JP2003196170A - Standard time supplying service system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a standard time supplying service system capable of improving the reliability of a required standard time and the reliability to a third person. <P>SOLUTION: In this standard time supplying service system, the standard time of a server in a standard time delivery center is delivered to each user server, according to a delivery request from a user through a communication lien or a delivery request based on a delivery schedule, to perform a time correction. The host standard time delivery center 20 comprises a first time server 21, a management server 22, and a first manager WEB client 27, and a client user 30 that is a low-order standard time delivery center comprises a second time server 31, a second manager WEB client 32 and a slave machine group 40. An operation is performed on the basis of the basis of the time relation between the transmission delay time required for the transmission and receiving between the host standard time delivery center 20 and the low-order client user 30 and the standard time to perform the time correction, and it is made browsable so that a time alternation can be detected. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a standard time supply service system, and more particularly to a telephone line and a computer device such as a personal computer connected to a communication line such as various communication networks. In this regard, the present invention relates to a standard time supply service system that provides standard time distribution and maintenance services.

[0002]

2. Description of the Related Art Guaranteed time information is required in electronic commerce, electronic notarization, electronic application, and the like. In a conventional contract communication system, a precise clock device such as a GPS or a radio wave clock is linked to construct a system, but it is impossible to prove that the system is operated with correct time information.

[0003] Japanese Unexamined Patent Publication No. 2001-281368 “Standard Time Supply Service System” describes a system for distributing according to a standard time distribution request. In this system, the center side that distributes standard time calculates and stores the difference from the standard time from the user information returned in response to the standard time distribution. There is a description of a business model that provides reliable services that can be used as a reference for business operation in consideration of time lag, by analyzing such transitions, reporting error measurement results from standard time.

[0004]

However, in the conventional system, it is technically possible to pretend that the time information acquisition source is malicious, and even if the clock information source is correct, the system clock will fail due to a system failure. It was impossible to guarantee that they were not crazy. Also, NT
In time distribution by P communication, it is not possible to confirm whether the client finally received the response packet from the server in the communication session.
The TP communication did not guarantee that the client received the communication time. Furthermore, if the time is out of order due to some trouble, if the time difference is relatively small, there is a problem that it takes time to detect the trouble.

Furthermore, the above-mentioned Japanese Patent Laid-Open No. 2001-28136.
According to the technology of Japanese Patent No. 8, it is a guarantee proof within the relationship between the position of the time supply side and the side to which the time is supplied, and does not support the reliability of the time with respect to a third party.

The present invention has been made in view of the above-mentioned problems, and its technical problem is to improve the reliability of required standard time and to improve the reliability for a third party. It is to provide a time supply service system.

[0007]

Means for Solving the Problems The measures taken by the present invention to solve the above technical problems are as follows.

A distribution request from a user via a communication line,
Alternatively, a standard time supply service system that distributes the standard time of the server in the standard time distribution center to each user server and corrects the time in response to a distribution request based on a distribution schedule,

(1) Delivery time of a delivery request packet from a user to be collected by a user server, reception time of a user delivery request packet sent to a server in a center, and transmission of a response packet from a center to a user server for a user packet. A time calculating means for calculating a time to be adjusted by the user server, which is calculated from the time and the reception time of the response packet at the user server, a transmission delay time in communication, a time difference from the standard time, and a previous measurement time. The time difference calculation means for calculating the absolute value of the rate of change of the time difference and the data for each user calculated by the time difference calculation means are stored in the database as log data together with each time of the time calculation means in the center. A storage means for storing, and.

(2) The log data in the database in the center server is connected to the WEB server which can be connected to the Internet line or another dedicated line, and the time difference in the server for each user and the center corresponding to the time difference are set. Configure so that the synchronous / asynchronous state of the server and the user server can be compared and displayed in a viewable manner.

(3) The log data is encrypted and stored in the center server, and is decrypted in the WEB server so that it can be viewed.

(4) In the center server, the time difference with respect to the standard time is detected by comparison with a predetermined reference value, and if it is out of the allowable value, the result is sent to the user by mail.

(5) The time synchronization flag in the user server is reset by detecting falsification in the user server, and a log indicating that falsification was detected and the falsification time is created and sent to the user by e-mail. To configure.

According to the means according to claim 1 described in the above (1), the center server stores the time information for calculating the time to be set by the client and the time difference from the standard time. The center server can confirm that the correct time has been sent from the center server to the user server, and various data can be analyzed on the center side. Also, in order to confirm the synchronization status between the center server and the user server, the transmission delay time in communication and the absolute value of the rate of change of the time difference with respect to the standard time are checked. If the time difference change rate is large, it means that the time cycle of the user server is in an unstable state compared to the time cycle of the server. Means out of sync. A condition that satisfies all of the above conditions is defined as a synchronization condition, and the condition at that time is recorded with a flag to distinguish the conditions, which is used as a condition for judging reliability.

According to the means according to claim 2 described in the above (2), a third party or a party connects to the WEB server on the center side via the Internet and determines the time difference from the standard time in the user server. Configured to be viewable,
Corresponding to these browsing data (differences in each distribution time), the synchronization / asynchronous state between the center server and the user server is also displayed, so that the reliability of the time during the time distribution period can be confirmed at the same time. To enable.

According to the means according to claim 3 described in the above (3), various data in the user server and the center server are encrypted and stored, while in the WEB server intended for browsing, Since the encrypted data can be browsed, it is difficult for the user server and the center server to falsify the data for the purpose of fraud, so that the reliability of the system can be improved.

According to the means of claim 4 described in the above (4), the center server detects the time difference in the user server, and when the value deviates from the preset allowable value, the data to that effect. It is possible to carry out mail communication addressed to the user or a predetermined user server by attaching.

According to the means of claim 5 described in the above (5), when the tampering is detected in the user server, the synchronization flag is reset, and the fact that the tampering has been made and its data are attached. Since it is sent to the center server, it is possible for the center server side to display that there has been tampering, and it is possible for a third party to objectively know the fact.

[0019]

BEST MODE FOR CARRYING OUT THE INVENTION A standard time supply service system according to an embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows a schematic configuration of a standard time supply service system according to an embodiment of the present invention. In the figure, 10 is a first standard time distribution center, and this first standard time distribution center 10 defines world standard time which is the first standard time. Reference numeral 20 is a second standard time distribution center, and 30 is an NTP server which is a client (customer) user.

The second standard time distribution center 20 is the first
First time server 21 (time server) that receives the first standard time of the standard time distribution center 10 and generates the second standard time, the management server 22, and the first administrator W
The management server 22 includes an EB client 27, a mail server 23, an application server 24, a web (WEB) server 25, and a database (DB) server 26. Each of these servers 23 to 26 includes a host computer and the like, and the client user 30
Also includes a host computer and the like. Reference numeral 40 denotes a client user child device group, which includes a plurality of personal computers 41a to 41a.
41c is connected to the base unit. Further, as shown in FIG. 1, the first standard time distribution center 10, the second standard time distribution center 20, and the in-house NTP that is the parent device of the client server are also connected by the communication network 50.
A dedicated line 51 or the like is used as the communication line network 50.

As shown in FIG. 2, the first time server 21 (time server) of the second standard time distribution center 20.
Is the second time server 31 of the client user 30.
Upon receiving the NTP communication request from the (customer time server),
The time information is transmitted to the second time server 31. Further, the first time server 21 obtains the time information from the atomic clock, and the N
TA (National Time Author)
By receiving the calibration from y), the hierarchy 1 (Strat)
It is designed to operate with um 1).

The application server 24 receives the upload request of the time operation information (log information) from the second time server 31 of the client user 30, and
It also monitors the allowable time range. The database (DB) server 26 is a DB server that stores log information. WEB
The server 25 is an HTTP server for browsing log information, browsing the operating status of the center, and the like.

The mail server 23 accepts a request for sending a time alteration detection mail from the time synchronization software operating in the second time server 31 of the client user 30 when the time alteration occurs, and sends the mail to the designated delivery destination. At the same time as the transmission, when the application server 24 detects that the time is out of the allowable time range, the transmission request of the detection mail is accepted. In addition, the first administrator WEB client 2
Reference numeral 7 is used to confirm the time synchronization status of each customer, the operation status of the server, and the like.

In the client user 30, the second time server 31 is a server for operating the time synchronization software, and performs the NTP communication with the first time server 21 on the side of the second standard time distribution center 20 to obtain the time. By synchronizing, it operates as the NTP server of Stratum 2 and uploads the NTP communication history, software start / end information, and the like as log information to the second standard time distribution center 20.

The second time server 31 also detects tampering of time as a function of software, and at the time of tampering detection, sends a notification mail transmission request to the mail server 23 of the center 20 for occurrence of tampering. The second administrator WEB client 32 views the time synchronization status of the customer's own time server and the operation information on the center side.

FIG. 3 shows a client user 30 (customer side).
When the customer server software is activated in step S1, the second time server 31 resets the time synchronization state flag which is a flag indicating the synchronization state between the center side and the user side. Then, the clock generated inside the software is activated (step S3), and the time synchronization software activation time, which is the startup time, is set to Tb1 in step S4. Startup information log data is created in step S5, and this log data is encrypted (step S5).
6) The encrypted log data is stored in the DB database (step S7).

Next, time tampering detection timer interruption is enabled in steps S8 and S9, it is determined in step S10 whether or not there is a program stop instruction, and if there is no program stop instruction, timer interrupt processing is performed. If there is a program stop instruction, the process proceeds to steps S11 and S12 to disable the time tampering detection timer interrupt.
Next, in step S13, the time synchronization software end time T1c is detected, end information log data is created in step S14, the log data is encrypted in step S15, and the encrypted log data is stored (step S1.
6). Next, in step S17, the log is uploaded to the first time server 21.

The software components of the customer server include an NTP server processing unit, an NTP client processing unit,
There are a clock counting unit, a time monitoring / tampering detection unit, a message processing unit, and a network control unit. The NTP server processing unit reads the system clock and synchronizes with the time request in the NTP procedure from the client. The NTP client processing unit makes a time request in the NTP procedure to the upper connection (time server of the center) and synchronizes its own system clock. The clock counting unit uniquely counts the time in this software by the timer interrupt. The time monitoring / falsification detection section detects the falsification by comparing and monitoring the count of the clock counting section and the system clock. The message processing unit uses NTP communication log information,
Manages message communication that uploads other information to the center. The network control unit controls communication with the outside.

FIG. 4 shows an operation flow of the application server 24. In step S18, the application server 2 of the second standard time distribution center 20 (center side) is used.
4 is started, it is determined in step S19 whether or not there is a log upload request from the client user (customer) 30. If there is a request, the application server 24 receives the log data (step S20), and if there is no request, the process proceeds to step S24. Next, step S21.
Then, it is determined whether or not the log data received by the application server 24 is NTP communication information. If it is NTP communication information, the process proceeds to step S22, and the application server 24 determines whether the time difference is outside the allowable range. If it is outside the allowable range, the process proceeds to step S23, and the application server 24 performs the first management. The out-of-time permissible range detection mail is transmitted to the administrator WEB client 27 and the second administrator WEB client 32. If it is not outside the allowable range in step S22, the process proceeds to step S24.
In step S24, it is determined whether or not there is a program stop instruction, and if there is an instruction, the operation ends, and if there is no instruction, the process returns to step S19.

The log data structure includes NTP communication information, time tampering detection information, software activation, and software termination. The NTP communication information is the customer server identification I
D, NTP server identification ID of center and synchronization status /
There is an asynchronous condition. Regarding the synchronous / asynchronous state, the request packet transmission time is T1, the request packet server reception time is T2, the response packet server transmission time is T3, the response packet reception time is T4, and the time difference is ((T2-T
1) + (T3-T4)) / 2, delay time (Tdela
Let y) be ((T4-T1)-(T3-T2)) / 2. For the time tampering detection information, the information tampering detection time is T1a, for the time synchronization software activation, the activation time is T1b, and for the time synchronization software, the termination time is T1c.

FIG. 5 shows an operation flow of the NTP server. As shown in the figure, in the first time server 21 of the second standard time distribution center 20, the step S
When the NTP server is activated in 25, it is determined in step S26 whether or not there is a time request from the second time server 31, and if there is a time request, the process proceeds to step S27, and if there is no time request, the process proceeds to step S28. In step S27, the NTP time distribution process is executed, and the flow advances to step S28 to determine whether or not there is a program stop instruction.

When a time out of the permissible time range of the client user 30 occurs, as shown in FIG.
1 has caused a time trouble, and the time distribution log signal from the second time server 31 is the mail server 2 of the management server 22.
From 4, the out-of-allowance mail is sent to the first administrator WEB client 27, and the same mail is also sent to the second administrator WEB client 32 on the customer side.

FIG. 7 shows a processing flow of the NTP server in the first time server 21 of the second standard time distribution center 20. When the time distribution processing is executed in step S29, the first time server 21 is executed in step S30. The NTP request packet from the second time server 31 is received, and the process proceeds to step S31 to measure the server arrival time T2 of the NTP request packet. Next, in step S32, a response packet is created, and in step S33, the server transmission time T3 of the response packet is measured. Then, in step S34, NT
The P response packet is transmitted to the second time server 31.

FIG. 8 shows the time synchronization processing flow of the second time server 31 on the customer side. First, when the time processing is executed in step S35, an NTP packet is generated in step S36 and the request transmission time T1 is measured. Then, in step S37, the NTP request packet is transmitted to the first time server 21. Next, in step S38, the second time server 31 receives the NTP response packet from the first time server 21, and in step S39 the reception time T of the response packet.
4 is measured, and from T1 to T4 in step S40,
Time difference with the center server 20 and delay time (Tdela
y) is calculated, and at the same time, the change rate of the time difference with respect to the previous measurement is calculated. Next, in step S41, it is determined whether or not it is in the time synchronization state.

The concept of the time synchronization state is that the absolute value of the rate of change of the time difference calculated during communication is smaller than a certain constant value Ta, and the delay time during communication (Tdela).
When y) is smaller than a certain constant value Tb, the synchronized state is established. If the time synchronization state is set in step S41, the time synchronization state flag is set (step S41).
42), if it is not in the time synchronization state, the time synchronization state flag is reset in step S43. Time correction processing is performed in step S44, and log data is created in step S45. The content of the log data is the identification ID of the customer server, N
The identification ID of the TP communication destination, the time status flags T1 to T4, and the time difference. In step S46, the log data is encrypted,
After storing the log data in step S47, the log is uploaded.

Upon uploading the log, the encrypted log data is decrypted and the application server 24
Send to. The application server 24 converts the decrypted log data into a DB, sends it to the DB server 26, and
The B server 26 refers to the data from the WEB server 25. As its function, the WEB server 25 displays the certification authority report from the NTP communication history information stored in the DB server 26, and also traces the time difference between the center and the customer server in the NTP communication event and displays the graph. .

When the time falsification occurs, as shown in FIG. 9, the second time server 31 on the customer side detects the time falsification, and the time falsification detection mail from the second time server 31 is the mail server of the management server 22. 23. The mail server 23 firstly receives the time alteration detection mail.
While sending to the administrator's WEB client 27 of
It is sent to the second administrator WEB client 32 on the customer side.

Upon detection of falsification, as shown in FIG. 10, when the time falsification detection process is started in step S49,
In step S50, the absolute value of the difference between the soft clock and the system clock is compared with the detection accuracy (Tmax). If the detection accuracy (Tmax) is larger than the absolute value of the difference between the soft clock and the system clock, the process proceeds to step S51, the soft clock is calculated from the system clock, and the process ends. If the detection accuracy (Tmax) is smaller than the absolute value of the difference between the soft clock and the system clock in step S50, the process proceeds to step S52 to reset the time synchronization state flag, and then the process proceeds to step S53. Then, the system clock is calculated, and the process proceeds to step S54, where the mail server 23 sends the tampering detection mail to the administrator WEB clients 27 and 32. Next, the process proceeds to step S55, the time tampering detection time T1a is determined, time tampering information log data is created in step S56, encrypted (step S57), and the log data is stored and processed in step S58. finish.

As described above, the following points have been taken in the present invention. 1. In order to deliver stable time information on the network, the time is delivered by NTP communication via a leased line or IP-VP. 2. In the NTP communication, the following four items are necessary as information for the client to finally calculate the time to be adjusted. 1) Request packet transmission time T from the client user
1 2) Time T2 at which the packet arrived at the server 3) Time T3 at which the server returned the response packet 4) Time T4 at which the client received the response packet Thus, these four pieces of information T1 for correcting the clock of the client T1 By uploading ~ T4 to the server again, the time correction of the client based on what kind of information at what time and the time difference of the client at that time are recorded on the server side. 3. An allowable time range is set for each customer, and when it is out of that range, it is automatically detected and the customer is notified by email. 4. Time tampering is automatically detected and the customer is notified by email. I also tried to keep a record. 5. The client side records the start and end of this system together with the time, and uploads it to the server and saves it. 6. By accumulating the allowable time range set for each customer and the above records, prove the time zone within the allowable range set by the customer or outside the range to a third party,
I made it available on the WEB along with the detailed data. 7. The NTP communication data was collected, and the trend of the fluctuation of the time of the client could be analyzed (by graphing).

[0040]

As described above, according to the standard time supply service system of the present invention, the reliability of the standard time required by the customer can be improved and the reliability of the third party can be improved. Since the time of the customer's system is kept accurate, it is possible to perform highly reliable electronic commerce and electronic application.

[Brief description of drawings]

FIG. 1 is a block diagram showing a schematic configuration of a standard time supply service system according to an embodiment of the present invention.

FIG. 2 is an explanatory diagram showing a schematic configuration of a standard time supply service system according to an embodiment of the present invention.

FIG. 3 is an operation flow chart of customer server software of the standard time supply service system according to the embodiment of the present invention.

FIG. 4 is an operational flowchart of the application server of the standard time supply service system according to the embodiment of the present invention.

FIG. 5 is an operational flowchart of the NTP server of the standard time supply service system according to the embodiment of the present invention.

FIG. 6 is a block diagram showing a schematic configuration of a standard time supply service system according to an embodiment of the present invention.

FIG. 7 is an operational flowchart showing time processing of the standard time supply service system according to the embodiment of the present invention.

FIG. 8 is an operational flowchart showing time processing of the standard time supply service system according to the embodiment of the present invention.

FIG. 9 is a block diagram showing a schematic configuration of a standard time supply service system according to an embodiment of the present invention.

FIG. 10 is an operation flow chart showing the alteration detection processing of the standard time supply service system according to the embodiment of the present invention.

[Explanation of symbols]

10 First Standard Time Distribution Center 20 Second Standard Time Distribution Center 21 First Time Server (Time Server) 22 Management Server 23 Mail Server 24 Application Server 25 WEB Server 26 DB Server 27 First WEB Client for Administrator 30 Client User 31 Second Time Server (Customer Time Server) 32 Second WEB Client for Administrator 40 Handsets 41a to 41c Personal Computer

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Keisuke Ichikawa             275 Soyado-cho, Kohoku-ku, Yokohama-shi, Kanagawa             Amano Co., Ltd. F-term (reference) 2F002 AA00 AF01 FA16 GA06                 5B089 GA11 GA21 JB11 JB22 KA12                       KA17 KE02 KE03 MC03

Claims (5)

[Claims] 1. A standard time of a server in a standard time distribution center is distributed to each user server and time correction is performed in response to a distribution request from a user or a distribution request based on a distribution schedule via a communication line. This is a standard time supply service system, in order to collect at the user server, the time when the distribution request packet was sent from the user, the time when the user distribution request packet was sent to the server in the center, and the time when the user packet was sent from the center to the user server. Time calculation means for calculating a time to be adjusted by the user server, which is calculated from the response packet transmission time and the reception time of the response packet at the user server, the transmission delay time in communication, the time difference from the standard time, and the previous time. Time difference calculation means for calculating the absolute value of the rate of change of the time difference with respect to the time of measurement A storage means for storing the data for each user calculated by the time difference calculating means in the database as log data in the center together with each time of the time calculating means, Time supply service system. 2. The log data in the database in the center server is connected to an Internet line or another dedicated line on a WEB server, and the time difference in the server for each user and the center server corresponding to the time difference are set. The standard time supply service system according to claim 1, wherein the standard time supply service system is configured so as to be displayed in a viewable manner by comparing the synchronous / asynchronous state between the user server and the user server. 3. The standard time supply according to claim 1, wherein the log data is encrypted and stored in the center server, and is decrypted in the WEB server so that it can be browsed. Service system. 4. The center server is configured to detect the time difference with respect to the standard time by comparing it with a predetermined reference value, and when it is out of the allowable value, send the result to the user by e-mail. The standard time supply service system according to claim 1, 2, or 3. 5. A tampering detection is performed on the user server to reset the time synchronization flag in the user server, and a log indicating that tampering has been detected and the tampered time is created and sent to the user by e-mail. The standard time supply service system according to claim 1, 2, 3, or 4, which is configured.