JP2004302534A - Web service system, and data transmission processing method for web service system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a Web service system with a high security level, and a data transmission processing method for the Web service system without putting stress on a memory region of a Web server. <P>SOLUTION: The Web server is provided for receiving a request for user authentication from a requester, sending information on a file storage location and user authentication information for storing a file to the requester after carrying out processing of the user authentication, having the requester send the file to the file storage location, receiving a file list of files from the requester, and sending user authentication information for confirming a processing result to the requester. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to data transmission and processing of a Web service system.
[0002]
In particular, the present invention relates to a Web service system capable of performing large-scale data processing without excessively occupying a memory of a Web server and maintaining a high security level, and a method of transmitting and processing the data. .
[0003]
[Prior art]
2. Description of the Related Art In recent years, Web service systems have become widespread with the development of Web-related technologies and processing capabilities of information processing apparatuses.
[0004]
The “Web service system” is a system in which software functions can be used through a network in a Web environment. For example, a server having a data processing function (referred to as a “Web server”) is provided with a client (referred to as a “requester” in this specification because it is a computer using client software that is an extension of the current Web browser). This is a system in which data is transmitted, the Web server processes the data, and a requester receives a processing result.
[0005]
Recently, web service systems that connect a plurality of componentized web service systems and enable processing by applications as a whole are increasing.
[0006]
Such Web service systems are of various scales and functions, ranging from software components having a single function to systems that perform large-scale data processing. In particular, recently, a large-scale Web service system for performing business transactions between companies has come to appear.
[0007]
In a Web service system that performs such a large-scale data processing, a large amount of data is often transmitted to a Web server and processed by the Web server. The present invention is intended to solve a technical problem in transmitting such a large amount of data to a Web server and processing the data. Therefore, the data transmission and processing in the conventional Web service system will be described here. A brief description will be given.
[0008]
The method of transmitting data to a Web server can be roughly classified into two methods.
[0009]
One data transmission method is a method of transmitting data by storing data in a request or a message. Another data transmission method is a method of transmitting data in a file format attached to a request or message.
[0010]
FIG. 2 conceptually shows a method of storing and transmitting data in a message.
[0011]
The example of FIG. 2 shows a case where SOAP is used as a protocol, and a large amount of data is stored in a message and transmitted by SOAP. Note that SOAP can use XML, HTTP, or the like, and is a protocol for calling data or services in another computer.
[0012]
As shown in FIG. 2, when a requester stores and transmits a large amount of data in a message such as SOAP using the XML format, a session is generated in the Web server, and a memory required for processing is secured for each session. .
[0013]
Then, since the Web server needs to parse (syntax analysis) the XML data included in the SOAP, the large-capacity data transmitted from the requester is loaded on the whole memory and parsed (syntax analysis).
[0014]
In this case, the Web server secures a sufficient memory area to process a large amount of data stored in the SOAP message at a time, and the secured memory area is a memory area that can be used by the Web server. It is held during the effective time of the session while pressing.
[0015]
In particular, in the case of JAVA (registered trademark), even after the expiration time of the session, it is one of the memory management functions of the GC (Garbage Collection: OS). Until the memory area is increased until the memory area is increased, the memory area of the Web server continues to be occupied and the available memory area decreases.
[0016]
In addition, when GC is performed not only in JAVA (registered trademark), since a large number of memory areas are held, the processing load of GC is large.
[0017]
The problem of securing a memory area for parsing is not limited to SOAP, but occurs commonly when data is included in a message and transmitted.
[0018]
Next, a method of transmitting data in a file format attached to a request will be described with reference to FIG.
[0019]
In this case, as shown in FIG. 3, first, the URL of the file storage destination and user authentication information such as a user ID and a password are transmitted from the Web server to the requester.
[0020]
Next, when the requester receives the URL of the file storage destination and the user authentication information from the Web server, the requester transmits the data file to the designated URL of the file storage destination using a communication protocol such as FTP or HTTP.
[0021]
After transmitting the data file, the requester transmits a file list (trigger file) of the transmitted file to the Web server.
[0022]
The Web server that has received the file list (trigger file) polls the requester's file list (trigger file) and processes the file if a response is received.
[0023]
(Prior art document information)
There is no prior art document information to be described for the present invention. This is because the data transmission method and the processing method of the Web service system are based on know-how of a provider of the Web service system, and are not of a nature announced as a technology.
[0024]
[Problems to be solved by the invention]
However, the conventional technique of storing and transmitting data in the message occupies the memory area of the Web server and puts a heavy load on the memory of the Web server, as already described partially. For example, while the Web server receives a large amount of large-capacity data and performs processing such as syntax analysis, when performing data processing by an application, the memory area is occupied to process the large-capacity data. The Web server itself may go down due to lack of space. Further, since the data stored in the message is immediately loaded on the memory, the virus may directly adhere to the memory.
[0025]
In order to avoid the shortage of the memory described above, a method of transmitting the data in the form of a file attached to a request is adopted, and the process at the time of receiving a large amount of data and the process of the Web application are asynchronous. For the purpose, when receiving a large amount of data, the data may be stored once for each data file, and the syntax of the data may be analyzed when it does not overlap with the data processing by the application.
[0026]
However, the conventional method of transmitting data in a file format attached to a request cannot obtain a satisfactory security level.
[0027]
First, conventionally, data was transmitted using the FTP or the HTTP protocol. However, when data is transmitted using the FTP or the HTTP protocol, authentication information is transmitted in plain text, and important information such as a user ID is transmitted. Information may be intercepted by third parties. It should be noted that the use of digital certificates is necessary in order to prevent the data from being sent in plain text, and it takes time for development and management.
[0028]
Second, the URL of the file storage destination that the Web server notifies the requester is usually a fixed specific URL in many cases. Therefore, a user who has logged in properly can access the specific URL, and data to be kept secret may be accessible by another user.
[0029]
Therefore, an object of the present invention is to provide a Web service system having a high security level without squeezing the memory area of the Web server, and a data transmission processing method of the Web service system.
[0030]
[Means for Solving the Problems]
The Web service system according to the present invention comprises:
A request for user authentication is received from the requester, and after performing the user authentication process, information of a file storage location and user authentication information for storing a file are transmitted to the requester, and the requester is transmitted to the requester. A Web server for transmitting a file to a file storage location, receiving a file list of the file from the requester, and transmitting user authentication information for confirming a processing result to the requester; Things.
[0031]
The data transmission processing method of the Web service system according to the present invention includes:
A requester sending a request for user authentication to a web server;
The Web server performing the user authentication process;
The Web server transmitting file storage location information and user authentication information for storing the file to the requester;
The requester sending a file to the file storage location;
The requester sending a file list of the file to the web server;
Transmitting the user authentication information for confirming the processing result to the requester by the Web server.
[0032]
According to the present invention, the Web server transmits the information on the file storage location and the user authentication information for storing the file to the requester, and causes the requester to transmit the file to the file storage location. Thus, at the time of data transmission, the data file is transmitted directly to the file storage location, so that the memory of the Web server is not occupied by the received data.
[0033]
Further, according to the present invention, the Web server transmits the information of the file storage location, the user authentication information for storing the file, and the user authentication information for confirming the processing result to the requester, so that the system logs in to the system. It is possible to prevent the data including the other user from being viewed by a third party.
[0034]
BEST MODE FOR CARRYING OUT THE INVENTION
Next, a preferred embodiment of a “Web service system and a data transmission processing method of the Web service system” according to the present invention will be described below.
[0035]
FIG. 1 shows a processing flow of a Web service system according to an embodiment of the present invention.
[0036]
In FIG. 1, the Web server and the requester are shown on the left and right, and a line extending downward from the Web server and the requester indicates the passage of time. Arrows between the Web server and the requester indicate transmission and reception of data and messages, and the text above each arrow indicates the content to be transmitted and received.
[0037]
As shown in FIG. 1, first, in order to enable a requester to use the system of the present embodiment, user authentication information such as a user ID and a password for logging in to the system from a Web server, and a destination of a Web service request destination are provided. The information is transmitted to the requester (step 100).
[0038]
When the user intends to transmit data to the Web service system under such preparation, the requester transmits a request for user authentication to the Web server using SOAP (step 110). At this time, by using SOAP / HTTPS, the user authentication information for login is not transmitted in plain text, and the risk of being intercepted by a third party can be reduced.
[0039]
In response to the request, the Web server performs user authentication, and transmits information on the file storage location, a protocol used when storing the file, and user authentication information for storing the file to the requester of the authenticated user ( Step 120).
[0040]
The user authentication information for storing this file is valid only for storing the file, whereas the user authentication information for login described above is fixed, and differs for each file storage request. Is issued and disappears at the same time that the file storage ends.
[0041]
It is preferable that the information on the file storage location is also instructed each time the file is stored.
[0042]
The file storage location is not limited to the Web server, and any storage device other than the Web server can be designated.
[0043]
As described above, since the location where the file is stored and the user authentication information for storing the file are unique to the request for storing the file, the file can be freely accessed by a third party including other logged-in users. To prevent it from being done.
[0044]
Next, when the requester is notified of the file storage location, the use protocol, and the file storage user authentication information as described above, the requester transmits the file to the designated file storage location using the designated protocol (step 130). ).
[0045]
A large amount of data is stored in the file and transmitted to the file storage location.
[0046]
The transmission of the file is performed without using the memory of the Web server, as can be seen from the case where the file is transmitted to a storage device other than the Web server as described above. For this reason, the memory area of the Web server is not occupied by large-capacity data when transmitting a file.
[0047]
Note that the file transmission of this embodiment utilizes SOAP. This is because SOAP can be exchanged by appending additional information called an envelope to an XML document using a protocol such as HTTP, and is suitable for data transmission of a Web service system targeted by the present invention. However, the present invention does not limit file transfer to SOAP. For example, it is possible to transfer files using the HTTP protocol using a file attachment specification called MIME Attachment, or to transfer files using the FTP protocol.
[0048]
Next, upon ending the above-described file transfer, the requester transmits a file list (trigger file) of the transmitted file to the Web server (step 140).
[0049]
Accordingly, the Web server can recognize that a new data file has been transmitted to the file storage location.
[0050]
As described above, since the requester is notified by the file list when the file is transferred, the Web server is not required to check whether or not the file has been transferred at the promised time. For example, in a system in which a file is conventionally transferred at a predetermined time every day, a Web server monitors a directory to which the file is transferred and checks whether the file is transferred after the lapse of the time. If the file is not being transferred, the cause is to be investigated by a human. On the other hand, as in the present embodiment, the file list is transmitted to the Web server when the requester finishes transferring the file, so that the Web server can surely know the transfer of the file, and Checking work can be omitted.
[0051]
When receiving the file list from the requester, the Web server transmits confirmation of the file to be processed to the requester and receives a confirmation response from the requester. Further, the Web server transmits to the requester the scheduled processing end time, the processing result confirmation method, and the user authentication information for confirming the processing result (step 150).
[0052]
It is preferable that the user authentication information for confirming the processing result is different from the above-described user authentication information for login and the user authentication information for file storage. Further, it is preferable that the user authentication information for processing result confirmation disappears after the requester confirms the processing result. This prevents the result of the data processing by the Web server from being viewed by a third party including the user who has logged in to the Web service system.
[0053]
After the notification in step 150, the Web server calls up the file from the file storage location stored by each requester using the file list as a trigger file, and performs data processing requested by each requester. As described above, the Web server manages its own data processing while performing its own processing, so that the Web server can prevent the memory area from being occupied each time a large amount of data is received, and can effectively use the memory area of the Web server. Can be used while managing. Thus, it is possible to prevent the Web server from going down due to the shortage of the memory area.
[0054]
After the lapse of the processing end time, the requester requests confirmation of the processing result to the Web server using the user authentication information for confirming the processing result (step 160).
[0055]
The Web server receiving the request for confirming the processing result transmits the processing result to the requester (step 170). With this transmission, a series of processing from transmission of the processing data to transmission of the data processing result is completed.
[0056]
As a method of notifying the processing result, there is a method based on the request method from the notification side by the SOAP as described above. However, a method based on an asynchronous messaging method such as e-mail, or a Web method for processing notification if the transmission side has a Web service. You can also request a service.
[0057]
【The invention's effect】
As is apparent from the above description, according to the “Web service system and the data transmission processing method of the Web service system” of the present invention, when transmitting a file to a Web server, the file affects the processing of the Web server. And sent directly to the file storage location specified by the Web server. When performing data processing by an application, the Web server polls a trigger file, calls a file from a file storage location stored by each requester, and performs data processing requested by each requester. As described above, by asynchronously performing the processing at the time of data storage and the application processing, the Web server prevents the memory area from being occupied each time a large amount of data is received, and causes the Web server to fail due to that. Can be prevented.
[0058]
Further, the “Web service system and the data transmission processing method of the Web service system” according to the present invention can maintain an excellent security level.
[0059]
According to the “Web service system and the data transmission processing method of the Web service system” according to the present invention, in addition to normal login user authentication information, file storage user authentication information and processing result confirmation user authentication information are used. Issue.
[0060]
Also, the file storage location is instructed by the requester from the Web server each time a request is made. Further, a method of confirming the processing result is also instructed from the Web server to the requester each time.
[0061]
The user authentication information for file storage is valid only for the requested file storage. Also, the user authentication information for processing result confirmation disappears after the requester confirms the processing result.
[0062]
Thus, according to the present invention, in order to access data of a predetermined user or a processing result thereof, logging in to a Web service system, having user authentication information for storing a file or confirming a processing result, It is necessary to know the storage location of the file or the processing result confirmation method. Therefore, it is extremely difficult to browse stored files and processing results, including the logged-in user.
[Brief description of the drawings]
FIG. 1 is a diagram showing a processing flow of a Web service system according to an embodiment of the present invention.
FIG. 2 is a diagram conceptually showing a conventional method of storing and transmitting data in a message.
FIG. 3 is a diagram conceptually showing a method of transmitting data in a file format attached to a request.
[Explanation of symbols]
110 A process for transmitting a request at the time of file transfer 120 A process for transmitting user authentication information for storing a file 130 A process for storing a file in a file storage location 140 A process for transmitting a file list 150 A process for transmitting user authentication information for confirming a processing result Processing to send

Claims (2)

A request for user authentication is received from the requester, and after performing the user authentication process, the information of the file storage location and the user authentication information for storing the file are transmitted to the requester, and the requester is transmitted to the requester. A Web server for transmitting a file to a file storage location, receiving a file list of the file from the requester, and transmitting user authentication information for confirming a processing result to the requester; Web service system. A requester sending a request for user authentication to a web server;
The Web server performing the user authentication process;
The Web server transmitting file storage location information and user authentication information for storing the file to the requester;
The requester sending a file to the file storage location;
The requester sending a file list of the file to the web server;
Transmitting a user authentication information for confirming a processing result from the web server to the requester, the data transmission processing method of the web service system.

Images