JP2006221269A - Communication system and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a mechanism capable of making the processing burden on a system as light as possible, while achieving a higher level of security. <P>SOLUTION: A client computer includes a display means for displaying an operation screen based on data provided by a host computer; a generating means for generating in accordance with a predetermined algorithm the binary data that shows the operation screen, every time the operation screen is displayed by the display means; and a transmission means for transmitting the binary data generated by the generating means to a log management server device without causing the data to be stored in a nonvolatile storage means. The log management server device includes a storage means for storing the binary data transmitted from the client computer; a designating means for designating search conditions; a search means for extracting the binary data that matches the designated search conditions from the binary data stored in the storage means; and a log display means for displaying the operation screen according to the binary data extracted. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a technique for monitoring various operation states performed in a computer.

  Techniques have been proposed in which an operation screen displayed by a computer is stored as a log, and the operation screen displayed on the computer is reproduced as necessary to monitor past operation states in the computer (for example, Patent Documents 1 to 3). 4).

JP 2004-56604 A JP 2003-256035 A Japanese Patent Laid-Open No. 2001-84029 Japanese Patent Laid-Open No. 10-78818

  Incidentally, in a communication system (host emulator system) in which a client computer displays an operation screen based on data provided from the host computer and the host computer executes processing according to a user operation using the operation screen, It is desired to introduce a mechanism for monitoring the operation status as described above. However, when introducing such a mechanism, the processing burden that the system must bear should be reduced as much as possible, and fraudulent acts such as tampering with the stored operation screen cannot be performed. It is necessary to ensure security.

  The present invention has been made in view of the above-described background, and an object of the present invention is to provide a mechanism capable of reducing the processing load of the system as much as possible and realizing a higher security level.

  In order to solve the above problems, the present invention includes a host computer, a plurality of client computers connected to the host computer via a network, and a log management device that manages an operation history in each of the client computers. In the communication system in which the client computer displays an operation screen based on data provided from the host computer and the host computer executes processing according to a user operation using the operation screen, the client computer A display unit that displays an operation screen based on data provided from a host computer, and a generator that generates binary data representing the operation screen according to a predetermined algorithm each time the operation screen is displayed by the display unit. And transmission means for transmitting the binary data generated by the recording generation means to the log management apparatus without being stored in the nonvolatile storage means, and the log management apparatus is transmitted from the client computer Storage means for storing binary data; designation means for designating search conditions; search means for extracting binary data that matches the search conditions designated by the designation means from the binary data stored in the storage means And a log display means for displaying an operation screen based on the binary data extracted by the search means.

  In a preferred aspect of the present invention, the generating means of the client computer generates binary data representing the operation screen, further compresses the generated binary data, and the transmitting means is compressed by the generating means. The binary data is transmitted to the log management device without being stored in the nonvolatile storage means. Further, the client computer includes storage means for temporarily storing the binary data generated by the generation means, and the transmission means of the client computer periodically stores the binary data stored by the storage means. You may make it transmit to the said log management apparatus.

The present invention also provides a function for causing a computer to display an operation screen on a display device based on data provided from a host computer, and a binary representing the operation screen each time the operation screen is displayed on the display device. A function to generate data according to a predetermined algorithm;
Provided is a program for realizing a function of transmitting generated binary data from a transmission device to a log management device without storing the generated binary data in a nonvolatile storage device. Further, the present invention is specified from the function of causing a computer to store binary data transmitted from a client computer in a storage device, the function of specifying a search condition, and the binary data stored in the storage device. There is provided a program that realizes a function of extracting binary data that matches a search condition and a function of displaying an operation screen on a display device based on the binary data extracted by the search means.

Embodiments of the present invention will be described below.
A: Configuration FIG. 1 is a diagram illustrating a configuration of the entire system according to the present embodiment. As shown in FIG. 1, the communication system includes a plurality of client computers 10 and a host computer 20 connected to the LAN 1, and a log management server device 30 that manages an operation history in each client computer. Each client computer 10 has a client program for displaying an operation screen based on data provided from the host computer 20 and instructing the host computer 20 to perform processing in accordance with a user operation performed on the operation screen. Installed. On the other hand, the host computer 20 is installed with a host program for executing processing according to an instruction from the client computer 10 and transmitting an operation screen representing the processing result to the client computer. The log management server device 30 is installed with a log management program for managing an operation history in each client computer 10.

  These computer programs are recorded on various recording media such as a magnetic tape, a magnetic disk, a floppy (registered trademark) disk, an optical recording medium, a magneto-optical recording medium, a CD (Compact Disk) -ROM, and a DVD (Digital Versatile Disk). It is possible to sell and circulate in a sold state. In FIG. 1, only three client computers 10 are shown in order to prevent the drawing from becoming complicated, but these may actually be more or less.

  Next, the configuration of the client computer 10 will be described with reference to FIG. As shown in FIG. 2, the client computer 10 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, a communication interface 14, a hard disk 15, and a display unit. 16 and an operation unit 17. The communication interface 14 is connected to the LAN 1 and performs data communication with the host computer 20 and the log management server device 30 in accordance with instructions from the CPU 11. The above-described client program is stored in the hard disk 15 which is a nonvolatile storage unit.

  Next, the configuration of the log management server device 30 will be described with reference to FIG. As illustrated in FIG. 3, the log management server device 30 includes a CPU 31, a ROM 32, a RAM 33, a communication interface 34, a hard disk 35, a display unit 36, and an operation unit 37. The communication interface 34 is connected to the LAN 1 and performs data communication with the client computer 10 in accordance with instructions from the CPU 31. In addition to storing the log management program described above, the hard disk 35 is provided with a log storage area for storing operation screen data in each client computer 10 as a log. In this log storage area, in addition to a large number of operation screen data, a management table for managing them is stored. The contents of this management table will be described later.

B: Operation Next, the operation of the embodiment will be described with reference to FIGS.
B-1: Operation Screen Data Accumulation Operation In FIG. 4, when the operator of the client computer 10 performs an operation for instructing access to the host computer 20 using the operation unit 17, the CPU 11 of the client computer 10 performs this operation. Is received (step S1), and a request is transmitted to the host computer 20 (step S2). When receiving this request, the host computer 20 transmits the first operation screen data to the client computer 10 (step S3).

  The CPU 11 of the client computer 10 displays an operation screen on the display unit 16 based on the received operation screen data (step S4). Next, the CPU 11 generates binary data representing the displayed operation screen on the RAM 13, and further compresses it (step S5). Since the binary data generation algorithm and compression algorithm used in this case are described in the client program, the CPU 11 may follow them. For example, when an operation screen as shown in FIG. 5 is converted into binary data in accordance with a predetermined algorithm, the contents are as shown in FIG. At this time, the user ID of the operator logged in to the system is “SJGA0001”, the date is “2005/01/01 14:45”, and the terminal ID assigned to the client computer is “F9525”. To do. Then, the CPU 11 reads out the compressed binary data obtained in this way from the RAM 13, and transmits it to the log management server device 30 as it is without storing it in the hard disk 15 (step S6). The CPU 31 of the log management server device 30 stores the data transmitted from the client computer 10 in the log storage area of the hard disk 35 (step S7).

  Here, FIG. 7 is a description example of the management table stored in the log storage area. In this management table, in addition to the above-mentioned user ID, date and time, and terminal ID, the screen ID assigned to each operation screen data by the CPU 31 of the log management server device 30 and the operation screen at the time of data reception in the client computer 10 Whether data or operation screen data at the time of transmission is described. In the example illustrated in FIG. 7, a user with a user ID “SJGA0001” is transmitted from the client computer 10 with a terminal ID “F9525” logged in to “2005/01/01 14:45” to the log management server device 30. In this example, screen ID “D0001” is assigned to the operation screen data.

  Next, it is assumed that the operator of the client computer 10 performs an operation for instructing a desired process (for example, an operation for inputting an instruction command) using the operation unit 17. The CPU 11 accepts this operation (step S8) and displays the input instruction command on the operation screen (step S9). In the same manner as described above, the CPU 11 generates binary data representing the operation screen being displayed on the RAM 13, and further compresses the binary data (step S10). Then, the CPU 11 transmits the compressed binary data to the log management server device 30 without storing it in the hard disk 15 (step S11). The CPU 31 of the log management server device 30 stores the data transmitted from the client computer 10 in the log storage area of the hard disk 35 (step S12).

  On the other hand, the CPU 11 of the client computer 10 transmits a request including the input instruction command to the host computer 20 (step S13). Upon receiving this request, the host computer 20 executes processing specified by the instruction command (step S14), and transmits operation screen data indicating the processing result to the client computer 10 (step S15). The CPU 11 of the client computer 10 displays an operation screen on the display unit 16 based on the received operation screen data (step S16), and again generates and compresses binary data representing the operation screen (step S17). Then, the CPU 11 reads out the compressed binary data obtained in this way from the RAM 13 and transmits it to the log management server device 30 as it is without storing it in the hard disk 15 (step S18). The CPU 31 of the log management server device 30 stores the data transmitted from the client computer 10 in the log storage area of the hard disk 35 (step S19).

  Thereafter, each time the client computer 10 displays the operation screen based on the data provided from the host computer 20 according to the same procedure as described above, the client computer 10 generates binary data representing the operation screen according to a predetermined algorithm. Is compressed and transmitted to the log management server device 30. By repeating such processing, the log management server device 30 accumulates operation screen data collected one after another from each client computer 10.

B-2: Operation Screen Data Retrieval Operation Next, FIG. 8 is a flowchart showing an operation when the CPU 31 of the log management server device 30 retrieves operation screen data.
First, the CPU 31 of the log management server device 30 displays a search condition designation screen on the display unit 36 (step S21). This screen is provided with a designation field for designating at least one of user ID, date / time, terminal ID, transmission or reception. When the operator performs an operation for specifying the search condition, the CPU 31 accepts this operation (step S22; Yes), and refers to the management table as shown in FIG. Search for data. Then, the CPU 31 extracts the operation screen data (binary data) specified by this search from the data storage location described in the management table (step S23). Then, the CPU 31 displays an operation screen on the display unit 36 based on the extracted operation screen data (step S24). Further, the CPU 31 stores the search result in a predetermined area of the hard disk 35 (step S25). This search result is referred to by the CPU 31 when a similar search is instructed after the next time.

According to the embodiment described above, since the past operation status in the client computer 10 can be confirmed on the operation screen, the operation status can be easily understood without performing complicated analysis work. . Further, when the operation screen is saved in an image data format such as JPEG, the amount of data becomes very large. In this embodiment, however, the operation screen is converted into binary data as shown in FIG. 6 according to a predetermined algorithm. Therefore, the amount of data is small. Thus, the processing burden on the system is relatively small.
Further, since the operation screen data is not stored in the nonvolatile storage unit (hard disk) of the client computer 10 but only in the log management server device 30, it is difficult to perform an illegal act such as tampering with the operation screen data. In addition, it is possible to prevent a situation in which the operator of the client computer 10 deletes the operation screen data by mistake.
The client computer 10 does not send the generated binary data to the log management server device 30 each time, but temporarily stores it in the ROM, and logs it periodically (for example, every hour). You may make it transmit to the management server apparatus 30. FIG. In this way, communication traffic in the LAN 1 can be reduced as compared with the case where transmission is performed each time.

1 is a block diagram showing an overall configuration of a system according to an embodiment of the present invention. It is a block diagram which shows the structure of the client computer in the same embodiment. It is a block diagram which shows the structure of the log management server apparatus in the embodiment. It is a sequence chart which shows the operation | movement of the embodiment. It is a figure which shows the example of a screen displayed on the display part of the client computer in the embodiment. It is a figure which shows the example of the binary data showing the screen displayed on the client computer in the embodiment. It is a figure which shows the example of the management table which the log management server apparatus in the embodiment has memorize | stored. It is a flowchart which shows operation | movement of CPU of the log management server apparatus in the embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... Client computer, 11 ... CPU, 12 ... ROM, 13 ... RAM, 14 ... Communication interface, 15 ... Hard disk, 16 ... Display part, 17 ... Operation , 20 ... host computer, 30 ... log management server device, 31 ... CPU, 32 ... ROM, 33 ... RAM, 34 ... communication interface, 35 ... hard disk, 36 ... Display unit, 37 ... Operating unit.

Claims (5)

A host computer; a plurality of client computers connected to the host computer via a network; and a log management device for managing an operation history in each of the client computers, based on data provided from the host computer In the communication system in which the client computer displays an operation screen, and the host computer executes processing according to a user operation using the operation screen,
The client computer is
Display means for displaying an operation screen based on data provided from the host computer;
Generation means for generating binary data representing the operation screen according to a predetermined algorithm each time the operation screen is displayed by the display means;
Transmission means for transmitting the binary data generated by the generating means to the log management device without storing it in the nonvolatile storage means,
The log management device includes:
Storage means for storing binary data transmitted from the client computer;
A specifying means for specifying search conditions;
Search means for extracting binary data that matches the search condition designated by the designation means from the binary data stored in the storage means;
And a log display means for displaying an operation screen based on the binary data extracted by the search means. The generation unit of the client computer generates binary data representing the operation screen, further performs compression processing on the generated binary data,
The communication system according to claim 1, wherein the transmission unit transmits the binary data compressed by the generation unit to the log management device without storing the binary data in a nonvolatile storage unit. The client computer comprises storage means for temporarily storing binary data generated by the generation means,
The communication system according to claim 1, wherein the transmission unit of the client computer periodically transmits binary data stored by the storage unit to the log management apparatus. On the computer,
A function for displaying an operation screen on a display device based on data provided from a host computer;
A function of generating binary data representing the operation screen according to a predetermined algorithm each time the operation screen is displayed on the display device;
A program for realizing the function of transmitting the generated binary data from the transmission device to the log management device without storing it in the nonvolatile storage device. On the computer,
A function for storing binary data transmitted from a client computer in a storage device;
The ability to specify search criteria,
A function of extracting binary data that matches a specified search condition from the binary data stored in the storage device;
A program for realizing a function of displaying an operation screen on a display device based on binary data extracted by the search means.

Images