JP2014016960A - Device, method and program for relaying attribute information circulation system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To achieve circulation of attribute information between Web applications adopting different attribute information circulation methods while guaranteeing security, in a simple and easy manner.SOLUTION: The gateway 1 is provided with a translation table 11, a translation processing section 12 and a conversion processing section 13. Information indicating a conversion direction of an attribute information circulation method is obtained, and link information fid is obtained from a method master table within the translation table 11. The received request is divided according to syntax by referring to a syntax division table defined by the obtained fid, and a code for parameter conversion is extracted from each of the divided sentences. Translation information is obtained from a parameter translation table on the basis of the code for parameter conversion, and a non-corresponding parameter is determined as a different information circulation method on the basis of the translation information. A parameter required for the converted attribute information circulation method is embedded where applicable, and parameters are supplemented and excluded.

Description

  The present invention relates to a relay apparatus, method, and program used in an attribute information distribution system that distributes user attribute information between Web applications that employ different attribute information distribution methods.

  The ID-WSF method and the Open ID AX method are known as methods for exchanging user attribute information between multiple Web applications. Of these methods, which one is adopted is often determined depending on how attribute information is handled, such as whether security is given priority or usability is given priority.

  In general, the ID-WSF method is often adopted when a method for securely exchanging user attribute information among multiple applications on the Web, and is used for the distribution of medical information (hereinafter referred to as non-patent). Reference 1). On the other hand, the Open ID AX method is often adopted when a method is used in which a user is shared by a single ID and easily linked to various services among multiple applications on the Web, and health care information and shopping can be linked well. As described above, it is utilized for sharing account information between a health care site and an EC (Electronic Commerce) site (hereinafter referred to as non-patent document 2).

  In this way, it is currently decided which method to use according to the attribute information handling method, but in order to provide a more convenient service in the future, it is necessary to change the attribute at each stage of the life cycle of the attribute information to be distributed. It is required to take measures such as changing the information handling method.

  For example, when medical information generated and managed by a medical institution such as a hospital satisfies a certain period stipulated by laws and regulations, the management obligation of the medical institution may be lost and deleted. At that time, a business model has been proposed in which medical information, which is no longer responsible for management at a medical institution, is delivered to a patient and used to improve health awareness in conjunction with a health care site. In addition, due to future IT technology innovation, it may become mainstream to control the security viewpoint not in the information distribution layer but in a layer such as NW or authentication.

Liberty ID-WSF 2.0 Marketing Requirements Document Version: 1.0, Internet <URL: http://www.projectliberty.org/liberty/strategic_initiatives/requirements/?f=liberty/strategic_initiatives/requirements> Open ID Attribute Exchange 1.0-Final Edition, Internet <URL: http://openid-foundation-japan.github.com/openid-attribute-exchange.html#store_request>

  By the way, in order to realize the distribution of attribute information between Web applications adopting different attribute information distribution methods, a mechanism for translating requests and responses distributed between the different Web applications is required. As long as there is a version difference in a single method, a method for ensuring compatibility by defining a revised part and translating and converting a request / response has been proposed. However, at the present time, there is no proposal that takes the above into consideration when a mechanism for linking with Web applications that adopt different attribute information distribution methods is required.

At the present stage, the following methods have been proposed as a method for linking Web applications that employ different attribute information distribution methods.
The first method is a method of directly referring to a storage area in which information such as a database is accumulated and reflecting it in the other database. This method increases the chances of mistakes by the time it takes. In addition, it is not realistic to ask the general user for the operation.

  The second method is to output information to the outside in a format that can be stored in an information storage area managed by a different Web application, and input the information again. Although this method can improve the effort to browse and reflect the database, even if security is improved by the information linkage system, the information life cycle cannot be tracked because it is output once to the outside, resulting in information leakage. Will increase the risk.

  In other words, Web application linkage between different attribute information distribution methods requires a simpler and more secure method, and it is anxious to link requests and responses between different attribute information distribution methods closed in the system. Has been. Specifically, it would be desirable to establish translation / conversion processing technology that includes differences in the handling of information such as required / optional, rather than translation / conversion of specific areas, such as version changes between single methods. It is rare. In addition, as a method for distributing attribute information, a request / response translation / conversion technology between the original method and the Open ID AX method or the ID-WSF method is realized so that Web applications that adopt the original method can be properly coordinated. It is also desirable to do.

  The present invention has been made paying attention to the above circumstances, and its purpose is to provide an attribute that enables easy and secure distribution of attribute information between Web applications adopting different attribute information distribution methods. An object of the present invention is to provide a relay device, method, and program for an information distribution system.

  In order to achieve the above object, one aspect of the present invention employs a first device having an application adopting the first information distribution method and a second information distribution method different from the first information distribution method. In the relay device that relays the distribution of attribute information with the second device having the application, the first parameter used in the first information distribution method and the second information distribution method. A parameter translation table for storing the second parameters to be used in association with each other corresponding to each other is provided. And when the request or response by the first information distribution method is received from the first device, the second parameter corresponding to the first parameter included in the request or response is searched from the parameter translation table, The first parameter included in the received request or response is converted into the searched second parameter. Further, based on the search result of the parameter, the necessary parameter and the unnecessary parameter are determined in the second information distribution method, and the parameter determined to be necessary is supplemented to the received request or response. The request or response corresponding to the second information distribution system after the parameter determined to be unnecessary is excluded from the received request or response and at least one of the conversion, complementation, and exclusion processing is performed, Transmission is made to the second device.

Specifically, when each of the first and second information distribution methods includes a plurality of information distribution methods, a request or response transmitted from the first device is determined from which information distribution method request or response. Conversion direction information indicating which information distribution method request or response is to be converted is acquired. When a request or response is received from the first device, a parameter group to be converted is selected from the parameter translation table based on the acquired conversion direction information, and the parameter group is selected from the selected parameter group. The second parameter corresponding to the first parameter included in the received request or response is retrieved.
Therefore, even when the first and second information distribution methods each include a plurality of information distribution methods, parameter conversion according to the information distribution method used can be performed.

In addition, the information processing system further includes a syntax division table storing a division rule for dividing the syntax of the request or response according to the first information distribution method. When searching for the parameter, the first information is sent from the first device. When receiving a request or response according to the distribution method, the request or response is divided into a plurality of sentences according to the division rule stored in the syntax division table, and the first parameter is extracted for each divided sentence. . Then, the second parameter corresponding to the first parameter extracted for each sentence is read from the parameter translation table.
Therefore, a request required for the distribution of attribute information between Web applications using different attribute information distribution methods by further performing request / response translation / conversion processing using an existing relay device such as a gateway. -Responses can be linked. Thereby, it becomes possible to use properly the merit which each attribute information distribution system has according to a situation.

  That is, according to one aspect of the present invention, a relay apparatus, method, and program for an attribute information distribution system capable of realizing the distribution of attribute information that is simple and secures security between Web applications that employ different attribute information distribution methods. Can be provided.

1 is a block diagram showing an overall configuration of an attribute information distribution system according to an embodiment of the present invention and a functional configuration of a gateway provided in the system as a relay device. The figure which shows the procedure and content of the process which converts the attribute information request of Open ID AX system into the request of ID-WSF system in the system shown in FIG. The figure which shows the procedure and content of the process which converts the attribute information response of ID-WSF system into the response of Open ID AX system in the system shown in FIG. The figure which shows an example of the system master table provided in the translation table of the relay apparatus shown in FIG. The figure which shows an example of the syntax division | segmentation table provided in the translation table of the relay apparatus shown in FIG. The figure which shows an example of the parameter translation table provided in the translation table of the relay apparatus shown in FIG. The figure for demonstrating operation | movement when distributing attribute information between the Web applications which employ | adopted Open ID AX system in the system shown in FIG. The figure for demonstrating operation | movement when distributing attribute information between the web application which employ | adopted Open ID AX system, and the web application which employ | adopted ID-WSF system in the system shown in FIG. The figure for demonstrating the operation | movement in a relay apparatus among the operation | movement shown in FIG.

Embodiments according to the present invention will be described below with reference to the drawings.
[One Embodiment]
(Constitution)
1 is a block diagram illustrating an overall configuration of an attribute information distribution system according to an embodiment of the present invention and a functional configuration of a gateway provided in the system as a relay device.
The system of this embodiment includes a data request (RP) server 2, a data providing (OP) server 3, a data storage location providing (DS) server 4, a data sharing (WSC / A WSP (Web Service Consumer / Web Service Provider) server 5 and a data sharing (proprietary API; Application) server 6 are provided, and data is transferred between these servers 2 to 6 via the gateway 1 as a relay device. It is configured. In addition, it is also possible to use a personal computer having an equivalent function in place of the servers 2 to 6 described above.

  The data request (RP) server 2 uses a Web application that adopts the OpenID AX method. The data request (RP) server 2 generates a data request that requests provision of attribute information in response to a request operation of a general user, and the data request is transmitted to the OpenID AX. It has a function of transmitting to the data providing (OP) server 2 by a method.

  The data providing (OP) server 3 also uses a Web application that adopts the OpenID AX method, and when receiving a data request by the above OpenID AX method, if the request destination is the local server, the corresponding data is retrieved and A function of responding to the request source data request (RP) server 2 by the OpenID AX system as a data response is provided.

  If the request destination is a server that uses a Web application server that adopts another attribute information distribution method, the data providing (OP) server 3 transfers the data request to the gateway 1 by the OpenID AX method and also sends the request. On the other hand, a data response returned from the gateway 1 by the OpenID AX method is returned to the requesting data request (RP) server 2 by the OpenID AX method.

  The data storage location providing (DS) server 4 uses a Web application that adopts the ID-WSF method, and provides a function for providing data indicating the location of the corresponding attribute information in response to a data request by the ID-WSF method. Have.

  The data sharing (WSC / WSP) server 5 uses a Web application adopting the ID-WSF method, and executes a function as a WSC based on the ID-WSF method and a function as a WSP based on the ID-WSF method.

  The data sharing (proprietary API) server 6 uses a unique web application, and transmits a data request generated according to an operation of a general user to the gateway 1 by the unique API method, and from the gateway 1 to the unique API method. Has a function of receiving a data response returned by.

By the way, as functions for realizing one embodiment of the present invention, the gateway 1 executes a data request (RP; Relying Party) and data provision (OP; OpenID Provider) by the OpenID AX method, and an ID-WSF. In addition to the function to execute the above data sharing (WSC / WSP; Web Service Consumer / Web Service Provider) by the method, the function to link the request and response for attribute information distribution between Web applications that adopt different attribute information distribution methods have.
The function of linking attribute information distribution requests and responses between different attribute information distribution methods is realized by the translation table 11, the translation processing unit 12, and the conversion processing unit 13. Among these, the functions of the translation processing unit 12 and the conversion processing unit 13 are realized by causing a central processing unit (CPU) to execute an application program stored in a program memory (not shown).

  The translation table 11 includes a method master table, a syntax division table, and a parameter translation table. The method master table includes an attribute information distribution method and its identification information fid for the translation processing unit 12 and the conversion processing unit 13 to specify the type of the attribute information distribution method and perform the translation / conversion processing for the request / response. The associated information is stored. FIG. 4 is a diagram showing an example of this, in which information representing the ID-WSF method in association with fid = 1 and information representing the OpenID AX method in association with fid = 2 are stored.

  In the syntax division table, a division method (division rule) indicating how to perform the division processing for each information distribution method when the translation processing unit 12 and the conversion processing unit 13 perform the request / response syntax division processing. Is described. FIG. 5 shows an example thereof, and exemplifies the syntax division rule in the case of the OpenID AX method defined as fid = 2 in the method master table of FIG. In the figure, “definition” represents a character string defined as an application of the OpenID AX method, and “format” represents a character string for each application described in the request syntax. Furthermore, “data_type” describes the handling policy in translation / conversion processing, [def] is the value related to the definition of attribute information distribution policy, [data] is the value of attribute information distribution target, and [data_variation] is the attribute A value related to the handling of the information distribution target value, and [input] indicates a condition value for designating a range of target attribute information.

  In the parameter translation table, information indicating what name the parameters extracted after the syntax division processing are converted by the translation processing unit 12 and the conversion processing unit 13 is stored. Fig. 6 shows an example. When translating and converting a request from the OpenID AX system to the ID-WSF system, the request form before conversion ("request_from") and the request form after conversion for each "data_type" (“Request_to”) is associated with “action” indicating the content of the request molding process.

  As “action”, [loop], [delete] and [keep] are defined. [loop] is mainly used for handling related to attribute information distribution target, and repeats the request multiple times when converting the translation result, such as “shaping multiple attribute information distribution request sentences for each requested attribute information” Is the process of shaping. [delete] is a process for shaping the parameters included in the request text before conversion to be excluded after conversion, regardless of “data_type”. [keep] is mainly used for conditions that limit the number and range of attribute information distribution targets, and processes the request text so that the values associated with the parameters are inherited as they are after the parameter names are translated It is.

  The translation processing unit 12 includes a conversion direction acquisition processing unit, a syntax division processing unit, a parameter search processing unit, and a consistency determination processing unit. The conversion direction acquisition processing unit determines which attribute information distribution method requires a change from which attribute information distribution method to which attribute information distribution method, that is, the conversion direction of the method.

  The syntax division processing unit divides the request or response before conversion into a plurality of sentences according to the syntax division rules described in the syntax division table. The parameter search processing unit extracts parameters from the sentence cut by the syntax division processing unit, and reads the converted parameters corresponding to the extracted parameters from the parameter translation table.

  The consistency determination processing unit determines whether there is a parameter that cannot be handled between different information distribution methods, and checks whether there is a parameter to be supplemented as a specification of the attribute information distribution method after conversion and a parameter to be excluded. If there is a parameter to be complemented, the part defining the target parameter is output. Similarly, when there is a parameter to be excluded, the part where the parameter is defined is output. After checking the consistency, if matching is obtained, the conversion processing unit 13 is notified that conversion is possible, and if there is a mismatch, the parameter information to be complemented or the parameter information to be excluded is also converted. It passes to the processing unit 13.

  The conversion processing unit 13 includes a parameter conversion processing unit, a complement processing unit, and an exclusion processing unit. The parameter conversion processing unit receives the processing result from the translation processing unit 12, and embeds the parameter read from the translation table 11 by the parameter search processing unit in the request sentence or response sentence instead of the parameter before conversion.

  The complement processing unit supplements the parameters determined to be necessary for the information distribution method after conversion by the consistency determination processing unit. The exclusion processing unit does not write parameters determined to be unnecessary for the information distribution method after conversion by the consistency determination processing unit in the request text, and temporarily stores them in a storage area for conversion processing of responses to the request To do.

(Operation)
Next, the operation of the system configured as described above will be described focusing on the operation of the gateway 1.
(1) When distributing attribute information between Web applications adopting the OpenID AX method Here, for example, an attribute information distribution request is transmitted from the data request (RP) server 2 to the data providing (OP) server 3, and this attribute information is transmitted. A case where the data providing (OP) server 3 returns a response to the requesting data request (RP) server 2 in response to the distribution request will be described.

  FIG. 7 shows an attribute information distribution request transmitted from the data request (RP) server 2 to the data providing (OP) server 3, and the data providing (OP) server 3 responding to this request by the data request (RP) ) An example of a response representing an operation result for the attribute information returned to the server 2 is shown.

  In this example, the data request (RP) server 2 generates a request statement for requesting operation of attribute information with “name” and “medical record information” as essential, and “receipt information” as an option, and provides the request with data (OP) It is transmitted to the server 3. In response to this, the data providing (OP) server 3 reads out the corresponding “name”, “medical chart information”, and “receipt information” from the database in accordance with the contents of the request, and uses the read information as a response. It is returned to the data request (RP) server 2.

  That is, between the data request (RP) server 2 and the data providing (OP) server 3, the distribution process of attribute information using only the OpenID AX system, that is, closed by the OpenID AX system, is performed. Therefore, request / response conversion between information distribution methods is not performed.

(2) When linking a request / response for the distribution of attribute information between a Web application using the OpenID AX method and a Web application using the ID-WSF method (2-1) ID from the OpenID AX method -Conversion of request to WSF method Here, a general user operates (creates, references, modifies or deletes) attribute information managed by the data sharing (WSC / WSP) server 5 in the data request (RP) server 2 An example will be described.

  The attribute information distribution request according to the OpenID AX system transmitted from the data request (RP) server 2 is transferred to the gateway 1 via the data providing (OP) server 3. When the gateway 1 receives the OpenID AX attribute information distribution request as OP (OpenID Provider), first, the translation processing unit 12 refers to the translation table 11 and executes the translation processing as shown in FIG. To do.

  That is, first, the conversion direction acquisition processing unit acquires information indicating which attribute information distribution method is converted into which attribute information distribution method. The information acquired at this time may be acquired at a timing when a general user issues a request from the data request (RP) server 2, or the data request (RP) server 2 from the gateway 1 when conversion is necessary. Inquiries may be obtained for. The application acquired by this inquiry is installed in the gateway 1 in advance.

  When the information indicating the conversion direction of the attribute information distribution method can be acquired, the method master table (FIG. 4) in the translation table 11 is subsequently referred to based on the acquired information indicating the conversion direction. Get link information fid to be used in translation / conversion processing. Then, based on the method master table, the received request is stored as a code in the translation processing unit 12 in a format of “request from fid = 2 to fid = 1”, and passed to the syntax division processing unit. Note that the storage destination may be written on the work memory in the gateway 1 or in a setting file.

  When the code representing the request format is received, the syntax division processing unit refers to the syntax division table (FIG. 5) defined by “fid = 2”, and receives the reception according to the division rule stored in the syntax division table. The request is split according to the syntax. As a result of the syntax division, the request is divided into parameter conversion codes described in “data_type” and “format”, stored, and then passed to the parameter search processing unit. Also in this case, the storage destination may be written on the work memory in the gateway 1 or in the setting file.

  Next, the parameter search processing unit that has received the parameter conversion code refers to the parameter translation table associated with “request from fid = 2 to fid = 1” and acquires translation information. For example, in the parameter translation table shown in FIG. 6, since “medical record_A” is stored in association with the OpenID AX parameter conversion code “medical record”, this “medical record_A” is read as translation information. The acquired translation information is stored as a consistency check code in which the correspondence between “request_from” and “request_to” is described, and then transferred to the consistency determination processing unit. In this case, the storage destination may be either the working memory in the gateway 1 or the setting file.

  Subsequently, the consistency determination processing unit that has received the consistency check code determines a parameter that does not correspond to a different information distribution method, and includes a parameter to be supplemented and a parameter to be excluded as a specification of the attribute information distribution method after conversion. Check for presence. If there is a parameter to be complemented as a result of this confirmation, the part defining the target parameter is extracted. Similarly, when there is a parameter to be excluded, a part where the parameter is defined is extracted. After confirming this consistency, if it is consistent, it passes to the conversion processing unit 13 that it can be converted as it is, and if there is a mismatch, it also converts the parameter information to be supplemented or parameter information to be excluded. It passes to the processing unit 13.

  Upon receipt of the confirmation result of the consistency determination processing unit, the conversion processing unit 13 embeds parameters in the corresponding part according to the consistency confirmation code in which the correspondence between “request_from” and “request_to” is described, and sends a request sentence To shape. For example, when “medical record_A” is acquired as translation information for the parameter conversion code “medical record” as described above, “medical record_A” is used instead of “medical record” as shown in FIG. Is embedded.

  Also, when parameter information to be complemented is received together with it, an inquiry is made to the function that complements the information described in the code by the complement processing unit, and the result obtained by this inquiry is used. Format the request statement. Generally, distribution of attribute information is often used in conjunction with authentication. For this reason, when it is necessary to specify a user as a condition for distributing attribute information, for example, if authentication has already been performed, parameters are acquired from the authentication result. If unauthenticated, a request is made to perform authentication processing, and parameters are acquired from the authentication result.

  In addition, when the parameter to be excluded is also received, the content described in the code is not described in the request text by the exclusion processing unit, but temporarily stored in the storage area for the response conversion processing for the request. To do. In this case, the storage destination may be either the working memory in the gateway 1 or the setting file.

  Thus, the attribute information distribution request by the OpenID AX method is translated and converted into the attribute information distribution request by the ID-WSF method in the gateway 1. The converted attribute information distribution request by the ID-WSF method is transferred from the gateway 1 to the data storage location providing (DS) server 4 or the data sharing (WSC / WSP) server 5. FIG. 8 shows an example when the attribute information distribution request is transferred to the data storage location providing (DS) server 4, and FIG. 9 shows an example when the attribute information distribution request is transferred to the data sharing (WSC / WSP) server 5. Show.

(2-2) Response conversion from ID-WSF method to OpenID AX method When a response is returned from the data sharing (WSC / WSP) server 5 by the ID-WSF method, Gateway 1 sends the response to OpenID as follows: Processing to translate and convert to AX format is performed. FIG. 3 shows the processing procedure, and FIGS. 8 and 9 show specific examples.

  That is, when the gateway 1 receives a response by the ID-WSF method as shown in FIG. 9, the gateway 1 performs reverse conversion processing by the translation processing unit 12 and the conversion processing unit 13 as in the case of the request described above.

Response translation / conversion process is very different from that of request:
(1) Handle the parameters supplemented when converting the request text as excluded parameters, and do not format them as parameters when converting the response.
(2) The parameters that are excluded during the translation / conversion of the request text and temporarily stored in the working memory in the gateway 1 are read from the memory, etc., and are formatted as the parameters for response conversion.
These are two points.
For example, as shown in FIG. 9, <SOAP-ENV: Body ID = “idwsf” id = “2222”> included in the response returned from the data sharing (WSC / WSP) server 5 is in the OpenID AX system. Since it is an unnecessary parameter, it is excluded.

  The response is converted from the ID-WSF format to the format corresponding to the OpenID AX format by the inverse conversion process of the response, and the data request (RP) is sent via the data providing (OP) server 3 as shown in FIG. ) Transferred to the server 2. Thus, the general user can confirm the operation result for the attribute information existing in the data sharing (WSC / WSP) server 5 adopting the ID-WSF method without being aware of the information distribution method.

In the above description, the case where the information managed by the data sharing (WSC / WSP) server 5 is operated using the Web application of the data request (RP) server 2 has been described as an example. However, not limited to that,
(1) When operating the information managed by the data sharing (proprietary API) server 6 using the Web application of the data request (RP) server 2.
(2) When operating information managed by the data providing (OP) server 3 using a Web application of the data sharing (WSC / WSP) server.
(3) When operating information managed by the data sharing (proprietary API) server 6 using the Web application of the data sharing (WSC / WSP) server 5.
(4) When information managed by the data providing (OP) server 3 is operated using the Web application of the data sharing (proprietary API) server 6.
(5) When information managed by the data sharing (WSC / WSP) server 5 is operated using the Web application of the data sharing (proprietary API) server 6.
In addition, the relay method according to the present invention can be similarly applied.

  In these cases (1) to (5), the case where the information managed by the data sharing (WSC / WSP) server 5 is operated using the Web application of the data request (RP) server 2 described above, and Are the contents of data stored in the syntax partitioning table and the parameter translation table.

  Among the above (1) to (5), information is distributed between the data sharing server 6 adopting the original information distribution method (original API) and the data providing server 2 adopting the ID-WSF method or the OpenID AX method. In the case of (2) or (3) above, when managing the request and response for the client, manage individual personal computers or servers that are going to cooperate with a new Web application with a different attribute information distribution method. The user provides the gateway 1 with a syntax partitioning table of his / her Web application in advance. Then, a parameter translation table is created with the attribute information distribution method scheduled to be linked, and is newly defined upon agreement with the management user of the gateway 1.

  For example, a management user of an individual personal computer or server that adopts the attribute information distribution method called Original API_2 described in the method master table shown in FIG. 4 newly defines “fid = 4” and Original API_2 Is created, and the parameter translation table for the planned cooperation is defined. Here, for example, assuming linkage between OpenID AX and ID-WSF, “request from fid = 4 to fid = 1”, “request from fid = 4 to fid = 2”, “response from fid = 2 to fid = 4 ”and“ response from fid = 2 to fid = 4 ”are defined.

  As described above in detail, in the embodiment of the present invention, the gateway 1 is provided with the translation table 11, the translation processing unit 12, and the conversion processing unit 13, and attribute information distribution between Web applications adopting different attribute information distribution methods. The request and response are linked to each other. Specifically, first, information indicating the conversion direction of the attribute information distribution method is acquired, and link information fid is acquired from the method master table in the translation table 11 based on this information. Next, referring to the syntax division table defined by the acquired fid, the received request is syntax-divided according to the division rule, and the parameter conversion code is extracted from each of the divided sentences. Subsequently, the translation information is acquired from the parameter translation table using the parameter conversion code as a key, and an unsupported parameter is determined as a different information distribution method based on the translation information. Check whether there are parameters to be supplemented and parameters to be excluded as specifications of. Then, parameters necessary for the converted attribute information distribution method are embedded in the corresponding part to shape the request sentence, and the above parameters are complemented and excluded.

  Therefore, it is possible to link requests and responses necessary for the distribution of attribute information between Web applications that employ different attribute information distribution methods. Thereby, it becomes possible to use properly the merit which each attribute information distribution system has according to a situation.

  For example, personal medical information and the like are managed by a personal computer or server under a web application that generally uses a highly secure attribute distribution method. However, when several years have passed since the generation of medical information and the organization (such as a hospital) that generated the medical information tries to delete the information, it is currently recorded on a recording medium as a method for leaving the medical information However, according to the embodiment of the present invention, medical information can be distributed between different attribute information distribution systems.

  In other words, medical information that is scheduled to be deleted is copied to a Web application of attribute information distribution method rich in Web applications aimed at improving health although security is somewhat inferior, and this is managed by the general public It can be used for new applications such as widely used for purposes.

[Other Embodiments]
In addition, this invention is not limited to the said embodiment. For example, in the above-described embodiment, the case where the request / response translation / conversion processing is performed between the Web application adopting the OpenID AX method and the Web application adopting the ID-WSF method has been described as an example. However, the present invention is similarly applied to a case where attribute information distribution request / response translation / conversion processing is performed with other attribute information distribution methods such as Original API_1 and Original API_2 illustrated in FIG. Is possible.

  Furthermore, in the above embodiment, the case where medical information such as a user's name and electronic medical record is distributed as attribute information has been described as an example. However, in addition to medical information, meeting information, employee labor information, and the like are distributed. Also good. In addition, various processing procedures and processing contents such as the type and configuration of the relay device, translation, conversion, complementation, and deletion can be variously modified without departing from the scope of the present invention.

  In short, the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

  DESCRIPTION OF SYMBOLS 1 ... Gateway, 2 ... Data request (RP) server, 3 ... Data provision (OP) server, 4 ... Data storage location provision (DS) server, 5 ... Data sharing (WSC / WSP) server, 6 ... Data sharing (original) API) server, 11 ... translation table, 12 ... translation processing unit, 13 ... conversion processing unit.

Claims (7)

Attribute information between a first device having an application adopting the first information distribution method and a second device having an application adopting a second information distribution method different from the first information distribution method A relay device that relays the distribution of
A parameter translation table for storing the first parameter used in the first information distribution method and the second parameter used in the second information distribution method in association with each other;
Parameter search for retrieving a second parameter corresponding to the first parameter included in the request or response from the parameter translation table when a request or response in the first information communication method is received from the first device. Means,
Consistency determining means for determining a necessary parameter and an unnecessary parameter in the second information distribution method based on a search result by the parameter searching means;
Conversion processing means for converting a first parameter included in the received request or response into a second parameter retrieved from the parameter translation table;
Complement processing means for complementing the parameters determined to be necessary in the second information distribution method with respect to the received request or response;
Exclusion processing means for excluding parameters determined as unnecessary in the second information distribution method from the received request or response;
Transmission means for transmitting a request or response corresponding to the second information distribution method after at least one of the conversion, complementation, and exclusion processing is performed to the second device. Characteristic relay device. When each of the first and second information distribution methods includes a plurality of information distribution methods, the request or response transmitted from the first device is changed from which information distribution method to which information distribution method. Further comprising conversion direction acquisition processing means for acquiring conversion direction information indicating whether to convert into a request or a response,
The parameter search unit selects a parameter group to be converted from the parameter translation table based on the conversion direction information acquired by the conversion direction acquisition processing unit when a request or response is received from the first device. The relay apparatus according to claim 1, wherein a second parameter corresponding to the first parameter included in the received request or response is searched from the selected parameter group. Further comprising a syntax division table storing a division rule for dividing the syntax of a request or response according to the first information distribution method for each of the conversion directions;
The parameter search means includes
When a request or response is received from the first device, a division rule is selected from the syntax division table based on the conversion direction information, and the received request or response is determined according to the selected division rule. Syntax splitting means for splitting into multiple syntaxes;
The apparatus further comprises: a reading unit that extracts the first parameter for each of the divided syntaxes, and reads a second parameter corresponding to the extracted first parameter from the parameter translation table. Item 3. The relay device according to Item 2. Attribute information between a first device having an application adopting the first information distribution method and a second device having an application adopting a second information distribution method different from the first information distribution method A relay method for relaying the distribution of
The first parameter used in the first information distribution method and the second parameter used in the second information distribution method are associated with each other according to the data type and are associated with each other in the parameter translation table. The process of remembering,
A process of searching the parameter translation table for a second parameter corresponding to the first parameter included in the request or response when receiving a request or response by the first information distribution method from the first device; ,
Determining a necessary parameter and an unnecessary parameter in the second information distribution method based on a search result obtained by searching the second parameter;
Converting a first parameter included in the received request or response into a second parameter retrieved from the parameter translation table;
Supplementing the received request or response with a parameter determined to be necessary in the second information distribution method;
A process of excluding parameters determined as unnecessary in the second information distribution method from the received request or response;
And a step of transmitting a request or response corresponding to the second information distribution method after at least one of the conversion, complementation, and exclusion processing is performed to the second device. Relay method. When each of the first and second information distribution methods includes a plurality of information distribution methods, the request or response transmitted from the first device is changed from which information distribution method to which information distribution method. Further comprising obtaining conversion direction information indicating whether to convert into a request or a response;
In the process of searching for the parameter, when a request or response is received from the first device, a parameter group to be converted is selected from the parameter translation table based on the acquired conversion direction information, and this selection is performed. 5. The relay method according to claim 4, wherein a second parameter corresponding to the first parameter included in the received request or response is searched from the received parameter group. Further comprising the step of storing a division rule for dividing the syntax of the request or response according to the first information distribution method in the syntax division table for each conversion direction;
The process of searching for the parameter includes:
When a request or response is received from the first device, a division rule is selected from the syntax division table based on the conversion direction information, and the received request or response is determined according to the selected division rule. Dividing into multiple syntaxes,
The method includes: extracting the first parameter for each of the divided syntaxes and reading a second parameter corresponding to the extracted first parameter from the parameter translation table. 5. The relay method according to 5.   The program which makes the computer with which the said relay apparatus performs the process by the means with which the relay apparatus in any one of Claims 1 thru | or 3 is provided.

Images