JP2004021572A - System operation management method by access information management server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To integrally manage operation states and users of each business system and to monitor operation of each business system by making a system operation management database correlate with user entering-leaving information in an environment where a plurality of systems are in operation. <P>SOLUTION: In the environment where the plurality of systems are in operation, a server for integrally managing operation situation of each business system is provided to consolidate management of the users and system use history by obtaining access information of the users of terminal connected to each business system. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a method for managing an operation state by acquiring a log as access information from each system in an environment where a plurality of systems operate.
[0002]
[Prior art]
Conventionally, as a method of managing access of a plurality of systems, a method of acquiring access information independently for each system and restricting access by a user ID, a password, a permitted time, and the like has been adopted.
[0003]
Further, as a method of controlling the power of the user terminal in cooperation with the entrance / exit management information of the terminal user, there is a terminal power control method based on entrance / exit management (Japanese Patent Laid-Open No. 11-249765).
[0004]
[Problems to be solved by the invention]
In the above-mentioned conventional method, it is possible to check the operation status and the operation history of which terminal, when, and who used the system for each of a plurality of systems from each server. Therefore, it was difficult to synchronize logs for each server and monitor improper logins, information references, and improper registrations due to spoofing. Also, when a legitimate user during working hours illegally accesses the system with an outsider and obtains information illegally, it is difficult to identify the culprit because the access itself is legitimate.
[0005]
An object of the present invention is to collectively manage the operation status of each business system and users in an environment in which a plurality of systems operate. Another object is to monitor the operation of each business system by associating the system operation management database with the user's entry / exit information.
[0006]
[Means for Solving the Problems]
In order to achieve the above object, the present invention provides a server that collectively manages the operation status of each of a plurality of systems as login / logout access information. The login / logout access information includes system identification information of each business system, login ID, user name, name No, user terminal identification information, and other necessary information at the time of login / logout. Each system acquires the login / logout information, adds the system identification information to the server, and transmits the server to the server. The server stores the transmission data in the system operation management database. As a result, the operation status of each business system can be managed on the server.
[0007]
Further, in order to achieve the above and other objects, the system operation management database is linked with an entry / exit information database of an entry / exit management system for managing entry / exit for each room or floor, or entry / exit. The entry / exit information database includes a name No, a name, and other necessary information at the time of entry / exit, and cooperates with the user access information of the system operation management database by the name No or the name. This makes it possible to monitor access other than when the user is present and to monitor whether there is a business system that is logged in at the time of leaving the office.
[0008]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0009]
FIG. 1 is a configuration diagram of the present invention in which servers of a plurality of business systems and an access information management server are linked.
[0010]
The access information management server 1 is a login / logout information management server that acquires an access log from each business server and centrally manages the access logs, and the terminals 7, 10, and 13 are "family registration servers" 4, which are each business server of each business system 3. When connected to the “finance server” 5 and the “seminar server” 6, the processing unit of each business server logs in, user name, name No., use terminal code or name, login date, login time, logout date, The access information of the logout time is obtained, the information is assigned a system classification for classifying each business system, and transmitted to the access information management server.
[0011]
The transmission data is stored in the login / logout information database 2. Here, the database 2 includes a personal information table, a terminal management table, and a business table, and has data of names and attributes associated with codes of the business systems.
[0012]
FIG. 3 is an example of a data configuration of a login / logout data file acquired commonly by each business server. Here, the login ID 27, the user name 28, the name No. 29, the use terminal 30, the login date 31, the login time 32, the logout date 33, and the logout time 34 are acquired and stored. This information may be stored in each business server, or may be deleted at regular intervals as a temporary file. Further, the user name and the name No. may be omitted by providing the access information management server with a personal information table. The login date and time may use the system date and time or the access information management server may be used as a time server.
[0013]
FIG. 4 is an example of a data configuration of a file for storing and managing login / logout data acquired from each business server in the access information management server. 3 is added to the data of FIG. 3 obtained by each business server, that is, a system section 35 of the business system in which login / logout has occurred is added. The system section 35 is added by each business server when transmitting data, or the access information management server identifies the transmission source server and adds section information to the transmitted data. Therefore, the management data includes the login ID 27, the user name 28, the name No. 29, a use terminal 30, a login date 31, a login time 32, a logout date 33, a logout time 34, and a system category 35 are stored as management tables.
[0014]
FIG. 6 is a processing example for linking the login / logout data to each business server with the access information management server. When the business system 3 logs in to the business server 42 from the terminal device, the business server processing unit 43 edits the login data and generates the access information management server linking file 44 shown in FIG. This file data is transmitted to the access information management server, and the access information can be managed by adding and classifying the system division code 35 of each business system.
[0015]
As described above, the access information management server acquires logs of all terminals using each business system, so that the operation status and the operation history can be centrally managed.
[0016]
To realize another object of the present invention, a system configuration as shown in FIG. 2 is adopted. FIG. 2 is a configuration diagram in which the access information management server and the entry / exit information management server are linked.
[0017]
The access information management server 1 associates and manages a database 21 of entry / exit information, which is data acquired from the entry / exit information management server 22, with a database 2 of login / logout information. The entry / exit information management server 22 acquires the entry / exit information of the name No, name, entry date, entry time, exit date and exit time by inputting an ID card at the time of entry / exit, and transmits it to the access information management server 1. FIG. 5 is an example of the data configuration of the entry / exit information database 21. The entry / exit information management server 22 acquires the name 36, the name 37, the entry date 38, the entry time 39, the exit date 40, and the exit time 43, and stores them in the management table.
[0018]
FIG. 7 is a processing example for linking the entry / exit data from the entry / exit information management server with the access information management server 1. In the entry / exit information management server to which the entry / exit information 49 has been input by means of an ID card or the like, the data is edited by the entry / exit information management server processing unit 50, and a file 51 for linking the access information management server having the configuration shown in FIG. Is generated. By transmitting this file data to the access information management server and matching the entry / exit information with the access information, it becomes possible to monitor the fraudulent acts shown in FIG.
[0019]
The monitoring timing is assumed to be at the time of login / logout or at the time of entry / exit. For example, when the user logs in to the server of each business system to use each business system 3, the login information (FIG. 3) is transferred to the access information management server, and the data (FIG. 5) acquired from the entry / exit management server 22 is used. Refer to and confirm that there is data entered by the user. If not, the management terminal 25 is notified as a login from an unauthorized place. Also at the time of departure, the departure data is transferred from the entry / departure information management server 22 to the access information management server 1, and by referring to the login / logout information, it is possible to monitor whether the departed person has left the business system while logged in. Can be.
[0020]
FIG. 8 is a flowchart showing a flow of processing for managing the operation status of the system by the access information management server. Login data is created in the business server of each business system (step 812) and transmitted to the access information management server (step 813). On the other hand, entry / exit data is created in the entry / exit information management server of the entry / exit management system (step 822) and transmitted to the access information management server (step 823). The two pieces of information are matched at the time of login or exit (step 814 or step 824). When confirming at the timing of login, if there is room entry information of the target person, the login information is registered and managed (step 815). If there is no entry information, the result is transferred to the management terminal (step 816). In the case of confirmation at the time of leaving the room, if there is logout information of the target person, the leaving information is registered and managed (step 825). If there is no logout information, the result is transferred to the management terminal (step 826).
[0021]
【The invention's effect】
ADVANTAGE OF THE INVENTION According to this invention, there exists an effect that it can monitor, for example, when there is an unauthorized log-in from outside the management area, or when the user leaves without normal logout. In addition, since the logs of all users are centrally managed, any information leak from any system can be clues to the criminal investigation by judging from the time of occurrence and examining the accessors for a certain period of time. There is an effect that it becomes possible.
[Brief description of the drawings]
FIG. 1 is a configuration diagram in which a login / logout management server and a plurality of business servers are linked.
FIG. 2 is a configuration diagram in which a login / logout management server and an entry / exit management server that manages entry / exit information are linked.
FIG. 3 is a data configuration example of a login / logout data linking file for linking login / logout data of each business server with a login / logout management server.
FIG. 4 is a data configuration example of a file that manages login / logout data acquired from each business server by a login / logout management server.
FIG. 5 is a data configuration example of a login / logout data linking file for linking entry / exit data of an entry / exit information management server with a login / logout management server.
FIG. 6 is a processing example for linking login / logout data of each business server with a login / logout management server.
FIG. 7 is an example of a process for linking entry / exit data from an entry / exit information management server to a login / logout management server.
FIG. 8 is a flowchart illustrating a flow of a process of performing operation management by the access information management server.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Access information management server, 2 ... Database which manages the operation status and operation history of each business system, 3 ... Each business system which performs login / logout management, 4 ... Family register server, 5 ... Financial server, 6 ... Housekeeping server, 7: Terminal a capable of operating the family register system, 8: User A of the family register system, 10: Terminal b capable of operating the financial system, 11: Financial system user B, 13: Terminal c capable of operating the housekeeping system, 14: Housing System users C, 21: entry / exit information, 22: entry / exit information management server, 23: cooperation processing between the entry / exit information management server and access information management server, 24: network LAN, 25: administrator terminal, 27 ... Login ID, 28: User name, 29: Name No., 30: User terminal, 31: Login date, 32: Login time, 33: Logout date 34 ... logout time, 35 ... system classification, 36 ... name No., 37 ... name, 38 ... entry date, 39 ... entry time, 40 ... exit date, 41 ... exit time, 42 ... business server, 43 ... business server processing unit , 44: Business server login / logout data linking file, 45: Business server database, 46: Access information management system processing unit, 47: Login / logout information database, 48: Entry / exit information management server, 50: Entry / exit information management Server processing unit, 51: file for linking login / logout data, 52: entry / exit information database.

Claims (2)

In an environment where multiple systems operate, a server is provided to unify the operation status of each business system, and access information of terminal users connected to each business system is acquired by the server to centrally manage users and system usage history. A system operation management method using an access information management server. A system operation management database is provided in the access information management server according to claim 1, wherein access is monitored outside office hours in association with user entry / exit information, and whether there is a business system that is logged in at the time of leaving the office is monitored. A system operation management method using an access information management server.

Images