JP2010020640A - Program, storage medium, and web screen control method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a technique for performing screen control, which is easily introduced to an existing system. <P>SOLUTION: The problem concerning Web screen control is solved by performing the screen control by allowing a computer to function as a Web screen control component means operated by being embedded in a Web screen and controlling the Web screen. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a program, a storage medium, and a Web screen control method.

In general, the following actions are prohibited in an update-type Web application.
-Update from the duplicate screen (the act of the user operating the duplicate screen and issuing multiple completed transactions)
・ Use of screen by direct address (hacking action to make screen transition by directly typing URL instead of screen transition from menu)
-Screen transition by back / forward buttons (an act of pulling back the screen and issuing multiple completed transactions by using the back / forward buttons)
-Multiple transmissions from the same screen (an act of issuing multiple transactions by double-clicking the send button quickly, etc.)

In order to deal with these problems, for example, various problems are avoided by implementing various functions on each screen by the following method.
FIG. 1 is a diagram illustrating an example of a conventional direct control method. The direct control method shown in FIG. 1 is a method in which a screen control function is directly mounted on each screen. The direct control method can be freely described.

  FIG. 2 is a diagram illustrating an example of a conventional framework method. The framework method shown in FIG. 2 is a method in which the framework collectively controls screen control such as screen transition and screen generation. In the framework method, implementation related to screen control is integrated into the framework, so that development efficiency and quality can be improved (see, for example, Patent Document 1).

JP 2006-163855 A

However, in the direct control method, it is necessary to mount a screen control function on each screen, and there is a problem that the coding amount of the program increases. In addition, when it is necessary to correct the entire screen, it is necessary to correct the entire screen, which may cause a reduction in screen development efficiency and quality.
Further, in the framework method, it is necessary to design screens and screen transitions in advance, and since they are often multifunctional, there is a problem that requires skill to code the framework. In addition, when the framework method was adopted, there was a problem that a large remodeling was required to migrate from the existing system.

  The present invention has been made in view of such problems, and an object of the present invention is to provide a technique that can execute screen control and can be easily introduced into an existing system.

  Therefore, the present invention is characterized in that a computer functions as a Web screen control component means that operates by being embedded in a Web screen and controls the Web screen.

  According to the present invention, a computer can be executed by being embedded in a Web screen and functioning as a Web screen control component means for controlling the Web screen, and can be executed on an existing system. A technology that can be easily introduced can be provided.

  The present invention may be a storage medium and a Web screen control method.

  ADVANTAGE OF THE INVENTION According to this invention, the technique which can perform screen control and can be easily introduced into the existing system can be provided.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
<Embodiment 1>
FIG. 3 is a diagram for briefly explaining the present embodiment.
As shown in FIG. 3, in this embodiment, the screen is controlled by a Web control component that is an example of a Web screen control component embedded in each screen.

FIG. 4 is a diagram illustrating an example of a system configuration of the system according to the present embodiment. As shown in FIG. 4, in the system according to this embodiment, a Web server device (computer) 1 and at least one client device (computer) 3 are connected via a network 3.
The Web server device 1 transmits a screen (or information that is the basis of the screen) to the client device 3 based on a request from the client device 3. The client device 3 displays the screen on the Web browser based on the screen (or information that is the basis of the screen) transmitted from the Web server device 1. The client device 3 returns the screen displayed on the Web browser to the Web server device 1.
Here, the Web control component embedded in the screen holds, for example, the screen information sent by the Web server device 1 in the memory of the Web server device 1, and the screen information and the screen returned by the client device 3. To determine whether a prohibited action is being performed. When the Web control component embedded in the screen determines that the prohibited action is being performed, the Web browser of the client device 3 displays a prohibited screen (or warning screen) that informs that the prohibited action is in effect. Control to display above.

FIG. 5 is a diagram illustrating an example of a hardware configuration of the Web server device 1. As shown in FIG. 5, the Web server device 1 includes a CPU 11 as a hardware configuration. The CPU 11 performs processing based on a program stored in the storage device 13 (a program embedded in the screen), thereby realizing the function of the Web control component or the processing according to the flowchart.
An input device 12, a storage device 13, and a display device 14 are connected to the CPU 11 via the bus 10. The storage device 13 includes, for example, a ROM, a RAM, a hard disk device, and the like, and stores data used in processing based on the program in addition to the above-described programs. The display device 14 is, for example, a display that displays information. The input device 12 is, for example, an operation key for inputting information.
The hardware configuration of the client device 3 is the same as the hardware configuration of the Web server device 1 shown in FIG. 5, and the CPU of the client device 3 is stored in a program (program embedded in the screen) stored in the storage device. By performing processing based on this, the function of the Web control component or the processing according to the flowchart is realized.
Note that the input device 12 and the display device 14 are not essential components of the Web server device 1.

FIG. 6 is a diagram for explaining information used by the Web control component. As illustrated in FIG. 6, sID, sPI, sLD, and sPC are information that the Web control component stores in the storage device 13 that is the memory of the Web server device 1. The sID is a display permission screen ID. sPI is a page initialization flag. sLD is the reading time. sPC is a page count.
On the other hand, fLD, fPC, fID, and fSF are information that the Web control component embeds on the screen for each screen. fLD is the reading time. fPC is a page count. fID is a screen ID. fSF is a start page flag.
The Web control component uses these pieces of information to perform control related to the screen.

FIG. 7 is a flowchart (part 1) illustrating an example of control for prohibiting updating from the duplicate screen by the Web control component.
At the time of loading, the Web control component starts the process shown in FIG. 7, and determines whether or not it is a transmission response in Step S10. Here, the transmission response means that the Web server device 1 transmits to the client device 3, the user or the like operates the screen displayed on the client device 3 on the Web browser, and the response to the transmission is returned. It is the state that has come.
If the Web control component determines that it is not a transmission response, it proceeds to step S11, and if it determines that it is a transmission response, it proceeds to step S13. In addition, the case where it is not a transmission response is a case of the first request | requirement which displays the screen by hitting URL directly.

In step S11, the Web control component substitutes year, month, day, hour, minute, and second into fLD in milliseconds. Also, the Web control component substitutes 0 (zero) for sPC. Also, the Web control component substitutes fLD for sLDtmp. Further, the Web control component substitutes fPC for sPCtmp.
In step S12, the Web control component substitutes sLD for fLD. Further, the Web control component substitutes sPC + 1 for fPC.

On the other hand, in step S13, the Web control component substitutes fLD + fPC for V1. Also, the Web control component substitutes sLD + sPC for V2. Also, the Web control component substitutes sLD for sLDtmp. Further, the Web control component substitutes sPC for sPCtmp.
In step S14, the Web control component determines whether V1 is blank or V2 is blank. The Web control component proceeds to step S15 if V1 is blank or V2 is blank, and proceeds to step S16 if neither V1 nor V2 is blank.

In step S15, the Web control component times out.
On the other hand, in step S16, the Web control component compares V1 and V2. The web control component proceeds to step S17 when V2 is equal to or greater than V1, and proceeds to step S18 when V1 is greater than V2.

In step S <b> 17, the Web control component performs control to display on the Web browser of the client device 3 a prohibition screen (or warning screen) that informs that it is a prohibited action, assuming that the transmission is from a duplicate screen. .
On the other hand, in step S18, the Web control component substitutes fLD for sLD. Also, the Web control component substitutes fPC for sPC.

As described above, as illustrated in FIG. 7, the Web control component performs the comparison by comparing the determination value V <b> 1 stored in the screen with the determination value V <b> 2 stored in the memory in the Web server device 1. . The determination value includes an ID (fLD) based on the first transmission time and the number of transmissions to the screen (sPC). In addition, the Web control component stores a value obtained by adding 1 to the number of transmissions (fPC) on the screen side during transmission and the number of transmissions (sPC) of the memory in the Web server device 1 so that V1> V2 holds. .
That is, fLD, fPC, sLD, and sPC are sequential information, and in the case of normal transmission processing, the Web control component is configured so that V1> V2 holds. Can be determined.

FIG. 8 is a flowchart (part 2) illustrating an example of the control for prohibiting the update from the duplicate screen by the Web control component.
At the time of file download, the Web control component starts the processing shown in FIG. 8, and executes processing related to file download in step S20.
In step S21, the Web control component substitutes sLDtmp for sLD. Further, the Web control component substitutes sPCtmp for sPC. The Web control component substitutes sLDtmp for fLD. Further, fPC substitutes sPCtmp + 1. That is, the Web control component returns a counter.

  When downloading a file, the file is transmitted to the client device 3 instead of the screen (or information on which the screen is based). Therefore, fLD and fPC which are values stored in the screen are not updated. Therefore, if the screen is transmitted as it is after file download and the processing shown in FIG. 7 is performed later, the relationship of V1> V2 is not established, and it is erroneously determined that the transmission is from the duplicate screen. . Therefore, in order to prevent erroneous determination, when downloading a file, the Web control component performs the process shown in FIG. 8 and returns the counter.

As described above, according to the present embodiment, the Web control component can be controlled to prohibit the update from the duplicate screen.
That is, it is possible to provide a technology that can execute screen control and can be easily introduced into an existing system.

<Embodiment 2>
In the present embodiment, an example of control in which the Web control component prohibits direct URL hitting will be described. In the present embodiment, differences from the above-described embodiment will be mainly described.
FIG. 9 is a flowchart (part 1) illustrating an example of control for prohibiting the use of a screen by URL direct hitting by a Web control component.
At the time of screen transition, the Web control component starts the process shown in FIG. 9, and substitutes nID for sID in step S30. Here, nID is the ID of the next screen.
In step S31, the Web control component makes a screen transition to nURL. Here, nURL is the URL of the next screen.

  If it is not the start screen, as shown in FIG. 9, the Web control component changes the screen after storing the screen ID of the transition destination in the sID at the time of screen transition.

FIG. 10 is a flowchart (part 2) illustrating an example of the control for prohibiting the use of the screen by direct hitting of the URL by the Web control component.
At the time of loading, the Web control component starts the process shown in FIG. 10, and determines in step S40 whether fSF is False or True, that is, whether the start page flag is set. This fSF is set to indicate that the screen creator is the start screen on the start screen when the screen is created.
When the fSF is True, the Web control component ends the process illustrated in FIG. 10, and when the fSF is False, the Web control component proceeds to Step S41.

In step S41, the Web control component compares sID with fID. If the sID and the fID are equal, the Web control component ends the process shown in FIG. 10, and if not, proceeds to Step S42.
In step S42, the Web control component displays on the Web browser of the client apparatus 3 a prohibition screen (or warning screen) that informs that the screen is used (that is, access violation) by directly typing the URL (address). To control.

  As shown in FIG. 10, the Web control component embedded in the displayed screen is a screen that is called in the normal screen transition procedure by comparing sID and fID (own screen ID). It is determined whether or not there is.

As described above, according to the present embodiment, the Web control component can be controlled to prohibit screen use by direct addressing.
That is, it is possible to provide a technology that can execute screen control and can be easily introduced into an existing system.

<Embodiment 3>
In the present embodiment, an example of control in which the Web control component prohibits screen transition by the back / forward button will be described. In the present embodiment, differences from the above-described embodiment will be mainly described.
FIG. 11 is a flowchart showing an example of control for prohibiting screen transition by the back / forward button by the Web control component.
During screen display, the Web control component adds “history.forward ();” of Java (registered trademark) Script to the output in step S50.
When the Web control component performs the processing as shown in FIG. 11 and the user comes to this screen with the return button, it is pushed back to the original screen. As a result, the screen controlled by the Web control component cannot be returned by the return button.

As described above, according to the present embodiment, the Web control component can be controlled to prohibit screen transition by the back / forward button.
That is, it is possible to provide a technology that can execute screen control and can be easily introduced into an existing system.

<Embodiment 4>
In the present embodiment, an example of control in which the Web control component prohibits multiplex transmission from the same screen will be described. In the present embodiment, differences from the above-described embodiment will be mainly described.
FIG. 12 is a flowchart (part 1) illustrating an example of control for prohibiting multiplex transmission from the same screen by the Web control component.
At the time of loading, the Web control component starts the processing shown in FIG. Here, the script for preventing multiple transmission is Javascript such as invalidating an operation after displaying a warning for a click event such as a button while the display of the Web browser is not completed. With this script, when the user tries to multiplex transmission, a warning message or the like is displayed, and submit is interrupted.

In step S61, the Web control component determines whether it is a transmission response. When it is determined that the Web control component is a transmission response, the process illustrated in FIG. 12 ends. When it is determined that the Web control component is not a transmission response, the process proceeds to step S62.
In step S62, the Web control component determines whether fSF is False or True. If the Web control component determines that fSF is True, the process proceeds to step S65. If the Web control component determines that fSF is False, the process proceeds to step S63.

In step S63, the Web control component compares sPI with 1. If the Web control component determines that the sPI is 1, the process proceeds to step S64, and if not, the process proceeds to step S65.
In step S <b> 64, the Web control component performs control so as to display on the Web browser of the client apparatus 3 a prohibition screen (or warning screen) that informs that it is a prohibited action, assuming that the screen transition multiplex transmission is performed.
Here, as will be described later, the sPI becomes 0 (zero) at the time of screen transition and becomes 1 at the end of loading. Therefore, screen initialization in a state where sPI is 1 is synonymous with multiple screen transitions.
In step S65, the Web control component substitutes 1 for sPI.

FIG. 13 is a flowchart (part 2) illustrating an example of control for prohibiting multiplex transmission from the same screen by the Web control component.
At the screen transition time, the Web control component starts the process shown in FIG. 13, and substitutes 0 (zero) for sPI in step S70.
In step S71, the Web control component makes a screen transition to the nURL of the Web control component. Here, nURL is the URL of the next screen.

As described above, according to the present embodiment, the Web control component can be controlled to prohibit multiplex transmission from the same screen.
That is, it is possible to provide a technology that can execute screen control and can be easily introduced into an existing system.

<Embodiment 5>
In the present embodiment, an example will be described in which the processes of FIGS. 7, 10, and 12 described above are realized by one flowchart. In the present embodiment, differences from the above-described embodiment will be mainly described.

FIG. 14 is a flowchart illustrating an example of control by the Web control component.
At the time of loading, the Web control component starts the processing shown in FIG. 14, and embeds a script for preventing multiple transmissions in all buttons on the screen in step S80.
In step S81, the Web control component determines whether it is a transmission response. When it is determined that the Web control component is a transmission response, the process proceeds to step S89, and when it is determined that the response is not a transmission response, the process proceeds to step S82.

In step S82, the Web control component determines whether fSF is False or True. If the Web control component determines that fSF is True, the process proceeds to step S87. If the Web control component determines that fSF is False, the process proceeds to step S83.
In step S83, the Web control component compares sID with fID. If the sID and the fID are equal, the Web control component proceeds to step S85, otherwise proceeds to step S84.

  In step S84, the Web control component displays on the Web browser of the client device 3 a prohibition screen (or warning screen) that informs that the screen is used (that is, access violation) by directly hitting the URL (address). To control.

On the other hand, in step S85, the Web control component compares sPI with 1. If the Web control component determines that the sPI is 1, the process proceeds to step S86, and if not, the process proceeds to step S87.
In step S <b> 86, the Web control component performs control so as to display on the Web browser of the client device 3 a prohibition screen (or warning screen) that informs that it is a prohibited action, assuming that the screen transition multiplex transmission is performed.

In step S87, the Web control component substitutes 1 for sPI. Further, the Web control component substitutes year, month, day, hour, minute, and second into fLD in units of milliseconds. Also, the Web control component substitutes 0 (zero) for sPC.
In step S88, the Web control component substitutes sLD for fLD.

On the other hand, in step S89, the Web control component determines whether fSF is False or True. When the fSF is True, the Web control component proceeds to Step S92. When the fSF is False, the Web control component proceeds to Step S90.
In step S90, the Web control component compares sID with fID. If the sID and the fID are equal, the Web control component proceeds to step S92, otherwise proceeds to step S91.

In step S92, the Web control component substitutes fLD + fPC for V1. Also, the Web control component substitutes sLD + sPC for V2. Also, the Web control component substitutes sLD for sLDtmp.
In step S93, the Web control component determines whether V1 is blank or V2 is blank. The Web control component proceeds to step S94 when V1 is blank or V2 is blank, and proceeds to step S95 when neither V1 nor V2 is blank.

In step S94, the Web control component times out.
On the other hand, in step S95, the Web control component compares V1 and V2. The web control component proceeds to step S96 when V2 is equal to or greater than V1, and proceeds to step S97 when V1 is greater than V2.

In step S <b> 96, the Web control component performs control to display on the Web browser of the client device 3 a prohibition screen (or warning screen) that informs that the prohibition is performed, assuming that the transmission is from the duplicate screen. .
On the other hand, in step S97, the Web control component substitutes fLD for sLD.

  In the case of the present embodiment, in FIG. 9 and FIG. 13 described above, after performing the processing of step S30 and step S70 in the same step, the screen transitions to nURL in the next step. In the case of the present embodiment, there is no change in the processing of FIGS. 8 and 11 described above.

As described above, according to the processing shown in each of the above-described embodiments, the Web control component is released in the form of a screen component. Therefore, the Web control component is pasted on the screen of a normally created Web application, the setting of the component, the screen transition, By simply modifying the file download location, you can control prohibited actions and easily reinforce screen security.
In addition, since it is almost the same as a normal method for creating a Web application screen, it does not take time to learn. Further, since it is provided as a screen component, it is not necessary to perform many mountings for each screen. In addition, functions can be added only by recompilation.
Also, according to the Web control component described above, unlike the framework format, there is no need to define the flow of screen transition in advance, and it is only necessary to be aware of the URL and screen ID of the screen to be transitioned. The preparation period until is short.

  As described above, according to each of the above-described embodiments, it is possible to provide a technique that can execute screen control and can be easily introduced into an existing system.

  The preferred embodiments of the present invention have been described in detail above, but the present invention is not limited to such specific embodiments, and various modifications can be made within the scope of the gist of the present invention described in the claims.・ Change is possible.

It is a figure which shows an example of the direct control system of a prior art. It is a figure which shows an example of the framework system of a prior art. It is a figure for demonstrating this embodiment briefly. It is a figure which shows an example of the system configuration | structure of the system which concerns on this embodiment. 2 is a diagram illustrating an example of a hardware configuration of a Web server device 1. FIG. It is a figure for demonstrating the information which Web control components utilize. It is a flowchart (the 1) which shows an example of the control which prohibits the update from a replication screen by Web control components. It is a flowchart (the 2) which shows an example of the control which prohibits the update from the replication screen by Web control components. It is a flowchart (the 1) which shows an example of the control which prohibits the screen use by URL direct hit by Web control components. It is a flowchart (the 2) which shows an example of the control which prohibits the screen use by URL direct hit by Web control components. It is a flowchart which shows an example of the control which prohibits the screen transition by the back / forward button by Web control components. It is a flowchart (the 1) which shows an example of the control which prohibits the multiplex transmission from the same screen by Web control components. It is a flowchart (the 2) which shows an example of the control which prohibits the multiplex transmission from the same screen by Web control components. It is a flowchart which shows an example of the control by Web control components.

Explanation of symbols

1 Web server device 2 Client device

Claims (7)

Computer
A program that is embedded in a Web screen and operates, and functions as a Web screen control component means for controlling the Web screen.   The Web screen control component means determines whether or not the update is made from the duplicate screen by comparing the judgment value stored in the screen with the judgment value stored in the memory in the Web server. 2. The program according to claim 1, wherein the program is controlled to display a prohibited screen when it is determined that the update is from the update. The web screen control component means
When a screen transition request is received, the ID of the Web screen to which the transition is made is stored in the memory in the server
When displayed by screen transition, the ID of the transition destination Web screen stored in the memory in the server is compared with the ID of the Web screen in which it is embedded in the normal screen transition procedure. 3. The control according to claim 1, wherein a determination is made as to whether or not the screen is a called screen, and if it is determined that the screen is not a screen that has been called in a regular screen transition procedure, a prohibited screen is controlled to be displayed. Program.   4. The web screen control component means embeds a script for preventing multiple transmissions in a button included in the web screen when the web screen in which the web screen control component is embedded is loaded. The program described in the section. The web screen control component means
When a screen transition request is received, the page initialization flag stored in the memory in the server is initialized,
When it is displayed by screen transition, it is determined whether or not the page initialization flag is initialized, and when it is determined that the page initialization flag is not initialized, control is performed to display a prohibited screen. 5. When it is determined that the page initialization flag is initialized, a value is set in the page initialization flag after displaying a Web screen. Program.   A computer-readable storage medium storing the program according to any one of claims 1 to 5.   A web screen control method comprising a control step in which web screen control component means embedded in a web screen controls the web screen.

Images