JP2010157062A - Data processing system, each device of the same, and program of the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a safe data processing system using a feature of an SaaS (Software as a Service) model service, and each device constituting the system. <P>SOLUTION: The data processing system includes a client terminal, a virtual screen information creating device, and a data managing device. The client terminal requests the data managing device for a service. The virtual screen information creating device receives the virtual screen information request for requesting creation of virtual screen information including dummy data identified by identification information at the position of confidential data of actual screen information, acquires the virtual screen information corresponding to the virtual screen information request from a data storage section, and transmits it to the data managing device. The data managing device receives the virtual screen information, extracts the identification information from the virtual screen information, and acquires the confidential data corresponding to the identification information from a confidential data storage section. Then, the dummy data of the virtual screen information is replaced with the confidential data based on the correspondence relation of the identification information, and actual screen information is created. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a data processing system that executes a service in a form of providing an application via a network, each device that constitutes the system, and a program.

  In recent years, the widespread use of broadband infrastructure has created an environment where low-cost and highly reliable networks can be used. On the other hand, with rapid progress and spread of IT, the system has become more complex, and the technical hurdles for self-operation of information systems have increased. Furthermore, due to rapid technological innovation, there is an increased risk that companies' hardware and software will become obsolete early.

  Against this backdrop, a service in which the user does not use the software installed in his or her own system but uses the software functions installed on the vendor's system via the network ( SaaS (Software as a Service) is attracting attention. Non-patent document 1 discloses a case where a CRM application is mainly provided by the SaaS model. Such a model has the advantage that the cost of preparing specific application software and high-performance hardware for operating it can be reduced, and the service scale can be flexibly handled.

  In such an outsource such as a service represented by SaaS, in the prior art, all data necessary for the service, including confidential user data, is stored and managed by a device on the service provider side.

FIG. 15 shows a configuration example of the service providing system, and the operation will be briefly described. The service providing system includes a plurality of clients 153 a to 153 x connected to the Internet 152, a server 151, and a database 150. The function of the server 151 is to issue, for example, a form relating to delivery / billing, for example, normal screen information as a result of so-called service provision, and the client writes / searches / views the database 150 allocated by the server 151 And extraction. The information in the database 150 includes client confidential data. Encryption technology is used to protect the confidential data.
“What is SaaS” [Search December 25, 2008] Internet (http://www.salesforce.com/jp/products/saas.jsp/)

  However, in the conventional method, since the service provider manages the confidential data such as the encryption key important for the user, there is a problem that the confidential data of the client is abused.

  In this way, there is a tendency to actively outsource various internal applications to the outside, while customer information is particularly problematic due to issues such as security policy, internal control, and corporate social responsibility (CSR). There is a concern about processing externally. In order to dispel this concern, there is a need for a new data processing system that enhances the safety of the SaaS model service.

  SUMMARY OF THE INVENTION An object of the present invention is to provide a data processing system in which important confidential data (information) is not transferred to an external server, but only its calculation capability is used, each device constituting the system, and a program. And

  The data processing system of the present invention comprises a client terminal, a data management device, and a temporary screen information generation device.

  The data management device includes a normal screen information request reception unit, a confidential data storage unit, a temporary screen information request transmission unit, a temporary screen information reception unit, an identification information extraction unit, a corresponding confidential data acquisition unit, and a normal screen information. A generation unit and a normal screen information transmission unit are provided. The normal screen information request receiving unit receives a normal screen information request from the client terminal. The confidential data storage unit stores confidential data and identification information that associates the confidential data with the dummy data included in the temporary screen information held by the temporary screen information generation device. The provisional screen information request transmission unit requests provisional screen information including dummy data and dummy data identification information corresponding to the regular screen information request from the client terminal to the provisional screen information generation apparatus. The temporary screen information receiving unit receives the requested temporary screen information from the temporary screen information generating device. The identification information extraction unit extracts identification information of dummy data included in the received temporary screen information. The corresponding confidential data acquisition unit acquires confidential data corresponding to the extracted identification information from the confidential data storage unit. The normal screen information generation unit generates dummy screen information by replacing dummy data included in the temporary screen information with confidential data acquired based on the identification information. The normal screen information transmission unit transmits the generated normal screen information to the client terminal.

  The provisional screen information generation apparatus includes a data storage unit, a provisional screen information request reception unit, a provisional screen information generation unit, and a provisional screen information transmission unit. The data storage unit records temporary screen information. The temporary screen information request receiving unit receives a temporary screen information request from the data management apparatus. The temporary screen information generation unit acquires temporary screen information corresponding to the temporary screen information request from the data storage unit. The temporary screen information transmission unit transmits the acquired temporary screen information to the data management apparatus.

  The client terminal also includes a transmission / reception unit that requests and receives normal screen information from the data management apparatus.

  According to the data processing system of the present invention, the data management device executes service provision using the calculation capability of the temporary screen information generation device without passing confidential data to an external server, that is, the temporary screen information generation device. I can do it. Therefore, it is possible to completely eliminate the risk that confidential data is falsified and erased on the temporary screen information generation device. In addition, the present invention makes it possible to actively outsource processes that can be executed without confidential data, and thus contributes to providing a more suitable service that takes advantage of the characteristics of the SaaS model service.

  Embodiments of the present invention will be described below with reference to the drawings. The same components in the drawings are denoted by the same reference numerals, and the description thereof is omitted.

FIG. 1 shows a system configuration of a data processing system 100 of the present invention. The data processing system 100 includes a client terminal 10, a data management device 20, and a temporary screen information generation device 30.
In the data management apparatus 20, personal confidential data is registered in advance by a user (an individual who operates the client terminal 10). The provisional screen information generation apparatus 30 is installed with an application program for setting the layout of a service screen using personal confidential data.

  FIG. 2 shows a sequence diagram of the data processing system 100, and its operation will be described with reference to FIG. When the user inputs ID / password authentication information to the client terminal 10 (step S1) and designates the service, the transmitting / receiving unit 12 of the client terminal 10 requests the data management apparatus 20 for the normal screen information of the service. (Step S12). The normal screen information request receiving unit 221 of the data management apparatus 20 receives the normal screen information request (step S221). The user authentication unit 220 of the data management device 20 authenticates the user (step S220). If the user is authenticated, the data management device 20 requests temporary screen information from the temporary screen information generation device 30 (step S222). The temporary screen information is composed of screen layout, identification information, and dummy data corresponding to the screen layout. A description showing a specific example of the temporary screen information will be described later. The normal screen information and the provisional screen information are information that configures the screen or includes a program such as a script or ActiveX. Or it is the information containing both information.

  The temporary screen information request receiving unit 321 of the temporary screen information generating apparatus 30 receives the temporary screen information request (step S321), and the user authentication unit 320 authenticates the user (step S320). When the user is authenticated, the temporary screen information generation unit 324 generates temporary screen information (step S324). The generated temporary screen information is transmitted to the data management device 20 (step S325).

  The data management device 20 receives the temporary screen information (step S223), and extracts identification information from the temporary screen information (step S224). Then, confidential data corresponding to the identification information is acquired (step S225). Specifically, confidential data corresponding to the authenticated user is acquired based on the user authentication result in step S220. The normal screen information generation unit 226 generates the normal screen information by replacing the dummy data included in the temporary screen information with the confidential data acquired based on the identification information (step S226). The normal screen information is transmitted to the client terminal 10 (step S227) and received by the transmission / reception unit 12 of the client terminal 10 (step S13).

  As described above, according to the data processing system 100 of the present invention, confidential data is not passed to the temporary screen information generation device 30. The temporary screen information generation device 30 generates temporary screen information, and then the dummy data is replaced with confidential data based on the correspondence relationship of the identification information in the data management device 20. Therefore, confidential data never comes out. Therefore, in the temporary screen information generation device 30, the risk that the confidential data is falsified and deleted can be completely eliminated.

Although an example in which a service request is made to the data management device 20 has been described, the data processing system 100 may be activated by making a service request to the temporary screen information generation device 30.
An authentication server that performs single sign-on may be provided separately. In this case, the authentication result is a SAML assertion. The temporary screen information generation device 30 acquires the SAML assertion from the authentication server and performs single sign-on (SSO).

Next, the operation of the present invention will be described in more detail by showing the configuration of each apparatus. The client terminal 10 according to the first embodiment can be configured by a general computer terminal that includes a WEB browser and a communication function.
The request information and transmission information corresponding to the request information may be associated with each other by HTTP request / response session information.

[Temporary screen information generator]
FIG. 3 shows a functional configuration example of the temporary screen information generation device 30. The operation flow is shown in FIG. The temporary screen information generation device 30 includes a functional block 32, a data storage unit 33, a control unit 34, and a communication interface 31. The functional block 32 includes a user authentication unit 320, a provisional screen information request reception unit 321, a data storage control unit 323, a provisional screen information generation unit 324, and a provisional screen information transmission unit 325. Each part of the functional block 32 is controlled by the control means 34. The functional block 32 is connected to the network 40 via the communication interface 31. The data storage unit 33 is connected to the data storage control unit 323.

  The temporary screen information request receiving unit 321 receives a temporary screen information generation request from the data management apparatus 20 (step S321). The user authentication unit 320 authenticates the user (step S320). When the user authentication is successful, the temporary screen information generation unit 324 receives the temporary screen information corresponding to the temporary screen information generation request from the plurality of temporary screen information recorded in the data storage unit 33 via the data storage control unit 323. Information is acquired (S324). The temporary screen information acquired by the temporary screen information generation unit 324 is transmitted to the data management apparatus 20 by the temporary screen information transmission unit 325 (step S325).

  FIG. 5 shows an example of a ToDo list as a specific example of temporary screen information. The data processing system 100 in this example provides a service for creating a ToDo list of a certain user. In the space surrounded by the square at the upper left corner of the ToDo list, for example, dummy data to which identification information (ID) of #id 423 is assigned is arranged. #Id 423 is identification information of the user's face photo. In addition, identification information for each hour and its dummy data are assigned to today's schedule column. Also, #todo in the upper right is the ToDo list for that day, and *** is dummy data. This dummy data is replaced with confidential data by the data management device 20.

  The temporary screen information may be recorded in the data storage unit 33 as a fixed value, but can be edited by the user. In that case, a screen format editing unit 322 is provided in the function block 32. When editing the temporary screen information, the screen format editing unit 322 edits the temporary screen information recorded in the data storage unit 33 by a user operation from the client terminal 10. For example, the editing for increasing the number of contacts in the temporary screen information shown in FIG. 5 is performed by adding dummy data corresponding to the identification information to the contact list portion. For example, editing is performed to increase the number of lines such as # id003 ***, # id003 ***,.

[Data management device]
FIG. 6 shows a functional configuration example of the data management apparatus 20. The operation flow is shown in FIG. The data management device 20 includes a functional block 22, a confidential data storage unit 23, a control unit 24, and a communication interface 21. The functional block 22 includes a user authentication unit 220, a normal screen information request receiving unit 221, a temporary screen information request transmitting unit 222, a temporary screen information receiving unit 223, an identification information extracting unit 224, and a corresponding confidential data acquisition unit 225. And a normal screen information generation unit 226 and a normal screen information transmission unit 227. Each part of the functional block 22 is controlled by the control means 24. The functional block 22 is connected to the network 40 via the communication interface 21. The confidential data storage unit 23 is connected to the corresponding confidential data acquisition unit 225.

  The confidential data storage unit 23 stores confidential data and identification information that associates the confidential data with dummy data included in the temporary screen information held by the temporary screen information generation device 30. The normal screen information request receiving unit 221 receives a normal screen information request from the client terminal 10 (step S221). The user authentication unit 220 authenticates the user (client terminal 10) (step S220). If the authentication is successful, the temporary screen information request transmission unit 222 requests the temporary screen information generation apparatus 30 for temporary screen information including dummy data corresponding to the normal screen information request from the client terminal 10 and identification information of the dummy data ( Step S222). The temporary screen information receiving unit 223 receives the requested temporary screen information from the temporary screen information generation device 30 (step S223). The identification information extraction unit 224 extracts the identification information of the dummy data included in the received temporary screen information (Step S224). The corresponding confidential data acquisition unit 225 acquires confidential data corresponding to the extracted identification information from the confidential data storage unit 23 (step S225). The normal screen information generation unit 226 generates the normal screen information by replacing the dummy data included in the temporary screen information with the confidential data acquired based on the identification information (step S226). The normal screen information transmission unit 227 transmits the generated normal screen information to the client terminal 10 (step S227).

  FIG. 8 shows a specific example of the normal screen information. The dummy data of the temporary screen information shown in FIG. 5 is replaced with confidential data corresponding to the identification information. The time zone when confidential data is not registered is blank.

  Confidential data can be divided into static confidential data such as names and face photographs, and dynamic confidential data such as schedules. An example of static confidential data is shown in Table 1, and an example of dynamic confidential data is shown in Table 2.

  As shown in Tables 1 and 2, confidential data is a table in which identification information and confidential data correspond one-to-one. For a large amount of data such as a photograph, a pointer pointing to the image information may be described in the table. Thus, the layout information of the temporary screen information and the confidential data are synchronized with the identification information.

  In the static confidential data, the identification information and the confidential data always have a one-to-one relationship. On the other hand, as shown in Table 2, in the dynamic confidential data, one piece of confidential data does not necessarily correspond to one piece of identification information. It is also possible to define a relationship in the identification information and calculate the correspondence between the identification information and confidential data based on this relationship. For example, as shown in # plan10001200 shown in FIG. 2, dynamic confidential data in which identification information is integrated to represent a time zone may be configured.

  By providing identification information with different characteristics in this way, it is possible to increase the efficiency of setting confidential data. As apparent from Table 3, # plan10001200 may be described separately as # plan1000 and # plan1200. This integration of identification information may be performed automatically by providing an identification information editing function unit (not shown) in the function block 22.

  The confidential data may be recorded in the confidential data storage unit 23 as a fixed value, but can be edited by the user. Editing means adding, changing, or deleting confidential data. In that case, a confidential data editing unit 227 is provided in the functional block 22. At the time of editing confidential data, the confidential data editing unit 227 edits confidential data recorded in the confidential data storage unit 23 by a user operation from the client terminal 10. After the confidential data is edited, the temporary screen information recorded in the data storage unit 33 of the temporary screen information generation device 30 is edited. A data management apparatus that improves the workability of editing the temporary screen information is also conceivable.

[Modification 1 of Data Management Device]
A data management apparatus 20 ′ that improves the workability of editing temporary screen information will be described (see FIG. 6). The data management device 20 ′ further includes an edit identification information notification unit 229 in the function block 22. The operation will be described with reference to FIG. FIG. 9 is a sequence diagram showing an operation in which the data management device 20 ′ and the temporary screen information generation device 30 cooperate in editing confidential data.

  The client terminal 10 requests the data management device 20 ′ to edit confidential data (step S90). At this time, the user authentication unit 220 authenticates the user (step S220). If the user can be authenticated, the data management device 20 provides the client terminal 10 with a confidential data input screen display (step S91). The user edits confidential data in the confidential data storage unit 23 using the input screen (step S92). The confidential data editing unit 227 edits the confidential data in the confidential data storage unit 23 in association with the identification information that associates the confidential data with the dummy data included in the temporary screen information (step S227). At this time, the edit identification information notifying unit 229 notifies the temporary screen information generating device 30 of the identification information related to the confidential data edited by the confidential data editing unit (step S229).

  The edit identification information receiving unit 326 of the temporary screen information providing apparatus 30 (see FIG. 3) receives the notification (step S326). If the user authentication unit 320 authenticates the user (step S320), the edit identification information reception unit 326 of the temporary screen information generation device 30 stores the edit identifier storage unit 333 in the data storage unit 33 via the data storage control unit 323. The notified identification information is recorded (step S333).

  As described above, when the confidential data is edited, the data management device 20 and the provisional screen information generation device 30 cooperate to facilitate the later editing of the provisional screen information. That is, when the user edits the temporary screen information, the edit identifier storage unit 333 can be referred to.

[Modification 2 of Data Management Device]
In addition, a data management device 20 ″ further including an information amount generation unit 228 for generating an information amount indicating the size of the edited confidential data may be considered in the data management device 20 ′. This is information, such as the number of bytes, the number of characters, the character size, etc. When the confidential data is edited by the confidential data editing unit 227, the information amount generation unit 228 generates data indicating the size of the confidential data after editing. For example, when new confidential data is added, an amount of information indicating the size of the confidential data after editing is generated.For example, when the existing confidential data of 3 bytes is edited to a size of 6 bytes, An amount of information meaning 6 bytes is generated, and when the existing confidential data is deleted, an information amount indicating that the size of the confidential data is 0 is generated.

  The edit identification information notifying unit 229 'notifies the temporary screen information generating device 30 of the information amount together with the edit identification information, so that the temporary screen information generating device 30 stores the identification information and the confidential data corresponding to the identification information. You can know the size. Therefore, when the temporary screen information generation apparatus 30 edits the temporary screen information, the user's work for creating dummy data can be further facilitated.

[Variation 1 of Temporary Screen Information Generation Device]
The provisional screen information has been described with an example in which identification information and dummy data are integrated into a screen layout. However, screen format information and non-confidential data may be handled separately. .

  The provisional screen information generating apparatus 30 'of the method includes screen format storage means 331 and non-confidential data storage means 332 in the data storage section 33 of FIG. The screen format storage means 331 records screen format information in which only identification information is attached at the position of confidential data. The non-confidential data storage means 332 records dummy data corresponding to the identification information or its size.

  The temporary screen information generation unit 324 ′ obtains the screen format information of the temporary screen information corresponding to the temporary screen information request from the screen format storage unit 331, and dummy data corresponding to the identification information attached to the screen format information. Temporary screen information is generated by applying dummy data corresponding to the identification information to the screen format, obtained from the non-confidential data storage means 332. At this time, the temporary screen information generation unit 324 ′ calculates and generates a layout of the entire temporary screen information.

  In this case, the screen format recorded in the screen format storage means 331 is a so-called template, and the non-confidential data is dummy data. Table 3 shows a specific example of the information amount of dummy data.

  In this way, the screen format and the non-confidential data are recorded separately, each is associated with the corresponding identification information, and the temporary screen information generation unit 324 ′ calculates the temporary screen information by using the screen layout and the dummy data. Can be used for non-confidential data as compared with a method of preparing and placing provisional screen information in which the and are integrated. Therefore, the data amount of the data storage unit 33 can be reduced.

  FIG. 10 shows a sequence diagram of the data processing system 200 of the present invention. The system configuration of the data processing system 200 is the same as that of the first embodiment, but the functional configurations of the client terminal 12 and the data management device 22 are different. The operation of the data processing system 200 will be described with reference to the sequence diagram of FIG. 10, in which FIG. 11 shows a functional configuration example of the client terminal 12 and FIG. 12 shows a functional configuration example of the data management device 22.

  First, the configuration of the client terminal 12 and the data management device 22 will be described. The client terminal 12 includes a functional block 122, a control unit 124, and a communication interface 121. The functional block 122 includes a provisional screen information request transmission unit 1221, a provisional screen information reception unit 1222, an identification information extraction unit 1223, an identification information transmission unit 1224, a corresponding confidential data reception unit 1225, and a normal screen information generation unit 1226. It has.

  The data management device 22 includes a functional block 422, a confidential data storage unit 63, a control unit 424, and a communication interface 421. The functional block 422 includes a user authentication unit 4223, an identification information receiving unit 4220, a corresponding confidential data acquisition unit 4221, and a corresponding confidential data transmission unit 4222. The confidential data storage unit 63 is the same as that in the first embodiment.

  The temporary screen information request transmission unit 1221 of the client terminal 12 requests temporary screen information. At this time, the user authentication information is also transmitted to the temporary screen information generating apparatus 30 together with the temporary screen information request (step S1221). The temporary screen information generation apparatus 30 performs the same operation as that of the first embodiment to generate temporary screen information, and transmits the temporary screen information to the client terminal 12 as a response of step S1221 (step S325). The temporary screen information receiving unit 1222 receives the requested temporary screen information from the temporary screen information generating device 30 (step S1222). The identification information extraction unit 1223 extracts the identification information of the dummy data included in the received temporary screen information (step S1223). The identification information transmission unit 1224 transmits the extracted identification information to the data management device 22 (step S1224).

  In step S1224, the identification information receiving unit 4220 of the data management device 22 receives the dummy data identification information included in the temporary screen information transmitted from the client terminal 12 (step S4220). The user authentication unit 4223 authenticates the user (step S4223). When the user is authenticated, the corresponding confidential data acquisition unit 4221 acquires confidential data corresponding to the received identification information from the confidential data storage unit 63 (step S4221). The corresponding confidential data transmission unit 4222 transmits the acquired confidential data to the client terminal 12 (step S4222).

  The corresponding confidential data receiving unit 1225 of the client terminal 12 receives confidential data corresponding to the identification information transmitted in step S1224 from the data management device 22 (step S1225). The normal screen information generation unit 1226 replaces the dummy data included in the received temporary screen information with the confidential data received based on the identification information, and generates normal screen information (step S1226).

  As described above, the service provision using the calculation capability of the temporary screen information generation device 30 is executed without passing confidential data to the temporary screen information generation device 30 even in the data processing method of the data processing system 200 and the configuration of each device. I can do it.

  FIG. 13 shows a sequence diagram of the data processing system 300 of the present invention. The system configuration of the data processing system 300 is different from those of the first and second embodiments, and includes two devices, that is, the client terminal 13 and the provisional screen information generation device 30. The temporary screen information generation device 30 is the same as in the first and second embodiments. The operation of the data processing system 300 will be described with reference to the sequence diagram of FIG. 13 and an example of the functional configuration of the client terminal 13 shown in FIG.

  The client terminal 13 includes a confidential data storage unit 23, a functional block 132, a control unit 134, and a communication interface 131. The confidential data storage unit 23 is the same as in the first and second embodiments. The functional block 132 includes a temporary screen information request unit 1321, a temporary screen information reception unit 1322, an identification information extraction unit 1323, and a corresponding confidential data acquisition unit 1324. And a normal screen information generation unit 1325.

  The temporary screen information request transmission unit 1321 of the client terminal 13 requests temporary screen information. At this time, the user authentication information is also transmitted to the temporary screen information generating apparatus 30 together with the temporary screen information request (step S1321). The temporary screen information generation device 30 performs the same operation as in the first and second embodiments, generates temporary screen information, and transmits the temporary screen information to the client terminal 13 as a response of step S1321 (step S325). The temporary screen information reception unit 1322 receives the requested temporary screen information from the temporary screen generation device 30 (step S1322). The identification information extraction unit 1323 extracts identification information of dummy data included in the received temporary screen information (step S1323). The corresponding confidential data acquisition unit 1324 acquires confidential data corresponding to the extracted identification information from the confidential data storage unit 23 (step S1324). The normal screen information generation unit 1325 replaces the dummy data included in the temporary screen information with the confidential data acquired based on the identification information, and generates normal screen information (step S1325).

  As described above, according to the data processing system 300, the data processing method of the present invention can be realized by the configuration of the two devices of the client terminal 13 and the temporary screen information generating device 30. According to the concept of the third embodiment, it is possible to realize a data processing system in which important confidential data is not passed to a third party.

  As described above, according to the data processing system of the present invention, since confidential data is not passed to an external device, it is possible to completely eliminate the risk of confidential data being falsified and deleted externally. Furthermore, since the present invention makes it possible to actively outsource executable processes, it is possible to contribute to the development of a more suitable service utilizing the characteristics of the SaaS model service.

  The processing content in each of the above devices is described by a program. In addition, the functional configuration unit of each device may be configured by causing a predetermined program to be executed on a computer, or at least a part of the processing contents may be realized in hardware. Further, when the processing means in the above apparatus is realized by a computer, the processing contents of functions that each apparatus should have are described by a program. Then, by executing this program on the computer, the processing means in each apparatus is realized on the computer.

The program describing the processing contents can be recorded on a computer-readable recording medium. As the computer-readable recording medium, for example, any recording medium such as a magnetic recording device, an optical disk, a magneto-optical recording medium, and a semiconductor memory may be used. Specifically, for example, as a magnetic recording device, a hard disk device, a flexible disk, a magnetic tape, or the like, and as an optical disk, a DVD (Digital Versatile Disc), a DVD-RAM
(Random Access Memory), CD-ROM (Compact Disc Read Only Memory), CD-R
(Recordable) / RW (ReWritable) or the like can be used as a magneto-optical recording medium, MO (Magneto Optical disc) or the like as a semiconductor memory, and flash memory or the like as a semiconductor memory.

  The program is distributed by selling, transferring, or lending a portable recording medium such as a DVD or CD-ROM in which the program is recorded. Further, the program may be distributed by storing the program in a recording device of a server computer and transferring the program from the server computer to another computer via a network.

  Each means may be configured by executing a predetermined program on a computer, or at least a part of these processing contents may be realized by hardware.

The figure which shows the system configuration | structure of Example 1 (data processing system 100) of this invention. The figure which shows the operation | movement sequence of the data processing system. The figure which shows the function structural example of the temporary screen information generation apparatus 30. FIG. The figure which shows the operation | movement flow of the temporary screen information generation apparatus. The figure which shows the example of temporary screen information. The figure which shows the function structural example of the data management apparatus 20 of this invention. The figure which shows the operation | movement flow of the data management apparatus 20. FIG. The figure which shows the specific example of normal screen information. The figure which shows the operation | movement sequence which cooperates with the data management apparatus 20 and the temporary screen information generation apparatus 30 at the time of confidential data editing. The figure which shows the operation | movement sequence of Example 2 (data processing system 200) of this invention. The figure which shows the function structural example of the client terminal 12. FIG. The figure which shows the function structural example of the data management apparatus 22. FIG. The figure which shows the operation | movement sequence of Example 3 (data processing system 300) of this invention. The figure which shows the function structural example of the client terminal 13. FIG. The figure which shows an example of the conventional SaaS model service.

Claims (11)

A data processing system comprising a client terminal, a data management device, and a provisional screen information generation device,
Data management device
A normal screen information request receiving unit for receiving a normal screen information request from a client terminal;
A confidential data storage unit for storing confidential data and identification information that associates the confidential data with dummy data included in the temporary screen information held by the temporary screen information generation device;
A temporary screen information request transmitting unit for requesting temporary screen information generating apparatus including temporary screen information including identification information of one or more dummy data corresponding to the normal screen information request from the client terminal and the dummy data;
A temporary screen information receiving unit for receiving the requested temporary screen information from the temporary screen information generating device;
An identification information extraction unit that extracts identification information of dummy data included in the received temporary screen information;
A corresponding confidential data acquisition unit that acquires confidential data corresponding to the extracted identification information from the confidential data storage unit;
A normal screen information generation unit that generates the normal screen information by replacing the dummy data included in the temporary screen information with the acquired confidential data;
A normal screen information transmission unit for transmitting the generated normal screen information to the client terminal,
The temporary screen information generation device
A data storage unit for recording temporary screen information;
A temporary screen information request receiving unit that receives a temporary screen information request from the data management device;
A temporary screen information generation unit that acquires temporary screen information corresponding to the temporary screen information request from the data storage unit;
A temporary screen information transmission unit that transmits the acquired temporary screen information to the data management device,
The client terminal
A transmission / reception unit for requesting and receiving normal screen information to the data management device;
A data processing system characterized by that. A normal screen information request receiving unit for receiving a normal screen information request from a client terminal;
A confidential data storage unit for storing confidential data and identification information that associates the confidential data with dummy data included in the temporary screen information held by the temporary screen information generation device;
A temporary screen information request transmitting unit for requesting temporary screen information generating apparatus including temporary screen information including identification information of one or more dummy data corresponding to the normal screen information request from the client terminal and the dummy data;
A temporary screen information receiving unit for receiving the requested temporary screen information from the temporary screen information generating device;
An identification information extraction unit that extracts identification information of dummy data included in the received temporary screen information;
A corresponding confidential data acquisition unit that acquires confidential data corresponding to the extracted identification information from the confidential data storage unit;
A normal screen information generation unit that generates the normal screen information by replacing the dummy data included in the temporary screen information with the acquired confidential data;
A normal screen information transmission unit for transmitting the generated normal screen information to the client terminal;
A data management apparatus comprising: A data storage unit that records temporary screen information including one or more dummy data and identification information of the dummy data;
A temporary screen information request receiving unit that receives a temporary screen information request from the data management device;
A temporary screen information generation unit that acquires temporary screen information corresponding to the temporary screen information request from the data storage unit;
A temporary screen information transmission unit for transmitting the acquired temporary screen information to the data management device;
A provisional screen information generation apparatus comprising: A data processing system comprising a client terminal, a data management device, and a provisional screen information generation device,
The client terminal
A temporary screen information request transmission unit that requests the temporary screen information generation device to include temporary screen information including one or more dummy data corresponding to the normal screen information request and identification information of the dummy data;
A temporary screen information receiving unit for receiving the requested temporary screen information from the temporary screen information generating device;
An identification information extraction unit that extracts identification information of dummy data included in the received temporary screen information;
An identification information transmitting unit for transmitting the identification information to a data management device;
A corresponding confidential data receiving unit for receiving confidential data corresponding to the transmitted identification information from the data management device;
A normal screen information generating unit that generates dummy screen information by replacing dummy data included in the temporary screen information with confidential data received based on the identification information;
Data management device
Confidential data, a confidential data storage unit that stores identification information that associates the confidential data with the dummy data included in the temporary screen information held by the temporary screen information generation device;
An identification information receiving unit that receives identification information of dummy data included in the temporary screen information from the client terminal;
A corresponding confidential data acquisition unit that acquires confidential data corresponding to the received identification information from the confidential data storage unit;
With a corresponding confidential data transmission unit that transmits the acquired confidential data to the client terminal,
The temporary screen information generation device
A data storage unit for recording temporary screen information;
A temporary screen information request receiving unit that receives a temporary screen information request from a client terminal;
A temporary screen information generation unit that acquires temporary screen information corresponding to the temporary screen information request from the data storage unit;
A provisional screen information transmission unit for transmitting the acquired provisional screen information to the client terminal;
A data processing system characterized by that. A temporary screen information request transmission unit that requests the temporary screen information generation device to include temporary screen information including one or more dummy data corresponding to the normal screen information request and identification information of the dummy data;
A temporary screen information receiving unit for receiving the requested temporary screen information from the temporary screen information generating device;
An identification information extraction unit that extracts identification information of dummy data included in the received temporary screen information;
An identification information transmitting unit for transmitting the identification information to a data management device;
A corresponding confidential data receiving unit for receiving confidential data corresponding to the transmitted identification information from the data management device;
A client terminal comprising: a normal screen information generating unit that generates dummy screen information by replacing dummy data included in temporary screen information with confidential data received based on identification information. A confidential data storage unit for storing confidential data and identification information that associates the confidential data with dummy data included in the temporary screen information held by the temporary screen information generation device;
An identification information receiving unit that receives identification information of dummy data included in the temporary screen information from the client terminal;
A corresponding confidential data acquisition unit that acquires confidential data corresponding to the received identification information from the confidential data storage unit;
A corresponding confidential data transmission unit that transmits the acquired confidential data to the client terminal;
A data management apparatus comprising: A data processing system comprising a client terminal and a provisional screen generation device,
The client terminal
A confidential data storage unit for storing confidential data and identification information that associates the confidential data with dummy data included in the temporary screen information held by the temporary screen information generation device;
A temporary screen information request transmitting unit that requests the temporary screen information generation device to include temporary screen information including one or more dummy data and identification information of the dummy data;
A temporary screen information receiving unit for receiving the requested temporary screen information from the temporary screen information generating device;
An identification information extraction unit that extracts identification information of dummy data included in the received temporary screen information;
A corresponding confidential data acquisition unit that acquires confidential data corresponding to the extracted identification information from the confidential data storage unit;
A normal screen information generating unit that generates dummy screen information by replacing dummy data included in the temporary screen information with confidential data acquired based on the identification information;
The temporary screen information generation device
A data storage unit for recording temporary screen information;
A temporary screen information request receiving unit that receives a temporary screen information request from a client terminal;
A temporary screen information generation unit that acquires temporary screen information corresponding to the temporary screen information request from the data storage unit;
A provisional screen information transmission unit for transmitting the acquired provisional screen information to the client terminal;
A data processing system characterized by that. A confidential data storage unit for storing confidential data and identification information that associates the confidential data with dummy data included in the temporary screen information held by the temporary screen information generation device;
A temporary screen information request transmitting unit that requests the temporary screen information generation device to include temporary screen information including one or more dummy data and identification information of the dummy data;
A temporary screen information receiving unit for receiving the requested temporary screen information from the temporary screen information generating device;
An identification information extraction unit that extracts identification information of dummy data included in the received temporary screen information;
A corresponding confidential data acquisition unit that acquires confidential data corresponding to the extracted identification information from the confidential data storage unit;
A normal screen information generating unit that generates dummy screen information by replacing dummy data included in the temporary screen information with confidential data acquired based on the identification information;
Client terminal provided. In the data management device according to claim 2 or 6,
A confidential data editing unit that edits confidential data in the confidential data storage unit in association with identification information that associates confidential data with dummy data included in provisional screen information;
Edit identification information notification unit for transmitting identification information related to confidential data edited by the confidential data editing unit to the temporary screen generation device;
A data management device further comprising: In the data management device according to claim 9,
An information amount generation unit for generating an information amount of the edited confidential data;
The edit identification information communication unit transmits identification information related to the edited confidential data and the information amount of the confidential data to a temporary screen generation device.   An apparatus program for causing a computer to function as the client terminal, provisional screen generation apparatus, or data management apparatus according to any one of claims 2 or 3, and 5 or 6, and 8 to 10.

Images