JP2002183085A - Server system, session management method and recording medium with session management program recorded thereon - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a server system capable of performing proper session management on a computer network such as the Internet. SOLUTION: The server system is provided with a Web page DB13 for recording a plurality of Web pages and a session ID to be provided, a varying part ID recording part 12 for storing the varying part ID of the session ID and a Web page processing part 11 for performing managing session for providing the Web pages. The part 11 is provided with a Web page providing part 11a for adding the session ID to a requested Web page to provide it to terminal equipment 20a to 20d and a session ID check part 11b for checking the session ID received when requesting the Web page from the equipment 20a to 20d.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a server system for managing a session between a server and a client terminal connected to a computer network such as the Internet, a session management method, and a recording medium on which a session management program is recorded. In particular, the present invention relates to a server system capable of performing appropriate session management in response to a Web page request from a client terminal, a session management method, and a recording medium recording a session management program.

[0002]

2. Description of the Related Art Conventionally, a computer network (hereinafter simply referred to as a "network") in which a plurality of computers are connected by a communication line or the like to store and exchange data and programs among the plurality of computers and to share data and the like. Say) is built.

[0003] As a method of such a network,
An open network system that allows computers to be freely connected as a general rule if it conforms to a predetermined communication protocol, etc., and the network is managed by a host computer, etc., and certain restrictions such as security are imposed on terminal devices such as connected computers. There is a closed network system in which an unmanaged computer node is not connected to the network.

The Internet is a typical example of the above-mentioned open network system. In this Internet, the communication protocol is TCP (Transfer
Control Protocol) / IP (Internet Protocol) is adopted. In principle, any computer that complies with this communication protocol can be connected to a network.

[0005] In recent years, with the background of a free network environment such as the Internet, WWW (World Wide W
eb) and other multimedia environments have been developed. In particular, recently, many Internet businesses (e-businesses) that provide specific services using the Internet have been proposed and operated.

In the Internet, services and information (hereinafter, also referred to as “contents”) are provided as Web pages from a server in response to a session request from a client terminal.

[0007] On the client side, a Web page provided from the server can be viewed by the browser, and the Web page once received by the function of the browser.
Pages can be saved temporarily.

[0008] When a web page once received is requested by the back button function of the browser or the like, a session with the web page is temporarily stored on the client side without requesting the server again. The web page is displayed.

As described above, by the back button function of the browser or the like, the client terminal can reduce the download time and communication cost of the Web page.

[0010]

However, in the session management with the client terminal as described above, since the server side cannot accurately grasp the contents of the Web page actually displayed on the client terminal, There is a problem that the session request from the client terminal may be different from the content actually requested by the user of the client terminal.

For example, in a stock trading order, a stock order input screen (screen 1)-> stock order confirmation screen (screen 2)-> stock order reception screen (screen 3)-> other web page (screen 4) It is assumed that the operation has been performed.

At this time, when there is a session request from the stock order confirmation screen (screen 2) to the stock order acceptance screen (screen 3), an actual stock trading request and its data are transmitted from the client terminal to the server side. In such a case, the client terminal returns to the stock order reception screen (screen 3) from the other web page (screen 4) with the back button function,
Furthermore, when the reload process, that is, the screen update request is transmitted to the server side on the stock order reception screen (screen 3), the previous stock trading request and its data are transmitted again from the client terminal to the server side.

As described above, in addition to the order for buying and selling stocks,
There has been a problem that there is a risk that a duplicate request unintended by the user may occur in services of the Internet business (e-business) such as sale of goods and electronic payment.

It is therefore an object of the present invention to provide a server system, a session management method, and a recording medium on which a session management program is recorded, which can perform appropriate session management on a computer network such as the Internet.

[0015]

Means for Solving the Problems To solve the above problems, a server system of the present invention is a server system for providing a Web page on a computer network such as the Internet. Corresponding to Web page, fixed part ID and changing part I
Web page storage means for recording a session ID consisting of D, a changing part ID recording means for storing a changing part ID of a session ID corresponding to the provided Web page, and a request for a Web page by a session ID from a client terminal. In response, a Web page providing means for providing the client terminal with a session ID corresponding to the Web page callable from the requested Web page to the requested Web page, and a request for the Web page from the client terminal. Session ID received at the time of
And a session ID checking unit for checking the requested Web address.
Check the changing part ID of the session ID corresponding to the page, and if the changing part ID is a predetermined changing part ID,
The fixed part ID of the session ID and the changing part ID recorded in the changing part ID recording means are checked, and the requested W
judge whether to provide an eb page,
If D is not the predetermined changing part ID, only the fixed part ID of the received session ID is checked to provide the requested Web page.

Here, the session ID checking means includes:
The changing part ID of the session ID corresponding to the requested Web page matches the predetermined changing part ID, and the session ID
As a result of checking the fixed part ID and the changing part ID recorded in the changing part ID recording means, if it is determined that the requested Web page cannot be provided, the Web page providing means is notified to the Web page providing means. The Web page providing means may provide a predetermined Web page to the client side in response to the Web page unavailable notification.

According to another aspect of the present invention, there is provided a session management method for managing a session between a server system and a client terminal, the method comprising: (A) responding to a request for a Web page from a client terminal; In response, the client terminal is provided with a session ID consisting of a fixed part ID and a changing part ID corresponding to a Web page that can be called from the requested Web page, attached to the requested Web page, and (B And (C) receiving a session ID associated with a request for a new Web page from the client terminal, and (D) receiving a changed ID of the received session ID. And (E-
1) If the changing unit ID is a predetermined changing unit ID, the fixed unit ID of the received session ID and the recorded changing unit ID are checked to determine whether to provide the requested new Web page. (E-2) If the changed part ID does not match the predetermined changed part ID, only the fixed part ID of the received session ID is checked, and the requested new Web page is provided. , Characterized in that.

Here, in the step (E-1), the changing part ID corresponding to the requested new Web page matches the predetermined changing part ID, and the fixed part I of the received session ID is set.
As a result of checking the changing part ID recorded as D, if it is determined that the requested new Web page cannot be provided, a predetermined Web page may be provided to the client side.

Further, in order to solve the above-mentioned problems, a recording medium on which a session management program of the present invention is recorded comprises:
In response to a Web page request from a client terminal,
(B) providing, to the client terminal, a session ID composed of a fixed part ID and a changing part ID corresponding to a Web page that can be called from the requested Web page, attached to the requested Web page; Recording a changing part ID of the session ID corresponding to the provided web page; (C) receiving a session ID accompanying a request for a new web page from the client terminal; and (D) receiving the session ID of the received session ID. (E-1) when the changing unit ID is a predetermined changing unit ID, checking the fixed unit ID of the received session ID and the changing unit ID recorded therein; Determining whether to provide the requested new web page; and (E-2) the changing unit I
If D does not match the predetermined changing unit ID, checking only the fixed unit ID of the received session ID and providing a requested new Web page, the computer executes a session management method having the steps of: Recording a session management program for performing the operation.

Here, in step (E-1), the changing part ID corresponding to the requested new Web page matches the predetermined changing part ID, and the fixed part I of the received session ID is set.
As a result of checking the changing part ID recorded as D, if it is determined that the requested new Web page cannot be provided, a predetermined Web page may be provided to the client side.

Fixed part I corresponding to Web page to be provided
Appropriate session management can be performed by attaching a session ID composed of D and a changing part ID and checking this session ID when requesting a new Web page.

[0022]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a server system, a session management method and a recording medium in which a session management program is recorded according to the present invention will be described with reference to the drawings.

FIG. 1 shows a server system (hereinafter, referred to as a server system) of the present invention.
FIG. 1 is a diagram illustrating one embodiment of a network system using a “server”. This network system has a client function, terminal devices 20a to 20d such as PCs (Personal Computers) and mobile phones for inputting Web page requests and information, and a server function.
A server 10 that provides a Web page by performing session management based on a b-page request and information, and terminal devices (hereinafter, also simply referred to as “clients”) 20a to 20
d and a computer network (hereinafter, also simply referred to as “network”) 30 such as the Internet for connecting the server 10.

FIG. 2 is a diagram showing one embodiment of the server system of the present invention. 2, a server 10 includes a plurality of Web pages to be provided, a Web page DB 13 for recording a session ID including a fixed part ID and a changing part ID corresponding to each Web page, and a client terminal 20a.
A changing unit ID recording unit 12 that stores a changing unit ID of a session ID corresponding to the Web page provided to
Terminal device 2 connected to computer network 30
In response to a request for a Web page from 0a to 20d (FIG. 1), W that provides session management by providing
and an eb page processing unit 11.

Here, the Web page processing unit 11 uses the Web pages based on the session IDs from the terminal devices 20a to 20d.
A session ID corresponding to a Web page that can be called from the requested Web page in response to a page request
To the requested Web page, and
Web page providing unit 11a to provide the Web page to the terminal device 20a to 20d, and the session ID for checking the session ID received at the time of requesting the Web page from the terminal device 20a to 20d
A check unit 11b.

Here, the session ID checking means includes:
The changing part ID of the session ID corresponding to the requested Web page is checked. If the changing part ID is a predetermined changing part ID, the changing part ID is recorded in the fixed part ID of the session ID and the changing part ID recording means. By checking the changing section ID, it is determined whether to provide the requested Web page.

At this time, the session ID checking unit 11
b is the session I corresponding to the requested web page
The changing part ID of D matches the predetermined changing part ID. As a result of checking the fixed part ID of the session ID and the changing part ID recorded in the changing part ID recording part 12, the requested Web is determined.
If it is determined that the page cannot be provided, the Web page providing means is notified of the Web page provision failure.

The Web page providing unit 11a displays a predetermined Web page (for example, a download error notification screen, a TOP screen, etc.) in response to the Web page unavailable notification from the session ID checking unit 11b.
Provide to the 20d side.

On the other hand, the changing part ID is a predetermined changing part ID.
If not, the fixed part ID of the received session ID
Is checked, and the Web page providing unit 11a is notified to provide the requested Web page.

Next, session management in the server 10 of the present invention shown in FIGS. 1 and 2 will be described. In the following description, as a specific example, the terminal device 20a is described as a PC having a client function, and the computer network 30 is described as the Internet.

FIG. 3 is a flowchart showing session management in the server 10 of the present invention. In FIG. 1 to FIG. 3, first, a user starts a browser on a terminal device (hereinafter, also referred to as “PC”) 20 a and, via a computer network (hereinafter, also referred to as “Internet”) 30, a Web server of the server 10. A session to an arbitrary Web page provided by the page processing unit 11 is requested (step 301).

Session ID of Web page processing unit 11
The check unit 11b receives the session ID from the PC 20a.
Of the changing part ID (step 30)
2).

If the changing part ID does not match the predetermined changing part ID (step 303), the session ID checking part 11b checks only the fixed part ID of the received session ID, and requests a new requested part. A notification that the web page can be provided is provided to the web page providing unit 11a to provide a web page (step 304).

When the Web page providing unit 11a receives the notification indicating that the Web page can be provided from the session ID checking unit 11b, the Web page providing unit 11a searches the Web page DB for the requested Web page based on the session ID received from the PC 20a. (Step 30)
5).

Here, the Web page provided to the PC 20a includes a session ID consisting of a fixed part ID and a changing part ID corresponding to a Web page that can be called (loaded) from the Web page.

The Web page providing unit 11a is a PC
Session I corresponding to the web page provided to 20a
The changing part ID of D is recorded (step 306).

On the other hand, the session ID check section 11b
When the changing part ID of the session ID from the PC 20a is the predetermined changing part ID (step 303), the fixed part ID of the received session ID and the recorded changing part ID are checked (step 307). ).

Fixed part ID and changing part ID of session ID
As a result of the check, if the requested new Web page is a request from a Web page that should request the Web page (step 308), the requested new Web page is requested.
The web page providing unit 11a notifies the web page providing unit 11a of a notification that the web page can be provided (step 309).

When the Web page providing unit 11a receives the notification indicating that the Web page can be provided from the session ID checking unit 11b, it searches the Web page DB for the requested Web page based on the session ID received from the PC 20a. (Step 30)
5). Then, the changing part ID of the session ID corresponding to the Web page provided to the PC 20a is recorded (Step 306).

On the other hand, as a result of checking the fixed part ID and the changing part ID of the session ID, if the requested new Web page is not a request from a Web page that should request the Web page (Step 308), We
b page (for example, download error notification screen or TO
(P screen, etc.) to the PC 20a (step 31)
0).

In the above-described session management method using the server 10 of the present invention, for example, a stock order input screen (screen 1: session ID “xxx”
01 ")-> Stock order confirmation screen (Screen 2: Session ID" xxx "
02 ")-> Stock order reception screen (Screen 3: Session ID" xxx "
03 ")-> Other Web page (Screen 4: Session ID" y "
yy04 ”). Here, the session ID “x
"xx" and "yyy" are fixed part IDs, "01",
“02” and “03” are changing part IDs. Further, “03” of the changing part ID is a predetermined changing part ID. At this time,
The changing section ID recording section 12 records the changing section ID “04” of the last session ID.

When there is a session request from the stock order confirmation screen (screen 2) to the stock order acceptance screen (screen 3), ie, the actual stock trading request and its data are transmitted from the terminal device 20a to the server 10. If sent, server 1
At 0, the changing part ID of the session ID is checked.

Here, the terminal device 20a uses another Web site.
From the page (screen 4: session ID “yy04”), a stock order reception screen (screen 3: session ID “xxx0”)
3)) with the back button function, and further reload processing on the stock order reception screen (screen 3: session ID "xxx03"), that is, when a screen update request is transmitted to the server 10, the server 10 "Xxx03"
Is sent.

In the server 10, the received session ID
The changing part ID “03” of “xxx03” is verified, and it is confirmed that the changing part ID “03” is a predetermined changing part ID. As a result, the changing unit ID “04” stored in the changing unit ID recording unit 12 is checked, and the session request (session ID “xxx03”) is determined by the predetermined Wen.
It can be seen that it is not from page b (screen 2: session ID “xxx02”).

As described above, by appropriately managing the session ID, not only the order of stock trading, but also the sale of merchandise and the Internet business (e-business) services such as electronic settlement, the duplication that the user does not intend, is duplicated. The risk of a request occurring can be prevented.

Here, the above-described session management method can be recorded on a computer-readable recording medium as a computer-executable session management program.

[0047]

As described above, according to the server system, the session management method, and the recording medium on which the session management program is recorded according to the present invention, the session ID corresponding to the Web page requested by the client is changed to the fixed part. In this case, access (loading) to a specific Web page is managed by shifting the changing unit, so that the risk of an unintended duplicate request from the user can be prevented. became.

[Brief description of the drawings]

FIG. 1 is a diagram showing an example of a network system using a server system of the present invention.

FIG. 2 is a diagram showing an example of a server system of the present invention.

FIG. 3 is a flowchart illustrating a session management method according to the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Server system 11 Web page processing part 11a Web page provision part 11b Session ID check part 12 Changing part ID recording part 13 Web page DB 20a, 20b, 20c, 20d Terminal device 30 Computer network

Claims (6)

[Claims] 1. A server system for providing Web pages on a computer network such as the Internet, comprising: a plurality of Web pages to be provided; and a session ID corresponding to each Web page and comprising a fixed part ID and a variable part ID.
Web page storage means for recording a change part ID of a session ID corresponding to the provided Web page, and a change part ID recording means for storing a change part ID of a session ID corresponding to the provided Web page. The session ID corresponding to the Web page that can be called from the Web page
Web page providing means for providing the client terminal with the requested Web page, and a session ID for checking a session ID received when a Web page is requested from the client terminal
Check means; and the session ID check means, wherein the requested W
Check the changing part ID of the session ID corresponding to the eb page. If the changing part ID is a predetermined changing part ID, the fixed part ID of the session ID and the changing part ID
Check the changing part ID recorded in the recording means,
It is determined whether to provide the requested Web page, and if the changing unit ID is not the predetermined changing unit ID, only the fixed unit ID of the received session ID is checked, and the requested A server system for providing a Web page. 2. The method according to claim 1, wherein the changing part ID of the session ID corresponding to the requested Web page matches a predetermined changing part ID, and the fixed part ID of the session ID and the changing part ID record are recorded. If it is determined that the requested web page cannot be provided as a result of checking the changing unit ID recorded in the means, the web page providing means notifies the web page providing means that the web page cannot be provided. The server system according to claim 1, wherein a predetermined Web page is provided to the client side in response to the Web page provision failure notification. 3. A session management method for managing a session between a server system and a client terminal, the method comprising:
(A) In response to a Web page request from a client terminal, Web that can be called from the requested Web page
A session ID consisting of a fixed section ID and a changing section ID corresponding to page b is attached to the requested Web page and provided to the client terminal, and (B) the provided W
The changing part ID of the session ID corresponding to the Web page is recorded, and (C) a new Web from the client terminal is recorded.
The session ID associated with the page request is received, (D) the changing part ID of the received session ID is checked, and (E)
-1) When the changing part ID is a predetermined changing part ID,
The fixed part ID of the received session ID and the recorded changing part ID are checked to determine whether to provide the requested new Web page, and (E-2)
If the changing unit ID does not match the predetermined changing unit ID, only the fixed unit ID of the received session ID is checked to provide the requested new Web page. Management method. 4. The method according to claim 1, wherein the changing section ID corresponding to the requested new Web page matches the predetermined changing section ID, and the received session ID is set in the step (E-1).
When it is determined that the requested new Web page cannot be provided as a result of checking the fixed unit ID and the recorded changing unit ID, a predetermined Web page is provided to the client side. The session management method according to claim 4, wherein 5. (A) In response to a request for a Web page from a client terminal, a session ID consisting of a fixed part ID and a changing part ID corresponding to a Web page that can be called from the requested Web page is obtained. Requested W
providing the client terminal with the web page, (B) recording a changing part ID of a session ID corresponding to the provided web page, (C).
Receiving a session ID associated with a request for a new Web page from the client terminal; (D) checking a changed part ID of the received session ID; and (E-1) determining that the changed part ID is a predetermined one. Changing part ID
In the case of, the fixed part ID of the received session ID
(E-2) determining whether to provide the requested new Web page by checking the changed part ID recorded as (E-2). The changed part ID does not match the predetermined changed part ID. Checking only the fixed part ID of the received session ID and providing the requested new Web page, and recording a session management program for executing the session management method on a computer. Computer readable recording medium. 6. The step (E-1), wherein the changing section ID corresponding to the requested new Web page matches the predetermined changing section ID, and the received session ID is
When it is determined that the requested new Web page cannot be provided as a result of checking the fixed unit ID and the recorded changing unit ID, a predetermined Web page is provided to the client side. The recording medium according to claim 5, wherein