JP2002288052A - Data coordination system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a data coordination system capable of safely and simply carrying out a data coordination utilizing the Internet between computer systems positioned at remote positions. SOLUTION: The data coordination system is provided with a plurality of unit computer systems 1, 2, 3 connected to the Internet N; and a management computer system DC. After the management computer system receives a message specifying an address from a transmission side unit computer system, when a commit command is inputted from the transmission side unit computer, the message is cashed. If a receiver side unit computer system of the address makes an access, the message is transmitted to the receiver side unit computer system. If a commit command is inputted from the receiver side unit computer system, a function for judging as a completion of the transmission is provided.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system for realizing data cooperation between remote computer systems.

[0002]

2. Description of the Related Art For example, when exchanging data between companies located at distant places, such as company A and company B,
You can use the Internet. Using the Internet, data can be exchanged with computer systems anywhere in the world.

[0003]

However, each computer system connected to the Internet must have a firewall between the Internet and the Internet, which rejects connection from an external computer system. This is because it would not be easy for the company's system to enter the system from the outside and use or rewrite the internal data.

After providing such a firewall, for example, in order for a certain company to perform data cooperation with another company, both a hole in the firewall and a port on the computer system side are provided for the other party. You have to manage both. In other words, it is necessary to check whether the person who has accessed is really the person who has been approved by the company.

[0005] Strictly performing such management takes time and effort. In particular, when different data is set to be used by a plurality of parties, the management becomes very complicated. However, if strict management is not performed, unauthorized access will be made from the outside, and there is no point in providing a firewall. For these reasons, without the complicated management as described above, it has not been possible to perform data cooperation between computer systems at distant locations using the Internet. In such a case, data exchanged by telephone, facsimile, or the like is input and used again in each system.

[0006] Even if the above-described complicated management of the hole in the firewall and the port on the system side is performed, if the Internet is used, it is confirmed whether the transmitted message or the like has reached the other party. There was no means. Therefore, it was not possible to exchange important messages with confidence. SUMMARY OF THE INVENTION It is an object of the present invention to provide a data linking system that can safely and easily perform data linking between computer systems at remote locations using the Internet.

[0007]

A first invention comprises a plurality of unit computer systems and a management computer system connected to the Internet, and the management computer system receives a message specifying a destination from a sender unit computer system. After that, when a commit command is input from the sending computer system, the message is cached, and when the destination receiving unit computer system has accessed, the message is transmitted to the receiving unit computer system, It is characterized in that it has a function of determining the end of transmission when a commit command is input from the receiving-side unit computer system.

According to a second aspect of the present invention, a management computer system transmits a message to a receiving unit computer system, and thereafter, a commit command is input from the receiving unit computer system, and the transmitting unit computer system accesses the commit command. It is characterized in that it has a function of returning an acknowledgment signal to the transmitting unit computer when it comes.

According to a third aspect of the present invention, a firewall is provided between the unit computer system and the Internet, and the firewall rejects connection from an external computer system via the Internet, while rejecting connection from the unit computer system. The feature is that connection to the management computer system is permitted. The fourth invention is characterized in that the management computer system has an authentication function of the unit computer system that has accessed. The fifth invention is characterized in that each unit computer system has a message encryption function and a message decryption function.

The sixth invention is characterized in that the management computer system and the receiving computer system have a function of confirming the integrity of the received message. In addition,
The integrity of the message means that the message is in the same state as when the message was transmitted from the sending unit computer system. The management computer system has a function of arriving at the management computer system in a complete state, and confirming whether or not the state has reached the receiving unit computer system in that state.

According to a seventh aspect of the present invention, the unit computer system includes a script creating section for creating a script to be processed internally, and a script for permitting use of another unit computer system among the scripts created by the script creating section. Is a public script. The eighth invention is characterized in that the unit computer system includes a script processing unit that starts the above-mentioned public script when receiving an external execution request for starting a public script to be processed internally.

A ninth aspect of the present invention is characterized in that the script creation unit of a unit computer system has a function of creating a script incorporating an execution request for a public script of another unit computer system. Tenth
Is characterized in that the management computer system has a function of registering a public script and making the unit computer system refer to the script.

The eleventh invention is characterized in that the message includes a command for starting a public script. The twelfth invention is characterized in that a public script is activated by a command included in a message, and a “result” as a processing result is included in the message.

According to a thirteenth aspect, the management computer system includes software for managing received messages, and each unit computer system includes a message server, and the message server manages a message to be transmitted by the message management. It is characterized in that it has a function of formulating it into a format corresponding to software and transmitting it to the management computer system. In a fourteenth aspect, the script creation unit displays each script as an icon on a script description screen, and when these iconified scripts are combined on the script description screen, a systematic It is characterized in that it has a function of generating a processing procedure as a new script.

[0015]

1 to 9 show an embodiment of this system. As shown in FIG. 1, a plurality of unit computer systems 1, 2, and 3 and a management computer system DC are connected to the Internet N. Here, the unit computer systems 1, 2, 3 will be described as systems of different companies. These companies are member companies that use this system.

The unit computer systems 1,
Firewalls F1, F2, and F3 are provided between the Internet 2 and the Internet 3 respectively. The firewalls F1, F2, and F3 block external access to the unit computer systems 1, 2, and 3. Further, the unit computer systems 1, 2, 3 include a message server 20, which will be described later.

On the other hand, the management computer system DC
Is between the Internet N and the firewall F
C is provided, but the firewall FC accepts only access from the unit computer system of the member company. As shown in FIG. 2, the management computer system DC includes a message processing unit 25 and a message storage unit 26. When there is an access request from each of the unit computer systems 1, 2, and 3, the message processing unit 25 authenticates whether or not the access request is a request from a member, and a function for permitting the connection, a function for allowing each message, To the message storage unit 2
6 has a function of registering and taking out.

The message is a specific format of data, commands, etc., which must be exchanged in order to perform data cooperation between the unit computer systems. Then, each unit computer system formats the data and commands in the message server 20 and then transmits the data and commands to the management computer system DC. The delivery format of this message may be set in advance between members using this system, and may be any format that can be handled by software provided in the message processing unit 25 of the management computer system DC. Multiple types may be provided. However, if the message delivery format is unified to one type, the message processing unit 25
Message management and firewall FC
Can be easily managed.

The management computer system DC
The message storage unit 26 provided in is stored with the message transmitted from each unit computer system. The messages stored here are categorized by destination. For example, as shown in FIG. 2, the message storage unit 26 includes one receiving box E and corresponding transmitting boxes R1, R2, and R3 for each ID of each unit computer system. Here, the ID of each unit computer system 1, 2, 3 is set to "00".
1 "," 002 ", and" 003 ".

A case where a message is sent from one unit computer system 1 to another unit computer system 2 will be described below. First, unit computer system 1
Formulates the information to be sent in the message server 20 and attaches the ID “002” of the destination system 2,
It is transmitted to the management computer system DC. On the management computer system DC side, the message processing unit 25
After confirming that the transmission source is the unit computer system 1, the above message is accepted. Next, the unit computer system 1 transmits the commit command for which the transmission of the message has been completed. The management computer system DC that has received this command stores the message in the reception box E of the message storage unit 26.

The message management section 12 checks the destination ID “002” of the message stored in the reception box E, and moves the message to the ID “002”, that is, the transmission box R 2 for the unit computer system 2. The message moved to the transmission box R2 is stored therein until the unit computer system 2 accesses the management computer system DC or until a preset time limit comes. When the unit computer system 2 accesses the management computer system DC, the message processing unit 25
Transmits the message stored in the transmission box R2 to the unit computer system 2. On the unit computer system 2 side, upon completion of the message reception, the message server 20 transmits a commit command to the management computer system DC. Thus, the unit computer system 1 to the unit computer system 2
Transmission of the message to is terminated.

However, the unit computer system 2
After storing the message in the outbox R2 for
If there is no access from the unit computer system 2 even after the expiration date, the message is deleted, and the unit computer system 1 on the transmitting side can be notified that the message transmission has failed. You can also.

On the other hand, the management computer system DC that has received the command inputs the acknowledgment signal to the transmission box R1 for the unit computer system 1. This acknowledgment signal remains stored until the unit computer system 1 accesses the management computer system DC. When there is an access from the unit computer system 1, the acknowledgment signal is transmitted. Thereby, the unit computer system 1 can confirm that the message has reached the unit computer system 2.

However, the management computer system D
C does not have to have a system that generates an acknowledgment signal and transmits it to the transmission-side unit computer system 1. This is because if the management computer system DC receives the commit signal from the receiving-side unit computer system 2 and determines that the transmission of the message has been completed, it can be confirmed that the message has arrived.

The above message flow is similarly performed between any of the unit computer systems. That is, a message addressed to another unit computer system can be transmitted from the unit computer systems 1, 2, 3 only by accessing the management computer system DC, and a message from another unit computer system can be received. You can also. Both the sending unit computer system and the receiving unit computer system,
Neither one accesses the other unit computer systems directly, only the management computer system DC.

That is, each unit computer system does not need to accept access from an external computer system. Therefore, the firewalls F1, F2, and F3 provided with the Internet N do not need to be provided with holes for permitting access, and there is no need to provide ports on the system side. Therefore, each unit computer system can exchange messages with other unit computers without special management of holes in the firewall and ports on the system side.

Each unit computer system specifies the ID of a destination to which a message is to be sent,
The actual access destination is only the management computer system DC. Therefore, even if the IP address or URL of the destination unit computer system is changed, all such changes are handled on the management computer system DC side. There is no need to manage the IP addresses of other unit computer systems.

On the other hand, the management computer system DC must manage the firewall FC so as to accept access from each of the unit computer systems 1, 2, and 3. However, as mentioned above,
If the delivery format of the message transmitted from each message server 20 is unified, the management does not become so complicated. It is safer to manage the firewall holes and ports exclusively in the management computer system DC than to perform the management of each firewall in each of a plurality of unit computer systems.

For example, assuming that n unit computer systems are provided with holes and ports of a firewall for a party to which access is permitted in order to exchange messages with each other, and that each uses a different communication protocol, the entire system The number of holes and ports that need to be managed by n is n × (n−1). However, when only a single delivery format is used, as in this embodiment, only the access to the management computer system DC is permitted, the management computer system DC uses a single hole on the firewall FC. Only one port needs to be managed.

Next, individual unit computer systems will be described. Here, only the above-described unit computer system 1 will be described with reference to FIG. 3, but the configuration of the other unit computer systems 2 and 3 is also the same. As shown in FIG. 3, the unit computer system 1
Has application software A and B.
Adapters a and b corresponding to the application software are connected to each of the application software A and B.
An adapter interface ai is provided.

The adapter interface ai is:
It works with commands defined by abstract concepts of "put data" and "get data". The “put data” has a function of receiving data as an argument and returning the result as a “result”. Also, “get data” only returns “result” and does not require an argument unlike “put data”.

By defining the adapter interface ai with such an abstract concept, it is possible to respond to the input / output request between these interfaces by commands of “put data” and “get data”. Therefore, if only these adapter interfaces ai are shared, it is possible to respond to input / output requests for different application software. Further, the fact that the adapter interface ai is defined by the abstract concept of “put data” and “get data” means that a dedicated interface for each application software is not required.

On the other hand, each of the adapters a and b has a main operation unit 11 and a metadata storage unit 12. The main operation section 11 specifies an acceptable data type in advance. However, a single data type is not specified, and a plurality of data types, such as an existing data type and a special specification such as an in-house standard data type, can be handled. In addition, as the existing data type,
For example, XML data type, Text data type or C
There are SV file data types and so on. The metadata storage unit 12 stores data such as data attributes, acquisition destinations, storage locations, and inquiries of individual application software.

The main operation section 11 stores in advance what should be processed when a command “put data” is input and what should be processed when a command “get data” is input. ing.
That is, a program for performing a process of writing data to application software when a command “put data” is input is stored in advance. In addition, a program for performing a process of extracting data from application software when a command of “get data” is input is stored in advance.

However, since only the processing program corresponding to the above command is stored in the main operation section 11, if one adapter is used for a plurality of application software, the metadata is stored for each application software. Must be specified. Therefore, in this embodiment, at the stage where the type of the application software is specified, the main operation unit 11 can specify the item of the metadata. The types of application software include, for example, relational databases, application software, websites on the Internet, XML application software, file systems, directory servers, flat files,
Custom developed application software.

As a specific method for specifying the metadata item, for example, as shown in FIG. 4, the type item 13 of the application software can be specified on the display of the computer. When the type item 13 of the application software is specified, a metadata item column 14 corresponding to the type item 13 is displayed.
1 is stored.

As shown in FIG. 4, a content specifying column 15 for specifying specific content corresponding to the item of metadata is displayed on the display. That is, when a metadata item is specified in the metadata item column 14 as described above, the corresponding content can be specified. For example, FIG. 4 shows a case where Oracle application software is selected, and the metadata items stored in the main operation unit 11 at this time are a service name, a user name, a password, a table name, an inquiry statement, and a driver name. Note that the above query is required only when a command of “get data” is input from the adapter interface ai.

The specific content corresponding to the metadata item column 14 is input to the content specifying column 15. The metadata specified in the content specifying column 15 is stored in the metadata storage unit 12. Is done. In a state where the metadata specified in this manner is stored in the metadata storage unit 12, for example, if “put data” is input, the main operation unit 11 performs a write process corresponding to the command “put data”. To start. However, how to write which item in which application software depends on the metadata.

When "get data" is input to the main operation unit 11, the main operation unit 11 starts a data extraction process in accordance with a command "get data". However, which item of which application software is to be extracted depends on the metadata. That is, the main operation unit 11 starts a process of extracting necessary application software, for example, data of the application software A, based on the metadata specified specifically in the content specifying column 15.

As described above, in this embodiment, the adapter interface ai is made to function with the commands defined abstractly as "put data" and "get data", and the "put data" or "get data" The main operation unit 1
1 executes a put process or a get process. However, the specific processing depends on the metadata stored in the metadata storage unit 12.

Now, for example, when put data is input to the adapter interface ai of the application software A, the main operation section 11 of the adapter a starts put processing. However, when the put data at this time does not correspond to the data type specified in advance in the main operation unit 11 of the adapter a, a signal indicating that the put data cannot be accepted, for example, an error signal is regarded as the “result”. The data is output from the interface ai.

When the put data corresponds to the data type specified in advance, the main operation unit 11 of the adapter a transmits the put data to the application based on the metadata stored in the metadata storage unit 12. A process for writing to the software A is executed. When the writing is completed, the main operating unit 11 of the adapter a
Outputs a write end signal as a “result” from the adapter interface ai.

As described above, when the “result” output from the adapter interface ai on the application software A is returned to the application software B as it is, the adapter interface ai on the application software B transmits the “result”. Is accepted as put data. Therefore, here, no special software for linking the interface on the adapter a side with the interface on the adapter b side is required.

On the other hand, when the get data is input to the adapter interface ai of the application software A, the main operation section 11 of the adapter a starts the get processing. However, at the time of the get processing, the data type cannot be different. This is because the adapter a connected to the application software A is associated in advance for the application software A as described above. Therefore, when the above-mentioned get data is input, the main operation unit 11 of the adapter a obtains the data specified by the get data from the application software A based on the metadata stored in the metadata storage unit 12, and Adapter interface a with the obtained data as "Result"
Output from i.

As described above, when the “result” output from the adapter interface ai on the application software A is returned to the application software B as it is, the adapter interface ai on the application software B transmits the “result” to the “result”. Is accepted as put data. However, if the put data at this time does not correspond to the data type specified in advance by the main operation unit 11 of the adapter b, for example, an error signal is output from the adapter interface ai as a “result”. The same is true.

In any case, in this embodiment, only put data and get data are exchanged between the adapter interface of the application software A and the adapter interface of the application software B. Therefore, as long as the adapter interface has only a function of receiving the put data and the get data, there is no need for dedicated coordination software for cooperating with the adapter interface as in the related art.

A script processing unit S is connected to the adapter interface ai as described above, as shown in FIG. The script processing unit S executes the script specified by the script creation unit 16. However, the script processing unit S can exchange data with the adapter interface ai using only the commands “put data” and “get data”. In other words, since all can be handled by the commands of “put data” and “get data”, no special cooperation software is required during this time, ie, between the adapter interface and the script processing unit.

The script processing section S is also provided with a script interface si functioning with an abstractly defined command called “execute”. The script processing unit S is connected to the script processing unit o via the script interface si.
s. The script processing unit os executes a script process different from the script processing unit S, and can execute the script in parallel with the script processing unit S. Note that, in addition to the script processing unit S and the script processing unit os, a script processing unit may be provided to execute a plurality of processes at the same time.

However, the script processing unit os and the other script processing units also have a script interface si that functions with an abstractly defined command called “execute”. Therefore, even between the script processing unit S and other script processing units,
Execution commands can be exchanged using a command “execute” defined abstractly.

The converter C is connected to the script processing section S as described above.
Has a converter interface ci.
The converter interface ci is operated by a command defined by an abstract concept of “convert”. Since the process can be executed using the command “convert” defined abstractly in this manner, no special cooperation software is required between the converter interface ci and the script processing unit S. The principle is exactly the same as that of the adapter interface described above.

The converter C having the converter interface ci has a main operation section 17 and a metadata storage section 18. The main operation unit 17 has a conversion function for obtaining a “result” including target data when a command “convert” is input from the converter interface ci. Further, the metadata storage unit 18 includes a metadata storage unit 18 that manages a storage location of a conversion rule for converting to a target data type and various conversion options.

Next, a case where data is converted from application software A to application software B in the unit computer system 1 will be described. First, the type of the application software A and its metadata are specified.
Is selected on the display shown in FIG. When the data source registration pop-up screen 19a is selected in this manner, a screen showing the application type item 13 shown in FIG. 4 is displayed. Therefore, application type item 1
When the type is specified from among the metadata items 3, a metadata item column 14 corresponding to the type is displayed, and a content specification column 15 for writing the content corresponding to the metadata item specified in the metadata item column 14 is displayed. Is done.

When a predetermined item is written in the content specifying column 15, the type of application and the metadata item specified in the type item 13 are stored in the main operation section 11, and the content of the content specifying column 15 is The application software A is stored in the data storage unit 12, and is specified. At this time, a "get data" command is input to the adapter interface ai. The application software A specified in this manner is displayed on the data source selection screen 19 as an application software icon.

Next, the type of the application software B and its metadata are specified, which is exactly the same as that of the application software A. When the metadata is stored in the metadata storage unit 12, a command of “put data” is input to the adapter interface ai. The application software B specified in this way is displayed as an icon on the data source selection screen 19, and this is the same as in the case of the application software A.

When it is necessary to specify the converter C, the type of the main operation unit 17 and its type item are specified according to the application software A and B, and the metadata corresponding thereto is specified. The procedure is substantially the same as for the adapter. The converter C whose metadata is specified in this way is also displayed as an icon on the data source selection screen 19.

Then, the application software A and B displayed on the data source selection screen 19 and the converter C
, And the start icon 30 and the end icon 31 are dragged and dropped onto the script description screen 22 shown in FIG. When the necessary icons are dragged and dropped on the script description screen 22 as described above, the icons are connected with arrows 23 in accordance with the processing procedure from the start to the end. By connecting with the arrow 23, the script creating unit 16 automatically generates a script, and the script processing unit S executes the script. In addition, the script description screen 22 can be set to use a public script of another company described later.

Then, the script processing unit S performs all exchanges with the adapter interface ai by using a command such as “put data” or “get data”. However, no special cooperation software is required between the adapter interface ai and the script processing unit S. Further, the script processing unit S executes all the exchanges with the converter interface ci by a command of “convert”, so that whatever the application software is, the converter interface ci and the script There is no need for special coordination software with the processing unit S.

Note that converter C is provided with an XSLT conversion engine, and input data and output data are converted to X
If specified in the ML document, as shown in FIG.
While comparing the ML document structure X and the XML document structure Y on the output side on the screen, the necessary portions of the document structures X and Y are
By drawing a line on the display, the script creating unit 16 can be operated to automatically generate a script. As described above, a script can be automatically generated simply by drawing a line on the display, so that a person who has no knowledge of application programming can easily handle the script.

Note that, as described above, X is
If the SLT conversion engine is specified, the input XML
Naturally, a document can be converted into an XML document having a different data structure (schema) based on an XSLT file defined by metadata, but it is also possible to convert an XML document into a text document in any format. Become.

The above situation will be described with a specific example. For example, if the information on the branch of the company is used as the data on the input side, and only the sales information is needed on the output side, the X on the input side
The data relating to the sales information of the ML document structure X and the sales items of the XML document structure Y on the output side are connected by lines. If the lines are connected in this manner, the script creation unit 16 automatically generates a script as described above, so that only the data related to the sales is automatically converted into the XML document structure Y on the output side. With such a degree, even a person who has no knowledge of application programming can sufficiently cope with the problem.

In the above example, the case where the XML document structure is converted is described.
If a code conversion engine is specified in the main operation unit 17 of this example, it is also possible to code convert SJIS data into JIS data. In short, any document can be converted by the XSLT conversion engine specified by the main operation unit 17.

Further, in the above embodiment, no matter how many application softwares are increased, it is possible to deal with them regardless of the number. In other words, the adapter interface provided in the application software operates with the commands “put data” and “get data”, and returns the result as a “result”. "" And "get data". Therefore, there is no need for special linking software for linking the adapter interfaces. Since there is no need for cooperative software, there is no problem no matter how much application software is added.

The converter interface of the converter C also operates by a command defined by an abstract concept of “convert”, and furthermore, a “result” including data of a target data type from the conversion data on the input side. Since it has a conversion function for obtaining the same, the same can be said for the adapter.

As described above, one unit computer system 1
Next, a method of performing data cooperation with another unit computer system will be described. FIG.
As shown in (1), a script management unit 21 is connected to the script creation unit 16 of the unit computer system 1. The script management unit 21 manages the script automatically created by the script creation unit 16 as described above. Among the above scripts, a script used only by the company can be set as a private script, and a script permitted to be used by another company can be set as a public script. By using this public script in a unit computer system of another company, data linkage is established.

The script management unit 21 can specify a public party to be disclosed, such that a public script is not used by anyone but a specific public script is used only by a specific company. And the list of public scripts of each company is the message server 2
From 0, it is transmitted to the management computer system DC and registered in a public script registration unit (not shown). The public script list is made by associating the script IDs with the IDs of the other parties whose use is permitted. The script ID includes the ID of the unit computer system managing the public script.

The list of public scripts registered in the public script registration section of the management computer system DC can be viewed from each unit computer system. However, similarly to other messages, when a specific unit computer system accesses the management computer system DC, a list of public scripts permitted to use the unit computer system is transmitted. Each unit computer system that has obtained the list of public scripts can use a script from another company when creating a private script using its own script creating unit 16. A non-disclosed script incorporating a public script of another company can be easily created using the script description screen 22 of FIG. 6, similarly to the above-described script creation method.

Here, the unit computer systems 1 to 3
An example of data linkage will be described. For example, the unit computer system 1 creates a public script SC1. Next, the unit computer system 2 creates a private script SC2 incorporating the calling process of the public script SC1. This unit computer system 2
Converts the private script SC2 to the public script SC
Set as 2. Further, the unit computer system 3 creates a private script incorporating the above-described public script SC2 calling process and executes it. Assuming the above, data linkage will be described in detail below. The unit computer systems 2, 3
Also has the same configuration as the unit computer system 1,
The internal processing of the unit computer systems 2 and 3 will be described with reference to FIG.

First, on the unit computer system 1 side, as shown in FIG. 6, the operator specifies a processing procedure by dragging and dropping an icon or drawing an arrow on the script description screen 22. The script creating unit 16 creates a script automatically. The script created here is referred to as a script SC1. Then, the script SC1 is set as a public script. The setting of the public script SC1 can also be performed from the script description screen 22 of FIG. Here, the unit computer systems 2, 3
When the public script SC1 is set as a public script whose use is permitted, the public script SC1 is automatically registered in the public script registration section of the management computer system DC. Therefore, the unit computer systems 2 and 3
By accessing the management computer system DC, the public script list can be received by the company and the public script SC1 can be known.

Next, in the unit computer system 2,
A private script SC2 of the company incorporating the calling process of the public script SC1 is created. The unit computer system 2 also displays the data source selection screen 19 and the script description screen 22 shown in FIG.
Operated by an operator. Data source selection screen 19
By pressing a public script setting button 24, a public script setting window (not shown) is displayed. The public script setting window displays a list of public scripts that can be used by the company, and specifies a desired script from the list. Here, the public script SC1 created by the unit computer system 1 is specified. At this time, as shown in FIG. 8, the icon of the public script SC1 of another company is displayed on the data source selection screen 19 of the unit computer system 2.

In the unit computer system 2, the data source selection screen 1 shown in FIG.
9 Select the required icon from the script description screen 2
Drag and drop to 2 to determine the processing content.
At this time, by dragging and dropping the icon of the public script SC1 onto the script description screen 22 as shown by the dotted line,
This means that the calling process of C1 has been incorporated into the company script. Then, when the operator specifies the procedure by connecting the start icon 30 to the end icon 31 with an arrow, the script creation unit 16 automatically creates a script. When the created script is registered as a private script SC2 of the company, the script icon SC2 of the company is displayed on the data source selection screen 19 of the unit computer system 2 as shown in FIG.

Next, in the unit computer system 2, the private script SC2 is set as a public script. Then, the public script 2C2 is registered in the management computer system DC, and the unit computer system 3 uses the public script SC3. The unit computer system 3 uses the public script SC2 as the public script to be used.
When a is specified, a public script icon SC2 of another company is displayed on the data source selection screen 19 of the unit computer system 3 as shown in FIG. Therefore,
The operator drags and drops the public script icon SC2 onto the script description screen 22, and
You can determine the processing content of your company's private script.

In this way, in the unit computer system 3, the script processing unit 16 can automatically create a private script incorporating the call processing of the public script SC2 of another company. When the above preparation is completed, the above-mentioned private script can be executed by the script processing unit S of the unit computer system 3.

Hereinafter, an execution procedure of the above-mentioned secret script will be described. The script processing unit S of the unit computer system 3 executes
When the step of calling the public script SC2 of another company is reached, a request to execute the public script SC2 is sent to the message server 20. Message server 20
Sends the execution request as a message to the management computer system DC,
The message processing unit 25 of C authenticates the unit computer system 3. Next, the unit computer system 3
When the commit command is received from, the above message is input to the receiving box E.

Then, the message processing unit 25 confirms that the message is addressed to the unit computer system 2 and moves the message to the transmission box R2 for the unit computer system 2. The message input to the transmission box R2, that is, the execution request of the public script SC2, is transmitted to the unit computer system 2 when there is access from the unit computer system 2.

The unit computer system 2 confirms the message at the message server 20, transmits a commit command to the management computer system DC, and sends the execution request of the public script SC2 as a command “execute” to its own. Input to the script processing unit S. Management computer system D receiving a commit signal from the unit computer system 2
C represents the acknowledgment signal as a unit computer system 3.
Send to The unit computer system 3 that has received the acknowledgment signal waits for the "result" to be returned.

On the other hand, on the unit computer system 2 side, the script processing unit S executes the public script SC2 specified by the script ID. However, the public script CS2 is a public script created by the unit computer system 2 by incorporating the public script SC1 of the unit computer system 1 as described above. Therefore, this public script SC2
In the middle of the execution, the public script SC1 of the unit computer system 1 needs to be called.

At that time, the script processing section S of the unit computer system 2 sends a request to execute the public script SC1 to its own message server 20. The message server 20 converts the execution request into a message and transmits the message to the management computer system DC.
In the management computer system DC, the message processing unit 25 authenticates the unit computer system 2 that is the sender, and upon receiving a commit command from the unit computer system 2, stores the message in the reception box E. Then, it is confirmed that this message is addressed to the unit computer system 1, and the transmission box R1 for the unit computer system 1 is checked.
To enter. Then, the unit computer system 1
The above message is transmitted to the unit computer system 1 when there is an access from.

In the unit computer system 1 that has received the above message, that is, the execution request of the external script SC1, the message server 20 confirms the message and transmits a commit command. Then, in the unit computer system 1, the execution request of the public script SC1 is defined as “execute”.
Transmit to the script processing unit S. Script processing unit S
Executes the processing of the public script SC1, sends the result as a “result” to the message server 20, and the message server 20 sends it to the management computer system DC as a message. The message including the “result” is transmitted to the unit computer system 2 that has sent the execution request of the public script SC1 in the same manner as other messages.

In the unit computer system 2, the received message, that is, the “result” of the public script SC1, is taken in, and the script processing unit S continues the processing of the public script SC2. When this processing is completed, the processing result is output as a “result”, and a message including the “result” is transmitted from the message server 20 to the management computer system DC as addressed to the unit computer 3. This message is sent to the public script SC2 from the unit computer system 3.
"Result" for the execution request. This message is transmitted to the unit computer system 3 in the same manner as other messages.

In the unit computer system 3, when the processing result of the public script SC2 is received, the script processing unit S fetches it and continues to process its own private script. As described above, the unit computer system 3 can use the open script SC2 of the unit computer system 2 incorporating the process of calling the open script SC1 of the unit computer system 1. The data linking of the three unit computer systems has been described above. However, the same procedure can be executed regardless of the number of linked systems. Further, by exchanging the execution request of the public script with each other, more complicated cooperation is also possible.

In the above embodiment, the company's own script incorporating the call processing of the public script of another company is used as the public script. For example, the public script SC1 of the unit computer system is permitted to be used only by the unit computer system 2. If the script incorporating the script is not allowed to be disclosed to other companies, an agreement may be made that the unit computer system 2 must not register the published script SC2. However, when the unit computer system 2 publishes the public script SC2 to the unit computer system 3 in violation of the agreement, the unit computer system 1 does not issue the execution request of the public script SC1 from the unit computer system 3. , Can also be unresponsive.

However, in this case, whether the execution request of the public script SC1 transmitted to the unit computer system 1 is from the unit computer system 2,
Alternatively, it must be possible to determine whether the data is transmitted from another unit computer system via the unit computer system 2.

As described above, a public script of another company can be used in a private script of the company. As a result, data linkage with other companies can be automatically performed. Moreover, since each unit computer system only accesses the management computer system DC, messages can be safely exchanged between different unit computer systems without having to manage the holes in the firewall and the ports on the system side by itself. be able to. In other words, individual unit computer systems do not need to manage firewall holes and ports. Also, if the management computer system DC checks whether all messages have reached the other party and returns an acknowledgment signal, the sending side can check whether the message transmitted by itself has reached the other party. You can know.

The configuration of the unit computer system shown in FIG. 3 is an example. Then, in each unit computer system, as in this embodiment, the adapter a
It is not necessary to unify data such as to enable data cooperation between different application software or to return “result” to “execute” by providing “1” and “b”. However, as in this example,
If any application software can be used, even if different application software is used in different unit computer systems,
Data can be linked without the need for special linking software.

Further, if each unit computer system is provided with a function of encrypting or decrypting the message, the security is further improved. Further, the unit computer systems of the present invention are not limited to those of different companies, and may be the same company or different computer systems at remote locations such as a head office and a branch office.
In short, the present invention can be applied to any system in which unit computer systems that are not directly connected to each other are linked using the Internet.

[0086]

According to the first aspect of the present invention, data can be reliably linked between unit computer systems located at remote locations such as other companies by using the Internet. Further, since the management computer determines the end of the message transmission by receiving the commit command from the receiving unit computer system, the receiving unit computer system may receive the message. You will not be able to cheat as if you did not.

According to the second invention, the receiving side computer system can know that the message transmitted by itself has reached the partner. According to the third invention,
External entry into each unit computer system can be prevented. In addition, no firewall management is required on the unit computer system side.

According to the fourth invention, unauthorized access to the management computer system DC can be prevented, and the security of each unit computer system can be ensured. Therefore, for example, it is possible to prevent a company having no business relationship from accessing the data contents of another company by unauthorized access. According to the fifth aspect, the security of the message can be further enhanced. For example, spoofing of various computer systems can be prevented. According to the sixth invention, it is possible to ensure that a complete message arrives. For example, even when data is lost during transmission of a message, it can be detected, so that remedy such as retransmission of the message can be taken.

According to the seventh to twelfth aspects, the processing of a script created by another unit computer system can be used. In particular, if a script incorporating a call process of a public script created by another unit computer system is used as a public script, data cooperation between different unit computer systems can be successively performed. For example, even when a plurality of companies link data one after another, as in a supply chain, secure data link can be performed.

According to the thirteenth aspect, management of messages in the management computer system DC is simplified.
Further, by using unified software for message management, the introduction cost and operation cost can be reduced. According to the fourteenth aspect,
The script is automatically generated by simply performing the simple operation of arranging the icons on the screen by drag and drop. The operator does not need to write a program to create a script, and need not input a special command. In other words, anyone can perform data linkage with a remote location.

[Brief description of the drawings]

FIG. 1 is a diagram showing an overall configuration of an embodiment of the present invention.

FIG. 2 is a diagram illustrating a management computer system according to an embodiment.

FIG. 3 is a configuration diagram of a unit computer system of an embodiment.

FIG. 4 is a screen for specifying the type of application software and metadata.

FIG. 5 is a diagram of a new creation screen.

FIG. 6 is a diagram of a screen when a script is created.

FIG. 7 is a diagram in which necessary parts of the XML document structure are connected by lines.

FIG. 8 is a diagram of a screen when a script incorporating a calling process of a public script SC1 is created.

FIG. 9 is a diagram of a screen when a script incorporating a calling process of a public script SC2 is created.

[Explanation of symbols]

 1, 2, 3 Unit computer system DC management computer system N Internet F1 to F3 Firewall 16 Script creation unit 20 Message server S Script processing unit 22 Script description screen

Continued on the front page F-term (reference) 5B017 AA03 BA06 BA07 CA16 5B089 GA11 HA10 KB13 5K030 GA15 HA05 HC01 HD01 JT06 LA02 LD19

Claims (14)

[Claims] 1. A computer system comprising: a plurality of unit computer systems connected to the Internet; and a management computer system, wherein the management computer system receives a message specifying a destination from the transmission unit computer system and then commits the message from the transmission computer system. When the receiving command is input, the message is cached, and when the receiving unit computer system of the destination has accessed, the message is transmitted to the receiving unit computer system, and the commit command is transmitted from the receiving unit computer system. A data linkage system that has a function to determine that transmission is completed when it is input. 2. A management computer system transmits a message to a receiving unit computer system, and thereafter, when a commit command is input from the receiving unit computer system and the transmitting unit computer system accesses the commit command. 2. The data cooperation system according to claim 1, further comprising a function of returning an acknowledgment signal to the transmitting unit computer. 3. A firewall is provided between the unit computer system and the Internet, and the firewall refuses connection from an external computer system via the Internet, and transmits a connection from the unit computer system to the management computer system. The data cooperation system according to claim 1 or 2, wherein the connection is allowed. 4. The data cooperation system according to claim 1, wherein the management computer system has an authentication function of the unit computer system that has accessed. 5. The system according to claim 1, wherein each unit computer system has a function of encrypting and decrypting a message.
4. The data cooperation system according to any one of 4. 6. The data cooperation system according to claim 1, wherein the management computer system and the receiving computer system have a function of confirming the integrity of the received message. 7. The unit computer system includes a script creating unit that creates a script to be processed internally.
7. The data cooperation system according to claim 1, wherein a script that permits use of another unit computer system among the scripts created by the script creation unit is a public script. 8. The data linkage according to claim 7, wherein the unit computer system includes a script processing unit that starts the public script when receiving an external execution request for starting a public script to be processed internally. system. 9. The data cooperation system according to claim 7, wherein the script creation unit of the unit computer system has a function of creating a script incorporating an execution request for a public script of another unit computer system. 10. The data cooperation system according to claim 7, wherein the management computer system has a function of registering a public script and referencing the script to a unit computer system. 11. The data cooperation system according to claim 7, wherein the message includes a command for starting a public script. 12. The data cooperation system according to claim 7, wherein a public script is activated by a command included in the message, and a “result” as a processing result is included in the message. 13. The management computer system is provided with management software for received messages, and each unit computer system is provided with a message server, and the message server corresponds to a message to be transmitted with the message management software. The data cooperation system according to claim 1, further comprising a function of forming the data into a format and transmitting the data to a management computer system. 14. A script creation unit displays each script as an icon on a script description screen, and when these iconified scripts are combined on the script description screen, a systematic processing of combining them is performed. 14. The data cooperation system according to claim 7, further comprising a function of generating a procedure as a new script.