JP2005149382A - License management device and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To manage user's access restriction based on the number of users who can simultaneously use an application and the execution time of the application. <P>SOLUTION: This license management device 1 registers user IDs of communication terminals to which the execution of a Web application is permitted and a time when the execution of the Web application is permitted in a license permission management file 141 and when a communication terminal 3 accesses the Web application, when the number of communication terminals registered in the license permission management file 141 is smaller than the preset number of licenses, registers a user ID of the communication terminal 3 which accesses the Web application in the license permission management file 141. In addition, processing for deleting a user ID whose execution time of the Web application exceeds a preset timer time among the user IDs registered in the license permission management file 141 from the license permission management file 141 is performed. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a license management apparatus and a program.

In recent years, companies, schools, etc. have been networked by LAN (Local Area Network) and WAN (Wide Area Network), and a license management system for managing application licenses (application usage rights) on the network has been developed. (For example, refer to Patent Document 1). In such a license management system, when a user accesses an application, user authentication is performed, and the license management of the application is performed by limiting the number of users who can simultaneously use the application on the network. Recently, business systems using Web applications are increasing. In a business system using a Web application, user authentication is performed by acquiring a user ID from a cookie, for example, in order to manage application licenses.
JP-A-9-62393

  However, in a business system using a web application, the application is downloaded on the user's communication terminal side and the business is performed in the web browser. Therefore, the line between the web server and the communication terminal is disconnected after data communication. Therefore, there is a problem that it is difficult to manage licenses due to simultaneous user access restriction (restriction of the number of users who can use the application simultaneously). In addition, due to the characteristics of the Web application in which the line is disconnected after data communication, there has been a problem that the usage status of the user cannot be managed accurately, such as being left in an access state or shifting to another site.

  In addition, in the conventional license management system, user authentication is performed for each business system in an environment where a plurality of business systems such as an accounting system, a salary system, and a sales management system coexist, so a plurality of business systems are used. There has been a problem that such a user authentication procedure is troublesome for the user.

  An object of the present invention is to manage user access restrictions based on the number of users who can use an application at the same time and the execution time of the application.

  The invention according to claim 1 is a license management apparatus that causes a plurality of communication terminals connected via a network to execute an application for operating a business system, and the number of communication terminals that can simultaneously execute the application Information management storage means for storing the number of licenses for limiting the time and timer time for limiting the time during which the application can be executed, identification information of the communication terminal that is executing the application, and execution of the application are permitted The permission management storage means for registering the received time, and when the communication terminal accesses the application, if the number of communication terminals whose identification information is registered in the permission management storage means is less than the number of licenses, the accessed communication Register the terminal identification information in the permission management storage means, and A control unit that permits execution of the application, a determination unit that determines whether or not the execution time of the application exceeds the timer time for each communication terminal whose identification information is registered in the permission management storage unit, and the determination unit And deleting means for deleting the identification information of the communication terminal determined that the execution time of the application has exceeded the timer time from the permission management storage means.

  According to a fourth aspect of the present invention, there is provided a program for registering, in a storage unit, identification information of a communication terminal that is executing an application and a time when the application is permitted to execute, and the communication terminal has accessed the application. When the number of communication terminals whose identification information is registered in the storage means is smaller than a preset number, the identification information of the accessed communication terminal is registered in the storage means and the execution of the application is permitted. A function, a function for determining whether the execution time of the application exceeds a preset time for each communication terminal whose identification information is registered in the storage means, and the execution time of the application is preset by the determination. A function of deleting the identification information of the communication terminal determined to have exceeded the predetermined time from the storage means. That.

  ADVANTAGE OF THE INVENTION According to this invention, the license management by a user's access restriction | limiting can be performed even if it is in the state in which communication with the server which provides an application, and a communication terminal is cut | disconnected while the communication terminal is executing the application. In addition, since the usage status of the user's application can be grasped, license management according to the usage status of the user can be performed.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
(Embodiment 1)
The first embodiment of the present invention will be described in detail with reference to FIGS. First, the configuration in the first embodiment will be described.

  FIG. 1 shows the configuration of the license management system 100 according to the first embodiment. As shown in FIG. 1, the license management system 100 includes a license management apparatus 1, a web application server 2, and communication terminals 3 to 6, each of which includes a LAN (Local Area Network), a WAN (Wide Area Network), and the like. Connected via a communication network. Note that the number of communication terminals connected to one Web application server 2 is not particularly limited.

  The license management apparatus 1 is an apparatus that manages user access restrictions on Web applications provided by business systems such as an accounting system, a salary system, and a sales management system. Details of each unit constituting the license management apparatus 1 will be described later with reference to FIG.

  The web application server 2 is a device that operates a business system using a web application, and executes a business menu in response to a connection request from a web browser of the communication terminals 3 to 6. Details of each part constituting the Web application server 2 will be described later with reference to FIG.

  The communication terminals 3 to 6 are terminals such as a PC (Personal Computer) that can access a Web application from a Web browser, and a user ID is set for each communication terminal.

  Next, the main configuration of the license management apparatus 1 will be described with reference to FIG. As shown in FIG. 2, the license management device 1 includes a CPU (Central Processing Unit) 10, a display device 11, an input device 12, a communication control device 13, a RAM (Random Access Memory) 14, a storage device 15, and a timer unit 16. Each part is connected by a bus 17.

  The CPU 10 reads out various control processing programs stored in the storage device 15 and develops them in the RAM 14, and centrally controls each part of the license management apparatus 1 according to these control processing programs. Hereinafter, the control operation by the CPU 10 will be described.

  When the communication terminal accesses a Web application of a certain business system (for example, a Web application of a sales management system), the CPU 10 counts the number of communication terminals registered in the license permission management file 141 (see FIG. 3A) ( If the number of user IDs) is smaller than a preset license number (the maximum number of communication terminals that can simultaneously access the Web application), the user ID of the accessed communication terminal is registered in the license permission management file 141, and the Web Allow application to run.

  Further, the CPU 10 calculates the execution time of the Web application from the difference between the current system time and the permission time (time when the execution of the Web application is permitted) for each user ID registered in the license permission management file 141. It is determined whether or not the calculated execution time exceeds a preset timer time, and a process of deleting the user ID determined to have exceeded the timer time from the license permission management file 141 is performed.

  The display device 11 includes a display screen such as an LCD (Liquid Crystal Display) or a CRT (Cathode Ray Tube), and performs a required display process according to a display signal input from the CPU 10.

  The input device 12 includes a key input device including a character input key, a numeric keypad, a cursor key, and various function keys, a pointing device such as a mouse, and the like, and outputs an operation signal generated by operating the key input device and the pointing device to the CPU 10. .

  The communication control device 13 is configured by a modem (MODEM / DEModulator), a router, a TA (Terminal Adapter), and the like, and performs communication with an external device via a communication line such as a telephone line, a dedicated line, and an ISDN line. Take control.

  The RAM 14 develops various control processing programs and various application programs executed by the CPU 10 in a program storage area. The RAM 14 temporarily stores input data and data such as processing results generated when the control processing program is executed in the work area.

  The RAM 14 stores a license permission management file 141 (FIG. 3A) and a license information management file 142 (FIG. 3B) as shown in FIG. 3 as files necessary for managing user access restrictions.

  As shown in FIG. 3A, the license permission management file 141 stores each item of user ID and permission time in association with each other. The user ID item stores data for identifying a communication terminal that is permitted to execute a Web application. The permitted time item stores data of the time when the execution of the Web application is permitted. In FIG. 3A, the permission time “09:45:10” means “9:45:10”.

  As shown in FIG. 3B, the license information management file 142 stores data on the number of licenses and timer time. The number of licenses is the maximum number of communication terminals that can simultaneously access one Web application. The timer time is a time during which one communication terminal can continuously use a Web application. Here, the timer time “30” means “30 minutes”.

  The number of licenses and the timer time stored in the license information management file 142 are automatically set in a recording medium included in the RAM 14 or the storage device 15 when the business system program is installed in the license management device 1. The number of licenses and the timer time can be changed as the user's usage frequency increases or decreases.

  The storage device 15 has a recording medium in which programs, data, and the like are stored in advance. This recording medium is composed of a magnetic or optical recording medium or a non-volatile memory such as a semiconductor, and is fixedly attached to the storage device 15 or detachably mounted. This recording medium stores a license management processing program and data processed by this program.

  Note that the program or data stored in the storage device 15 may be received and stored in part or in whole from another device via a communication network. Further, the recording medium may be a recording medium of another host computer constructed on the communication network. In addition, the program stored in the storage device 15 may be transmitted to other devices via a communication network and installed in these devices.

  The timer unit 16 measures the elapsed time from the time (permitted time) when the communication terminals 3 to 6 are permitted to execute the Web application in accordance with the control signal from the CPU 10 and outputs the measured result to the CPU 10.

  Next, with reference to FIG. 4, the configuration of the main part of the Web application server 2 will be described. As shown in FIG. 4, the Web application server 2 includes a CPU (Central Processing Unit) 20, a display device 21, an input device 22, a communication control device 23, a RAM (Random Access Memory) 24, and a storage device 25. Are connected by a bus 26.

  The CPU 20 reads out various control programs stored in the storage device 25 and develops them in the RAM 24, and centrally controls each part of the Web application server 2 in accordance with those control programs. Hereinafter, the control operation by the CPU 20 will be described.

  The CPU 20 acquires the user ID of the communication terminal that has requested access to the Web application, and transmits the acquired user ID and execution confirmation request to the license management apparatus 1. When the license management apparatus 1 permits the execution of the Web application, the menu job specified from the communication terminal is executed. If the license management apparatus 1 does not permit execution of the Web application, a guidance display message notifying that the number of accesses to the Web application has exceeded the number of licenses is transmitted to the communication terminal that has requested access.

  The display device 21 includes a display screen such as an LCD (Liquid Crystal Display) and a CRT (Cathode Ray Tube), and performs a required display process according to a display signal input from the CPU 20.

  The input device 22 includes a key input device including a character input key, a numeric keypad, a cursor key, and various function keys, a pointing device such as a mouse, and the like, and outputs an operation signal generated by operating the key input device and the pointing device to the CPU 20. .

  The communication control device 23 is configured by a modem (MODEM / DEModulator), a router, a TA (Terminal Adapter), and the like, and performs communication with an external device via a communication line such as a telephone line, a dedicated line, and an ISDN line. Take control.

  The RAM 24 develops various control processing programs and various application programs executed by the CPU 20 in a program storage area. The RAM 24 temporarily stores input data and data such as processing results generated when the control processing program is executed in the work area.

  The storage device 25 has a recording medium in which programs, data, and the like are stored in advance. This recording medium is composed of a magnetic or optical recording medium or a non-volatile memory such as a semiconductor, and is provided in the storage device 25 fixedly or detachably mounted.

Next, the operation in the first embodiment will be described.
First, processing executed by the Web application server 2 according to the first embodiment will be described with reference to the flowchart of FIG. In the following, processing when there is a connection request from the communication terminal 3 will be described.

  When the URL (Uniform Resource Locator) of the Web application is specified by the Web browser of the communication terminal 3, a menu of the corresponding Web application is transmitted to the communication terminal 3 (Step T10).

  When an operation is selected from the received menu in the communication terminal 3, the user ID recorded in the communication terminal 3 is acquired by Cookie (step T11), and the acquired user ID is set. Then, the acquired user ID and execution confirmation request are transmitted to the license management apparatus 1 (step T12), and an execution confirmation response from the license management apparatus 1 is waited for (step T13).

  As a result of the execution confirmation, when an NG signal indicating that execution of the Web application is not permitted is received from the license management device 1 (step T13; NG), the number of accesses to the Web application exceeds the number of licenses. A message notifying that it has been generated is generated and transmitted to the communication terminal 3 (step T14), and the process returns to step T10.

  As a result of the execution confirmation, when an OK signal indicating that the execution of the Web application is permitted is received from the license management apparatus 1 (step T13; YES), the menu job selected by the communication terminal 3 is executed. (Step T15).

  When the end of business is instructed from the communication terminal 3 (step T16; YES), if the session with the communication terminal 3 is connected, the user ID is set, and the corresponding user ID and end confirmation are set in the license management apparatus 1. A request is transmitted (step T17), and business end processing is executed. When a job termination is instructed from the communication terminal 3, if the session with the communication terminal 3 is disconnected due to the operation of the communication terminal 3, the user ID cannot be taken over, so only the job termination process is executed. Is done. After the business process is completed, the process returns to step T10, and the processes of steps T10 to T17 are repeated until the business system is completed.

  FIG. 6 is a flowchart for explaining the operation of the license management apparatus 1 according to the first embodiment. This flowchart is for explaining a program for causing a computer constituting the license management apparatus 1 of the first embodiment to realize each function. In the first embodiment, an example in which this program is stored in a recording medium in the form of a program code that can be read by the CPU 10 will be described, but it is not necessary to store all the functions in the recording medium. A part or all of the information may be received from the communication control device 13 via a communication network.

  A license management process executed by the license management apparatus 1 according to the first embodiment will be described with reference to the flowchart of FIG.

  When the web application server 2 is activated, a web application request management module is activated in the license management apparatus 1 (step S100), and a timer setting management module is activated (step S120). The module waits for an execution confirmation request or an end confirmation request from the Web application server 2 (step S101).

  In step S101, when an execution confirmation request is received from the web application server 2 (step S101; execution confirmation), the user ID of the communication terminal that has requested access to the web application is acquired from the web application server 2 (step S102). Then, it is determined whether or not the acquired user ID has been registered in the license permission management file 141 (step S103).

  In step S103, when it is determined that the user ID acquired in step S102 has been registered in the license permission management file 141 (step S103; YES), the system time of the license management apparatus 1 is set as the permission time ( In step S107), the user ID acquired in step S102 and the permission time set in step S107 are set (added or corrected) in the license permission management file 141 (step S108). Then, the process returns to step S101, and again waits for reception of an execution confirmation request or an end confirmation request from the web application server 2.

  In step S103, when it is determined that the user ID acquired in step S102 is not registered in the license permission management file 141 (step S103; NO), the number of licenses is acquired from the license information management file 142 (step S103). S104).

  Next, the permission number (number of user IDs) currently set in the license permission management file 141 is calculated (step S105), and whether or not the access number when the access is newly permitted is within the range of the license number. Is determined (step S106).

  In step S106, when it is determined that the number of accesses when access is newly permitted is not within the range of the number of licenses (step S106; NO), a guidance display indicating that access is over is transmitted to the web application server 2. (Step S109), the process returns to Step S101 and again waits for reception of an execution confirmation request or an end confirmation request from the Web application server 2.

  If it is determined in step S106 that the number of accesses when access is newly permitted is within the range of the number of licenses (step S106; YES), the system time of the license management apparatus 1 is set as the permitted time (step S107). ) The user ID acquired in step S102 and the permission time set in step S107 are set (added or corrected) in the license permission management file 141 (step S108). Then, the process returns to step S101, and again waits for reception of an execution confirmation request or an end confirmation request from the web application server 2.

  When an end confirmation request is received from the web application server 2 in step S101 (step S101; end confirmation), the user ID of the communication terminal that designates the end of business is acquired from the web application server 2 (step S110). It is determined whether or not the acquired user ID has been registered in the license permission management file 141 (step S111).

  If it is determined in step S111 that the user ID acquired in step S110 has been registered in the license permission management file 141 (step S111; YES), the corresponding user ID and permission time are read from the license permission management file 141. Is deleted (step S112), and the process returns to step S101.

  If it is determined in step S111 that the user ID acquired in step S110 is not registered in the license permission management file 141 (step S111; NO), it is regarded as an error, and an error notification is transmitted to the web application server 2. (Step S113), the process returns to Step S101.

  In the timer setting management module, first, the user ID and permission time of the user who is currently permitted to execute the Web application are acquired from the license permission management file 141 (step S121).

  Next, the timer time is acquired from the license information management file 142 (step S122), and it is determined whether or not the execution time of the Web application in the communication terminal of the user ID acquired in step S121 is within the timer time ( Step S123).

  If it is determined in step S123 that the execution time of the Web application is within the timer time (step S123; YES), the process returns to step S121, and steps S121 to S123 are performed for the next user ID in the license permission management file 141. The process is repeated.

  If it is determined in step S123 that the execution time of the Web application has exceeded the timer time (step S123; NO), it is considered that the task for the corresponding user has ended, and the corresponding user is determined from the license permission management file 141. The ID and permission time are deleted (step S124). Then, the processing in steps S121 to S123 is repeated for the next user ID in the license permission management file 141.

  As described above, the license management apparatus 1 according to the first embodiment registers the user ID of the communication terminal permitted to execute the Web application and the time when the execution of the Web application is permitted in the license permission management file 141. When the communication terminal accesses the Web application, if the number of communication terminals registered in the license permission management file 141 is smaller than the number of licenses, the user ID of the accessed communication terminal is registered in the license permission management file 141 and license permission is granted. Among the user IDs registered in the management file 141, user IDs whose Web application execution time has exceeded a preset timer time are deleted from the license permission management file 141. Therefore, even when communication between the communication terminal and the Web server is disconnected while the communication terminal is executing the Web application, it is possible to manage user access restrictions. In addition, since the usage status of the user's Web application can be ascertained, license management according to the usage status can be performed.

  In addition, unlike the conventional method of restricting access by user authentication, it is not necessary to perform user authentication for each business system. Therefore, even when using a plurality of business systems, the user can smoothly access the Web of each business system. Applications can be used.

(Embodiment 2)
Next, Embodiment 2 of the present invention will be described in detail with reference to FIGS. In the second embodiment, a method for managing user access restrictions for each product handled in the business system will be described.

First, the configuration in the second embodiment will be described.
Since the main configuration of the license management apparatus according to the second embodiment is the same as that of the license management apparatus 1 shown in FIG. 2 in the first embodiment, the illustration thereof is omitted and the same reference numerals are used. Only the components different from the license management apparatus 1 of the first embodiment will be described below.

  The CPU 10 of the license management apparatus 1 according to the second embodiment reads various control processing programs stored in the storage device 15 and expands them in the RAM 14 and centrally controls each part of the license management apparatus 1 according to these control processing programs. Hereinafter, the control operation by the CPU 10 of the second embodiment will be described.

  When the communication terminal accesses the Web application specified by the product ID, the CPU 10 determines from the license permission management file 143 (see FIG. 7A) the number of communication terminals that are executing the Web application with the product ID ( If the number of acquired communication terminals is smaller than the number of licenses set corresponding to the corresponding product ID, the user ID of the accessed communication terminal is stored in the license permission management file 143. Register and allow execution of the web application.

  Further, the CPU 10 calculates the execution time of the Web application from the difference between the current system time and the permission time (time when the execution of the Web application is permitted) for each user ID registered in the license permission management file 143. It is determined whether the calculated execution time has exceeded the timer time set corresponding to the corresponding product ID, and the user ID determined to have exceeded the timer time is deleted from the license permission management file 143. Process.

  The RAM 14 develops various control processing programs and various application programs executed by the CPU 10 in a program storage area. The RAM 14 temporarily stores input data and data such as processing results generated when the control processing program is executed in the work area.

  The RAM 14 stores a license permission management file 143 (FIG. 7A) and a license information management file 144 (FIG. 7B) as shown in FIG. 7 as files necessary for managing user access restrictions.

  As shown in FIG. 7A, the license permission management file 143 stores items of product ID, user ID, and permission time in association with each other. The product ID item stores data for identifying a product handled in the business system. The user ID item stores data for identifying a communication terminal that is permitted to execute the Web application specified by the corresponding product ID. The permission time item stores data of the time when the execution of the Web application specified by the corresponding product ID is permitted.

  As shown in FIG. 7B, the license information management file 144 stores items of product ID, number of licenses, and timer time in association with each other. The license number field stores data on the maximum number of communication terminals that can simultaneously access the Web application specified by the corresponding product ID. The timer time item stores data on the time at which one communication terminal can continuously use the Web application specified by the corresponding product ID. The timer times “30”, “40”, and “50” shown in FIG. 7B mean “30 minutes”, “40 minutes”, and “50 minutes”, respectively.

  The number of licenses and the timer time stored in the license information management file 144 are automatically set in the recording medium of the RAM 14 or the storage device 15 when the business system program is installed in the license management device 1. The number of licenses and the timer time can be changed as the user's usage frequency increases or decreases.

Next, the operation in the second embodiment will be described.
First, processing executed by the Web application server 2 of the second embodiment will be described with reference to the flowchart of FIG. In the following, processing when there is a connection request from the communication terminal 3 will be described.

  When the URL (Uniform Resource Locator) of the Web application is specified by the Web browser of the communication terminal 3, a menu of the corresponding Web application is transmitted to the communication terminal 3 (Step T20).

  When an operation is selected from the received menu in the communication terminal 3, the user ID recorded in the communication terminal 3 is acquired by Cookie (step T21), and the acquired user ID is set. Then, the product ID for identifying the corresponding Web application, the user ID acquired in step T21, and the execution confirmation request are transmitted to the license management apparatus 1 (step T22), and an execution confirmation response from the license management apparatus 1 is waited for. (Step T23).

  As a result of the execution confirmation, when an NG signal indicating that execution of the Web application is not permitted is received from the license management apparatus 1 (step T23; NG), the number of accesses to the Web application exceeds the number of licenses. A guidance display message notifying that it has been generated is generated and transmitted to the communication terminal 3 (step T24), and the process returns to step T20.

  As a result of the execution confirmation, when an OK signal indicating that the execution of the Web application is permitted is received from the license management apparatus 1 (step T23; YES), the menu job selected by the communication terminal 3 is executed. (Step T25).

  When the end of business is instructed from the communication terminal 3 (step T26; YES), when the session with the communication terminal 3 is connected, the user ID is set and the corresponding Web application is specified in the license management apparatus 1. The product ID, the user ID of the communication terminal 3 that executed the Web application, and an end confirmation request are transmitted (step T27), and the business end process is executed. When a job termination is instructed from the communication terminal 3, if the session with the communication terminal 3 is disconnected due to the operation of the communication terminal 3, the user ID cannot be taken over, so only the job termination process is executed. Is done. After the business process is completed, the process returns to step T20, and the processes of steps T20 to T27 are repeated until the business system is completed.

  FIG. 9 is a flowchart for explaining the operation of the license management apparatus 1 according to the second embodiment. This flowchart is for explaining a program for causing a computer constituting the license management apparatus 1 of the second embodiment to realize each function. In the second embodiment, an example in which these programs are stored in the recording medium in the form of a program code that can be read by the CPU 10 will be described. However, it is not necessary to store all the functions in the recording medium. A part or all of the information may be received from the communication control device 13 via the communication network.

  A license management process executed by the license management apparatus 1 according to the second embodiment will be described with reference to the flowchart of FIG.

  When the web application server 2 is activated, a web application request management module is activated in the license management apparatus 1 (step S200), and a timer setting management module is activated (step S220). The module waits for an execution confirmation request or an end confirmation request from the Web application server 2 (step S201).

  In step S201, when an execution confirmation request is received from the web application server 2 (step S201; execution confirmation), the product ID for identifying the web application from the web application server 2 and the communication terminal that has requested access to the web application. A user ID is acquired (step S202), and it is determined whether or not the acquired product ID and user ID have been registered in the license permission management file 143 (step S203).

  In step S203, when it is determined that the product ID and user ID acquired in step S202 are already registered in the license permission management file 143 (step S203; YES), the system time of the license management apparatus 1 is set as the permission time. The product ID, the user ID acquired in step S202, and the permission time set in step S207 are set (added or corrected) in the license permission management file 143 (step S208). Then, the process returns to step S201, and again waits for reception of an execution confirmation request or an end confirmation request from the Web application server 2.

  If it is determined in step S203 that the product ID and user ID acquired in step S202 are not registered in the license permission management file 143 (step S203; NO), the corresponding product ID is obtained from the license information management file 144. The number of licenses corresponding to is acquired (step S204).

  Next, the permitted number (number of user IDs) of the corresponding product ID currently set in the license permission management file 143 is calculated (step S205), and the access number when the access is newly permitted is the corresponding product ID. It is determined whether the number of licenses is within the range (step S206).

  In step S206, when it is determined that the number of accesses when access is newly permitted is not within the range of the number of licenses of the corresponding product ID (step S206; NO), a guidance display indicating that the access limit is exceeded is displayed on the Web. It is transmitted to the application server 2 (step S209), returns to step S201, and again waits for reception of an execution confirmation request or termination confirmation request from the web application server 2.

  In step S206, when it is determined that the number of accesses when access is newly permitted is within the range of the number of licenses of the corresponding product ID (step S206; YES), the system time of the license management apparatus 1 is the permitted time. (Step S207), the product ID acquired in Step S202, the user ID, and the permission time set in Step S207 are set (added or corrected) in the license permission management file 143 (Step S208). Then, the process returns to step S201, and again waits for reception of an execution confirmation request or an end confirmation request from the Web application server 2.

  When an end confirmation request is received from the web application server 2 in step S201 (step S201; end confirmation), the user ID of the communication terminal that has designated the end of business and the product ID that identifies the web application are received from the web application server 2. It is acquired (step S210), and it is determined whether or not the acquired product ID and user ID have been registered in the license permission management file 143 (step S211).

  If it is determined in step S211 that the product ID and user ID acquired in step S210 have been registered in the license permission management file 143 (step S211; YES), the corresponding product ID is determined from the license permission management file 143. The user ID and permission time are deleted (step S212), and the process returns to step S201.

  In step S211, when it is determined that the product ID and the user ID acquired in step S210 are not registered in the license permission management file 143 (step S211; NO), it is regarded as an error, and an error notification is sent to the web application server 2. Is transmitted (step S213), and the process returns to step S201.

  In the timer setting management module, first, from the license permission management file 143, the user ID of the user who is currently permitted to execute the Web application, the product ID for specifying the Web application, and the permission time are acquired (step S221). ).

  Next, the timer time corresponding to the product ID acquired in step S221 is acquired from the license information management file 144 (step S222), and whether or not the execution time of the Web application for the product ID is within the timer time. Determination is made (step S223).

  If it is determined in step S223 that the execution time of the Web application with the corresponding product ID is within the timer time of the product ID (step S223; YES), the process returns to step S221 and the next in the license permission management file 143 is returned. The process of steps S221 to S223 is repeated for the user ID.

  In step S223, when it is determined that the execution time of the Web application with the corresponding product ID exceeds the timer time of the product ID (step S223; NO), it is considered that the task for the corresponding user has ended, The corresponding product ID, user ID, and permission time are deleted from the license permission management file 143 (step S224). Then, the processing in steps S221 to S223 is repeated for the next user ID in the license permission management file 143.

  As described above, according to the license management system 100 of the second embodiment, the user access restriction is managed for each product handled in the business system, so that detailed license management can be performed for each product. .

(Embodiment 3)
Next, Embodiment 3 of the present invention will be described in detail with reference to FIGS. In the third embodiment, a method for managing user access restrictions for each business menu in the business system will be described. The business menu means business items constituting the business system.

First, the configuration in the third embodiment will be described.
Since the main configuration of the license management apparatus according to the third embodiment is the same as that of the license management apparatus 1 shown in FIG. 2 in the first embodiment, the illustration thereof is omitted and the same reference numerals are used. Only the components different from the license management apparatus 1 of the first embodiment will be described below.

  The CPU 10 of the license management apparatus 1 according to the third embodiment reads various control processing programs stored in the storage device 15 and develops them in the RAM 14 and centrally controls each part of the license management apparatus 1 according to these control processing programs. Hereinafter, the control operation by the CPU 10 of the third embodiment will be described.

  When the communication terminal accesses the business menu included in the Web application, the CPU 10 determines from the license permission management file 145 (see FIG. 10A) the number of communication terminals that are executing the business menu (the number of user IDs). ) And the user ID of the accessed communication terminal is registered in the license permission management file 145 if the number of acquired communication terminals is smaller than the number of licenses set corresponding to the corresponding business menu. Permit execution of business menu.

  Further, the CPU 10 calculates the execution time of the business menu for each user ID registered in the license permission management file 145 from the difference between the current system time and the permission time (time when the execution of the business menu is permitted), It is determined whether or not the calculated execution time exceeds the timer time set corresponding to the corresponding business menu ID, and the user ID determined to have exceeded the timer time is deleted from the license permission management file 145. Perform the process.

  The RAM 14 develops various control processing programs and various application programs executed by the CPU 10 in a program storage area. The RAM 14 temporarily stores input data and data such as processing results generated when the control processing program is executed in the work area.

  The RAM 14 stores a license permission management file 145 (FIG. 10A) and a license information management file 146 (FIG. 10B) as shown in FIG. 10 as files necessary for managing user access restrictions.

  As shown in FIG. 10A, the license permission management file 145 stores business ID, user ID, and permission time items in association with each other. The business ID item stores data for identifying a business menu. The user ID item stores data for identifying a communication terminal that is permitted to execute the corresponding business menu. The permitted time item stores data on the time when the execution of the corresponding business menu is permitted.

  As shown in FIG. 10B, the license information management file 146 stores the business ID, the number of licenses, and the timer time in association with each other. The number-of-licenses item stores data on the maximum number of communication terminals that can simultaneously access the business menu of the corresponding business ID. The timer time item stores data on the time at which one communication terminal can continuously use the corresponding business menu.

  The number of licenses and the timer time stored in the license information management file 146 are automatically set in a recording medium included in the RAM 14 or the storage device 15 when the business system program is installed in the license management device 1. The number of licenses and the timer time can be changed as the user's usage frequency increases or decreases.

Next, the operation in the third embodiment will be described.
First, processing executed by the Web application server 2 according to the third embodiment will be described with reference to the flowchart in FIG. In the following, processing when there is a connection request from the communication terminal 3 will be described.

  When the URL (Uniform Resource Locator) of the Web application is specified by the Web browser of the communication terminal 3, a menu of the corresponding Web application is transmitted to the communication terminal 3 (Step T30).

  When the business menu is selected in the communication terminal 3, the user ID recorded in the communication terminal 3 is acquired by Cookie (step T31), and the acquired user ID is set. Then, the business ID of the selected business menu, the user ID acquired in step T31, and the execution confirmation request are transmitted to the license management apparatus 1 (step T32), and an execution confirmation response from the license management apparatus 1 is waited for ( Step T33).

  As a result of the execution confirmation, when an NG signal indicating that execution of the business menu is not permitted is received from the license management apparatus 1 (step T33; NG), the number of accesses to the business menu exceeds the number of licenses. A guidance display message notifying that it has been generated is generated and transmitted to the communication terminal 3 (step T34), and the process returns to step T30.

  As a result of the execution confirmation, when an OK signal indicating that the execution of the job menu is permitted is received from the license management apparatus 1 (step T33; YES), the corresponding menu job is executed (step T35).

  When the end of business is instructed from the communication terminal 3 (step T36; YES), when a session with the communication terminal 3 is connected, a user ID is set, and the corresponding business ID is stored in the license management apparatus 1. The user ID of the communication terminal 3 that executed the business menu and the end confirmation request are transmitted (step T37), and the business end process is executed. When a job termination is instructed from the communication terminal 3, if the session with the communication terminal 3 is disconnected due to the operation of the communication terminal 3, the user ID cannot be taken over, so only the job termination process is executed. Is done. After the business process is completed, the process returns to step T30, and the processes in steps T30 to T37 are repeated until the business system is completed.

  FIG. 12 is a flowchart for explaining the operation of the license management apparatus 1 according to the third embodiment. This flowchart is for explaining a program for causing a computer constituting the license management apparatus 1 of the third embodiment to realize each function. In the third embodiment, an example in which these programs are stored in a recording medium in the form of a program code that can be read by the CPU 10 will be described. However, it is not necessary to store all the functions in the recording medium. A part or all of the information may be received from the communication control device 13 via the communication network.

  A license management process executed by the license management apparatus 1 according to the third embodiment will be described with reference to the flowchart of FIG.

  When the web application server 2 is activated, a web application request management module is activated in the license management apparatus 1 (step S300), a timer setting management module is activated (step S320), and the web application request management module is activated. The module waits for an execution confirmation request or an end confirmation request from the Web application server 2 (step S301).

  In step S301, when an execution confirmation request is received from the web application server 2 (step S301; execution confirmation), the web application server 2 makes an access request to the business ID of the business menu included in the web application and the business menu. The user ID of the communication terminal is acquired (step S302), and it is determined whether or not the acquired business ID and user ID have been registered in the license permission management file 145 (step S303).

  If it is determined in step S303 that the business ID and user ID acquired in step S302 have been registered in the license permission management file 145 (step S303; YES), the system time of the license management apparatus 1 is set as the permission time. The business ID, the user ID acquired in step S302, and the permission time set in step S307 are set (added or corrected) in the license permission management file 145 (step S308). Then, the process returns to step S301, and again waits for reception of an execution confirmation request or an end confirmation request from the Web application server 2.

  If it is determined in step S303 that the business ID and user ID acquired in step S302 are not registered in the license permission management file 145 (step S303; NO), the corresponding business ID is determined from the license information management file 146. The number of licenses corresponding to is acquired (step S304).

  Next, the permitted number (number of user IDs) of the corresponding business ID currently set in the license permission management file 145 is calculated (step S305), and the access number when the access is newly permitted is the corresponding business ID. It is determined whether the number of licenses is within the range (step S306).

  In step S306, when it is determined that the number of accesses when access is newly permitted is not within the range of the number of licenses of the corresponding business ID (step S306; NO), a guidance display indicating that access is over is displayed on the Web. It is transmitted to the application server 2 (step S309), returns to step S301, and again waits for reception of an execution confirmation request or termination confirmation request from the web application server 2.

  If it is determined in step S306 that the number of accesses when the access is newly permitted is within the range of the number of licenses of the corresponding business ID (step S306; YES), the system time of the license management apparatus 1 is the permitted time. (Step S307), the business ID and user ID acquired in step S302 and the permission time set in step S307 are set (added or corrected) in the license permission management file 145 (step S308). Then, the process returns to step S301, and again waits for reception of an execution confirmation request or an end confirmation request from the Web application server 2.

  In step S301, when an end confirmation request is received from the web application server 2 (step S301; end confirmation), the user ID and the business ID of the communication terminal that designates the business end are acquired from the web application server 2 (step S310). It is determined whether or not the acquired business ID and user ID have been registered in the license permission management file 145 (step S311).

  If it is determined in step S311 that the business ID and user ID acquired in step S310 have been registered in the license permission management file 145 (step S311; YES), the corresponding business ID is retrieved from the license permission management file 145. The user ID and permission time are deleted (step S312), and the process returns to step S301.

  In step S311, when it is determined that the business ID and user ID acquired in step S310 are not registered in the license permission management file 145 (step S311; NO), it is regarded as an error and an error notification is sent to the web application server 2. Is transmitted (step S313), and the process returns to step S301.

  In the timer setting management module, first, the user ID of the user who is currently permitted to execute the business menu included in the Web application, the business ID of the business menu, and the permission time are acquired from the license permission management file 145. (Step S321).

  Next, the timer time corresponding to the business ID acquired in step S321 is acquired from the license information management file 146 (step S322), and the execution time of the business menu of the business ID is within the timer time acquired in step S322. It is determined whether or not (step S323).

  If it is determined in step S323 that the execution time of the corresponding business menu is within the timer time (step S323; YES), the process returns to step S321, and for the next user ID in the license permission management file 145, step S321 is executed. The process of S323 is repeated.

  If it is determined in step S323 that the execution time of the corresponding business menu has exceeded the timer time (step S323; NO), it is considered that the business for the corresponding user has ended, and the license permission management file 145 indicates that the corresponding The business ID, user ID, and permission time to be deleted are deleted (step S324). Then, the processing in steps S321 to S323 is repeated for the next user ID in the license permission management file 145.

  As described above, according to the license management system 100 of the third embodiment, since the user access restriction is managed for each business menu of the business system, fine license management for each business menu can be performed. . In addition, by setting a timer time for each business menu, it is possible to distribute the load of the business where the use is concentrated.

  In addition, the description content in each said embodiment can be suitably changed in the range which does not deviate from the meaning of this invention.

The block diagram which shows the structure of the license management system of this embodiment. The block diagram which shows the structure of the license management apparatus which concerns on embodiment of this invention. FIG. 2 is a diagram showing a data configuration (a diagram (a)) of a license permission management file stored in the RAM of the license management apparatus according to the first embodiment and a data configuration (a diagram (b)) of a license information management file. The block diagram which shows the structure of the web application server 2. FIG. 6 is a flowchart illustrating processing executed by the Web application server according to the first embodiment when a connection request is received from a Web browser of a communication terminal. 6 is a flowchart illustrating a license management process executed by the license management apparatus according to the first embodiment. FIG. 9 is a diagram showing a data configuration (a diagram (a)) of a license permission management file stored in a RAM of a license management apparatus according to a second embodiment and a data configuration (a diagram (b)) of a license information management file. 10 is a flowchart illustrating processing executed by the Web application server according to the second embodiment when a connection request is received from a Web browser of a communication terminal. 10 is a flowchart showing a license management process executed by the license management apparatus according to the second embodiment. The figure which shows the data structure (the figure (a)) of the license permission management file memorize | stored in RAM of the license management apparatus of Embodiment 3 and the data structure (the figure (b)) of a license information management file. 10 is a flowchart illustrating processing executed by the Web application server according to the third embodiment when a connection request is received from a Web browser of a communication terminal. 10 is a flowchart showing a license management process executed by the license management apparatus according to the third embodiment.

Explanation of symbols

1 License management device 10 CPU
11 Display device 12 Input device 13 Communication control device 14 RAM
141, 143, 145 License permission management file 142, 144, 146 License information management file 15 Storage device 16 Timer unit 2 Web application server 20 CPU
21 Display device 22 Input device 23 Communication control device 24 RAM
25 Storage Device 3-6 Communication Terminal 100 License Management System

Claims (4)

A license management apparatus for executing an application for operating a business system on a plurality of communication terminals connected via a network,
Information management storage means for storing the number of licenses for limiting the number of communication terminals that can simultaneously execute the application and the timer time for limiting the time during which the application can be executed;
Permission management storage means for registering the identification information of the communication terminal that is executing the application and the time when the execution of the application is permitted;
When a communication terminal accesses the application, if the number of communication terminals whose identification information is registered in the permission management storage means is less than the number of licenses, the identification information of the accessed communication terminal is stored in the permission management storage means. Control means to register and allow execution of the application;
For each communication terminal whose identification information is registered in the permission management storage unit, a determination unit that determines whether the execution time of the application exceeds the timer time;
A deletion unit that deletes the identification information of the communication terminal determined by the determination unit that the execution time of the application has exceeded the timer time from the permission management storage unit;
A license management apparatus comprising: Each of the plurality of communication terminals can be connected to a plurality of applications via the network,
Each of the plurality of applications is specified by a product handled in the business system,
The information management storage means stores the number of licenses and the timer time for each product specifying an application,
The permission management storage means registers the identification information of the communication terminal that is executing the application and the time when the application is permitted to be executed for each product that identifies the application,
When the communication terminal accesses the application, the control unit acquires the number of communication terminals that are executing the application from the permission management storage unit, and the acquired number of communication terminals corresponds to the license corresponding to the application. If the number is less than the number, register the identification information of the accessed communication terminal in the permission management storage means, permit the execution of the application,
The determination means determines whether or not the execution time of the application exceeds the timer time corresponding to the application for each communication terminal whose identification information is registered in the permission management storage means.
2. The deletion unit is configured to delete, from the permission management storage unit, identification information of a communication terminal that is determined by the determination unit that the execution time of the application has exceeded a timer time corresponding to the application. License management device. The application includes a plurality of business menus in the business system,
The information management storage means includes, for each business menu in the business system, a license number for limiting the number of communication terminals that can simultaneously execute the business menu and a timer time for limiting a time during which the business menu can be executed. Remember
The permission management storage unit registers, for each business menu included in the application, identification information of a communication terminal that is executing the business menu and a time at which the execution of the business menu is permitted,
The control unit acquires the number of communication terminals that are executing the business menu from the permission management storage unit when the communication terminal accesses the business menu included in the application, and the acquired number of communication terminals is: If the number of licenses corresponding to the business menu is less, the identification information of the accessed communication terminal is registered in the permission management storage unit, and the execution of the business menu is permitted,
The determination means determines, for each communication terminal whose identification information is registered in the permission management storage means, whether or not the execution time of the business menu exceeds a timer time corresponding to the business menu,
The deletion unit is configured to delete, from the permission management storage unit, identification information of a communication terminal that has been determined by the determination unit that a task menu execution time has exceeded a timer time corresponding to the task menu. 1. The license management apparatus according to 1. On the computer,
A function of registering in the storage means the identification information of the communication terminal that is executing the application and the time when the execution of the application is permitted;
When a communication terminal accesses the application, if the number of communication terminals whose identification information is registered in the storage means is less than a preset number, the identification information of the accessed communication terminal is registered in the storage means. , A function that allows execution of the application,
A function for determining whether or not the execution time of the application exceeds a preset time for each communication terminal whose identification information is registered in the storage unit;
A function of deleting the identification information of the communication terminal determined from the determination that the execution time of the application exceeds a preset time from the storage unit;
A program to realize

Images