JP2003006086A - Service providing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To realize a service providing system capable of keeping security and improving management/maintenance. SOLUTION: The service providing system for providing service by performing communication between objects by using an HTTP is provided with a service providing Web server machine in which a function for performing communication between a client and a machine is incorporated and an external disclosure Web server machine for transferring information that is disclosed to the Internet and received from the client machine to the Web server machine on the basis of a routing table.

Description

Detailed Description of the Invention

[0001]

TECHNICAL FIELD The present invention relates to HTTP (HyperT
ext Transfer Protocol: HTML (HyperText Markup Languag) from WWW server to WWW client
A communication protocol for sending and receiving the documents described in e). Hereinafter, it is simply referred to as HTTP. ) Is used to communicate between objects to provide a service, and more particularly to a service providing system capable of ensuring security and improving manageability / maintenance.

[0002]

2. Description of the Related Art Conventionally, when exchanging data or executing processing between objects that individually operate on two machines to provide a service, the data file is transferred between the objects, or one object is transferred to the other. The execution instruction of the process was issued to the object.

However, when a firewall exists between two machines, HTTP is used to ensure security.
In many cases, a protocol other than the minimum required protocol, such as or SMTP (Simple Mail Transfer Protocol), is not passed.

Therefore, a Web server is used to make XML.
Information described in (eXtensible Markup Language: Extensible Markup Language; hereinafter simply referred to as XML) is called H
Services such as data exchange and execution of processing may be realized by exchanging objects using TTP.

FIG. 7 is a block diagram showing an example of a conventional service providing system for exchanging data. In FIG. 7, 1 is a client machine, 2 is a Web server machine having a Web server function, and 100 is the Internet.

The client machine 1 and the Web server machine 2 are interconnected by the Internet 100.

The operation of the conventional example shown in FIG. 7 will be described. For example, it is assumed that the Web server machine 2 provides a service for receiving an order slip sent from a company that owns the client machine 1.

The client machine 1 sends the order slip X
The file shown in "OS01" in FIG. 7 described in ML is S
HT as a transfer protocol in the form of OAP (Simple Object Access Protocol: a lightweight protocol for communicating objects via a network) message.
It is transmitted to the Web server machine 2 by using TP as indicated by "OS02" in FIG.

Then, the Web server machine 2 performs a necessary receipt process for the received order slip.

As a result, since the communication protocol is HTTP, the client machine 1 and the Web server machine 2
Even if there is a firewall between
The order slip can provide a service of passing the firewall and receiving the order slip at the Web server machine 2.

FIG. 8 is a block diagram showing an example of a conventional service providing system for executing processing.
In FIG. 8, 3 is a client machine, 4 is a Web server machine having a Web server function, and 100a is the Internet.

The client machine 3 and the Web server machine 4 are mutually connected by the Internet 100a.

The operation of the conventional example shown in FIG. 8 will be described. For example, assume a case where a facility diagnosis company that owns the client machine 3 provides a service for remotely performing a facility diagnosis of a Web server machine 4 of a client company.

The client machine 3 sets the diagnostic condition in XML.
The file shown in "CM11" in FIG.
HTTP as a transfer protocol in the form of P message
Is transmitted to the Web server machine 4 as indicated by "CM12" in FIG.

The Web server machine 4 that has received the diagnostic condition indicated by "CM12" in FIG. 8 extracts the diagnostic condition from the file described in XML and passes it to the diagnostic processing function indicated by "DF11" in FIG. To perform.

The Web server machine 4 which has received the diagnosis result from the diagnosis processing function indicated by "DF11" in FIG. 8 creates a file indicated by "RS11" in FIG. 8 in which the diagnosis result is described in XML, in the form of a SOAP message. HTTP is used as the transfer protocol, and is transmitted to the client machine 3 as indicated by "RS12" in FIG.

The client machine 3 that has received the diagnosis result indicated by "RS12" in FIG. 8 extracts the diagnosis result from the file described in XML and causes the display means of the client machine 3 to display it appropriately.

As a result, since the communication protocol is HTTP, the client machine 3 and the Web server machine 4
Even if there is a firewall between
It becomes possible to exchange diagnostic conditions and diagnostic results, and to provide equipment diagnostic services remotely.

[0019]

However, FIG. 7 and FIG.
In the conventional example shown in, the Web server machine has a function of extracting information from a received file described in XML, a function of describing a processing result in XML, and a function of executing processing in addition to a function of a normal Web server. Service functions such as "etc." are required separately.

W incorporating such a service function
If the eb server machine is placed in the service providing department, the service providing department can manage the system and the like, so that the manageability and maintainability are improved, but such a web server machine is directly exposed to the Internet. There was a problem because I said that security problems might occur.

On the other hand, when the above-mentioned service function is incorporated in a normal Web server machine open to the Internet, security problems are less likely to occur, but system management and maintenance in the service providing department is inconvenient. In addition, there is a problem that the load on the Web server machine increases. Therefore, the problem to be solved by the present invention is to realize a service providing system capable of ensuring security and improving manageability / maintenance.

[0022]

In order to achieve such a subject, the invention according to claim 1 of the present invention is an HTT.
In a service providing system in which objects are communicated using P to provide a service, a service providing Web server machine having a function of communicating with a client machine and providing a service is provided on the Internet. Security is provided and management / maintenance is improved by including an externally-published Web server machine that transfers information that has been published and received from the client machine to the Web server machine for service provision based on a routing table. It will be possible.

The invention according to claim 2 is, in the service providing system according to claim 1, received when the client machine accesses a virtual directory provided in the Web server machine for external publication. By transferring information, it becomes possible to secure security and improve manageability and maintainability.

According to a third aspect of the present invention, in a service providing system for providing a service by communicating between objects using HTTP, a service having a function of communicating with a client machine and providing a service. Security is provided by the provision of a web server machine for providing and a web server machine for external publication that transmits information returned from the web server machine for providing services that is published on the Internet to the client machine. It becomes possible to secure and improve the manageability and maintainability.

According to a fourth aspect of the present invention, in the service providing system according to any one of the first to third aspects, the Web for providing the service and for external disclosure
We for relay that relays the information between server machines
By providing the b server machine, the load on the Web server machine can be reduced and the load on the intranet can be distributed.

According to a fifth aspect of the present invention, in the service providing system according to the fourth aspect, a plurality of the Web server machines for relaying are provided, and
b It becomes possible to reduce the load on the server machine and distribute the load on the intranet.

According to a sixth aspect of the invention, in the service providing system according to the fourth or fifth aspect of the invention, the web server machine for external publication is provided in a virtual directory provided in the web server machine for relaying. Alternatively, when the Web server machine for relay makes an access, by relaying the received information, the We
b It becomes possible to reduce the load on the server machine and distribute the load on the intranet.

According to a seventh aspect of the present invention, in the service providing system according to any one of the first to third aspects, a plurality of the Web server machines for providing the service are provided, so that the service is provided. Since the functions can be distributed, it is possible to reduce the load on the Web server machine incorporating the service function and distribute the load on the intranet.

[0029]

BEST MODE FOR CARRYING OUT THE INVENTION The present invention will be described in detail below with reference to the drawings. FIG. 1 is a configuration block diagram showing an embodiment of a service providing system according to the present invention. 5 in FIG.
Is a client machine, 6 is a web server machine for external publication having a function of a web server published on the Internet, 7 is a relay web server machine, 8 is a web server machine for providing a service in which a service function is incorporated, 100b is the Internet.

Client machine 5 and W for external publication
The eb server machine 6 is mutually connected by the internet 100b. Further, the Web server machine 6 for external publication, the Web server machine 7 for relaying, and the Web server machine 8 for providing services are installed in a company protected by a firewall indicated by "IC21" in FIG. Connected to each other.

The Web server machine 6 for external publication
And "RT2" in FIG. 1 for the web server machine 7 for relay.
1 ”and“ RT22 ”is provided with a routing table in which routing information such as a relay destination of information is described, and the Web server machine 8 for service provision has the configuration shown in FIG.
The service function as shown in the middle "SP21" is provided.

The operation of the embodiment shown in FIG. 1 will now be described with reference to FIG.
This will be described with reference to FIGS. 3, 4, 5, and 6. 2, 5, and 6 are block diagrams illustrating the flow of information, and FIG. 3 is a Web server machine 6 for external publication and a W for relaying.
FIG. 4 is a flowchart for explaining the operation of the eb server machine 7, and FIG. 4 is an explanatory diagram showing a specific example of the contents of the routing table.

For example, it is assumed that the order slip is sent to the Web server machine 8 for service provision, which has a service function such as receiving and processing the order slip, which is the information transmitted from the client machine 5.

Since the Web server machine 8 for service provision is not directly published on the Internet 100b, the client machine 5 accesses the Web server machine 6 via the Internet 100b and sends the order slip.

For example, the client machine 5 uses a file in which the order slip is described in XML in the form of a SOAP message using HTTP as a transfer protocol.
The data is transmitted to the Web server machine 6 for external publication as shown in the middle "AC31".

On the other hand, in the "S001" shown in FIG. 3, the external publication We published on the Internet 100b.
The b-server machine 6 performs processing as a normal Web server.

Then, in "S002" in FIG. 3, the Web server machine 6 for external publication has "S0" in FIG. 3 when the external access is to the virtual directory.
03 ”from the routing table to the relay destination We
b) Obtain information such as the address of the server machine,
The received order slip is transferred to the Web server machine having the address acquired in S004 ".

For example, the routing table shown in FIG.
As shown in medium "VD41", "RA41", and "RD41", information on "virtual directory", "relay destination address", and "relay destination directory" is "DT41" in FIG.
And "DT42", respectively.

When the access from the outside is the virtual directory "Dir001", the information is transferred to the relay destination directory "DirAAA" of the Web server machine at the relay destination address "xxx.xxx.xxx.xxx". .

Here, the address information of the relay Web server machine 7 is described in the routing table shown by "RT21" in FIG. 1, and the service providing Web server is shown in the routing table shown by "RT22" in FIG. It is assumed that the address information of the machine 8 is described.

That is, the external publication Web server machine 6 acquires the address of the relay Web server machine 7 which is the relay destination from the routing table indicated by "RT21" in FIG. 5 and indicates it by "RL51" in FIG. To transfer the order slip.

Further, in "S005" in FIG. 3, when the Web server machine 6 for external publication receives information from the relay destination Web server machine, "S006" in FIG.
In step 2, the received contents are returned to the client machine 5.

For example, a facility diagnostic company that owns the client machine 5 provides W for service provision of a client company.
Assuming a case where the eb server machine 8 is remotely diagnosed, information such as a diagnosis result is returned from the relay destination Web server machine, and therefore the returned content is returned to the client machine 5.

On the other hand, the Web server machine 6 for external publication
Web server machine for relay 7 that received the order slip from
Basically operates according to the flow chart shown in FIG. 3, and when the access is to the virtual directory as described above, the routing table shown in “RT22” in FIG. The address of the Web server machine 8 is acquired and the order slip is transferred as indicated by "RL61" in FIG.

Then, the Web server machine 8 for service provision which finally received the order slip is "AC6" in FIG.
As shown in 1 ", the ordering slip is passed to the service function shown in" SP21 "in FIG. 6 to perform necessary service processing.

Therefore, by accessing the virtual directory of the Web server machine 6 for external publication, which is open to the public on the Internet 100b, without any awareness of the client machine 5 side, the Web server machine incorporating the service function can be accessed. It becomes possible to receive the service by relaying the information to 8.

Further, since the direct contact point with the Internet 100b is the Web server machine 6 for external publication, security problems are less likely to occur, and no service function is incorporated in the Web server machine 6 for external publication. Therefore, an increase in load can be prevented.

Furthermore, since the Web server machine 8 for providing a service having the service function incorporated therein can be arranged in the department providing the service, the manageability / maintenance is improved, and the Web server machine 8 for providing the service is connected to the Internet. On the other hand, since it will not be published directly, security problems are less likely to occur.

As a result, security is ensured and managed by relaying information from the Web server machine 6 for external publication, which is open to the public on the Internet 100b, to the Web server machine 8 for providing a service, which has a built-in service function.・ Realize a service providing system that can improve maintainability.

In the embodiment shown in FIG. 1, the relay Web server machine 7 is provided between the Web server machine 6 for external publication and the Web server machine 8 for service provision, but it is an essential component. Absent. However, We for relay
b By providing the server machine 7, W for external publication
Compared to the case of directly routing the eb server machine 6 and the service providing Web server machine 8, the Web
The load on the server machine can be reduced and the load on the intranet can be distributed.

Further, the number of relay Web server machines is not limited to one, and a plurality of relay Web server machines may be provided.

Further, in the embodiment shown in FIG. 1, one We in which a service function is incorporated from the Web server machine 6 for external publication, which is published on the Internet 100b.
b Information is relayed to the server machine 8, but a plurality of virtual server directories are provided in the web server machine 6 for external publication, and a plurality of web server machines are installed with service functions corresponding to the virtual directories on a one-to-one basis. You may provide and relay information to each.

In this case, since the service function can be distributed, it is possible to reduce the load on the Web server machine incorporating the service function and distribute the load on the intranet.

[0054]

As is apparent from the above description,
The present invention has the following effects. According to the inventions of claims 1, 2 and 3, by relaying information from a web server machine for external publication, which is published on the Internet, to a web server machine for providing a service in which a service function is incorporated. It is possible to secure security and improve manageability and maintainability.

Further, according to the inventions of claims 4, 5 and 6, by relaying the information through the relay web server machine, the load on the web server machine can be reduced and the load on the intranet can be distributed. It will be possible.

According to the invention of claim 7, the service function can be distributed by providing a plurality of service-providing Web server machines having the service function incorporated therein. Therefore, the load on the Web server machine having the service function incorporated therein. Can be reduced and the load of the intranet can be distributed.

[Brief description of drawings]

FIG. 1 is a configuration block diagram showing an embodiment of a service providing system according to the present invention.

FIG. 2 is a configuration block diagram illustrating a flow of information.

FIG. 3 is a flowchart illustrating the operation of the Web server machine.

FIG. 4 is an explanatory diagram showing a specific example of contents of a routing table.

FIG. 5 is a configuration block diagram illustrating a flow of information.

FIG. 6 is a block diagram illustrating a flow of information.

FIG. 7 is a configuration block diagram showing an example of a conventional service providing system.

FIG. 8 is a configuration block diagram showing an example of a conventional service providing system.

[Explanation of symbols]

1,3,5 client machine 2, 4, 6, 7, 8 Web server machine 100,100a, 100b Internet

Claims (7)

[Claims] 1. A service providing system that communicates between objects using HTTP to provide a service, and a service providing Web server machine having a function of communicating with a client machine and providing a service. And a Web server machine for external publication, which transfers information received from the client machine and published on the Internet to the Web server machine for service provision based on a routing table. 2. The service providing system according to claim 1, wherein the received information is transferred when the client machine accesses a virtual directory provided in the Web server machine for external publication. 3. A service providing system for providing services by communicating between objects using HTTP, and a service providing Web server machine having a function of communicating with a client machine and providing a service. And the above-mentioned We that is published on the Internet
b. A service providing system, comprising: a web server machine for external publication, which transmits information returned from the server machine to the client machine. 4. The We for service provision and external disclosure
b W for relay that relays the information between server machines
An eb server machine is provided, The service provision system in any one of Claim 1 thru | or 3 characterized by the above-mentioned. 5. The service providing system according to claim 4, further comprising a plurality of the web server machines for relaying. 6. Relaying the received information when the external public Web server machine or the relay Web server machine accesses a virtual directory provided in the relay Web server machine. The service providing system according to claim 4 or claim 5, which is characterized. 7. The service providing system according to claim 1, further comprising a plurality of the Web server machines for providing the service.