JP2002297447A - Content security method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a content security method that can ensure reliable security while effectively using an ASP(application service provider) site. SOLUTION: Each of two or more pieces of file data generated by dividing a piece of data is stored in at least two of two or more ASP sites. A database (14) has storage information indicating two or more storage ASP sites (11, 12, 13) in which each of two or more piece of the file data is stored. A content providing server (1), according to request information (31) from a client terminal (2), gets access to an information database (14) to search for the storage information, reads out, depending on the storage information retrieved, two or more piece of the file data from each of two or more storage ASP sites (11, 12, 13), restores a piece of the data, and transmits a piece of the data restored to an output terminal that has been designated previously.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system for providing contents, and more particularly to a contents security system for ensuring reliable security.

[0002]

2. Description of the Related Art At present, it is now possible to remotely monitor the operating status of overseas customer power stations from Japan by utilizing the Internet for the power business.

[0003] This involves not only obtaining operation data from a power plant and viewing it at a monitoring station, but also taking into account the know-how of the content provider with the operation data to create a value that is profitable for the customer such as optimal operation prediction. Includes services. By monitoring the operation status of the overseas customer power station, the customer can detect a certain sign and take an action before falling into the sign. In addition, customers can not only operate the plant optimally to increase profits, but also extend the life of the plant itself and maximize the return on investment.

[0004] Such a business type can be operated more efficiently by entrusting it to an ASP (Application Service Provider) as a network base.
However, the ASP market is still new and it seems that many companies will enter the market in the future, and the way of operating the Web is expected to change significantly in the future, so even the most packed contract will soon become obsolete Probability is high. Therefore, it is essential to shorten the contract period as much as possible and to flexibly respond to changes such as the Web operation method.

On the other hand, it is also essential to ensure security. Securing security (for example, whether certain communications such as the Internet are really secure) is a very interesting and important thing for customers.

[0006]

SUMMARY OF THE INVENTION Ensuring security includes (1) ASP service providers, (2) telecommunications carriers,
(3) It is entrusted to the three content providers. (1) A
The SP provider and (2) the communication carrier are determined by the contract, and (3) the content provider cannot undertake the actual operation. However, when a security problem occurs in which a third party unrelated to the customer can view all the contents (for example, a page on which the operation data of the power plant is recorded or a program for predicting optimal operation),
(1) It is the responsibility of the ASP provider and (2) the carrier, but not (3) the responsibility of the content provider, but the party to which the customer is enjoying the service is (3) the content provider. For this reason, it is necessary for the content provider to take some measures in the field of (1) the ASP provider and (2) the communication carrier in addition to providing the content.
It is desired to ensure reliable security while using P efficiently.

An object of the present invention is to provide a content security system which can ensure reliable security while efficiently using an ASP (Application Service Provider) site.

[0008] Another object of the present invention is to provide a single ASP.
It is an object of the present invention to provide a content security system that enables continuous operation even when a site goes down.

[0009] Still another object of the present invention is to provide an A
An object of the present invention is to provide a content security system that can abolish the SP site and switch to another ASP site (another ASP company) without changing the operation.

Still another object of the present invention is to provide a content security system capable of ensuring security without depending on an ASP provider or a communication carrier.

[0011]

Means for solving the problem are described as follows. The technical matters corresponding to the claims in the expression are appended with numbers, symbols, etc. in parentheses (). The number, symbol, etc. are at least one of a plurality of embodiments of the present invention or a plurality of embodiments.
Technical matters constituting one embodiment or a plurality of examples, in particular, reference numerals attached to technical matters expressed in the drawings corresponding to the embodiments or examples,
It matches the reference symbol. Such reference numbers and reference symbols clearly indicate the correspondence and bridging between the technical matters described in the claims and the technical matters of the embodiments or examples. Such correspondence / bridge does not mean that the technical matters described in the claims are interpreted as being limited to the technical matters of the embodiments or the examples.

A content security system according to the present invention is provided on a network (3) and a plurality of ASPs (application service services) provided on the network (3).
(Provider) site and a content providing server (1) having a database (14), and a customer terminal (2) for transmitting request information (31) to the content providing server (1) via a network (3). . Each of the plurality of file data generated by dividing the single data is stored in at least two of the plurality of ASP sites. The database (14) stores a plurality of storage ASP sites (11,
12, 13). The content providing server (1) accesses the information database (14) in accordance with the request information (31) from the customer terminal (2) to search for stored information, and based on the searched stored information, stores a plurality of stored ASP sites ( 11, 12 and 13), a plurality of file data are read out to restore single data, and the recovered single data is transmitted to a pre-designated output terminal. In this case, the output terminal is the customer terminal (2)
Alternatively, it is a terminal other than the customer terminal (2) designated by the customer terminal (2).

Each of the plurality of file data is stored in at least two of the plurality of ASP sites so as to have redundancy. The ASP site where each of the plurality of file data is stored is a plurality of stored ASP sites (11, 12,.
13).

A plurality of storage ASP sites (11, 12, 1)
Each of 3) includes a read ID indicating the order searched by the content providing server (1). The content providing server (1) accesses the information database according to the read ID and the request information (31) from the customer terminal (2) to search for stored information, and searches the stored information and read ID.
And a plurality of stored ASP sites (11, 12, 1
Read a plurality of file data from each of 3).

[0015] Each of the plurality of file data includes a number for restoring to a single data. The content providing server (1) restores single data by rearranging the plurality of file data read based on the number.

When the single data is divided into the first, second and third file data, the first file data of the first, second and third file data becomes the first file data of the plurality of ASP sites. And the second file data of the first, second, and third file data is stored in the third and second ASP sites of the plurality of ASP sites, and the first, second, and third ASP data are stored in the first, second, and third ASP sites. The third file data of the third file data includes a plurality of ASs.
It is stored in the second and third ASP sites among the P sites. The first, second and third ASP sites have multiple storage ASs
Corresponds to P sites (11, 12, 13).

The program according to the present invention stores an information database (1) according to request information (31) from a customer terminal (2).
4) searching for storage information indicating an ASP (Application Service Provider) site in which each of a plurality of file data generated by dividing the single data by accessing is stored; A computer reads out a plurality of file data from an ASP site based on the stored information and restores single data, and transmits the restored single data to a predetermined output terminal. .

[0018]

DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of a content security system according to the present invention will be described below with reference to the accompanying drawings. FIG. 1 is a block diagram showing the configuration of the content security system of the present invention.

As shown in FIG. 1, the content security system of the present invention includes a content providing server 1 belonging to a content provider, a customer terminal 2 belonging to a customer, and a network 3 including the Internet, an intranet, and the like. I have. The network 3 connects the content providing server 1 and the customer terminal 2 to each other. This content security system is used, for example, in a gas turbine remote monitoring system, and can remotely monitor the operation status of an overseas customer power plant from Japan.

The content providing server 1 includes a plurality of ASP (application service provider) sites, a link information database 14 (hereinafter, referred to as a link information DB 14), and an information providing unit 18. The plurality of ASP (application service provider) sites include, for example, an ASP site 11,
An SP site 12 and an ASP site 13 are included, and the content provider contracts in advance with one or more ASP companies including the ASP site 11, the ASP site 12, and the ASP site 13.

The content which is provided as a single data to be provided to the customer terminal 2 includes, for example, a page on which the operation data of the power plant and other operation data are recorded and a program for performing an optimal operation prediction. The single data is intentionally divided into a plurality of file data by the content provider. Here, since the single data is divided into a plurality of file data, the division is referred to as fragmentation. Each of the plurality of file data has a plurality of ASs so as to have redundancy.
It is stored in at least two of the ASP sites 11, 12, and 13 of the P sites (redundancy). Performing at least one of fragmentation and redundancy is called dispersion. Further, each of the plurality of file data includes a file number (a number representing a page or a file name) for distinguishing each file as information. This file number is used by the content providing server 1 to restore a plurality of file data into single data. Hereinafter, file data is referred to as a file.

The ASP site 11 stores, for example, the files F1, F3, F4, and F6 among a plurality of files, and includes a read ID 11 indicating the order of search by the content providing server 1. The ASP site 12 stores, for example, files F2, F3, F
5, F6 are stored, and include a read ID 12 indicating the order of search by the content providing server 1. The ASP site 13 stores, for example, files F1, F2, F4, F5, and F7 among a plurality of files, and a read ID 13 indicating the order in which the content providing server 1 searches for the files.
Is included. Here, the operation data of the power plant described above is
It consists of files F1, F2 and F3 in the order of file numbers. The other operation data of the power plant is composed of files F2, F3 and F4 in the order of file numbers. In addition, the program for predicting optimal driving
It is composed of files F5, F6 and F7 in the order of file numbers.

The link information DB 14 has storage information indicating an ASP site where each of a plurality of file data is stored. In this case, the stored information indicates the ASP sites 11, 12, and 13 of the plurality of ASP sites as the stored ASP sites. Also, link information DB
Reference numeral 14 stores a file number included in a file stored in the ASP site 11 as first ASP site information. Further, the link information DB 14 stores the ASP site 1
The file number included in the file stored in the second
It is stored as ASP site information. Further, the link information DB 14 stores a file number included in a file stored in the ASP site 13 as third ASP site information. This first ASP site information, the second ASP
The site information and the third ASP site information are included in the stored information.

The customer terminal 2 is an information processing device exemplified by a personal computer. The customer terminal 2 transmits request information 31 for requesting a service (content) required by the customer to the content providing server 1 via the network 3. Requested service (content)
Includes the above-described page (a page in which the operation data of the power plant and other operation data are recorded) and the above-described program (a program for performing optimal operation prediction). In this case, the customer makes a contract with the content provider in advance, and installs a plug-in with an automatic learning selection function on the ASP
To the customer terminal 2. Here, the plug-in with the automatic learning selection function downloaded from the ASP site 11 to the customer terminal 2 has a network distance (performance distance instead of a physical distance) of a plurality of ASP sites, for example, the ASP sites 11, 12, and 13. , ... in that order. In addition, as a download of a plug-in with an automatic learning selection function, the content provider sends the plug-in with the automatic learning selection function to the customer by delivery or handing, and the customer downloads the plug-in with the automatic learning selection function independently. You may.

The plug-in having the automatic learning selection function has a program 21 for displaying a request screen for transmitting the above-mentioned request information 31 on the customer terminal 2. The plug-in with the automatic learning selection function recognizes a plurality of ASP sites. The multiple ASP sites recognized by the plug-in with automatic learning selection function include the first site, the second site,
.. Are included. The order is set as information by automatically recognizing an ASP site having a short network distance (not a physical distance but a performance distance) when a plug-in with an automatic learning selection function is downloaded to the customer terminal 2. For example, among a plurality of ASP sites, if the network distance is short in the order of the ASP sites 11, 12, 13,..., The plug-in includes the ASP site 11 (first site), the ASP site 12 (second site), and the ASP The order of the site 13 (third site),... Is set as information. The set information is included in the request information 31 described above.
Further, the plug-in with the automatic learning selection function monitors communication from the customer terminal 2 to the content providing server 1, automatically detects a communication failure, and performs automatic switching according to the priority. There are two types of screens that are switched and displayed, a low level and a high level. A plug-in with an automatic learning selection function can automatically set a low level and a high level. As a low level, the entry screen of the ASP site (the same specification for all ASP sites) is switched with a guidance such as "switched to a site with good communication". As a high level, the same screen as the screen viewed when a communication failure occurs is reproduced on the switched ASP site. In this case, the state before switching (screen page ID) is passed as a parameter.

The customer terminal 2 displays a request screen for transmitting the request information 31 as required by the customer. On the request screen, buttons for selecting each of a plurality of services are arranged, for example, a button for selecting service A, a button for selecting service B, and a button for selecting service C.

The button for selecting the service A describes a list indicating that the operating data of the power plant is provided to the customer. The customer terminal 2 requests the operating data of the power plant by pressing the button for selecting the service A. The request information 31A is transmitted on the network 3 as the request information 31 to be transmitted. In the button for selecting the service B, a list indicating that other operation data of the power plant is to be provided to the customer is described.
Transmits the request information 31B to the network 3 as the request information 31 requesting other operation data of the power plant by pressing the button for selecting the service B. The button for selecting the service C describes a list indicating that a program for performing the optimal driving prediction is provided to the customer, and the customer terminal 2 presses the button for selecting the service C to perform the optimal driving prediction. Request information 31 for requesting a program
The request information 31C is transmitted over the network 3.

As a method for the customer terminal 2 to transmit, the customer terminal 2 sends the request information 31
(File Transfer Protocol),
HTTP (Hypertext Transfer P)
The content can be transferred to the content providing server 1 using a transfer protocol called “protocol”. Also,
The program 21 causes the information processing apparatus to transmit request information 31 for requesting a service to the network 3 by pressing a button for selecting a service.

The information providing unit 18 is an information processing device exemplified by a personal computer. Information provider 18
Provides the service (content) required by the customer as file information 32 to the customer terminal 2 in response to receiving the request information 31 from the customer terminal 2. This information providing unit 18
Has a control unit 20.

The control unit 20 recognizes in advance that the request information 31A from the customer terminal 2 is the request information corresponding to the contents of the operation data of the power plant composed of the files F1, F2 and F3. The control unit 20 also stores the request information 31B from the customer terminal 2 in advance in the file F2,
It recognizes that this is request information corresponding to the content of other operation data of the power plant composed of F3 and F4. In addition, the control unit 20 recognizes in advance that the request information 31C from the customer terminal 2 is request information corresponding to the content of a program for performing optimal driving prediction composed of the files F5, F6, and F7. I have. Further, the control unit 20 recognizes in advance that the read IDs of the ASP sites 11, 12, and 13 are ID11, ID12, and ID13, respectively. The request information 31 (request information 3)
1A, the request information 31B, and the request information 31C) included in the ASP site 11 (first site), the ASP site 12
(Second site), ASP site 13 (third site), ...
In this case, the control unit 20 searches the ASP sites 11, 12, and 13 in the order based on the read ID.

The control unit 20 sends the request information 3
1A, the first ASP is accessed by accessing the link information DB 14 according to the read ID 11 and the request information 31A.
The site information is searched, and as a result of the search, the file number information included in the first ASP site information contains the files F1 and F1.
3 is recognized, but the file F2 is not recognized. Next, the control unit 20 transmits the request information 31A and the read ID
12 to access the link information DB 14 in accordance with
Search ASP site information and search result, 2nd ASP
File number information included in site information
Recognize that 2. Thereby, the control unit 20
Is the first ASP site information, the read ID 11, and the second ASP
The first ASP site 11 and the second ASP site 12 are searched based on the site information and the read ID 12, and the files F1 and F3 stored in the first ASP site 11 and the second ASP
Read / obtain file F2 stored in SP site 12. As a method of obtaining a file performed by the control unit 20, a method of copying and collecting a file is exemplified.

The control unit 20 restores single data (contents) by rearranging the files F1 and F3 obtained based on the file numbers included in the files and the file F2, and converts the data into a format defined by the customer terminal 2. The message is converted to create a message, and the created message is transmitted to the customer terminal 2 via the network 3 as the file information 32 described above. The formats specified by the customer terminal 2 are HTML format, XML (extensible Markup L).
example) format. In addition, in response to receiving the request information 31 from the customer terminal 2, the information providing unit 18 causes the information processing device to transmit a service (content) required by the customer as the file information 32 on the network 3. And a program 19 for

Further, the control unit 20 can also transmit to the output terminal designated by the customer terminal 2 in advance. In this case, the output terminal is the customer terminal 2 or the customer terminal 2
Is a terminal other than the customer terminal 2 designated by.

When the customer presses a button for selecting the service A by the customer terminal 2, files F 1, F 2, and F 3 indicating operation data of the power plant are transmitted from the content providing server 1 to the customer terminal 2 via the network 3. You. Also,
When the customer presses a button for selecting a service B using the customer terminal 2, files F2, F3, and F4 indicating other operation data of the power plant are transmitted from the content providing server 1 to the customer terminal 2 via the network 3. . Further, when the customer presses a button for selecting the service C by the customer terminal 2,
Files F5, F6, and F7 indicating programs for performing optimal driving prediction are transmitted from the content providing server 1 to the customer terminal 2 via the network 3.

As viewed from the customer terminal side, as shown in FIG. 2, what the customer imagines is that the ASP site 15 exists at a predetermined place, and the ASP site 15 has a service provided by the content provider. A file indicating operation data of the power plant, other operation data of the power plant, and a program for performing an optimum operation prediction is stored.

The content provider stores a plurality of files indicating each of the operation data of the power plant, other operation data of the power plant, and a program for performing optimal operation prediction.
Assuming a virtual site corresponding to the SP site 15,
The operation data of the power plant, other operation data of the power plant, and a plurality of files indicating a program for performing optimal operation prediction are consciously distributed (redundant, fragmented) to form an ASP site 11 as a real site. , ASP site 12 and ASP
Store in site 13.

Thus, in the content security system of the present invention, the content (a plurality of files) is consciously distributed by the content provider, and the ASP site 11,
Since the information is stored in the ASP site 12 and the ASP site 13, reliable security can be ensured.

Next, a description will be given of a file distribution method of the content security system according to the present invention. The method of distributing files of the content security method of the present invention includes
(1) a method using striping, (2) a method using mirroring, (3) a method using a combination of mirroring and striping, and (4) a method using a combination of distributed data guarding and striping.

First, the method (1) of distributing files by striping in the content security system of the present invention will be described with reference to FIG.

(1) A method of distributing files by striping is, for example, dispersing (fragmenting) a plurality of files indicating operation data of a power plant, and storing the dispersed (fragmented) files in a plurality of ASP sites. It is a method.

As shown in FIG. 3, the content provider assumes, for example, a virtual site 54 that stores stripes S1 to S6 corresponding to a plurality of files indicating the operation data of the power plant. The stripes S1 to S6 indicating the operation data are intentionally distributed (fragmented), the stripes S1 and S4 are stored in the real site A51, the stripes S2 and S5 are stored in the real site B52, and the stripe S
3. Store S6 in the real site C53.

In this case, the real site A51 corresponds to, for example, the above-mentioned ASP site 11 among a plurality of ASPs contracted in advance by the content provider, and the real site B52
For example, a plurality of ASPs contracted in advance by the content provider
Corresponds to the above-mentioned ASP site 12, the real site C53 corresponds to, for example, the above-mentioned ASP site 13 of a plurality of ASPs contracted in advance by the content provider, and the virtual site 54 is the above-mentioned ASP site 15 Corresponding to Here, the stripes respectively stored in the real site A51, the real site B52, and the real site C53 correspond to, for example, a plurality of files indicating power plant operation data. The distribution management software 41 corresponds to the program 19 included in the information providing unit 18 described above.

In response to the reception of the request information 31 from the customer terminal 2, the information providing unit 18 uses the distribution management software 41 to execute the stripe S stored in the real site A51.
1, S4, stripes S2 and S5 stored in the real site B52, and stripes S3 and S6 stored in the real site C53, and the stripes S1 and S4 and the stripes S2 and S5 and the stripes S3 and S6 are obtained. And the services (stripe S1 to S6 indicating power plant operation data) required by the customer are provided to the customer terminal 2 as file information 32.

In this case, the link information DB 14 stores the number included in the stripe stored in the real site A 51 as the first number.
Stored as the first information corresponding to the ASP site information, the number included in the stripe stored in the real site B52 is stored as the second information corresponding to the second ASP site information, and included in the stripe stored in the real site C53. Is stored as third information corresponding to the third ASP site information.
Therefore, it is desirable to rearrange the obtained stripes based on the numbers included in the stripes.

(1) In the file distribution method by striping, since the content provider consciously fragments the file (stripe), the content security method can ensure reliable security.

Next, the method (2) of distributing files by mirroring in the content security system of the present invention will be described with reference to FIG.

(2) In a method of distributing files by mirroring, for example, a plurality of files indicating operation data of a power plant are distributed (redundant), and the distributed (redundant) files are stored in a plurality of ASP sites. It is a method.

As shown in FIG. 4, the content provider assumes, for example, a virtual site 63 that stores stripes S1, S2, S3, and S4 corresponding to a plurality of files indicating operation data of a power plant. , The stripes S1, S2, S3, S4 indicating the operation data of the power plant are intentionally distributed (made redundant) to form stripes S1, S2, S3, S4.
Is stored in the real site A61 and the real site B62.

In this case, the real site A61 and the real site B
Reference numeral 62 corresponds to, for example, the above-described ASP site 11 among a plurality of ASPs contracted in advance by the content provider. Here, the stripes stored in the real site A61 and the real site B62 respectively correspond to the files stored in the ASP site 11. The distribution management software 42 corresponds to the program 19 of the information providing unit 18 described above.

In response to receiving the request information 31 from the customer terminal 2, the information providing unit 18 uses the distributed management software 42 to control the stripes S 1, S 2, and S 3 stored in one of the real site A 61 and the real site B 62. S3, S4
And provides services (stripe S1, S2, S3, S4 indicating power plant operation data) required by the customer to the customer terminal 2 as file information 32.

(2) In the file distribution method by mirroring, since the content provider intentionally makes the file (stripe) redundant, the content security method is such that one of the real site A61 and the real site B62 goes down. Even so, we can provide the services required by customers.

According to the method (2) of distributing files by mirroring, for example, when the actual site A 61 goes down, the information providing unit 18 sends the request information 31 from the customer terminal 2 to notify the customer that it has gone down. It is desirable to transmit down information indicating that the actual site A 61 has gone down to the customer terminal 2 in response to the reception of the request. In this case, the request screen is displayed again together with the down information on the customer terminal 2, and the customer terminal 2 again (in this example) presses the button for selecting the service A to display the request information 31A for requesting the operation data of the power plant. It can be transmitted over the network 3.

At this time, the request information 31A transmitted again
In the first site (real site A6), a plug-in with an automatic learning selection function downloaded to the customer terminal 2
Instead of 1), instruction information for obtaining stripes S1, S2, S3, and S4 from the second site (real site B62) is included, and the information providing unit 18 responds to the reception of the request information 31A transmitted again. Thus, it is desirable to obtain the stripes S1, S2, S3, and S4 stored in the real site B62 and provide the service required by the customer to the customer terminal 2 as file information 32.

When the real site A61 is restored, the information providing unit 18 transmits to the customer terminal 2 restoration information indicating that the real site A61 has been restored, in order to notify the customer of the restoration. desirable. In this case, as shown in FIG. 7, the customer terminal 2 uses the downloaded plug-in with the automatic learning selection function to perform the first site (real site A61) based on the down information and the recovery information.
Instead of obtaining the stripes S1, S2, S3, S4 from the second site (actual site B62) or obtaining the stripes S1, S2, S3, S4 again from the first site. It is desirable.

Next, the method (3) of distributing files by combining mirroring and striping in the content security system of the present invention will be described with reference to FIG.

(3) A method of distributing files by a combination of mirroring and striping is, for example, dispersing (redundancy and fragmentation) a plurality of files indicating operation data of a power plant, and dispersing (redundancy and fragmentation). This is a method of storing the obtained file in a plurality of ASP sites.

As shown in FIG. 5, the content provider assumes, for example, a virtual site C77 that stores stripes S1 to S8 corresponding to a plurality of files indicating the operation data of the power plant. Stripes S1 to S8 indicating operation data are represented by stripes S1, S3, S5, S
7 and the stripes S2 and S
4, S6, and S8 are consciously distributed (fragmented) with the virtual site B76 to store the stripes S1, S3, S5,
S7 is stored in the real site A71 and the real site B72, and stripes S2, S4, S6, and S8 are stored in the real site C73 and the real site D74.

In this case, the real site A 71 and the real site B
72 corresponds to, for example, the above-mentioned ASP site 11 among a plurality of ASPs contracted in advance by the content provider,
The real site C73 and the real site D74 correspond to, for example, the above-described ASP site 12 among a plurality of ASPs contracted in advance by the content provider. Here, the actual site A7
1 and the stripes stored in the real site B72 correspond to the files stored in the ASP site 11, and the stripes stored in the real site C73 and the real site D74 are stored in the ASP site 12, respectively. File corresponding to Virtual site C77 is A
Corresponds to SP site 15. The distribution management software 43, 44, 45 corresponds to the program 19 of the information providing unit 18 described above.

The information providing unit 18 responds to the reception of the request information 31 from the customer terminal 2 by using the stripe S stored in one of the real site A 71 and the real site B 72.
1, S3, S5, and S7 are obtained by the distribution management software 43, and the stripes S2, S4, S6, and S8 stored in the real site C73 and the real site D74 are obtained by the distribution management software 44, and are obtained by the distribution management software 45. The stripes S1, S3, S5, S7 and the stripes S2, S4, S6, S8 are rearranged, and the services required by the customer (the stripes S1 to S8 indicating the operation data of the power plant) are stored in the customer terminal 2 as file information 32. provide.

In this case, the link information DB 14 stores the numbers included in the stripes stored in the real sites A71 and B72 as the first information corresponding to the first ASP site information, and stores the numbers in the real sites C73 and D74. The number included in the stored stripe is stored as second information corresponding to the second ASP site information, and the information providing unit 1
8 is desirably to rearrange the obtained stripes by the distribution management software 45 based on the numbers included in the stripes.

(3) In a file distribution method using a combination of mirroring and striping, a content provider intentionally makes a file (stripe) redundant and fragmented. For this reason, the content security method is
Even if one of the real site A71 and the real site B72 or one of the real site C73 and the real site D74 goes down, services required by customers can be provided, and reliable security is ensured. be able to.

According to the method (3) of distributing files by a combination of mirroring and striping, for example, when the actual site A 71 goes down, the information providing unit 18 sends a message to the customer terminal 2 to notify the customer that it has gone down. It is desirable to transmit down information indicating that the actual site A 71 has gone down to the customer terminal 2 in response to receiving the request information 31 from the customer terminal 2. In this case, the request screen is displayed again together with the down information on the customer terminal 2, and the customer terminal 2 presses the button for selecting the service A again (in this example) by pressing the button again.
The request information 31A for requesting the operation data of the power plant can be transmitted on the network 3.

At this time, the request information 31A transmitted again
In the first site (actual site A7), a plug-in with an automatic learning selection function downloaded to the customer terminal 2
Instead of 1), instruction information for obtaining stripes S1, S3, S5, and S7 from the second site (real site B72) is included, and the information providing unit 18 responds to the reception of the request information 31A transmitted again. It is desirable to obtain the stripes S1, S3, S5, and S7 stored in the real site B72 and provide the service required by the customer to the customer terminal 2 as file information 32.

When the real site A71 is restored, the information providing unit 18 may transmit restoration information indicating that the actual site A71 has been restored to the customer terminal 2 in order to notify the customer of the restoration. desirable. In this case, as shown in FIG. 7, the customer terminal 2 uses the downloaded plug-in with the automatic learning selection function, based on the down information and the recovery information, on the first site (real site A71).
Instead of obtaining the stripes S1, S3, S5, S7 from the second site (actual site B72) or obtaining the stripes S1, S3, S5, S7 again from the first site. It is desirable.

Next, (4) a file distribution method using a combination of distributed data guarding and striping in the content security system of the present invention will be described with reference to FIG.

(4) A method for distributing files by a combination of distributed data guarding and striping is, for example, dispersing (fragmenting) a plurality of files indicating operation data of a power plant, and distributing (fragmented) files. And the parity “P” are stored in a plurality of ASP sites.
Here, the distributed (fragmented) file is “A”,
Assuming that the data is “B” and “C”, the parity is
An exclusive OR operation is performed between two of the three “A”, “B”, and “C” (for example, “A” and “B”) to obtain the remaining one (“C” in this example). )).

As shown in FIG. 6, the content provider assumes, for example, a virtual site 85 that stores stripes S1 to S12 corresponding to a plurality of files indicating the operation data of the power plant. The stripes S1 to S12 indicating the operation data are intentionally dispersed (fragmented), and the stripes S1, S4, S7, and P (10-12) are stored in the real site A81, and the stripes S2, S5, S10, and P
(7-9) is stored in the real site B82, and the stripe S
3, S8, S11, and P (4-6) are stored in the real site C83, and the stripes S6, S9, S12, and P (1-3) are stored in the real site D84.

Here, P (10-12) is the stripe S
10, S11, and S12 are exclusive-ORed, and the remaining one is distributed management software 46.
Can be determined by: Also, P (7-9) can be obtained by the distribution management software 46 by taking an exclusive OR with two of the stripes S7, S8, and S9. Also, P (4-6)
By taking an exclusive OR with two of the stripes S4, S5 and S6, the remaining one can be obtained by the distribution management software 46. Also, P (1-
In 3), the remaining one can be obtained by the distribution management software 46 by taking an exclusive OR with two of the stripes S1, S2, and S3.

In this case, the real site A81 corresponds to, for example, the aforementioned ASP site 11 among a plurality of ASPs contracted in advance by the content provider, and the real site B82
For example, a plurality of ASPs contracted in advance by the content provider
The real site C83 corresponds to, for example, the aforementioned ASP site 13 of a plurality of ASPs contracted in advance by the content provider, and the real site D84 corresponds to, for example, the content provider. Corresponding to an ASP site (not shown) among a plurality of ASPs contracted in advance by the user. Here, the stripe stored in the real site A81 corresponds to the file stored in the ASP site 11, and the stripe stored in the real site B82 corresponds to the file stored in the ASP site 12. The stripe stored at the real site C83 corresponds to a file stored at the ASP site 13, and the stripe stored at the real site D84 corresponds to a file stored at the ASP site (not shown). . The virtual site 85 corresponds to the ASP site 15 described above. The distribution management software 46 corresponds to the program 19 included in the information providing unit 18 described above.

In response to the reception of the request information 31 from the customer terminal 2, the information providing unit 18 uses the distributed management software 46 to execute the stripe S stored in the real site A 81.
1, S4, S7, stripes S2, S5, S10 stored at the real site B82, stripes S3, S8, S11 stored at the real site C83, and stripe S6 stored at the real site D84. S9, S12
And stripes S1, S4, S7 and stripes S2, S5, S10, stripes S3, S8, S11 and stripes S6, S9, S12 are rearranged, and the services (customer operation data The customer terminal 2 uses the stripes S1 to S12) as the file information 32.
To provide.

When the actual site A81 goes down,
The information providing unit 18 uses the distributed management software 46 to
Stripes S2, S stored in the real site B82
5, a stripe S7 obtained by performing an exclusive OR with S10, a stripe S4 obtained by performing an exclusive OR with the stripes S3, S8, and S11 stored in the real site C83; The stripes S6, S9, and S12 stored in the site D84 and the stripe S1 obtained by performing an exclusive OR operation are obtained, and the stripes S2, S5, S10, and S7 and the stripes S3 and S are obtained.
8, S11, S4 and stripes S6, S9, S12, S
1, and the service (stripe S1 to S12 indicating power plant operation data) required by the customer is provided to the customer terminal 2 as file information 32.

In this case, the link information DB 14 stores the number included in the stripe stored in the real site A 81 as the first number.
Stored as the first information corresponding to the ASP site information, the number included in the stripe stored in the real site B82 is stored as the second information corresponding to the second ASP site information, and included in the stripe stored in the real site C83. Is stored as third information corresponding to the third ASP site information, the number included in the stripe stored in the real site D84 is stored as fourth information, and the information providing unit 18
It is desirable that the obtained stripes be rearranged by the distribution management software 46 based on the numbers included in the stripes.

(4) In a file distribution method based on a combination of distributed data guarding and striping, a content provider intentionally makes a file (stripe) redundant and fragmented, and a distributed (fragmented) file and a parity ""P" is stored in a plurality of ASP sites. For this reason, the content security method is the actual site A81,
Even if any one of the real site B82, the real site C83, and the real site D84 goes down, by using “P”,
A file stored in the down ASP site can be obtained (as data), a service required by a customer can be provided, and reliable security can be ensured.

According to the method (4) of distributing files by a combination of distributed data guarding and striping, for example, when the actual site A81 goes down, the information providing unit 18 informs the customer that the site has gone down. In response to the reception of the request information 31 from the customer terminal 2, the down information indicating that the actual site A81 has gone down is sent to the customer terminal 2.
It is desirable to send to. In this case, the customer terminal 2 again displays the request screen together with the down information, and the customer terminal 2 again (in this example) presses the button for selecting the service A to request the power plant operation data 3
1A can be transmitted over the network 3.

At this time, the request information 31A transmitted again
In the first site (actual site A8), a plug-in with an automatic learning selection function downloaded to the customer terminal 2
Instruction information for obtaining the stripes S1, S4, and S7 by taking exclusive OR from the second site (real site B82, real site C83, and real site D84) in place of 1) is included. 18 obtains the stripes S1, S4 and S7 by taking the exclusive OR from the real site B82, the real site C83 and the real site D84 in response to the reception of the request information 31A transmitted again, and It is desirable that the service to be provided be provided to the customer terminal 2 as file information 32.

When the real site A81 is restored, the information providing unit 18 transmits to the customer terminal 2 restoration information indicating that the actual site A81 has been restored in order to notify the customer of the restoration. desirable.

In this case, as shown in FIG. 7, the customer terminal 2 uses the downloaded plug-in with the automatic learning selection function based on the down information and the recovery information.
Instead of the first site (real site A81), the second site (real site B82, real site C83, and real site D8)
Exclusive OR from 4) to obtain stripes S1, S
It is desirable to perform optimization such as whether to obtain S4 or S7 or obtain stripes S1, S4 and S7 again from the first site.

As described above, according to the content security system of the present invention, reliable security can be ensured while efficiently using the ASP site.

Further, according to the content security system of the present invention, even if one ASP site goes down, continuous operation can be performed by dispersing a single data in order to secure security reliability. It is to provide a content security method.

Further, according to the content security system of the present invention, by distributing a single data in order to secure security reliability, one ASP site is abolished and another ASP site (another ASP site) is used. Switching to an (ASP provider) can be performed without changing the operation.

Further, according to the content security system of the present invention, security can be ensured without depending on an ASP or a communication carrier.

[0082]

According to the content security system of the present invention, the ASP site can be used efficiently, and
Reliable security can be ensured.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a content security system according to the present invention.

FIG. 2 is a block diagram showing a virtual configuration when viewed from a customer terminal side in the configuration of the content security system of the present invention.

FIG. 3 is a block diagram showing a method of distributing files by striping of the content security method according to the present invention.

FIG. 4 is a block diagram showing a method of distributing files by mirroring of the content security method according to the present invention.

FIG. 5 is a block diagram showing a file distribution method using a combination of mirroring and striping in the content security system according to the present invention.

FIG. 6 is a block diagram showing a method of distributing files by a combination of distributed data guarding and striping of the content security method according to the present invention.

FIG. 7 is a diagram illustrating optimization by a plug-in with an automatic learning selection function downloaded to a customer terminal;

[Explanation of symbols]

 1 content providing server 2 customer terminal 3 network 11 ASP site 12 ASP site 13 ASP site 14 link information database 15 ASP site 19 program 20 control unit 21 program 31 request information 32 file information

Continuation of the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat II (reference) G06F 17/30 150 G06F 17/30 150C 17/60 132 17/60 132 302 302 302E 512 512 (72) Inventor Hideaki Emoto Hyogo Hyogo 2-1-1 Shinhama, Arai-machi, Takasago-shi, Fukushima F-term in Takasago Works, Mitsubishi Heavy Industries, Ltd. (Reference) 5B017 AA03 BA10 CA16 5B075 KK03 KK54 KK63 NK42 NR03 NR06 UU40 5B082 HA01 5B085 BG04 BG07

Claims (6)

[Claims] 1. A network, a content providing server provided on the network and having a plurality of ASP (application service provider) sites and a database, and a plurality of file data generated by dividing a single data Are stored in at least two of the plurality of ASP sites, and the database has storage information indicating a plurality of storage ASP sites in which each of the plurality of file data is stored, and via the network A customer terminal that transmits request information to the content providing server, wherein the content providing server accesses the information database according to the request information from the customer terminal to search for the storage information, and stores the searched storage. Each of the plurality of stored ASP sites based on information Read the plurality of file data from and restore the single data,
A content security system for transmitting the restored single data to a predetermined output terminal. 2. The content security system according to claim 1, wherein each of the plurality of file data is stored in at least two of the plurality of ASP sites so as to have redundancy. 3. The content security system according to claim 1, wherein each of the plurality of storage ASP sites includes a read ID indicating an order searched by the content providing server. Accesses the information database according to the request information from the customer terminal and the read ID to search for the storage information, and stores the plurality of storage ASPs based on the searched storage information and the read ID. A content security method for reading the plurality of file data from each of the sites. 4. The content security system according to claim 1, wherein each of the plurality of file data includes a number for restoring the single data, and wherein the content is provided. A content security method in which the server rearranges the plurality of read file data based on the number and restores the single data. 5. The content security system according to claim 1, wherein the single data is divided into first, second, and third file data; And the first file data of the third file data is stored in first and second ASP sites of the plurality of ASP sites, and the second file of the first, second, and third file data Data is stored in a third ASP site and the second ASP site of the plurality of ASP sites, and the third file data of the first, second, and third file data is stored in the third ASP site of the plurality of ASP sites. The first, second and third ASP sites are stored in the second and third ASP sites, and the first, second and third ASP sites are content security devices corresponding to the plurality of stored ASP sites. Method. 6. An ASP (Application Service Provider) site in which each of a plurality of file data generated by accessing an information database and dividing single data according to request information from a customer terminal is stored. Retrieving the stored information to be indicated, reading the plurality of file data from the ASP site based on the retrieved stored information, and restoring the single data, designating the restored single data in advance And a program for causing a computer to execute each of the steps of transmitting to the output terminal.