JP2003330788A - Communication proxy device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a communication proxy device capable of realizing the access to latest information data at a high speed, to an access request to information data, while utilizing a cache without changing a server device or client device, and realizing a high-speed access control by a simple instruction. <P>SOLUTION: This communication proxy device additionally has an independent action control means for conditionally instructing the execution of an action by clearly instructing and designating, to a specified information data, the identification information of this information data, or adding an independent action tag together with the information data to the response data from another device; and a distributed access management means for performing the access record to the specified information data by use of this means, executing the instructed processing to a communication proxy that accessed the information data, and collecting and returning the execution result. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

TECHNICAL FIELD The present invention relates to a WWW (World Widow).
e Web), etc., in a network system in which information data on a server device is accessed from a client device connected by a communication line, a communication proxy device that relays communication between the server device and the client device, and the communication proxy device Regarding the system used.

[0002]

2. Description of the Related Art A conventional communication system in which a communication proxy device for relaying communication is installed between a WWW server device and a client device to speed up access from the client device to WWW data which is information data on the server device Regarding proxy technology, RFC20 issued in January 1997
68 1 of "Hypertext Transfer Protocol--HTTP / 1.1"
It is described from page 1 to page 13.

In this prior art, a communication proxy device is installed between the server device and the client device to relay the communication between both devices, and the communication proxy device holds and manages the relayed information data as a cache. Realizes high-speed access from the client device. That is, for the access request from the client device to the information data which the communication proxy device once holds on behalf of the information data as a cache and already holds the latest version as a cache, the access request should be relayed. Instead, by returning the cache, it is possible to concentrate access to the server device from a plurality of client devices and speed up access from each client device.

In addition, "XML" issued by Nikkei Shimbun in 1998
"Introduction", pp. 36 to 47, describes a technique for efficiently accessing information data on a server device, which is regularly updated, from a client device.

According to the conventional technique, cache expiration date information is added to the information data distributed from the server device as attribute information of the information data and transmitted to the client device,
Based on the cache expiration date information, the client device
The client device makes it possible to acquire the latest information data by repeatedly re-collecting the latest information data.

[0006]

The conventional technique using the above-mentioned conventional communication proxy device has an advantage that access to the server device can be concentrated and access speed can be increased by making good use of the cache of the communication proxy device.

On the other hand, on the other hand, since access requests are processed by each communication proxy device using the cache, only a part of access requests are transmitted to the server device, and which client device accesses each information data. There is a problem that it is impossible to count whether there was a request.

Further, when checking the access authority, there is a problem that the access request must be always transferred to the server apparatus and the server apparatus should be requested to check the access even if the cache apparatus has a cache.

Further, for information data whose update frequency cannot be predicted in advance, when the cache is used, there is a problem that the above-mentioned conventional technique in which the client device periodically requests the latest information data cannot be used well. Although it is possible to use the cache of each communication proxy device forcibly by appropriately specifying the cache expiration date information for the information data whose update frequency cannot be predicted,
The information data on the server device side and the cache held in each communication proxy device become inconsistent, and the client device may reference old information data for a relatively long time. Therefore, in order to maintain consistency with the information data on the server device at a short time interval while using the cache of the communication proxy device, when updating the information data on the server device, it is retained in each communication proxy device. It is necessary to update all the corresponding caches that have been

In some conventional systems, a server device specifies a destination, transfers information data to a client device or a communication proxy device, and provides means for updating the cache of each communication proxy device. There is also an example of trying to solve the cache coherency problem by using. However, according to the present solution, it is necessary to serially specify the destination communication proxy devices one by one in consideration of the configuration of the communication proxy device to send the data, and the communication that does not have the corresponding cache is held. There is a problem that the latest information data may be sent to the proxy device.

Some conventional communication proxy devices use the access log for each information data to solve the above-mentioned access record aggregation and cache update problems. That is, by referring to the access log held in each communication proxy device and extracting access to specific information data, access information to specific information data is totaled. Further, using the totalized result, the latest information data is sent only to the communication proxy device that actually accessed the information data, and the cache is updated.

However, in this solution, there is no means for limiting the information data to be recorded in the access log.
Each communication proxy device needs to hold a huge access log, and even if there is a means to limit the information data to be recorded in the access log, individual settings are required for each communication proxy device. There was a problem that it could not be set easily. Further, in the above aggregation processing, since the access log held in each communication proxy device is sequentially acquired from one location and processed, the processing becomes serial, and the same communication path can be passed many times when acquiring each access log. Therefore, there is a problem that the traffic of the network also increases and the processing takes time.

The same applies to the checking of the access authority, and in order not to issue a check request to the server device, it is necessary to set each communication proxy device.

[0014]

The above-mentioned problems of the prior art can be solved by adding the following two means to the communication proxy device. ◆ First, as a means for enabling each communication proxy device to instruct each communication proxy device to perform various kinds of processing such as access recording limited to specific information data,
Individual action control means is provided. The individual action control means is composed of an individual action storage means, an individual action instruction means, an individual action execution means, and an individual action tag attaching / detaching means. The individual action storage means holds individual action definition information indicating a correspondence between the action to be executed for specific information data, action information indicating the action execution condition and parameters, and the information data.

The individual action instructing means provides the function of setting the individual action definition information in the individual action storing means by the following two methods. One is that the operator or the like explicitly instructs the individual action instructing means to identify the identification information of the target information data and the action information to be executed with respect to the information data, and set it in the individual action storing means. Is the way to do it. The other is that the individual action instruction means checks the reply data received by the communication proxy device, and the individual action tag indicating the action information to be executed for the information data is added to the reply data. Is detected, the individual action definition information of the information data is set based on the action information.

The individual action execution means executes the individual action designated by the designated condition with respect to the information data designated by the individual action definition information.

The individual action tag attachment / detachment means, when transmitting the information data received by the communication proxy device and the additional data received together with the information data from the communication proxy device, sets the individual action tag under certain conditions. Processing for adding or removing the added individual action tag is performed. The individual action tag is added, for example, when the information data specified by the individual action definition information set by receiving the identification information of the information data and the explicit specification of the action information is transmitted. The individual action tag is deleted, for example, when the information data with the individual action tag is transmitted to the client device.
It should be noted that the judgment as to whether or not the individual action definition information is set by receiving the explicit designation of the identification information of the information data and the action information is performed by receiving the explicit designation of the identification information of the target information data and the action information. Realized by providing action type distinguishing information in the individual action definition information that distinguishes whether the individual action definition information is set or the individual action definition information is set by the individual action tag added to the information data, The action type discrimination information is set when the individual action instructing means sets the individual action definition information of each information data in the action storing means.

Next, as a means for hierarchically executing an access record totaling process, a cache updating process, etc., for each appropriate communication proxy device,
Provide distributed access management means. ◆ The distributed access management means includes an access record instruction means,
The access recording means, the access recording storage means, and the hierarchical execution means.

The access record instructing means instructs the communication proxy device to perform access record in response to an access request to the specific information data. The access record instruction means is realized by using the individual action control means, for example. When the communication proxy device processes an access request to the information data for which access recording is instructed by the access record instructing device, the access recording device records the access record of the device or user who has issued the request. The access record storage means holds the access record recorded by the access recording means. The hierarchization executing means receives a certain processing request instruction for certain specific information data, executes the designated processing request for the designated information data, and further records an access record to the designated information data. It is obtained from the lower-level communication proxy device after propagating the processing request instruction to the lower-level communication proxy device recorded in the access record storage means of the communication proxy device and hierarchically executing the processing request. The execution result and the execution result in the local communication proxy device are collected and returned.

Further, in order to realize the distributed check in each communication proxy device of the access right, the distributed access management means is further provided with an access check means. The above problem is solved as follows by using the communication proxy device having the action control means and the distributed access management means.

Regarding the problem of totaling access records, first, with respect to the individual action instructing means of the edge communication proxy device on the server device side, which is directly connected to the server device via the communication path without using another communication proxy device, The operator specifies the identification information of the information data to be recorded as an access record, and instructs the access recording means to be executed as action information for the information data at a certain timing of an access request process for the information data. To do. According to the instruction, in the communication proxy device at the edge on the server device side, the individual action execution means executes the action according to the instruction, and the access recording is performed only when the access request is made to the information data.

Further, in the communication proxy device at the edge of the server device, the individual action tag attaching / detaching means is used.
When the reply data received from the server device is sent to another communication proxy device, the individual action tag instructing the execution of the access recording means is added at the time of processing the access request to the information data and sent. Therefore, since the communication proxy device located on the client device side from the edge communication proxy device on the server device side receives the information data with the individual action tag, in each communication proxy device, similarly, the information data Access recording is performed only when there is an access request to.

Finally, in the client-side edge communication proxy device directly connected to the client device via the communication path, when the reply data received by the communication proxy device is transmitted to the client device, the individual action tag is used. The attachment / detachment means removes the added individual action tag and transmits it.

That is, the access record limited to the specific information data can be performed in each communication proxy device without changing the server device and the client device only by the instruction to the edge communication proxy on the server device side.

That is, the communication proxy system according to the present invention is a network system in which information data held in a server device is accessed from a client device via a communication line, and a device which relays communication between the server device and the client device on behalf of the client device. In addition, one or more of the above proxy devices are installed between a server device and a client device, and a client directly connected to a client device or a server device via a communication path without using another communication proxy device. The communication proxy device at the edge of the server side or the server device side is configured by the communication proxy device having the individual action tag attaching / detaching means.

Further, in the communication proxy method according to the present invention, in the communication proxy system, in the communication proxy device at the edge on the server device side, the information proxy device receives the information data received from the server device together with the information data. When the additional data received in step S1 is transmitted to another communication proxy device, if the individual action definition information by the identification information of the information data and the action information is explicitly stored in the action storage means, The individual action tag indicating the corresponding action information is added to the information data and transmitted, and the communication proxy device at the edge of the client device side receives the information data and the information data received from the server device or another communication proxy device. When transmitting the additional data received together to the client device, If there is a separate action tag in the additional data, the communication proxy device is characterized in that the transmitting remove individual specific action tags.

Further, in the communication proxy system and the communication proxy method according to the present invention, in the communication proxy system, each communication proxy device is constituted by a communication proxy device having both the individual action control means and the distributed access management means. , The identification information of the target information data is explicitly specified to the individual action instructing means of the communication proxy device at the edge on the server device side, and the individual action to be executed for the information data is instructed in advance. ,
The information device is accessed from the client device for a certain period of time, and thereafter, a certain process for the information data is instructed to the layering execution means of the communication proxy device at the edge of the server device, and the instructed process is executed. It is characterized in that the information proxy is hierarchically executed with respect to the communication proxy device group that actually accessed the information data.

Further, in the communication proxy system and the communication proxy method according to the present invention, the individual action definition information of a certain information data is individually processed as the processing for instructing the communication proxy device at the edge of the server device to execute the hierarchization. Instructing an individual action deletion process to be deleted from the action storage means, and deleting the individual action definition information of the information data held in the individual action storage means of each communication proxy device that has accessed the information data. It is a thing.

Further, in the communication proxy system and the communication proxy method according to the present invention, an access record of certain information data is stored as the access record storage as a process of instructing the communication proxy device at the edge of the server device to execute hierarchization. Instruct access record deletion processing to be deleted from the means,
It is characterized in that the access record of the information data stored in the access record storage means of each communication proxy device that has accessed the information data is deleted.

As for the access record totaling process, the access record totaling process of the target information data is instructed to the hierarchical execution means of the communication proxy device at the edge of the server device, and each access to the information data is performed. The access record relating to the information data held in the communication proxy device can be totaled. The communication proxy device that has received the aggregation processing request acquires an access record of the specified information data held by the communication proxy device, and the access record to the information data is recorded in the communication proxy device. The aggregation process is propagated to the lower-level communication proxy device, and the aggregation process is executed hierarchically. Then, the aggregation result obtained from the lower-level communication proxy device and the aggregation result of the own communication proxy device are collected and returned as the execution result of the own communication proxy device, and finally the edge communication proxy device on the server device side. From, information on all access records of the target information data can be obtained.

That is, the communication surrogate method according to the present invention is
As an individual action for the target information data, the access record using the access recording means is instructed in advance to the individual action instruction means of the communication proxy device on the server device side, and the access to the information data from the client device is executed for a certain period. After that, as a process of instructing the layering execution means of the communication proxy device at the edge of the server device,
It is characterized in that an access record totaling process for the information data is instructed and all access records for the information data are totaled.

Regarding the above cache update problem, first, the access record to the target information data is instructed as an action to the individual action instructing means of the communication proxy device at the edge of the server device, and the information of the server device is stored. Immediately after the data is updated, the re-acquisition process of the information data is instructed to the layering execution means of the communication proxy device at the same edge to solve the problem. That is, by a re-acquisition processing instruction to the communication proxy device of the same edge, first, the communication proxy device of the edge requests the server device to re-acquire the target information data, and the cache of the communication proxy device is updated. By the layering executing function of the layering executing means, reacquisition processing requests are propagated to the communication proxy devices that have accessed the information data one after another, and the cache of each communication proxy device is updated to the latest data hierarchically. To be done.

That is, in the communication proxy system and the communication proxy method according to the present invention,
Further, the access request proxy unit has a caching unit for managing information data acquired from a server device or another communication proxy device and additional data of the information data as a cache, and the access request proxy unit of the communication proxy device is Receives a request for access to the information data from the client device or another communication proxy device, and first checks the cache held and managed by the caching means for the access request, and under certain conditions, the server device Alternatively, without issuing a request to another communication proxy device, the information already stored as a cache is used as reply data for the access request, and under other conditions, the server device or another communication proxy device is requested to send the information data and the information data. Acquire additional data of information data as reply data Then, the individual action instruction means is used to check the individual action tag included in the reply data to set the individual action definition information, and further, if necessary, the caching data is used to collect the reply data. Keep it as a cache, and
In the process of the above processing, the individual action executing means is used to execute a necessary individual action for the information data at an appropriate timing, and further, the individual action tag attaching / detaching means is used to add the individual action tag to the reply data. Is attached and detached, and the data obtained as a result is returned to the request source.

Further, in the communication surrogate method according to the present invention, as an individual action for the target information data, an access record using the access recording means is previously instructed to the individual action instructing means of the communication proxy device on the server side, After the access to the information data from the client device is executed for a certain period, reacquisition of the information data and the attribute information of the information data is performed as a process for instructing the layering execution means of the communication proxy device at the edge of the server device. Instructing each of the communication proxy devices in which the access record to the information data is recorded to reacquire the information data and the attribute information of the information data hierarchically, It is characterized by updating the cache.

Further, in the communication proxy method according to the present invention, each communication proxy device is provided with an information data reacquisition means, and the server executes the schedule execution of the reacquisition means for the information data as an individual action for the target information data. Each communication proxy device that has instructed the individual action instruction means of the communication proxy device on the device side and has accessed the information data automatically reacquires the information data and the attribute information of the information data according to the schedule, and the communication proxy The cache for the information data of the device is updated.

As for the access authority distributed check, similarly to the access record, the action information for executing the access check means at the time of processing the access request is set by using the information of the user, the group, the device, etc. which are permitted to access as the action parameters. It can be realized by specifying as an individual action. In other words, the identification information of the target information data and the action information are explicitly designated and execution of an individual action for the information data is instructed in advance to the communication proxy device at the edge of the server device, or the action information is This can be done by adding the individual action tag to the information data on the server device in advance.

That is, the communication surrogate method according to the present invention is
Action parameter information representing a parameter for the individual action is provided in the individual action definition information, and further, as a processing means to execute as the individual action, the action parameter for the access to the information data in which the action is defined. According to the access-permitted person information specified in the information, each communication proxy device is provided with access check means for permitting access only from a specific user, device, or a group of users or devices, and the access check means is executed. Action information that should be an individual action to be performed, and further, action information in which the access-permitted subject information is the action parameter information is added in advance to the specific information data returned from the server device as an individual action tag, or the action information is Target Together with the identification information of the information data,
It is characterized in that the individual action instructing means of the communication proxy device at the edge of the server device is explicitly instructed to restrict access to the information data.

In the communication proxy system and the communication proxy method according to the present invention, instead of instructing the communication proxy device at the edge on the server side to the individual action for the specific information data in advance, the individual action tag is added to the information data. Prepare data in which an individual action tag is added to information data using a tool for attaching, and hold the data with the individual action tag in the server device, and the server device responds to the access request with the individual action tag. The data is returned as reply data to the access request.

Also, the communication proxy device according to the present invention is
The individual action instruction means includes means for holding, as a processing program, designation of an action to be executed for specific information data, and the individual action execution means uses the held processing program as an individual action for the information data. It is characterized by comprising means for executing.

Further, the communication proxy device includes program loading means for loading a processing program,
It has a program storage means for storing the loaded program and an action program correspondence table holding a correspondence relationship between the program entry address and the action identification information, and the program loading means specifies the action identification information and the program information to be loaded. And receiving means for storing the program information in the program storage means, means for setting a correspondence relationship between the entry address of the stored program information and designated action identification information in the action program correspondence table,
The individual action control means is characterized by executing the corresponding individual action program using the information of the set action program correspondence table.

Further, the communication proxy system and the communication proxy method according to the present invention use the communication proxy device to instruct the program loading means to specify a processing program and action identification information of an action to be executed as an individual action. The action processing program is loaded in advance in a form associated with the action identification information, the action identification information is instructed to the individual action instruction means, and an individual action is executed on the target information data. It is a feature.

[0042]

BEST MODE FOR CARRYING OUT THE INVENTION Before describing the embodiments of the present invention, the parts on which the present invention is based will be described with reference to FIGS. 3 is a logical configuration diagram of a network system related to the communication proxy device of the present invention. Server device 1 (1
a, 1b) and the client device 2 (2a to 2d) are 1
Via one or more communication proxy devices 3 (3a-3d),
It is connected by the communication path 4. The communication path 4 is a logical communication path for transmitting and receiving data between the devices connected by the communication path 4, and one communication path 4 is a plurality of physical devices via one or more router devices or the like. May be realized on a separate communication line, or conversely, a plurality of different communication paths 4 may be realized on one physical communication line. The server device 1 has an external storage device 13, and the external storage device 13
Includes one or more information data 50 and the information data 50.
The attribute information 51 is stored.

FIG. 4 shows an example of information stored in the external storage device 13. External storage device 1 of server device 1
3, each information data 50 is stored together with update date / time information 52 of the information data 50, attribute information 51 such as cacheability information 53 and cache expiration date information 54, and information such as file name. The data identifier 58 manages each information data 50 in the server device 1 so that they can be distinguished. Further, the server device 1 has an access request processing means 21. The access request processing means 21 receives an access request 40 for each information data 50 from the client device 2 or the communication proxy device 3 via the communication path 4, and returns a response including the corresponding information data 50 to the access request 40. A function of returning the data 61 via the communication path 4 is provided.

FIG. 5 shows a structure of the access request 40. The access request 40 includes, for example, the accessor information 4
3, client / proxy discrimination information 44, request type identification information 45, information data identification information 41, access request issuer information 42, and the like. The accessor information 43 represents the authentication information such as the identification information and the password of the client device 2 that has issued the access request 40 or the communication proxy device 3 that has requested by the proxy. The client / proxy distinction information 44 indicates whether the access request 40 is a request from the client device 2 or a proxy request from the communication proxy device 3. The request type identification information 45 represents the type of access request, such as all data access or partial data access. The information data identification information 41 is information for identifying the access target information data 50, and includes the identification information of the target server device 1 and the information data 5 stored in the server device 1.
This is information that is combined with the information of the information data identifier 58 corresponding to 0. The access request issuer information 42 represents the authentication information such as the identification information and password of the user or the client device 2 that issued the access request 40. In the example of the actual Web delivery protocol, the above-mentioned access user is comprehensively composed of the information at the time of setting the communication path 4, the passage information indicating which communication proxy device 3 has been passed through, and the optional authentication information. Information 43, proxy / client distinction information 44, and access request issuer information 42
Information equivalent to is obtained.

Here, a description of the prior art necessary for explaining the embodiment of the present invention will be given with reference to FIGS. 6 to 8.
◆ FIG. 6 shows a structure of the conventional reply data 61. The conventional reply data 61 is, for example, the information data identification information 41.
And the attribute information 51 of the information data 50 and the information data 50
Is included. On the other hand, the client device has access requesting means 22. The access request means 21 receives the information data identification information 41 of the access target information data 50 from the operator of the client device or the like, and responds to the access request 40 for the information data 50 on the server device via the communication path 4. It provides a function of outputting to the communication proxy device and displaying the information data 50 included in the reply data 61 returned from the communication proxy device to the operator.

FIG. 7 shows an example of the configuration of a conventional communication proxy device. The conventional communication proxy device has an access request proxy unit 31 and a caching unit 32. The access request proxy unit 31 sends the information data 50 from the client device or another communication proxy device to the server device.
Access request 40 to the access request 40, the access request 40 is requested by another communication proxy device or server device on behalf of the access request 40, and the request information data 50
And reply data 61 including attribute information 51 of the information data
Is provided and the returned reply data 61 is returned to the request source. Under certain conditions, the access request proxy unit 31 requests the proxy once to obtain the reply data 61.
Are held and managed as a cache 59 using the caching means 32.

According to this cache management, when the access request 40 is received, it is judged that the reply data 61 already held as the cache 59 can be used, instead of always requesting and transferring the access request 40 as a proxy. If it is possible, the access request 40 is not transferred and the cache 5
9 is returned to the request source as the latest reply data 61. The caching means 32 comprises a cache storage means 33 and a cache management means 34. The cache storage means 33 is
Information data 5 acquired by the access request agency 31
Reply data 6 including 0 and attribute information 51 of the information data
It provides a function of holding 1 as the cache 59.
The cache management unit 34 manages the cache 59 held in the cache storage unit 33, enables access to each cache 59 by using the information data identification information 41 corresponding to each information data 50 as a key, and is further limited. A replacement function of the cache 59 is provided in order to realize it under a large storage capacity.

FIG. 8 is a processing flow of the access request proxy means 31 for the access request 40 to the information data 50 from the client device or another communication proxy device in the conventional communication proxy device.

First, the access request proxy unit 31 of the communication proxy device receives an access request 40 for certain information data 50 from the client device or another communication proxy device via the communication path 4 (process 101). Next, the access request proxy unit 31 requests the cache 59 corresponding to the cache management unit 34 by designating the information data identification information 41 given by the access request 40 (process 102). If the corresponding cache 59 exists,
Further, when it can be determined that the cache 59 can be used from the information such as the cache expiration date information 54 of the attribute information 51 of the information data 50 held in the cache,
The cache 59 is used as reply data 61 for the access request 40, and the process jumps to step 106 (step 103).
If the corresponding cache 59 does not exist, or if it cannot be determined whether the cache can be used, the server device or another communication proxy device
The specified access request 40 is transferred, and the reply data 61 including the requested information data 50 and the attribute information 51 of the information data 50 is obtained (process 104). By referring to the attribute information 51 of the information data included in the reply data 61 obtained in the process 104, and if the non-cacheable attribute is not specified in the cacheability information 53, the cache management means 34 is requested to transmit the information. The data 61 is held in the cache storage means 33 as the cache 59 (process 105). Finally, the transmission data 6 obtained in process 103 or process 105
1 is returned to the request source via the communication path 4, and the process ends (process 106).

An embodiment of the present invention will be described below with reference to the drawings. A configuration example of the network system according to the present invention is as shown in FIG. The server device 1 (1a, 1b) and the client device 2 (2a-2d) are connected via a communication path 4 via one or more communication proxy devices 3 (3a-3d). The communication path 4 is a logical communication path for transmitting and receiving data between the devices connected by the communication path 4,
One communication path 4 may be realized on a plurality of physical communication lines via one or more router devices, and conversely, a plurality of different communication paths 4 may be one physical communication line. It may be realized on any communication line.

Each of the server device 1, the client device 2, and the communication proxy device 3 is physically composed of a general information processing device 10, for example. Specifically, as shown in FIG. 2, the general information processing apparatus 10 includes, for example, a processor 11 that executes an information processing program, a memory 12 that stores the information processing program and data that are being executed, and the information processing. An external storage mechanism 13 for semi-permanently storing programs and data, a communication mechanism 14 for providing the above logical communication path 4 on a physical communication line 18 connected to another information processing apparatus, and an operator A bus 17 for exchanging data between an operator input / output mechanism 15 to which input / output means is applied and a timer 16 having a function of providing current time information and activating a process at a regular or specified timing. Configured as a device connected by. The various processing means described below that are provided by the server device 1, the client device 2, and the communication proxy device 3 may be realized by using a special hardware mechanism. To be realized. That is, a program that realizes the function of each processing unit is stored in the memory 12, and the processor 11 executes the program via the bus 17 to realize each processing unit. Further, some storage means in the communication proxy device described below are realized by using a part of the memory 12 or the external storage mechanism 13. Further, instructions to the individual action instruction means 72, the layering execution means 84, and the program loading means 79, which will be described below, are given to the operator input / output mechanism 15 or the communication line 1.
8 via the logical communication path 4 realized by the communication mechanism 14.

The internal configurations of the server device 1 and the client device 2 are, as shown in FIG. 4, in the external storage device 13 of the server device 1 an information data identifier 58 such as a file name.
One or more information data 50 in a form distinguishable by
However, the update date information 52 of the information data 50, the cacheability information 53, and the cache expiration date information 54.
It is stored and managed together with the attribute information 51 such as. The server device 1 also has an access request processing unit 21 that processes an access request 40 to the information data 50 from the client device 2 and the communication proxy device 3. On the other hand, the client device 2 receives the designation of the information data identification information 41 of the information data 50 to be accessed from the operator or the like,
There is an access requesting means 22 for issuing a corresponding access request 40 to the communication proxy device 3. The access request 40
Is composed of the information shown in FIG.

The server device 1 has an external storage mechanism 13,
The external storage device 13 stores one or more pieces of information data 50 and attribute information 51 of the information data 50.
FIG. 4 shows an example of information stored in the external storage device 13. Each piece of information data 50 is stored in the external storage device 13 of the server device 1 as update date information 52 of the information data 50.
And attribute information 51 such as cacheability information 53 and cache expiration date information 54.
The information data identifier 58 such as a file name is managed so that each information data 50 in the server device 1 can be distinguished. Further, the server device 1 has an access request processing means 21. The access request processing means 21 receives an access request 40 for each information data 50 from the client device 2 or the communication proxy device 3 via the communication path 4, and returns a response including the corresponding information data 50 to the access request 40. A function of returning the data 61 via the communication path 4 is provided.

FIG. 1 shows an example of the configuration of the communication proxy device 3 of the present invention. The communication proxy device 3 of the present invention has an individual action control device 70 and a distributed access management device 80 in addition to the access request proxy device 31 and the caching device 32 which the conventional communication proxy device shown in FIG. 7 has.

The access request proxy unit 31 receives an access request 40 to the information data 50 on the server device 1 from the client device 2 or another communication proxy device 3, and in response to the access request 40, the access request 40. 40
To another communication proxy device 3 or the server device 1 as a proxy, and the reply data 61 acquired as a result of the proxy request is
Provide the function to return to the request source. In addition, the access request proxy unit 31 sends the reply data 6 obtained by once requesting the proxy.
1 is retained and managed as the cache 59 by using the caching means 32 under a certain condition. According to this cache management, when the access request 40 is received, it is possible to judge that the reply data 61 already held in the cache 59 can be used instead of always requesting and transferring the access request 40 as a proxy. Does not transfer the access request 40, but returns the cache 59 to the request source as the latest reply data 61.

The access request substituting means 31 of the present invention differs from the prior art in that the individual action control means 70 and the distributed access management means 80 newly provided in the present invention are activated at a certain timing as needed. Details will be described later.

The caching means 32 caches the reply data 61 received from the server device 1 or the communication proxy device 3 so that the access request proxy means 31 can later access the reply data 61 by using the corresponding information data identification information 41 as a key. The means 32 holds and manages the cache 59. Further, in the present invention, there is a case where additional data such as an individual action tag 62 described later is added to the received reply data 61, and the caching means 32 of the present invention caches the additional data together with the additional data. Manage as 59. The individual action control means 70 further comprises an individual action storage means 71, an individual action instruction means 72, an individual action execution means 73, and an individual action tag attachment / detachment means 74.

The individual action storage means 71 holds the individual action definition information 90 defining the action to be executed for the specific information data 50. FIG. 9 shows a configuration example of data stored in the individual action storage means 71. In this embodiment, the individual action storage means 71
Is composed of a table in which each row entry is composed of individual action definition information 90. Individual action definition information 90
Is the information data identification information 4 indicating the target information data 50.
1. Action type distinguishing information 92 indicating the type of action specifying method described later, and action information 93 that is information about an action to be actually executed. Further, as specific information of the action information 93, for example, action identification information 94 for designating or identifying an action to be executed, action condition information 95 indicating an execution condition of the action, and an action parameter which is a parameter at the time of executing the action. 96, action expiration date information 97 of the action information 93, and the like. In the example of the first entry shown in FIG.
Until 10:00 on the 1st of the month // For the access to the information data 50 identified by the server 1a / fa1, the definition that the access record should be executed when the reply data for the access request is transmitted is the information by the operator etc. described later. Indicates that it was set by an explicit instruction using the identification information of the data.

Since it is sometimes desired to execute a plurality of different types of actions on the same information data 50, the table of FIG. 9 shows the same information data identification information 41.
There may be multiple entries with. However, since the explanation becomes complicated, in the explanation of the following process flow, etc.,
The number of entries having the same information data identification information 41 is at most 1.
I will explain as one.

In the embodiment shown in FIG. 9, since the individual action definition information 90 includes the action condition information 95 and the action expiration date information 97, it is possible to specify the condition for executing the action and the expiration date of the action. After the deadline, the individual action definition information 90 can be automatically deleted.

The individual action instructing means 72 has two types of methods, that is, a method in which an operator or the like makes an explicit instruction by using the identification information of the target information data and a method in which an instruction is added to the information data to be transmitted to instruct. A function of setting the individual action definition information 90 in the individual action storage means 71 is provided.

FIG. 10 shows an example of the processing flow performed by the individual action instructing means 72 by an explicit instruction using the target information data identification information by the operator or the like. Details of the processing content are as shown in FIG.

Another method of instructing individual actions is as follows.
In this method, an individual action tag 62 indicating an action of each proxy device 3 with respect to the information data 50 is added to the reply data 61, and the reply data 61 is transmitted and instructed. FIG. 11 shows an example of the structure of the reply data 61 of the present invention. In FIG. 6 of the conventional example, the reply data 61 is composed of the information data identification information 41, the attribute information 51 of the information data 50, the information data 50, etc., but the reply data 61 of the present invention is shown in FIG. As shown, an individual action tag 62 indicating an action in each proxy device 3 is further added as an option. FIG. 12 shows a configuration example of the individual action tag 62. For example, in the Web data transmission / reception protocol HTTP, or in the data description languages HTML and XML that describe Web data, a certain header described in a character string is attached to the data, or the data is described between the header and the trailer. A means for identifying the content of the data by sending is defined, and the reply data 61
Information data 50 and each attribute information 51 of the information data 50
Also, a header and a trailer for identifying each type are attached and described, and data is transmitted and received. Therefore,
The individual action tag 62 is used as the information data 50 and the attribute information 5
As a means for distinguishing from 1, the action tag identification header 68 and the action tag identification trailer 69 for identifying the individual action tag 62 in the same manner as the header and trailer for identifying the information data 50 and the attribute information 51.
The individual action tag 62 is formed by sandwiching the action information 93 between. Specifically, in the embodiment of FIG. 12, the character string <proxy action tag> is used as the action tag identification header 68, and the character string </ proxy action tag> is used as the action tag identification trailer 69. Similarly, each field of the action information 93 is also described by being sandwiched between the corresponding header and trailer character strings.

According to the embodiment shown in FIG. 12, the individual action tag 62 can be described by being mixed with the information data 50 described in XML or the like. In this way, it is possible to store the information data 50 together with the information data 50 in the server device 1 from the beginning.

In FIG. 13, the individual action instruction means 7 is indicated by the individual action tag 62 added to the information data 50.
2 shows an example of a processing flow performed by No. 2. This process is a process that is started when the communication proxy device 3 receives the information data 50 from the server device 1 or another communication proxy device 3. Details of the processing content are as shown in FIG.

In the embodiment shown in FIG. 13, the individual action tag 62 can be added to the information data 50 to instruct the information data. Therefore, by changing the individual action tag 62 to be added in advance, the same information data can be added. However, there is an effect that the action can be changed dynamically. In addition, the individual action definition information 90 dynamically set by the individual action tag 62 is automatically deleted unless the individual action tag 62 is added to the received data. There is an effect that it is possible to dynamically delete and cancel the action execution.

The individual action executing means 73 executes the action in accordance with the instruction of each individual action definition information 90 held in the individual action storing means 71. Specifically, for the period specified by the action expiration date information 97 of each individual action definition information 90, the action identification information 94 is set for the information data 50 specified in the field for the information data identification information 41. The action specified by the action condition information 9
Execute under the conditions specified in 5.

The individual action executing means 73 is used in two ways. One use method is execution of action check for an event. In the usage method,
When a certain event occurs with respect to certain information data 50, the individual action executing means 73 is called with the access request 40 and the event information 98 as parameters. The individual action executing means 73 checks the necessity of executing the action, and if necessary, executes the corresponding action. The parameters for executing the action are the action parameters 97 defined in the access request 40 and the individual action definition information 90. As an example of the event, for example, when it is found that the cache 59 is hit when the access request 40 to the information data 50 is received and the cache 59 can be returned as the reply data 61, and when the reply data 61 is received, the reply is sent. There are times when the data 61 is transmitted and when the reply data 61 is cached.

FIG. 14 shows an example of the process flow of the action check execution process performed by the individual action execution means 73. Details of the processing content are as shown in FIG.

In the embodiment shown in FIG. 14, since the means for processing the event information 98 as a parameter is provided, it is possible to execute an action in response to various events.

Another method of using the individual action executing means 73 is to execute an action check according to a schedule. In this method of use, the individual action execution means 73 is called by the timer 16 or the like at regular or scheduled times.

FIG. 15 shows an example of the initialization process flow for the action check execution process according to the schedule, which is performed by the individual action execution means 73. The processing content is
Since the details are shown in FIG. 15, the description thereof will be omitted.

FIG. 16 shows an example of the process flow of the action check execution process according to the schedule, which is performed by the individual action execution means 73 which is called periodically by the timer interruption according to the above initialization setting. Details of the processing content are as shown in FIG.

In the embodiment of FIGS. 15 and 16, not only periodic execution and schedule execution are possible as conditions for action execution, but also individual action definition information 9
There is an effect that the individual action definition information 90 can be automatically deleted by using the action expiration date information 97 in 0.

The individual action tag attaching / detaching means 74, under a certain condition when transmitting the reply data 61 received by the communication proxy device 3 or the cache 59 of the received reply data 61 from the communication proxy device 3, The processing for adding the individual action tag 62 or removing the added individual action tag 62 is performed.

FIG. 17 shows an example of the processing flow performed by the individual action tag attaching / detaching means 74 when transmitting the reply data 61 from the communication proxy device 3. Details of the processing content are as shown in FIG.

Although the individual action control means 70 has been described above, the distributed access management means 80 which is another addition means of the communication proxy device 3 of the present invention will be described next.

The distributed access management means 80 comprises an access record instruction means 81, an access record means 82, an access record storage means 83, and a layering execution means 84. When the access authority is to be checked in a distributed manner, the distributed access management means 80 further has an access check means 89 as an option.

The access record instructing means 81 is means for instructing the execution of access recording in response to an access request to the specific information data 50. The access record instructing means 81 may be realized in a form having only the function peculiar to the means, but in the embodiment of FIG. 1, the individual action control means 70 having a more general function is provided in the access record instructing means. 8
It is used as 1. That is, as the action identification information 94, the identification information of the access recording means 82 is designated, and as the action condition information 95, it is designated to execute the access recording which is the action when the reply data in response to the access request to the target information data is transmitted. This realizes the access record instruction.

When the communication proxy device 3 processes an access request to the information data 50 for which access recording is instructed by the access record instructing means 81, the access recording means 82, more specifically, the corresponding reply data. When transmitting, the access record of the proxy device 3, the client device 2 or the user who issued the request is recorded. In the embodiment of FIG. 1, since the access record instruction means 81 is realized as an individual action by using the individual action control means 70, the access record means 82 is executed by the individual action execution means 73. Of the parameters passed from the individual action execution means 73, the access recording means 82 includes the information data identification information 41 included in the access request 40 parameters, the access request issuer information 42, the accessor information 43, and the client / proxy discrimination information 44.
To store these pieces of information in the access record storage means 83.

The access record storage means 83 holds the access record 85 recorded by the access recording means 82. FIG. 18 shows an example of the configuration of the access record 85 stored in the access record storage means 83. In this embodiment, the information data identification information 41 included in the access request 40 is included.
, Access request issuer information 42, and accessor information 4
3, an example of managing each entry of the access record 85 including the client / proxy distinction information 44 and the access time information 86 indicating the date and time of access in the form of a table is shown. Note that, in FIG. 18, as an example of a specific access record 85, an example of the access record 85 stored in the access record storage means 83 of the communication proxy device 3b in the network configuration of FIG. 3 is shown. In the network configuration of FIG. 3, the communication proxy device 3b is the communication proxy device 3a.
Also, it is configured to connect to the communication proxy device 3d and act on behalf of the access request 40 from the communication proxy devices 3a and 3d. Therefore, all the fields for the client / proxy distinction information 44 of the access record 85 of the communication proxy device 3b contain the information indicating the proxy, and the field for the accessor information 43 contains the identification information of the communication proxy devices 3a and 3d. There is. The access request issuer information 42 field contains information on the user who actually requested the access. However, since all access requests 40 have not been transferred to each communication proxy device 3, it is not possible to obtain all access records of certain information data 50 unless the access records of each communication proxy device 3 are aggregated. .

Note that the example shown in FIG. 18 is an example of a simple logging format, and the access recording means 82 records each access record 85 in the form of extended additional recording of a sequential table.

The layering execution means 84 uses the certain information data 5
Upon receiving an instruction of a certain processing request 63 for 0, the access record 85 stored in the access record storage means 83 is referred to, and the processing is performed on the lower communication proxy device 3 that has accessed the information data 50. The instruction of the request 63 is hierarchically propagated and executed, and the execution results 64 obtained from the own communication proxy device 3 and each lower communication proxy device 3 are collected and returned as the execution result 64 from the own communication proxy device 3.

FIG. 19 shows an example of the processing flow performed by the layering execution means 84. Details of the processing contents are as shown in FIG.

An example of an expression method of the processing request 63 passed in the processing 171 and the processing 174 is shown in FIG.
0, it may be the program 631 itself to be executed written in various programming languages, or, as shown in FIG. 21, the identification information 632 of the processing program prepared in advance in the communication proxy device 3 and the processing. It may be the parameter 633 for the program.

In the method of instructing by using the program itself as in the embodiment of FIG. 20, it is not necessary to prepare a processing program to be executed in the communication proxy device 3 in advance, and an arbitrary processing is instructed to hierarchically process. Has the effect of being viable. On the other hand, in the embodiment of FIG. 21, it is necessary to prepare in advance, but conversely, since only the prepared processing can be executed, it is easy to realize security, and the identification information of the processing program and the Since it is possible to instruct with a small amount of data that is a parameter to the processing program,
This has the effect of enabling high-speed execution.

An example of expression of the execution result 64 returned in the process 175 is as shown in FIG. In the present embodiment, the number 651 of communication proxy devices 3 that have performed the layering process included in the execution result 64 and the number 651 of communication proxy devices.
The individual execution result information 652 of the process 172 of each communication proxy device 3 for the number indicated by is arranged. Further, the individual execution result information 6 of the process 172 of each communication proxy device 3
52 includes identification information 653 of each communication proxy device 3, an individual result size 654 which is the size of the individual execution result of the communication proxy device 3 obtained in the process 172, and the individual result data 655.

In the embodiment of FIG. 22, for the individual execution result information 652 of each communication proxy device 3, the identification information 653 of the communication proxy device 3 and the individual result size 654 information which is the size of the individual result data 655 are provided. Therefore, there is an effect that any communication proxy device 3 can return the execution result of any size in response to various processes.

In the configuration example of the access record 85 of FIG. 18, the table is expanded for each access record. However, as shown in another configuration example of the access record 85 of FIG. 85 is a table using the information data identification information 41 indicating the identification information of the accessed information data 50 as a key, and each entry of the table is effective access person information 87 indicating the device or user who accessed the information data 50. The configuration may be such that the list of pairs of the client / proxy distinguishing information 44 is pointed to. Of these, the effective accessor information 87 is one of the access request issuer information 42 and the access requester information 43 of the access request, and when the client / proxy distinction information 44 is a client, the access request issuer information. When 42 is a proxy, access requester information 43 is entered. When recording the access record 85, the access recording unit 82 adds a new entry to the above table only when there is no entry corresponding to the target information data 50, and adds the new entry to the table expanded from the corresponding entry.
Only when there is no corresponding effective accessor information 43 and client / proxy distinction pair 44, the necessary pair information is added to the list.

In the embodiment of FIG. 23, if the table is searched using the information data identification information 41, the communication proxy device 3 that has accessed the information data 50 can be found by tracing the list thereafter. At the time of performing the layering, there is an effect that it is possible to quickly determine to which communication proxy device 3 the processing request should be propagated hierarchically.

The access check means 89 is an optional means for checking access authority in a distributed manner in each communication proxy device 3. Similar to the access recording means 82, this means access check 89 is defined as an individual action for certain information data 50 and is executed by the individual action execution means 73 of the individual action control means 70. As described above, the parameters executed by the individual action execution means 73 are the access request 40 and the action parameter 97. Among these, the action parameter 97 is the identification information of the user, group or device to which access is permitted. Represent The access check unit 89 uses the access request issuer information 42 and the action parameter 97 included in the given access request 40 to inquire whether the inquiry access is possible to the user information management server 5 that manages and authenticates user, group, and device information. To judge.

FIG. 24 is a network configuration diagram including the user information management server 5. In the present embodiment, the user information management server 5 is the information processing device 1 connected to each communication proxy device 3 or the server device 1 via the communication path 4.
It is implemented on one or a plurality of information processing devices 10 by operating on the Internet and using the distributed management method of the database as needed.

FIG. 25 shows the access check means 89.
Shows an example of the processing flow of the access authority check performed when called by the individual action execution means 73. Details of the processing content are as shown in FIG.

Next, FIGS. 26 and 27 show an example of a processing flow performed by the access request proxy unit 31 of the present invention. Details of the processing content are as shown in FIGS. 26 and 27.

Next, FIG. 28 shows an example of the processing flow of the communication proxy method using the communication proxy system constituted by the communication proxy device 3 of the present invention shown in FIG. Details of the processing content are as shown in FIG.

In the embodiment of FIG. 28, in process 211, the identification information of the target information data 50 is explicitly specified to the edge communication proxy device 3 on the server side, and the individual information data 50 is individually specified. The action was specified.
However, a method of preparing the information data 50 to which the individual action tag 62 is attached in advance in the server device 1 is also conceivable.

FIG. 29 shows an example of the processing flow based on this method. Details of the processing content are as shown in FIG. The process 221 of FIG. 29 replaces the process 211 of FIG. The subsequent processing is the processing 21 of FIG.
2 to the same as the processing 218.

FIG. 30 shows a configuration example of information stored in the external storage device 13 of the server device 1 of the present invention corresponding to FIG. In the embodiment (a) of FIG. 30, an individual action tag 62 is optionally associated with each information data 50 and stored. In the embodiment (b) of FIG. 30, the expression method of the individual action tag 62 of FIG. 12 that can be integrated with the information data 50 is used, and the individual action tag 62 is added as a part of the information data 50. Manage.

28 and 29 are the same in that the individual action designated by each communication proxy device 3 can be executed, but according to the embodiment of FIG. 28, information on the server device 1 side is obtained. Individual actions can be executed without changing the data 50. On the other hand, according to the embodiment of FIG. 29, the information data 50 with the individual action tag 62 is attached without worrying which communication proxy device 3 is the edge communication proxy device 3 for the server device 1.
There is an effect that an individual action can be executed in any server device 1.

Next, the processing flow for the access request 40 from the client device 2 to the information data 50 on the server device 1 will be described with reference to FIG.
This will be described with reference to 1 to 36. To simplify the description, the target information data 50 is assumed to be cacheable data, and the individual action tag 62 is not attached when it is stored in the server device 1.

First, the flow of processing when an access request is first made from the client device 2a in a state where each communication proxy device 3 does not have a corresponding cache 59 will be described with reference to FIGS. FIG. 31 is a schematic diagram showing the flow of processing when the cache 59 corresponding to each communication proxy device 3 is not provided. 32 and FIG.
Details of each process shown in FIG. Details of the processing content are as shown in FIG.

In the description of the above embodiment, the server device 1
When the individual action tag 62 is added in advance to the information data 50 stored in a, in process 305,
With the individual action tag 62 included in the reply data 61 returned from the server device 1, the communication proxy device 3c
Is transmitted to the communication proxy device 3 in process 306.
c executes the action corresponding to the individual action tag 62.

Next, using FIG. 33 and FIG. 34, the same client device 2a sends a message to the communication proxy device 3a.
A flow of processing when a re-access request 40 to the same information data 50 of the same server device 1a is issued, that is, when there is a corresponding cache 59 will be described. FIG. 33 shows
9 is a schematic diagram showing a flow of processing when the communication proxy device on the client side has a cache 59 corresponding to the access request 40. FIG. FIG. 34 shows details of each processing shown in FIG. Details of the processing content are as shown in FIG. 34.

Further, the flow of processing when another client device 2d issues an access request 40 to the same information data 50 of the same server device 1a will be described using FIG. 35 and FIG. FIG. 35 shows another client device 2
FIG. 9 is a schematic diagram of a processing flow among a client device, a communication proxy device, and a server device at the time of a cache hit for the access request 40 from d. FIG. 36 shows details of each processing shown in FIG. Details of the processing content are as shown in FIG.

In FIG. 9 and FIG. 12, on the premise that the processing to be executed as an individual action is prepared as a means in the communication proxy device 3 in advance, the action information 93 is an action for identifying the prepared means. Although the embodiment using the identification information 94 has been shown, the action identification information 94 may be used instead of the action identification information 94 in the same manner as the embodiment of the hierarchical execution.
There is also an embodiment using action program information 79 in which individual action processing itself is described using various programming languages. FIG. 37 shows a configuration example of the individual action tag 62 using the action program information 79. In this embodiment, a portion corresponding to the action identification information 94 in FIG. 12 is described as action program information 79 using a programming language.

FIG. 38 shows an example of the configuration of the individual action definition information 90 stored in the individual action storage means 71 when the action program information 79 is used. In the present embodiment, each action program information 79 designated by the explicit designation using the information data identification information 41 or designated by the individual action tag 62 is stored in a part of the individual action storage means 71 by the individual action instruction means 72. ing. Further, instead of the field corresponding to the action identification information 94 of the individual action definition information 90 of FIG. 9, the entry address information 78 field is provided, and the individual action instructing unit 72 stores each action program information 79 in the individual action storage unit 71. When stored in the action program information 79
The address information of the entry point of is set. At the time of executing the action, the information designated by the entry address information 78 is used to execute the corresponding action program information 78.

In another embodiment, the individual action definition information 90 is the same as that shown in FIG. 9, and the action proxy information 78 to be executed as an individual action is loaded and a means for associating it with the action identification information 94 is provided as the communication proxy device 3. There is also a method to install it in.

FIG. 39 is a block diagram of the communication proxy device 3 of the present invention having the program loading means 75. In the present embodiment, the means and table newly added to the communication proxy device 3 of FIG.
5, a program storage means 76, and an action program correspondence table 77. First, the program storage means 76 is means for holding the loaded action program information 79. As shown in FIG. 40, the action program correspondence table 77 holds the correspondence between the action identification information 94 and the entry address information 78 of the loaded action program information 79. The table 7
In FIG. 7, the access recording means 82 and the access check means 89 provided by being incorporated in the distributed access management means 80 are also managed in the same manner. When the individual action control means 70 executes an action, it refers to the action program correspondence table 77, finds the entry address of the program to be executed from the action identification information 94 described in the individual action definition information 90, and selects the corresponding program. Run. The program loading means 75
Upon receiving an instruction from an operator or the like, a program for action is loaded and associated with the designated action identification information 94.

FIG. 41 shows an example of the processing flow of the program loading processing performed by the program loading means 75.
The details of the processing contents are as shown in FIG.

According to the embodiments of FIGS. 37 to 41, there is an effect that the processing means to be executed as an individual action can be dynamically loaded without preparing each communication proxy device 3 in advance. Further, according to the embodiments of FIGS. 39 to 40, the data amount of the individual action tag 62 added to the information data 50 can be reduced, and high-speed proxy processing can be performed. Further, as in the embodiment shown in FIG. 40, the built-in action program is handled in the same manner, so that the built-in action program and the dynamically loaded action program can be mixed.

According to the present invention, as an individual action for specific information data, the access record is instructed to the communication proxy device 3 at the edge of the server device directly connected to the server device 1 via the communication path 4. Alternatively, by adding the access record to the information data of the server device 1 as an individual action tag instructing the access record, the server device 1 and the client device 2 do not change the access record for the specific information data, and the access record is transmitted to each communication proxy. The device 3 has an effect that it can be dispersedly taken.

Further, by instructing the communication proxy device 3 at the edge of the server device side to perform the layered execution of the aggregation of the access records for the target information data, the data is recorded in a distributed manner in each communication proxy device. The access record for the information data 50 can be inquired only to the communication proxy device that has accessed the information data, and the effect can be obtained.

Further, when the information data on the server device 1 is updated, the information data 50 is reproduced to the communication proxy device 3 at the edge of the server device directly connected to the server device 1 via the communication path 4. There is an effect that the cache 59 of each communication proxy device 3 that holds the cache of the information data 50 can be updated by instructing the hierarchical execution of the cache update by the acquisition.

Further, as another method of updating the cache of each communication proxy device 3, as an individual action for the specific information data 50, the cache is updated by reacquiring the information data 50 periodically at a certain schedule. By instructing, the effect that the cache 59 of the information data 50 of each communication proxy device can be updated regularly can be obtained.

Further, as an individual action for specific information data, a server in which an access check using a user, a device, or a group of users / devices permitted to access as action parameters is directly connected to the server device 1 via the communication path 4. By instructing the communication proxy device 3 at the edge of the device side or by adding it to the information data of the server device 1 as an individual action tag instructing access check by the action parameter, the server device 1 and the client device 2 Does not change, and does not always propagate each access check request to the server device 1, and only for a specified user, device, or user / device group in each communication proxy device 3. , Permit access to the information data 50, There is an effect that it is possible to return the cache 59 over data 50.

[0116]

As described above, according to the present invention, in response to an access request for information data from a client device,
A communication proxy device suitable for realizing high-speed access to the latest information data while utilizing the cache without changing the server device or client device, and realizing high-speed access control with simple instructions, A communication proxy system and a communication proxy method can be provided.

[Brief description of drawings]

FIG. 1 is a configuration diagram of a communication proxy device of the present invention.

FIG. 2 is a configuration diagram of an information processing device used as a server device, a client device, and a communication proxy device of the present invention.

FIG. 3 is a logical configuration diagram of a network system according to the present invention.

FIG. 4 is a configuration diagram of information stored in an external storage device of the server device according to the present invention.

FIG. 5 is a structural diagram of access request information according to the present invention.

FIG. 6 is a configuration diagram of reply data information for an access request according to the related art.

FIG. 7 is a configuration diagram of a communication proxy device according to a conventional technique.

FIG. 8 is a processing flow chart of an access request proxy unit for an access request of information data in the communication proxy device according to the related art.

FIG. 9 is a configuration diagram of individual action definition information stored in individual action storage means of the present invention.

FIG. 10 is a processing flow chart of individual action instructing means by an explicit instruction using the information data identification information of the present invention.

FIG. 11 is a configuration diagram of reply data information for an access request according to the present invention.

FIG. 12 is a configuration diagram of an individual action tag of the present invention.

FIG. 13 is a processing flow chart of the individual action instruction means by the individual action tag added to the information data of the present invention.

FIG. 14 is a process flow diagram of action check execution processing for an event of the individual action execution means of the present invention.

FIG. 15 is a flow chart of an initialization process for the action check execution process according to the schedule of the individual action execution means of the present invention.

FIG. 16 is a process flow chart of the action check execution process according to the schedule of the individual action execution means of the present invention called by the timer interrupt.

FIG. 17 is a process flow diagram of the individual action tag attaching / detaching means when transmitting reply data from the communication proxy device of the present invention.

FIG. 18 is a configuration diagram of an access record stored in the access record storage means of the present invention.

FIG. 19 is a process flow chart of the layering execution process of the layering executing means of the present invention.

FIG. 20 is an expression diagram of a processing request at the time of the hierarchical execution request of the present invention.

FIG. 21 is another expression diagram of the processing request at the time of the hierarchical execution request of the present invention.

FIG. 22 is an expression diagram of an execution result of the layered execution processing of the present invention.

FIG. 23 is another configuration diagram of the access record stored in the access record storage means of the present invention.

FIG. 24 is a configuration diagram of a network including a user information management server according to the present invention.

FIG. 25 is a processing flow chart of access authority check by the access check means of the present invention.

FIG. 26 is a processing flow diagram (1) of the access request proxy unit of the communication proxy device of the present invention.

FIG. 27 is a processing flow diagram (No. 2) of the access request proxy unit of the communication proxy device of the present invention.

FIG. 28 is a process flow chart of the communication proxy method of the present invention.

FIG. 29 is another processing flow chart of the communication proxy method of the present invention.

FIG. 30 is another configuration diagram of information stored in the external storage device of the server device of the present invention.

FIG. 31 is a schematic diagram of a processing flow among a client device, a communication proxy device, and a server device at the time of a cache miss hit in the communication surrogate method of the present invention.

FIG. 32 is a flow chart of a process among a client device, a communication proxy device, and a server device when a cache miss hit occurs in the communication surrogate method of the present invention.

FIG. 33 is a schematic diagram of a processing flow among a client device, a communication proxy device, and a server device when a cache hit occurs due to a re-access request from the same client device in the communication proxy method of the present invention.

FIG. 34 is a process flow diagram among the client device, the communication proxy device, and the server device at the time of a cache hit by the re-access request from the same client device in the communication surrogate method of the present invention.

FIG. 35 is a schematic diagram of a processing flow among a client device, a communication proxy device, and a server device when a cache hit occurs due to an access request from another client device in the communication proxy method of the present invention.

FIG. 36 is a process flow diagram between the client device, the communication proxy device, and the server device when a cache hit occurs due to an access request from another client device in the communication proxy method of the present invention.

FIG. 37 is a block diagram of an individual action tag according to the program description of the present invention.

FIG. 38 is a configuration diagram of individual action definition information using an action described in the program of the present invention.

FIG. 39 is a block diagram of a communication proxy device having a program loading means of the present invention.

FIG. 40 is a diagram showing one configuration of an action program correspondence table of the present invention.

FIG. 41 is a process flow chart of the program loading means of the present invention.

[Explanation of symbols]

1 ... Server device, 2 ... Client device, 3 ... Communication proxy device, 4 ... Communication path, 5 ... User information management server, 1
0 ... Information processing device, 11 ... Processor, 12 ... Memory,
13 ... External storage mechanism, 14 ... Communication mechanism, 15 ... Operator input / output mechanism, 16 ... Timer, 17 ... Bus, 18 ... Communication line, 21 ... Access request processing means, 22 ... Access request means, 31 ... Access request proxy means , 32 ... Caching means, 33 ... Cache storage means, 34 ... Cache management means, 40 ... Access request, 41 ... Information data identification information, 42 ... Access request issuer information, 43 ... Access requester information, 44 ... Client / proxy Discrimination information, 45 ... Request type identification information, 50 ... Information data, 51
... Attribute information, 52 ... Update date information, 53 ... Cache enable / disable information, 54 ... Cache expiration information, 58 ... Information data identifier, 59 ... Cache, 61 ... Reply data,
62 ... Individual action tag, 63 ... Processing request, 64 ... Execution result, 67 ... Action execution result, 68 ... Action tag identification header, 69 ... Action tag identification trailer, 70 ... Individual action control means, 71 ... Individual action storage means , 72 ... Individual action instruction means, 73 ...
Individual action executing means, 74 ... Individual action tag attaching / detaching means, 75 ... Program loading means, 76 ... Program storing means, 77 ... Action program correspondence table, 78 ... Entry address information, 79 ... Action program information, 80 ... Distributed access management means , 81 ... Access recording instruction means, 82 ... Access recording means, 83 ...
Access record storage means, 84 ... Hierarchical execution means, 85 ...
Access record, 86 ... access time information, 87 ... effective accessor information, 89 ... access check means, 90 ... individual action definition information, 92 ... action type discrimination information, 93 ... action information, 94 ... action identification information, 95 ... action Condition information, 96 ... Action expiration date information, 97 ... Action parameter, 98 ... Event information, 99 ... Action program information, 631 ... Processing program, 632 ... Processing program identification information, 6
33 ... Parameter, 651 ... Communication proxy device number, 65
2 ... Individual execution result information of each communication proxy device, 653 ...
Communication proxy device identification information, 654 ... Individual result size,
655 ... Individual result data.

   ─────────────────────────────────────────────────── ─── Continued front page    F-term (reference) 5B082 HA06 HA08                 5K030 GA03 GA13 HC01 HC14 HD01                       KA02 LD11

Claims (10)

[Claims] 1. An access request for information data held in the server device is received from the client device or another communication proxy device, which is installed on a communication path between the server device and the client device, and the server device or further In the communication proxy device, the communication proxy device is provided with an access request proxy unit that performs the access request on behalf of the communication proxy device, acquires the requested information data and the attribute information of the information data, and returns the acquired data. An individual action storage unit that holds individual action definition information indicating the relationship between the action information indicating the action to be executed by the proxy device on behalf of the specific information data and the execution condition of the action, and the information data. , The individual action definition information of the individual action storage means is set It is characterized by comprising an individual action control means comprising an action instruction means and an individual action execution means for executing an individual action instructed under an instructed condition with respect to information data instructed by the individual action definition information. Communication proxy device. 2. The communication proxy device according to claim 1, wherein the individual action instruction means explicitly specifies identification information of target information data and action information to be executed for the information data, and the individual action is executed. When the setting instruction to the storage unit is received, or the information data received by the communication proxy device is checked, and the individual action tag indicating the action information to be executed for the information data is added. When it is detected that the individual action definition information of the information data is set in the individual action instruction storage based on the action information, the individual action control unit receives the individual action control unit. When transmitting the information data and the additional data received together with the information data from the communication proxy device, In conditions, the added individual action tag or a communication proxy device, characterized in that it comprises a separate action tag detaching means for removing individual specific action tag that has been added. 3. The communication proxy device according to claim 2, wherein the individual action definition information is set by specifying the identification information of the target information data and the action information explicitly, or ,
The individual action tag added to the information data is provided with action type distinguishing information for distinguishing whether the individual action definition information is set, and the individual action instruction means sets the individual action definition information of each information data in the action storage means. When
The individual action tag attaching / detaching means includes identification information of the information data and individual action definition information by explicit designation of the action information for the information data transmitted from the communication proxy device. A communication proxy device comprising means for adding an individual action tag corresponding to the information data and transmitting it when stored in the action storage means. 4. The communication proxy device according to claim 2, wherein the individual action tag attaching / detaching means sets the transmission destination to the client when the communication proxy device transmits the information data to which the individual action tag is added. In the case of a device, a communication proxy device comprising means for removing the individual action tag and transmitting. 5. An access request for information data held in the server device is received from the client device or another communication proxy device installed on a communication path between the server device and the client device, and the server device or another In the communication proxy device including an access request proxy unit that performs the access request on behalf of the communication proxy device, acquires the requested information data and the attribute information of the information data, and returns the acquired data, In response to the access request to the information data, an access record instructing means for instructing that the communication proxy device performs access recording, and an access request for the information data instructed to be recorded by the access record instructing means are transmitted to the communication. Access by the device or user making the request when processed by the proxy device An access recording means for recording a record, an access record storing means for holding an access record recorded by the access recording means, a processing request instruction for certain specific information data, and an instruction for the instructed information data Executing a processing request, and further propagating the processing request instruction to a lower-level communication proxy device in which an access record to the instructed information data is recorded in the access record storage means of the communication proxy device, A distributed access management unit comprising a hierarchical execution unit that executes the processing request hierarchically and then collects and returns the execution result obtained from the lower-level communication proxy apparatus and the execution result of the own communication proxy apparatus. A communication proxy device. 6. The communication proxy device according to claim 4, wherein when the communication proxy device processes an access request to access information data for which access record is instructed, the access record of the device or user who has issued the request. And an access record storage means for holding the access record recorded by the access recording means, and when receiving a certain processing request instruction for certain specific information data, an instruction is given to the instructed information data. Means for executing the processing request, and a lower communication proxy device in which an access record to the instructed information data is recorded in the access record storage means of the communication proxy device,
From the means for propagating the processing request instruction and the means for collecting and returning the execution result obtained from the lower-level communication proxy apparatus and the execution result in the own communication proxy apparatus after the processing request is hierarchically executed. The individual action instructing means includes an access request process for the information data as the individual action for the information data to be recorded for access in response to the access request for the specific information data. A communication proxy device comprising means for instructing execution of the access recording means at a timing. 7. The communication proxy device according to claim 1, wherein the individual action control means further comprises, as the individual action definition information, means for holding action expiration date information indicating an expiration date of the individual action definition information. The individual action execution means executes the action defined by the individual action definition information within the deadline indicated by the action expiration date information, and when the deadline has passed, executes the individual action definition information. A communication proxy device comprising means for automatically deleting. 8. The communication proxy device according to claim 1, wherein the individual action definition information is set to the individual action definition information by explicitly specifying the identification information of the target information data and the action information, or Equipped with action type discrimination information for discriminating whether the individual action definition information is set by the individual action tag added to the information data, the individual action instruction means sets the individual action definition information of each information data in the action storage means. When this is done, the means for setting the action type discrimination information and whether or not the individual action tag is added to the received information data are checked, and if the individual action tag is not added, the individual action memory is stored. Existence of individual action definition information stored in the method The means for checking and the individual action definition information corresponding to the information data exist, and it was found from the action type distinction information of the individual action definition information that the individual action definition information was set by the individual action tag. In this case, the communication proxy device is provided with means for deleting the individual action definition information. 9. The communication proxy device according to claim 1, wherein the individual action instruction means includes means for holding, as a processing program, designation of an action to be executed with respect to specific information data, and the individual action execution is performed. The means includes means for executing the stored processing program as an individual action for the information data. 10. The communication proxy device according to claim 1, further comprising a program loading means for loading a processing program into the communication proxy device, a program storage means for storing the loaded program, and a program entry address. And an action program correspondence table holding a correspondence relation with action identification information, wherein the program loading means receives the designation of the action identification information and the program information to be loaded, and stores the program information in the program storage means. A means for setting a correspondence relationship between the entry address of the stored program information and the designated action identification information in the action program correspondence table, wherein the individual action control means is provided for the set action program correspondence table. Using information corresponding communication proxy apparatus characterized by executing the individual action program.