-government, which is conventionally used for private services, such as public services, online shopping at daytime in dual-working households, and correspondence education via networks,
The overall efficiency of the user can be improved.

[0005] In addition, employees of a company, which is a typical user of the closed network, can take a certain rest time during working hours, and can use the network for free use time. Improve the efficiency of activities on the ground and clarify the distinction between public and private.

[0006] As described above, despite the fact that today's intranet needs to provide a function that contributes to the overall efficiency improvement of users, conventional access management systems using a sign-on server or a content filter do not. It is difficult to manage the provision of the server use, the setting of the upper limit of the use time, and the charging in the form of selling the use time in response to the use request of the user.

[0007] An object of the present invention is to control service access management for each user and service in an access device based on user information in a user information management device, and to charge based on use-based recording. Another object of the present invention is to provide a network service use management method and system that enables an administrator to sell a service to a user.

[0008]

According to a network service usage right management method of the present invention, when a user terminal receives a service usage request issued to a service providing apparatus, the user terminal uses the identification information of the user or the user terminal. Is issued as a user information acquisition request to the user information management device on the route of the closed network, and it is determined whether the service use request is valid based on the user information from the user information management device. The access time measurement is started at the same time as the access to the providing device is permitted.

The present invention has user management information and access control for allowing a user to freely handle a service in a closed network among conditions assigned by a user, and sets service use conditions for each user. By measuring the service usage time, it is possible to generate charging information for service usage for each user.

Since the usage of each user does not exceed a preset standard, the increase in network usage is in a predictable range, and the network operator has two options, such as conventional unrestricted broadcasting or uniform restrictions. The impact on the purpose of the network installer can be minimized without performing alternative operations. In addition, by operating the network based on the charging information, the network operator can not only effectively operate the conventional network with a smaller bandwidth and improve the effect, but also be more appropriate than the beneficiary user. It will be possible to use cost recovery means,
It is also possible to use a broadband line with a low bandwidth unit price, and it is possible to maintain the contracted band and increase the use efficiency.

Further, the network service use right management system of the present invention is a user information management device which manages user information on a route of a closed network, and a user terminal which is on a route of the closed network. Receives a service use request issued to the service providing device, sends the identification information of the user or the user terminal to the user information management device as a user information acquisition request, and outputs the user from the user information management device. An access management device that determines whether the service use request is valid based on the information and, if so, permits access to the service providing device and starts measuring access time at the same time.

[0012]

Next, embodiments of the present invention will be described with reference to the drawings.

Referring to FIG. 1, a network service providing system according to an embodiment of the present invention includes a user terminal 101.
, Access management device 102 and user information management device 103
, Service providing devices 104 and 106, a router 107, and an external network 108.

User terminal 101 and access management device 10
2, user information management device 103, and service providing device 10
4 is connected to a closed network. The external network 108 is connected to the closed network 1 via the router 107.
The service providing device 106 is connected to the external network 108.

As shown in FIG. 2, the access management device 102 includes a service determination unit 211 and a traffic communication unit 21.
2 and a timer 213. Timer 213
Is provided for each user service, and starts counting simultaneously with access permission. When the service use request from the user terminal 101 is a login type, the service determination unit 211 responds to the user terminal 101 with the login request, and when a login response is transmitted from the user terminal 101, the service determination unit 211 The user is specified, the user information is requested to the user information management device 103, and it is determined whether the service can be provided based on the returned user information. When the service provision condition is satisfied, the service communication is started by the traffic communication unit 212 and a service provision request is transmitted to the service providing apparatus 104 or 106. Also, the service determination unit 21
When the value of the timer 213 reaches the remaining time stored in the service determination unit 211, the traffic communication unit 21
Instruct 2 to stop communication.

The user information management device 103 includes a user information search unit 221, a user information storage unit 222, and a charging information generation unit 223. In response to a user information acquisition request from the access management apparatus 102, the user information search unit 221 uses the user identifier 401 and the user terminal identifier 402 as keys from the user information storage unit 222 to use the user information (usage conditions). (FIG. 4) and reads the access management device 102
To return. When a certain clearing period, for example, one month, comes, the billing information generation unit 223 displays the usage record 50 shown in FIG.
4 and billing information is generated based on the usage history. The most typical example is derived by multiplying the usage time by the billing fee. Various charges can be obtained by combining the histories of other users and using an algorithm such as a discount.

Next, the operation of this embodiment will be described with reference to FIGS.

The user issues a service use request from the user terminal 101 (step 601). The use request is received by the access management device 102. In the case of the login type, the service determination unit 211 returns an approval request to the user terminal 101 (Step 602). User terminal 1
No. 01 inputs the user identification information and the service type from the user and transmits a login response to the access management apparatus 102 (step 603). The service determination unit 211 specifies the user from the communication content and requests the user information from the user information management device 103 (step 604). If the user is not of the login type, the service determination unit 211 identifies the user from the communication content of the use request, and
03 is requested for user information (step 604). In the user information management device 103, the user information search unit 221 receives a user information search request from the user information storage unit 222 using the identifier and the identifier of the user terminal as keys (step 60).
5) The user information is read out as a user search response (step 606), and returned to the service determination unit 211 (step 607).

FIG. 8 is a flowchart showing a detailed processing flow at this time. Upon receiving the user information search request (step 801), the user identifier 401 or the user terminal identifier 402 is specified (step 802).
The use condition of the user information is searched (step 803).
The use condition 405 is specified using the start time 403, the end time 404, and the current time (step 804). "Restrictions"
In the case of, when the use result 407 within the time zone set within the conditions of the restriction does not exceed the use limit 406 within the time zone, the remaining time within the time zone is calculated and returned. (Steps 806 and 811). In addition, in the case of “prohibited”, the use is not permitted (step 807), and in the case of “general”, if the usage record 407 does not exceed the usage limit in the settlement period, the remaining time Is calculated (steps 808 and 809). The result is returned to the access management apparatus 102 as user information (step 81)
1). In the case of "other", the remaining time is determined (step 810), and the remaining time is returned to the access management apparatus 102 (step 811).

The service determination unit 211 determines whether a service can be provided based on the returned information. When the service provision condition is satisfied, the access management apparatus 102 starts the service communication by the traffic communication unit 212 (step 608), and the external network 1 connected by communication via the service provision apparatus 104 or the router 107 or the like.
A service providing request is transmitted to the service providing apparatus 08 (step 609). The service providing device 104 provides a service to the user terminal 101 (step 61).
0). If the service communication does not pass through the access management device 102 and the service providing condition is satisfied, the access management device 102 returns access information on the service providing device accessible to the user terminal 101,
The user terminal 101 transmits a service providing request to the service providing apparatus 104. On the other hand, the access management device 102
In, if the service is not restricted,
It is sent to the service providing apparatus 104 as it is.

The access management apparatus 102 prepares a timer 213 for each user service for a combination of a user, a terminal, and a service type, and starts counting simultaneously with access permission.

FIG. 7 shows an example of service termination. Whether the service termination notification is sent from the user terminal 101 to the access management apparatus 102 (step 701), or if the count value of the timer 213 is
When the remaining time of the user stored in 11 has been reached, the traffic communication unit 212 is instructed to close the communication by a service stop request (step 702). On the other hand, the traffic communication unit 212
1 is returned to the service stop response (step 703). The service determination unit 211 notifies the user information management device 103 of the result of the timer 213 as a user usage record (step 705). The user management device 221 updates the information in the user information storage unit 222 (Step 706). Thereafter, the service determination unit 211 returns a service stop response to the user terminal 101 (Step 704).

[0023]

The user terminal need only understand the access management device as the entrance device, and does not need to understand whether each service is a restricted service. On the other hand, since the service providing apparatus only accepts a service request already permitted by the access apparatus, it is possible to provide a service that is no different from the case where there is no access apparatus. The access device can control usage for each usage.
Therefore, it is possible to perform usage control for each service on a user-by-user basis without modifying the existing service providing device and user terminal.

This makes it possible to flexibly promote the use of the closed network when it is reasonable to restrict the use of the closed network to achieve its intended purpose, such as during working hours.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram of an embodiment of the present invention.

FIG. 2 is a configuration diagram of an access management device 102.

FIG. 3 is a configuration diagram of a user information management device 103.

FIG. 4 is a diagram showing a configuration of user information relating to usage conditions in a user information storage unit 222;

FIG. 5 is a diagram showing a usage time and an upper limit in a user information storage unit 222;

FIG. 6 is a sequence diagram at the time of starting use of a service.

FIG. 7 is a sequence diagram when service use is stopped.

FIG. 8 is a flowchart of a process in the user information management device 103 for calculating a usable time of a user.

[Explanation of symbols]

Reference Signs List 101 user terminal device 102 access management device 103 user information management device 104 service providing device 211 service determination unit 212 traffic communication unit 213 timer 221 user information search unit 222 user information storage unit 223 charging information generation unit 401 user Identifier 402 User terminal identifier 403 Start time 404 End time 405 Usage conditions 406 Usage limit 407 Usage record 501 User identifier 502 User terminal identifier 503 Usage limit 504 Usage record 601-612, 701-706, 801-811
Steps

Claims (6)

[Claims] 1. A user terminal of a closed network manages a right to use a service provided by a service providing device connected to the closed network via a service providing device connected to the closed network or an opening device. A network service usage right management method, comprising: when a user terminal receives a service usage request issued to a service providing apparatus, the identification information of the user or the user terminal as a user information acquisition request, It issues to the user information management device on the route, and determines whether the service use request is valid based on the user information from the user terminal information management device, and if so, accesses the service providing device. Network service usage right management method that starts measuring access time at the same time as permitting 2. When the access time reaches a one-time use limit or when a service use termination request is received from the user terminal, access to the service providing device is released and the service use time is reduced by the use time. The method according to claim 1, wherein the access information is transmitted to a user information management device, and the user information management device updates and accumulates the access time. 3. A user terminal of a closed network manages a right to use a service provided by a service providing device connected to the closed network via a service providing device connected to the closed network or an opening device. A user information management device that manages user information on a route of the closed network, and a user terminal that provides a service on the route of the closed network. Upon receiving the service usage request issued to the device, the identification information of the user or the user terminal is issued to the user information management device as a user information acquisition request, and the user information from the user terminal information management device is transmitted. Judge whether or not the service use request is valid based on Network service rights management system having access management device to start the measurement of the permission to simultaneously access time. 4. The access management device is provided for each service of a user, a timer for starting a count operation simultaneously with permission of access to a service providing device, a traffic communication unit for communicating a service, and a user terminal. When the service use request from the user terminal is of the login type, an approval request is returned to the user terminal, and when the login response is transmitted from the user terminal, the user is identified from the content thereof, and the user information is Requesting the user information from the management device, determining whether the service can be provided based on the returned user information, and starting the service communication by the traffic communication unit if the service providing condition is satisfied; A service provision request is transmitted to the provision device, and when the timer value reaches the remaining time, the traffic communication unit is instructed to close the communication. The system according to claim 3, further comprising a service determination unit that performs the service determination. 5. The user information management device according to claim 1, wherein the user information storage unit stores user information, and the user information storage unit receives a user information acquisition request from the access management device. A user information retrieval unit that reads out user information using the user terminal identifier as a key and returns the information to the access management device; and a billing unit that generates billing information based on the use record and the use history when a certain clearing period comes. The system according to claim 3, further comprising a use information generation unit. 6. The user information search unit searches for a use condition of the user information, and if the use condition is “restricted”, the use result of the set time zone is determined as the use limit within the time zone. If the comparison does not exceed this, the difference is regarded as the remaining time. If the use condition is “prohibited”, access to the service providing device is not permitted, the remaining time is set to zero, and if the use condition is “general”, 6. The system according to claim 5, wherein if the usage record does not exceed the usage limit during the settlement period, the difference is regarded as the remaining time and returned to the access management device.