JP2003228508A - Distributed database system management server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a distributed database system management server providing an easy access to a database for users, and lightening a database administrator's workload by centralized controlling distributed DB data located at a plurality of servers. <P>SOLUTION: A data table 32 for registration of lists of data stored in DB servers 15-17 is recorded in a management server 11. Lists of DB data information needed to be open stored in DB servers 15-17 are recorded on the data table. In addition, security data for each DB server is accumulated and an authentication table 33 for user authentication is formed by the management server 11. When a user inputs a user ID and a password from a terminal 21, the management server 11 checks a reference authority of the user based on the authentication table, and then displays a list of DB data the user is allowed to refer on the display. The user can refer desired DB data by selecting the DB data from the list. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a management server for a distributed database system, and more particularly to the present invention, in which all registered data can be stored by simply connecting the data of a database distributed on a network to the management server. The present invention relates to a management server for a distributed database system that can be referred to.

[0002]

2. Description of the Related Art A distributed database system in which a plurality of servers and a plurality of terminals are connected via a network, and data of a database (hereinafter referred to as DB) distributed and arranged in a plurality of servers can be referred to from the terminals. Are known. In the above system, in order for the user to refer to the data in the DB distributed on the network from the terminal, each user connects to the DB and refers to the data in each server. Moreover, the administrator has set the reference function for each server.

[0003]

DISCLOSURE OF THE INVENTION The conventional distributed database system has the following problems as described above. (1) The user needs to connect to the DB for each server to refer to the data, and each time he / she connects to the server, a security authentication procedure such as inputting a password is required, which makes the operation complicated. there were. (2) The distributed database administrator must set the data reference function for each server.
All servers needed to be revised. Especially, the setting of the reference of the data of the DB across the servers was troublesome. The present invention has been made in view of the above circumstances, and an object of the present invention is to collectively manage DB data distributed to a plurality of servers so that a user can easily refer to a database and a database administrator. Is to reduce the workload.

[0004]

In order to solve the above problems, according to the present invention, as shown in FIG. 1, management is performed so that DB data on DB servers 15 to 17 distributed on a network can be referred to. Server 11 is provided on the network. Then, the management server 11 is provided with a table (view) for registering a list of data of the DB servers 15 to 17 (the data list table 32 of FIG. 1), and the DB to be disclosed by each of the DB servers 15 to 17 is provided in the table. Register data information. Further, the security data of each DB server is collected, and the management server 11 creates the authentication table 33 for user authentication. By accessing the management server 11 from the terminal 21 and referring to the data list table (view) 32, the user can know the published DB data. Further, when the user ID and password of the user are input from the terminal, the management server 11 authenticates the reference authority of the user by the authentication table, and the DB data that the user can reference by the data list table 32. Display a list on the terminal screen. The user can refer to desired data by selecting the DB data to be referred from the list. Specified items and conditions can be registered in the data list table (view) 32 at the same time. This allows you to hide information you don't want to reveal. Further, it is also possible to connect a plurality of DB data distributedly arranged in the DB servers 15 to 17 and display them as one DB data. Further, by regularly collecting security data such as user IDs and passwords from each DB server and creating an authentication table in the management server 11, it is possible to constantly update the security data. As described above, in the present invention, the management server is provided, the management server authenticates the user, and the DB data distributed and arranged in the DB server can be referred to. By simply connecting to the management server, the distributed DB data can be referenced, and the operability can be remarkably improved as compared with the related art. Further, the administrator can respond to the user's reference request by simply registering the DB data that can be disclosed on the network in the management server, and can also refer to the data of the DB across the servers. The setting is easy, and the workload of the administrator can be reduced compared to the conventional method. Furthermore, since the DB of the DB server is not directly referenced, it is possible to protect the DB data that you do not want to disclose and to strengthen security.

[0005]

1 is a diagram showing a configuration example of a distributed database system to which the present invention is applied. In the figure, 11, 15 to 17 are servers connected to the terminal 21 via the network 20, 11 is a management server, and 15 to 17 are DB servers each having a DB. The management server 11 includes a database 31 for collectively managing the data of the DB servers 15 to 17, and the database 31 includes a data list table 32,
An authentication table 33 that stores authentication data for authenticating a user and a log collection table 34 that stores a user log of the user are provided. Here, the data list table 32 is a table for referring to the data stored in each DB of the DB servers 15 to 17, and is a so-called definition structure (view) for referring to each DB data list. . Reference numeral 21 denotes a terminal, and the user connects to the management server 11 from the terminal 21 via the Web and refers to the data of the DB servers 15 to 17 via the management server 11.

The management server 11 periodically sends the D
The security data defining the reference authority is acquired from the B servers 15 to 17, and the authentication table 33 defining the reference authority of the data on each server is generated. Further, the management server 11 has a DB that each DB server 15 to 17 has in advance.
The data list table 32 (view) is generated based on the data. As a result, by accessing the management server 11, it becomes possible to refer to the list of DB data of each DB server 15 to 17, and to connect the DB data distributed and arranged in the DB servers 15 to 17, It can be referred to as one data. When there is a reference request from the terminal 21 to the management server 11, the management server 11 authenticates the user using the authentication table 33, and then uses the data list table 32 to display a data list that the user can refer to the terminal 21. indicate. Then, in response to the request from the user, the data that the user wants to reference is extracted from each of the DB servers 15 to 17 and displayed on the terminal 21. Along with this, the reference log information of the user is stored in the log collection table 34. Log collection table 3
By providing 4 and collecting log information, user's DB
It is possible to understand the usage status of. The data list display and the reference data display on the terminal 21 are performed, for example, via the home page of the management server 11.

2 and 3 are views for explaining the collection of the authentication data by the management server 11, FIG. 2 shows an outline of the data collection, and FIG. 3 shows the details of each table. 2 and 3, D1 to D3 are DB servers 15 to 1, respectively.
7 is a DB system, and 11 is the management server described above. In the management server 11, each DB server 15-
A data list table (view) D10 (the data list table 32) for referring to the data of 17 is registered, and definition 1 (D5) that defines the DB name of each system D1 to D3, the user ID and the user ID. The definition 2 (D6) defining the reference authority is registered. Data list table D
10, the system name, server name,
The DB name, the table name, the URL of the attached file that is the reference destination of the detailed information, the update date, etc. are registered. Also, definition 1
A system name and a DB name are registered in (D5), and a user ID, a referable DB, a table, a flag (described later), and the like are registered in Definition 2 (D6). And the management server 1
1 starts the collection system 11a at regular intervals and, based on the definitions 1 and 2 above, sets authentication 1 (D8) and authentication 2 (D9) (authentication table 33 described above), which are data for user authentication. Generate automatically.

That is, the location of the authentication table of each system is confirmed from definition 1 and each system D1 to D3
Authentication 1 in which system authentication tables D1 to D3 (D3 is omitted in FIG. 3) storing user names, passwords, referable DBs, tables, etc. are acquired and user IDs, passwords, categories, etc. are registered. (D8), the classification, the DB name that can be referred to, the table, and the authentication 2 (D9) in which the flag (described later) is registered are automatically generated (the authentication table 33 described above). Definition 2 (D6) and authentication 2 (D9)
By comparison, the person who is registered in Definition 2 (D6) rewrites the data of Authentication 2 (D9). At that time, the authentication data can be changed by adding a user name and the like. If the flag of definition 2 (D6) is turned on as shown in FIG. 3, the user having the user ID can refer to the data. For example, when it is necessary for the public server administrator or the like to be able to refer to all data for system confirmation, the DB name is ALL and the flag is ON, as shown in FIG. If you do not want the user to refer to the data, set the above flag to OF.
Set to F. Then, when the user inputs the authentication user ID for data reference, the management server 11 inputs the input authentication user ID, password, and authentication 1 (D
8), authentication 2 (D9), matching the data list table D10, confirming the DB and the table that can be referred to, and displaying the DB and the table that can be referred to on the user's terminal 21 via the homepage HP as described later. To do.

FIG. 4 is a flowchart showing the preprocessing by the management server 11. The preprocessing in the management server 11 will be described below with reference to FIG. Note that the flow A shows pre-processing performed in advance by the management server 11,
Flow B shows the pre-processing performed regularly (for example, every day). (1) Pre-processing (Flow A) (i) First, a data list table for referring to data of each server is defined (step S11). (ii) Register definition 1 (D5) and definition 2 (D6) for management (step S12). (iii) A referenceable data list table is created (step S13). (2) Pre-processing: Daily (Flow B) (i) Security data D1 of each server based on Definition 1
Confirm the location of D3 (step S15). (ii) Security data D1 of each DB server 15-17
~ D3 is read (step S16). (iii) Authentication 1 and authentication 2 (D8, D9) are created from the security data acquired from each DB server 15-17 (step S17). (iv) As shown by the arrow in FIG. 3, as shown by D6 → D9,
User individual setting information is added (step S18).

FIG. 5 is a flowchart showing the processing of the management server 11 when a DB data reference request is issued from the terminal 21 to the management server 11, and the management server 11 performs the following processing. (i) When there is a reference request from the terminal, the management server displays all the published data on the terminal 21 according to the data list table (step S21). (ii) When the user ID / password is entered from the terminal,
Receive user ID / password (step S2)
2). (iii) Input user ID / password and authentication 1 (D
8) and the authentication check is performed (step S2).
3). If the user ID / password input for authentication 1 (D8) is not registered, the process ends. Otherwise go to (iv). (iv) Authenticated user ID / password and authentication 1 (D
8), authentication 2 (D9), and a data list table D10 are searched for data that can be referenced by the user (authenticator) (step S24). (v) Display data that the authenticator can refer to on the screen of the authenticator's terminal (step S25). (vi) When the authenticator selects the data that he / she wants to refer to, the management server receives the data for which this reference request has been made (step S26). (vii) The management server requests each DB server to extract the requested data (step S27). (viii) The data extracted by each DB server is displayed on the screen of the terminal of the authenticator (step S28). (ix) The reference log is fetched and stored in the log collection table (step S29).

6 to 11 are views for explaining the operation procedure when the terminal 21 requests the reference of data.
The operation procedure of this embodiment will be described with reference to FIG. It should be noted that in the present embodiment, the management server 1 is managed from the terminal 21.
The user accesses the homepage HP of No. 1 to refer to the data, and if the terminal is equipped with a browser, the DB data of the DB server can be referred to. However, Ex
In order to refer to data in cel (trademark of Microsoft Corporation) format, the corresponding application must be installed. (A) When the search system of this embodiment is activated, a menu screen is displayed as shown in FIG. On the menu screen, selection of login / logout for referring to data (1), list of all data that can be referred (2), etc. are displayed. The system name, database name, table name, and presence / absence of detailed information are displayed in a list of all data. When the detailed information is referred to, the corresponding file is clicked by clicking the corresponding part (see FIG. 3). (See D10)
The detailed information of the data described in can be referred to.

(B) On the menu screen, login /
When logout is selected, the authentication screen shown in FIG. 7 is displayed. When logging in, enter the user ID and password in (1) on the authentication screen. (C) When the user ID and password are entered, the user authentication process is performed, and as shown in FIG. 8, a data list (1) that the user can refer to is displayed. On this screen, the user selects the data they want to refer to by clicking the search button (2). (D) When the user selects the data to be referenced on the screen of FIG. 8, the data reference setting screen shown in FIG. 9 is displayed. The user can set the data extraction conditions, display items, etc. in (1) of this screen. Also, in (2), tabular format, C
It is possible to select the display format of the extracted data such as SV format, CSV alignment format, and import into a spreadsheet. Furthermore, the number of extractions can be confirmed by selecting (3) Confirmation of number of extractions. (E) When the data extraction is selected on the screen of FIG. 8, the extracted data is displayed on the terminal screen. For example, the CS
When the V alignment format is selected, as shown in FIG.
The data is displayed in the SV format, and when the import format to the spreadsheet is selected, the data extracted in the tabular format is displayed as shown in FIG.

In the above description, the case where the home page of the management server is accessed and the data is referred to by the browser of the terminal has been described. However, Excel (Mi
Start a spreadsheet such as crosoft's trademark),
Access the management server from the spreadsheet and
You may make it refer to B data. The screens displayed on the terminal in this case are the same as those in FIGS. 6 to 11. Alternatively, the management server may be accessed to display the DB of each DB server, the DB of the DB server to be referred to may be selected on the screen, and the data to be referred to may be displayed on the terminal.

(Supplementary Note 1) A management server for managing data on a plurality of servers distributed on a network, wherein the management server registers a list of data that can be disclosed on the plurality of servers. Table and an authentication table that defines the data reference authority on each server. When a terminal requests a reference to the data on the multiple servers on the network via the network, the authentication table A distributed database system characterized by authenticating a user's authority and displaying, on the terminal, a data list that can be referred to by the user, out of the data list registered in the above table, based on the user's reference authority. Management server in. (Supplementary note 2) The management server in the distributed database according to supplementary note 1, wherein security data defining reference authority is acquired from each server on the network to generate the authentication table. (Supplementary note 3) A data management method for collectively managing data on a plurality of servers distributed on a network by a management server, wherein data that can be published on the plurality of servers in a table of the management server. In addition to registering the list of the above, the management server collects the security data on each server on the network, generates the authentication table that defines the reference authority of the user, and from the terminal to the network via the network. When there is a request to refer to the data on the above multiple servers, the authorization of the user is authenticated by the authentication table, and based on the referral authority of the user, the relevant data in the data list registered in the table is used. A data management method in a distributed database system, wherein a data list that can be referred to by a person is displayed on a terminal. (Supplementary Note 4) The distributed server system according to Supplementary note 3, wherein the management server periodically collects security data on each server on the network and generates an authentication table defining the reference authority of the user. Data management method in Japan. (Supplementary note 5) A distributed database system for referring to data on a plurality of servers distributed on a network from terminals via the network, wherein a management server is installed on the network, and the management server is installed on the management server. , A list of openable data on the plurality of servers and a table in which the server name in which the data is placed are registered is provided, and the management server requests a reference request of data on the server on the network from the terminal. When there is, a distributed database system, which refers to the table and displays a list of data that can be referred to by the user on the terminal. (Supplementary note 6) A program placed on a management server for managing data on a plurality of servers distributed on a network, wherein the program defines reference authority from each server on the network. There was a process to obtain security data and generate an authentication table that defines the data reference authority on each server, and a request to reference data on the multiple servers on the network from the terminal via the network. At this time, a process of authenticating the user's authority based on the authentication table and displaying a list of data that can be referred to by the user among the open data on the plurality of servers on the terminal based on the user's reference authority. A management program that causes the management server to execute.

[0015]

As described above, in the present invention,
The following effects can be obtained. (1) Since the management server is provided, the management server authenticates the user, and the DB data distributed and arranged in the DB server can be referred to, the user connects to the management server. Only by doing so, it is possible to refer to the distributed DB data, and it is possible to remarkably improve the operability as compared with the related art. (2) The administrator can respond to the user's reference request by simply registering the DB data that can be disclosed on the network in the management server, and the DB that spans the servers
Setting of data reference is also easy, and the work amount of the administrator can be reduced as compared with the conventional method. (3) Since the DB of the DB server is not directly referenced, it is possible to protect the DB data that you do not want to disclose and to strengthen security. (4) By regularly collecting security data from each DB server and creating authentication data by the management server, the security data can be constantly updated.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration example of a distributed database system which is a target of the present invention.

FIG. 2 is a diagram illustrating collection of authentication data by a management server.

FIG. 3 is a diagram showing details of each table of the management server.

FIG. 4 is a flowchart showing preprocessing by the management server.

FIG. 5 is a flowchart showing processing of the management server when a DB data reference request is made.

FIG. 6 is a diagram (1) illustrating an operation procedure when making a data reference request.

FIG. 7 is a diagram (2) illustrating an operation procedure when making a data reference request.

FIG. 8 is a diagram (3) illustrating an operation procedure when making a data reference request.

FIG. 9 is a diagram (4) illustrating an operation procedure when making a data reference request.

FIG. 10 is a diagram (5) illustrating an operation procedure when making a data reference request.

FIG. 11 is a diagram (6) illustrating an operation procedure when making a data reference request.

[Explanation of symbols]

11 Management server 15-17 DB server 21 terminals 32 data list table 33 Authentication table 34 Log collection table

   ─────────────────────────────────────────────────── ─── Continued front page    F-term (reference) 5B017 AA03 BA06 BB06 CA16                 5B075 KK02 KK03                 5B082 EA11 GA13                 5B085 AE01 BA06 BG03 BG07

Claims (3)

[Claims] 1. A management server for managing data on a plurality of servers distributed on a network, wherein the management server registers a list of openable data on the plurality of servers. And an authentication table that defines data reference authority on each server. When a terminal requests a data reference on the multiple servers on the network via the network,
The above-mentioned authentication table is used to authenticate the user's authority, and based on the user's reference authority, the data list that can be referred to by the user among the data lists registered in the table is displayed on the terminal. Management server for distributed database system. 2. The management server in the distributed database according to claim 1, wherein security data defining reference authority is acquired from each server on the network to generate the authentication table. 3. A program placed on a management server for managing data on a plurality of servers distributed on a network, wherein the program defines reference authority from each server on the network. There is a process of acquiring the security data that has been obtained and generating an authentication table that defines the data reference authority on each server, and a request to reference the data on the multiple servers on the network from the terminal via the network. When
The process of authenticating the user's authority by the authentication table and displaying a list of data that can be referred to by the user on the terminal among the openable data on the plurality of servers based on the user's reference authority is described above. A management program that is executed by a management server.