JP2001331389A - Information processing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing system, capable of serving over a wide area, while keeping security on the side of a host device inside an intranet as well, and using a portable browsing telephone terminal. SOLUTION: A portable browsing telephone terminal 108 is connected with a gateway computer 104 via the Internet 109. When the portable browsing telephone terminal 108 requests a login picture, this computer 104 performs authentication and receives a menu picture from a job computer 102. Then, the menu picture is transmitted to the portable browsing telephone terminal 108 in a display state adaptive thereto, and displayed and a job is processed. Since the portable browsing telephone terminal 108 is unable to view the connecting destination information of the job computer 102, security can be maintained. Furthermore, since the Internet is used, wide area service is available.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing system using a wireless terminal, and more particularly to an information processing system suitable for a case where a person who is performing field work communicates with a host device using a wireless terminal. .

[0002]

2. Description of the Related Art A driver of a carrier of a courier company performs field work using a business wireless terminal while extracting information on shipping instructions from a company database. Here, the term “business radio terminal” refers to an in-vehicle device such as a business radio or an MCA (multi-channel access) radio, or a device such as a PDC (personal digital cellular: portable telephone). There are various types of business wireless terminals, but if this is a simple device that does not support input of kanji and katakana, transmission to the upper system of the company is input of only numeric data. Therefore, in such an information processing system, a complicated input cannot be performed from the field worker side, and it is necessary to create a system adapted to such a simple input. In addition, there is a problem that information extracted by the field worker from the upper system is naturally restricted.

In order to solve such a problem, an information processing system has been developed in which a business-use wireless terminal is connected to a portable personal computer such as a portable type so as to be wirelessly connected to a host device. In this system, an application dedicated to the system is installed in a personal computer, and input of kanji and kana is enabled by using input devices such as a keyboard and a mouse. This allows the field worker to perform an input operation with a high degree of freedom on the host device. In addition, recently, not only the business wireless terminal described above,
Small and portable PHS (Personal Handy phone Syste)
m) Or a wireless terminal (smartphone) having a browser function such as a portable wireless terminal is used not only for personal use but also for business use.

[0004] The above description has been made with reference to the example of a driver of a carrier of a courier service. Many.

[0005]

By the way, in the case of an information processing system using a business-use wireless terminal, a wireless terminal carrier such as a field worker transmits information according to a service screen prepared in the company's information processing system. It obtains and sends information to the host device. Therefore, if the information processing system is changed, the application of the business wireless terminal itself is changed, or if the business wireless terminal is connected to the personal computer for communication, the application is installed in the personal computer. Application software had to be updated for each terminal. In addition, since a dedicated terminal is used as a business wireless terminal, there is a problem that these devices become expensive. Further, since information is input and output in accordance with the service screen, it is difficult or generally impossible to exchange information in two directions in real time.

[0006] Further, the company that uses the information processing system is different from the communication carrier itself. For this reason, it is not possible to use a communication network of an existing communication carrier. Therefore, it is necessary to construct a dedicated system by arranging a base station for a business wireless terminal in-house, and the service area must be limited in terms of cost. As a result, there is a problem that the service area where the field worker can use the system is locally restricted. MC
In the case of the radio A, the base station is operated by a radio association called MRC, and the user is to pay the usage fee with a worker license. In this case, the service area is currently limited.

On the other hand, in the case of a wireless terminal having a function as a browser (hereinafter, referred to as a portable browsing telephone terminal), information processing on its own homepage becomes possible by accessing the Internet. Therefore, it is not necessary to update the application of each smartphone every time the system is changed. However, smartphones have different communication methods for different carriers. For this reason, there has been a problem that the information processing system cannot be used other than the communication method of the employed communication carrier. In addition, from the viewpoint of maintaining security, there is another problem that a computer that performs service in the system is a stand-alone computer in an intra network.

Accordingly, an object of the present invention is to provide an information processing system which uses a portable browsing telephone terminal, can secure the security of a higher-level device in an intra network, and can provide services in a wide area.

[0009]

According to the present invention, there is provided a browsing terminal having a function as a browser and capable of accessing the Internet, and a browsing terminal having access from the browsing terminal via the Internet. Terminal determining means for determining whether or not the access is from a specific browsing terminal as a browsing terminal of a user configuring the specific system described above, and the terminal determining means determines whether the access is from the specific browsing terminal. A gateway computer provided with information transfer means for transferring information to a higher-level computer whose specific browsing terminal requests processing of a business when it is determined that the browsing terminal is connected to the gateway computer; Information on the specific system mentioned above between To and a business computer for transferring the information processing system.

That is, according to the first aspect of the present invention, the terminal determining means determines whether or not the browsing terminal that has accessed the terminal is an access from a specific browsing terminal as a browsing terminal of a user configuring a specific system. In the case of such a specific browsing terminal, the exchange of information on a specific system between the specific browsing terminal and the business computer is mediated.
This allows even a normal browsing terminal to exchange information with a business computer via the Internet if it is a member of a specific system. Moreover,
Since the gateway computer is interposed, security can be ensured.

According to a second aspect of the present invention, in the information processing system of the first aspect, the business computer is arranged in a user intranet.

That is, according to the second aspect of the present invention, a specific browsing terminal can access a business computer arranged in a user intranet from any place via the Internet, and security can be ensured. .

According to a third aspect of the present invention, in the information processing system according to the second aspect, the user intranet is connected to the gateway computer via a protection wall.

That is, according to the third aspect of the present invention, since the user intranet is connected to the gateway computer via the protection wall, the security of information in the user intranet can be ensured.

According to a fourth aspect of the present invention, in the information processing system according to the first aspect, the gateway computer is charged in accordance with a data amount of communication with the specific browsing terminal or the number of times of access of the specific browsing terminal. It is characterized by having a charging means for performing processing.

That is, according to the fourth aspect of the present invention, a gateway computer is added to the system as a member so that the mediation service can be charged.

According to a fifth aspect of the present invention, in the information processing system according to the fourth aspect, the gateway computer notifies the specific browsing terminal of the delinquency when the user delinquently pays the payment fee based on the billing. It is characterized by having a notifying means.

In other words, according to the fifth aspect of the present invention, while the gateway computer serving as a window for the user accessing the user intranet performs the billing process, when the fee for the payment is delinquent, the gateway computer itself notifies the fee delinquency. I'm going to be careful. It is also effective to deny access to a specific browsing terminal when payment is delayed.

According to a sixth aspect of the present invention, in the information processing system of the first aspect, the browsing terminal is a mobile phone capable of accessing the Internet.

That is, the invention according to claim 6 indicates that the browsing terminal may be a normal portable telephone capable of accessing the Internet. Naturally, another terminal having a similar Internet access function may be used.

According to the seventh aspect of the present invention, the gateway computer has the encrypted routing information table as well as the encrypted authentication information table, and the gateway computer corresponds to the combination of the ID and the password input from the browsing terminal. It is characterized in that URL information of a business computer of a connection destination is acquired in an authentication information table, a business computer in charge of a gateway computer is uniquely determined in a routing information table, and its IP address is acquired.

That is, in the invention according to claim 7, the gateway computer uniquely determines the business computer in charge of the business using the authentication information table and the routing information table, and acquires its IP address. I have. Furthermore, since these tables are encrypted, security can be strengthened.

[0023]

BEST MODE FOR CARRYING OUT THE INVENTION

[0024]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described in detail below with reference to embodiments.

FIG. 1 shows an outline of the configuration of an information processing system according to an embodiment of the present invention. In this information processing system, a user host computer 101 is connected to a business computer 102 for providing services and a user's intra network 103. Business computer 102 and gateway computer 1
04 is a dedicated line or VPN (virtual private network)
ork (virtual private network) 105 via a protective wall 106. Further, a portable browsing telephone terminal 108 using the system is connected to the gateway computer 104 via the Internet 109.

The user host computer 101 is constituted by an information processing device such as a workstation or a server. The user host computer 101 outputs business data such as instruction data and contact data to a field worker 110 who individually has the portable browsing telephone terminal 108.

The business computer 102 has an obtaining means for obtaining business data output from the user host computer 101 via the intra network 103. Then, based on the acquired business data, information of a menu screen and information of each business support screen displayed on a display (not shown) of the portable browsing telephone terminal 108 possessed by the field worker 110 are transmitted to this. Has become. The business computer 102 also has an e-mail transmission function of transmitting an e-mail, and transmits the e-mail of the details of the business to the portable browsing telephone terminal 10.
8 can be sent. The business computer 102 also has a session information generation and addition function of generating and adding session information to information on each business support screen and e-mail. The session information generated by the business computer 102 uses an ID (identification) and password used for personal identification when the portable browsing telephone terminal 108 logs in, the date and time of access, a serial number of access, and the like. Thus, encryption is performed according to a predetermined rule. When access from outside via the gateway computer 104 does not include scheduled session information, the connection is rejected. Also, the portable browsing telephone terminal 108 whose access is interrupted for a certain period of time is disconnected from the session, and when access is performed, authentication is performed again.

The business computer 102 and the gateway computer 104 are connected to the protection wall 106 as described above.
Connected through. The protection wall 106 is configured by, for example, hardware or software called a firewall. The protection wall 106 can pass only permitted data for access from outside the intra network 103. Thus, the business computer 102 is connected to the dedicated line or the VPN 1
The exchange of the business support screen information, the business support screen information request command for requesting the business support screen information, and the e-mail data with the gateway computer 104 is performed via the server computer 105. Gateway computer 104
Transmits various business support screen information and e-mail data to the portable browsing telephone terminal 108 via the Internet 109. Portable browsing telephone terminal 10
8 sends a business support screen information request command,
The received business support screen information is displayed on the display.

When the business support screen is displayed on the portable browsing telephone terminal 108, the field worker 110 inputs necessary items on this display screen and transmits the contents to the gateway computer 104. The portable browsing telephone terminal 108 is a gateway computer 1
E-mail data can be received from 04 and displayed similarly. Portable browsing telephone terminal 108
Depending on the type, the URL (Uniform Reso
urce Locator) to request transmission of the corresponding screen information.

Upon receiving the business support screen information request command from the portable browsing telephone terminal 108, the gateway computer 104 refers to the routing information table 111 disposed therein.
Then, the system has a URL conversion function of uniquely determining the business computer 102 in charge and converting the URL addressed to the gateway computer 104 into the determined URL addressed to the business computer 102. With this function, the gateway computer 104 is selectively connected to a desired one of a plurality of business computers 102 (only one is illustrated in the figure) at any time.

The portable browsing telephone terminal 108 may not only have a different communication system depending on its model or communication carrier, but also have a display screen size on a display, a language to be displayed, a displayed color (color or monochrome), The number of display colors may be different. The gateway computer 104 includes a telephone terminal information table 112 therein. When the portable browsing telephone terminal 108 accesses the gateway computer 104, the gateway computer 104 refers to the table to identify a portable browsing telephone terminal type called a user agent. It has become. Thereby, the communication system, the screen size, the display language, the display color, and the number of display colors corresponding to the portable browsing telephone terminal 108 are automatically recognized. The gateway computer 104 uses the result of the recognition as the respective portable browsing telephone terminal 108.
Screen information suitable for the user can be provided. The gateway computer 104 has a communication protocol and a connection line corresponding to each communication carrier and model in order to be compatible with various portable browsing telephone terminals 108. And just like adapting the screen information,
A communication protocol and a connection line suitable for each portable browsing telephone terminal 108 can be selected.

The gateway computer 104 having such a function includes a communication log storage unit 113.
The communication log storage unit 113 stores the portable browsing telephone terminal 1
At the time of accessing 08, transmitting e-mail data, and communicating with the business computer 102, the amount of data communicated and the number of connected lines are stored as a communication log. The gateway computer 104 calculates billing information for a user who uses the information processing system based on the communication log stored in the communication log storage unit 113. If the user does not pay the sum of the calculated amount and the line usage by the designated date, the user accesses the business computer 102 from the portable browsing telephone terminal 108, or the mobile computer 102 Browsing telephone terminal 10
8 will be denied.

In some cases, this rejection operation alone cannot distinguish the occurrence of a failure from the occurrence of a failure. Therefore, in the information processing system according to the present embodiment, the charge delinquency notification screen is displayed on the display of the portable browsing telephone terminal 108 when the rejection operation is performed. At the same time, a charge delinquency notice is transmitted to the user host computer 101 via the business computer 102, alarm information is displayed on a display (not shown), and a buzzer sounds if necessary. Gateway computer 1
04 also has an authentication information table 114 for confirming the above-mentioned ID and the like.

In the information processing system of the present embodiment, the gateway computer 104 is provided. However, the communication between the business computer 102 and the portable browsing telephone terminal 108 is possible without the gateway computer 104. However, gateway computer 104 has connections for various portable browsing telephone terminals 108. In addition, by having this, it is possible to cope with high security. Therefore, by having the gateway computer 104, a useful outsourcing business can be established. Less than,
The specific operation of each unit of the information processing system will be described.

FIG. 2 shows the flow of processing of the portable browsing telephone terminal from the start of the operation to the display of the authentication screen. Business computer 10 shown in FIG.
2. The gateway computer 104 and the portable browsing telephone terminal 108
1 and a CPU (Central Processing Unit) (not shown), which executes control programs stored in respective recording media (not shown) to execute respective processes. I have.

The field worker 110 of the portable browsing telephone terminal 108 accesses the gateway computer 104 to display a menu screen. The access destination for obtaining the authentication screen is not open to the public. When the field worker 110 operates the operation panel (not shown) of the portable browsing telephone terminal 108 at the time of access to perform an operation for requesting display of a login screen (step S131: Y), the display request of the login screen is transmitted to the gateway computer. The data is transmitted to the server 104 (step S132). Thereafter, if the login screen information is sent from the gateway computer 104 (step S133: Y), the portable browsing telephone terminal 108
Displays the log-in screen on the display based on this (step S134). At the time of providing the login screen information, the gateway computer 104 automatically recognizes the communication carrier and the model of the terminal based on information specifically described later. As a result, a screen suitable for the portable browsing telephone terminal 108 with respect to the communication method, the screen size, the display color, the screen display language, and the like is provided.

FIG. 3 shows an example of a login screen in the portable browsing telephone terminal. Display 14 of portable browsing telephone terminal 108 (FIG. 1)
5 displays “collection and delivery support system” as the name of the information processing system, below which an ID 146 is displayed, and a password is entered in a password entry field 147.

In such a display state of the login screen, the field worker 110 sets the password (P) corresponding to the ID.
W) and presses a send button (not shown) (step S135: Y in FIG. 2). Thereby, the ID and the password are transmitted to the gateway computer 104 (FIG. 2).
Step S136).

FIG. 4 shows a flow of processing of the gateway computer when the portable browsing telephone terminal performs a work of displaying a menu screen. The gateway computer 104 monitors the arrival of a login screen display request (step S151). When this arrives (Y), the model of the portable browsing telephone terminal 108 is recognized (step S15).
2).

FIG. 5 shows a main part of the configuration of a telephone terminal information table for recognizing the model of a portable browsing telephone terminal. Telephone terminal information table 112
In accordance with a combination of information and types used by each of the portable browsing telephone terminals 108, such as browser information called a user agent, a communication carrier, and a communication method, the terminal model (screen size, display color, etc.) Is stored as a correspondence table for determining the. For example, there is a case where the type of the portable browsing telephone terminal 108 can be recognized only by a difference in browser information called a user agent,
The model of the portable browsing telephone terminal 108 can be specified only by combining this with other information such as the type of the communication carrier.

The gateway computer 104 sends login screen information suitable for the model determined using the telephone terminal information table 112 to the portable browsing telephone terminal 108 (step S153 in FIG. 4). Thereafter, the gateway computer 104 waits for an ID and a password to be transmitted from the portable browsing telephone terminal 108 (step S154). If these are sent (Y), the authentication information table 1 described below
It is determined whether the authentication is possible (OK) with reference to 14 (step S155).

FIG. 6 shows a main part of the configuration of the authentication information table. The authentication information table 114 is provided from the user host computer 101, and is a pair of each ID and password pair and the URL information of the connection destination business computer. If any combination of the ID and password is found in the authentication information table 114, a notification that the authentication is OK is sent to the portable browsing telephone terminal 108 (step S155: Y, step S156). If the combination of the corresponding ID and password does not exist in the authentication information table 114 (step S155: N), the portable browsing telephone terminal 10 sends a notification that the authentication is not permitted.
8 (step S157).

Portable browsing telephone terminal 1 together with FIG.
The continuation of the process on the 08 side will be described. In step S136, I
After transmitting the D and the password to the gateway computer 104 side, it is determined whether or not the reply to this is a message that the authentication is OK (step S137). If the authentication is not OK (N), a screen indicating that authentication is not possible is displayed (step S138). Then, the session is terminated (step S139).

On the other hand, when a notification that the authentication is OK is sent to the portable browsing telephone terminal 108 (step S137: Y), a screen indicating that the authentication is OK is generated. (Step S140). At this time, the gateway computer 104 generates connection destination information linked to the authentication OK button displayed on this screen (Step S158 in FIG. 4). Specifically, the URL of the connection destination business computer corresponding to the combination of the ID and the password in the authentication information table 114 shown in FIG.
Information, and then the routing information table 111
The connection destination of the gateway computer 104 is acquired from.

FIG. 7 shows a main part of the routing information table. Routing information table 11
1 is the U of the first to n-th connected business computers 102
RL and the first to n-th gateway computers 104
And the IP (internet protocol) addresses of the first to nth business computers 102 are associated with each other. Based on this, the gateway computer 104 acquires the IP address of the business computer 102 to which the gateway computer 104 is connected. Then, the session information on the side of the gateway computer 104 is generated and sent to the portable browsing telephone terminal 108 side to give the connection destination information to the display 145 of the portable browsing telephone terminal 108 (step S141 in FIG. 2). Become. At this time, the gateway computer 104 counts the amount of data transmitted and the number of accesses, and stores them in the communication log storage unit 113 (step S159 in FIG. 4). And authentication OK
The data is output to the business computer 102 (step S160 in FIG. 4). If the authentication processing is successful, a communication log is stored each time a communication occurs.

FIG. 8 shows the flow of processing of the portable browsing telephone terminal after step S141 in FIG.
This shows the process from pressing the authentication OK button to displaying the screen. Field worker 110 shown in FIG.
Presses an OK button (not shown) on the authentication OK screen displayed on the display 145 (step S
171: Y), the portable browsing telephone terminal 108 sends a menu screen request to the gateway computer 104 (step S172). After that, it waits for the menu screen information to arrive from the gateway computer 104 (step S173), and when it arrives (Y).
Based on this, a menu screen is displayed on the display 145 (step S174).

FIG. 9 shows a flow of a process performed by the gateway computer corresponding to the process of FIG. Upon receiving a menu screen request from the portable browsing telephone terminal 108 (step S191: Y), the gateway computer 104 checks the session information (step S192). Here, the session information
For example, when the screen transitions from the display of the login ID to the display of the time information, information for identifying which screen is the information for which (for example, instruction information to Mr. A) is next. Say. This session information
Usually, the description is added after the URL. This information is used when performing access management at the gateway computer 104. If the content of the session information is OK when the menu screen is requested, the connection destination of the business computer 102 is obtained from the routing information table 111 (FIG. 7) and converted into the URL of the connection destination (step). S193). Then, a request for a menu screen is transmitted to the business computer 102 (step S194). Thereafter, the gateway computer 104 waits for menu screen information to arrive from the business computer 102 (step S195).

FIG. 10 shows a processing flow of the business computer. When the business computer 102 detects that the authentication OK data output from the gateway computer 104 has arrived (step S201:
Y), authentication is OK for the user host computer 101
The data is output (step S202). Also, unlike the above, when a menu screen request arrives (step S203: Y), the session information is confirmed as in step S192 (FIG. 9) (step S204). Then, a menu screen is created using the detailed screen information generated when the task data such as instruction data and contact data is obtained (step S205), session information is created (step S206), and the menu screen information is transferred to the gateway. (Step S20)
7).

Returning to FIG. 9, the gateway computer 1
04 will be described. Gateway computer 10
In step S207 (FIG. 10), when menu screen information is sent from the business computer 102 (step S195: Y), the menu screen information is transmitted to the portable browsing telephone terminal 1.
08 for URL conversion (step S19).
6), create session information (step S19)
7). Then, the menu screen information is transmitted to the portable browsing telephone terminal 108 (step S198).
Thereafter, the communication data amount and the access count are stored in the communication log storage unit 113 (step S19).
9).

FIG. 11 shows an outline of a processing flow after the menu screen is displayed. The user host computer 101 transmits the instruction data to the business computer 10.
2 (step S211) and the business computer 1
02 creates a screen of the instruction content based on this (step S212). Then, a URL for displaying this screen is obtained (step S213), session information is created (step S214), a mail content is created, and a Web-to URL and session information are set (step S215). The content mail is transmitted to the gateway computer 104 (step S2).
16).

The gateway computer 104 sends the mail sent from the business computer 102 to the portable browsing telephone terminal 108 (step S2).
17). When the portable browsing telephone terminal 108 receives the e-mail (step S218), the portable browsing telephone terminal 108
to) to access the detail screen (step S21)
9). On the other hand, when the gateway computer 104 transmits the mail in step S217, the data amount,
The access count is stored in the communication log storage unit 113 (Step S220). Then, when there is a request for access to the detailed screen, confirmation of the session information (Step S2)
After performing step 21), the URL is converted to the destination URL (step S222), and a request for detailed screen information is made to the corresponding business computer 102 (step S223).

When this request arrives, the business computer 102 checks the session information (step S22).
4) The requested detailed screen information is provided to the gateway computer 104 (step S225). Then, the transmission confirmation data is transferred to the user host computer 101.
(Step S226).

On the other hand, when the detailed screen information is sent, the gateway computer 104 converts the URL (step S227) and sends this detailed screen information to the portable browsing telephone terminal 108 of the request destination (step S2).
28). The portable browsing telephone terminal 108 displays a detailed screen by receiving the information (step S22).
9). The gateway computer 104 stores the data amount and the access count in the communication log storage unit 113 as in step S220 (step S2).
30).

After the menu screen is displayed in this manner, the sequence shown in FIG. 11 is appropriately repeated to use the information processing system by the field worker 110. The operation of the information processing system of this embodiment is as follows.
The process is terminated by terminating the session after the end of a regular process called a daily process (not shown), which is performed every day at night.

FIG. 12 specifically shows a state of processing when a fee is delinquent in a predetermined portable browsing telephone terminal. Field worker 1 from portable browsing telephone terminal 108 where delinquency is being paid
Assume that the user 10 (FIG. 1) requests the login screen (step S241). The gateway computer 104 has its portable browsing telephone terminal 108 as described above.
By using the communication log storage unit 113, it is possible to determine whether or not the portable browsing telephone terminal 108 of the connection destination is in a state of delinquent charges. If the fee is not overdue, the login screen is sent back as described with reference to FIG. 4. However, if the fee is in a delinquent state (step S242), the fee delinquency notification screen is displayed on a portable browsing screen. This is provided to the telephone terminal 108 (step S243). The portable browsing telephone terminal 108 receives and displays it (step S244).

On the other hand, since the portable browsing telephone terminal 108 is in the delinquent state of the charge, the gateway computer 104 notifies this to the host computer (step S245). This notice is sent to Business Computer 1
02 is received and further transmitted to the user host computer 101 (step S246). Based on this, the user host computer 101 performs a process of notifying the field worker 110 or the user of the fee delinquency alarm (step S247).

Next, consideration for security of the information processing system of this embodiment will be described. As described above, in this embodiment, the gateway computer 1 is connected between the business computer 102 and the portable browsing telephone terminal 108.
04, the portable browsing telephone terminal 108 only allows access to the gateway computer 104. As shown in FIG. 1, only the gateway computer 104 can access the business computer 102 due to the presence of the protection wall 106. As described above, the portable browsing telephone terminal 108 cannot not only directly access the business computer 102 but also cannot see the connection destination information of the business computer 102, that is, the intra-connection destination information.

FIG. 13 shows another flow of processing for ensuring security by the gateway computer. When the portable browsing telephone terminal 108 is connected (step S261: Y), the gateway computer 104 reads the time stamp of the previous connection using the session information (step S26).
2). Then, a difference from the time stamp at the time of this connection is obtained (step S263). If this difference does not exceed the predetermined time T (step S264: N), the next processing is executed without performing such processing (step S2).
65).

On the other hand, a predetermined time T until this connection is established.
If the above time has elapsed (step S264:
Y), the gateway computer 104 requests the portable browsing telephone terminal 108 again for authentication information (step S266). And it was certified (O
K) (Step S267: Y), Step S2
It will go to 65. By taking such measures,
Unauthorized access can be prevented.

Finally, the accounting process performed by the gateway computer 104 will be specifically described. The gateway computer 104 counts the number of times of authentication confirmation and the number of times data amount or access information for the portable browsing telephone terminal 108 is converted. This is stored in the communication log storage unit 113 (FIG. 1) corresponding to the portable browsing telephone terminal 108 as a communication log.
At a predetermined point in time, the communication log is read from the communication log storage unit 113, counted by a charging target counter (not shown) for the user, and the amount is charged to the user. If the user does not respond to the payment for a certain period of time, the gateway computer 104 displays a screen prompting for payment each time the portable browsing telephone terminal 108 accesses, as described above, or a user higher-level computer that is a higher-level computer of the user. A message for prompting payment is sent to 101.

Although the encryption is not described in the embodiment, it is possible to provide an option to encrypt both the authentication information table and the routing information table arranged in the gateway computer, for example. By employing such encryption, security can be further strengthened.

[0062]

As described above, according to the first aspect of the present invention, the browsing terminal accessed by the terminal discriminating means is accessed from the specific browsing terminal as a browsing terminal of a user constituting a specific system. Is determined, and in the case of such a specific browsing terminal, the exchange of information about a specific system between the specific browsing terminal and the business computer is mediated. This allows even a normal browsing terminal to exchange information with a business computer via the Internet if it is a member of a specific system. Moreover, since the gateway computer is interposed, security can be ensured. Also, various outsourcing businesses using gateway computers can be realized. Further, the management and access control of the protection wall becomes easy.

According to the first aspect of the present invention, since the browsing terminal only needs to have a function of accessing the Internet, it is not necessary to use a dedicated terminal, and various terminals can be used. Therefore, the price of the entire system can be suppressed by such a mass production effect of the terminal. Also, since there is no need for the user to provide various unique connection ports for the browsing terminal, no hardware or software is required for that, and no special connection line is required. Can be brought. Further, in the present invention, since the service by browsing can be performed, even when the business is changed or brushed up, it can be dealt with by changing the application software of the business computer, and there is no need to change the browsing terminal. As a result, the version of the application software can be easily changed, and the change cost can be reduced. Further, the browsing operation improves the application service for the browsing terminal, and enables real-time two-way communication with the business computer. Thereby, exchange of various information can be realized.

According to the second aspect of the present invention, the specific browsing terminal can access the business computer arranged in the user intranet from any place via the Internet, and the access destination of the business computer is specified. Since it can be hidden from the browsing terminal, security can be ensured.

According to a third aspect of the present invention, in the information processing system according to the second aspect, since the user intranet is connected to the gateway computer through a protection wall, security of information in the user intranet is ensured. can do.

According to a fourth aspect of the present invention, in the information processing system according to the first aspect, the gateway computer is configured to control the data amount of communication with the specific browsing terminal or the number of times of access of the specific browsing terminal. Since there is a charging means for performing a charging process according to
Revenue for running costs is made possible.

According to a fifth aspect of the present invention, in the information processing system according to the fourth aspect, the gateway computer notifies the specific browsing terminal of the fee delinquency when the user delinquently pays the fee based on the billing. Since the payment delinquency notifying means is provided, it is possible to realize a better service while securing profits, and it is possible to ensure collection of a fee for that.

According to the sixth aspect of the present invention, in the information processing system according to the first aspect, since the browsing terminal is a mobile phone capable of accessing the Internet, these terminals can be provided at a low cost and a public use terminal can be provided. Since it is used, the service area of the terminal is widened.

Further, according to the present invention, the gateway computer uniquely determines the business computer in charge of the business using the authentication information table and the routing information table, and acquires the IP address thereof. Not only can these tables be encrypted, but also security can be enhanced.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram illustrating an outline of a configuration of an information processing system according to an embodiment of the present invention.

FIG. 2 is a flowchart showing the flow of processing of the portable browsing telephone terminal from the start of operation to the display of an authentication screen in the present embodiment.

FIG. 3 is a plan view of a display showing an example of a login screen in the portable browsing telephone terminal in the embodiment.

FIG. 4 is a flowchart illustrating a flow of a process performed by the gateway computer corresponding to the process of FIG. 2 in the embodiment.

FIG. 5 is an explanatory diagram illustrating a main part of a configuration of a telephone terminal information table according to the embodiment;

FIG. 6 is an explanatory diagram illustrating a main part of a configuration of an authentication information table according to the embodiment;

FIG. 7 is an explanatory diagram showing a main part of a routing information table according to the embodiment.

FIG. 8 is a flowchart showing a flow of processing of the portable browsing telephone terminal from pressing of an authentication OK button to display of a screen in the embodiment.

FIG. 9 is a flowchart illustrating a flow of a process performed by the gateway computer corresponding to the process of FIG. 8;

FIG. 10 is a flowchart showing a flow of processing of a business computer in the embodiment.

FIG. 11 is an explanatory diagram showing an outline of a processing flow after a menu screen is displayed in the embodiment.

FIG. 12 is an explanatory diagram specifically showing a state of processing when a fee is being delinquently performed by a predetermined portable browsing telephone terminal.

FIG. 13 is a flowchart showing another flow of processing for ensuring security by the gateway computer.

[Explanation of symbols]

101 User upper computer 102 Business computer 103 Intra network 104 Gateway computer 105 VPN (virtual private network) 106 Protective wall 108 Portable browsing telephone terminal 109 Internet 110 Field worker 111 Routing information table 112 Telephone terminal information table 113 Communication Log storage unit 114 Authentication information table 145 Display

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B085 CE05 5B089 GA25 GA31 GB04 HA10 HA11 JA22 JA31 JB22 KA17 KB07 KB13 LB14 5K030 HC01 HC14 HD03 HD06 JL01 JT09

Claims (7)

[Claims] 1. A browsing terminal having a function as a browser and capable of accessing the Internet, and a specific browsing terminal as a browsing terminal of a user constituting the specific system when the browsing terminal accesses the Internet. Terminal determining means for determining whether or not the access is from a specific browsing terminal; and when the terminal determining means determines that the access is from the specific browsing terminal, the higher-level computer requesting the specific browsing terminal to perform a business process. And a business computer connected to the gateway computer and exchanging information on the specific system with the browsing terminal. Information Management systems. 2. The information processing system according to claim 1, wherein said business computer is arranged in a user intranet. 3. The information processing system according to claim 2, wherein said user intranet is connected to said gateway computer via a protection wall. 4. The gateway computer according to claim 1, wherein the gateway computer includes a charging unit that performs a charging process in accordance with a data amount of communication with the specific browsing terminal or the number of accesses of the specific browsing terminal. The information processing system as described. 5. The information according to claim 4, wherein said gateway computer includes a charge delinquency notifying means for notifying said specific browsing terminal of charge delinquency when a user delinquently pays a charge based on billing. Processing system. 6. The information processing system according to claim 1, wherein said browsing terminal is a mobile phone capable of accessing the Internet. 7. The gateway computer has an encrypted routing information table as well as an encrypted authentication information table, and connects with the authentication information table in correspondence with a combination of an ID and a password input from a browsing terminal. URL of the previous business computer
2. The information processing system according to claim 1, wherein information is acquired, a business computer assigned to the gateway computer is uniquely determined in the routing information table, and the IP address is acquired.