JP2014038501A - Business integration computer system and menu construction method of business integration computer system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To combine a social network service and a mechanism of a business system.SOLUTION: A business integration computer system combines a social network service server 310 open to a user and a closed business server 320 executing specific business and causes the closed business server 320 to execute a function which combines a plurality of business application programs 322 with a user site 311 of the social network service server 310 and manages authentication in an associated manner, and a function which provides a closed widget stored in a closed widget pool 321 to the social network service server 310, when an authentication function authenticates a user as legitimate using an authentication key.

Description

  The present invention relates to a business integration computer system capable of easily constructing a menu of a plurality of businesses in a computer system that performs a plurality of businesses, and a menu construction method for the business integration computer system.

  In recent computer systems, SaaS (Software as a Service), which is a software distribution form in which only what the user needs can be distributed and used as a service, has been adopted. This SaaS is required by the user. It is a type of service-type software that can be used only when necessary, and pays only for the function used.

  In the business integration computer system that provides the SaaS, a menu screen is displayed to allow the user to select a business that the user needs from a plurality of business operations, and a business application for the business selected by the user is started. It is configured.

  The following patent document 1 is cited as a document describing a technology related to a business integration computer system that displays a menu for selecting a plurality of business operations. This patent document 1 corresponds to a business item selected by a user. If the site address is added to the displayed business menu, the business menu sent from the business site is displayed on the client. The technology to carry out the work is displayed.

  On the other hand, in recent years, a social network service (Social Network Service) that allows users to add widgets or gadget parts to their pages and freely build their own menus has been proposed, and technologies related to this social network service are described. The following patent document 2 can be cited as an example of the document, and although this patent document 2 describes the construction of a menu for personal use itself, it constructs a menu of the business itself that holds business information of a company. It is not considered to do.

JP 2010-86438 A JP 2003-30139 A

  Although the technique described in the above-mentioned Patent Document 1 describes that a plurality of business items are selectably displayed as menus in a business integration computer system, in recent SaaS, in order to meet various needs of users. A large number of menu items are displayed on the screen, and the user has to find and select a necessary menu item from a large number of menu items that are not necessary for the user, which makes it difficult to select the menu item. there were. In addition, although the technique described in Patent Document 2 can add a menu as a gadget to a page, it does not take into account the construction of a menu of business itself that holds business information of the company. There was a problem that it was difficult to ensure security.

  SUMMARY OF THE INVENTION An object of the present invention is to solve the above-described problems of the prior art, and is a business integrated computer system capable of integrating a social network service mechanism and a business system mechanism, and a menu construction method for a business integrated computer system Is to provide.

In order to achieve the above object, the present invention provides a social network service server connected to a client group including a plurality of client computers and a business application server providing various SaaS application programs via the Internet and having a widget providing function. And a business database for managing open source of the social network service server, and a business server connected to the business application server via the intranet and storing and executing closed data of business units A system,
A user site that manages an authentication key including an email address, an open ID, and an authentication protocol; an open site that includes a blog, a message, and a community; an open widget pool that stores open widgets; A social network service server having a closed site having an authentication function including login, LDAP authentication, and user authentication;
A business server having a plurality of business application programs, a widget pool for storing closed widgets, and a close management database for storing close management information of the plurality of business application programs;
When the business server uses the authentication key to authenticate a user by the authentication function, the business server combines the business application programs with the user site, and stores the closed widget stored in the widget pool. The first feature is to provide the social network service server.

  In the business integration computer system having the above characteristics, when the business server uses the authentication key to authenticate the user by the authentication function, the number of accesses from the user and a log-in method are provided. A second feature is to execute a determination function and a function of performing protocol authentication again or user authentication using a mail address when the number of accesses is determined to be the first time by the determination function.

Furthermore, the present invention provides a social network service server connected to a client group including a plurality of client computers and a business application server providing various application programs of SaaS via the Internet and having a widget providing function, and the social network service server. Menu construction of a business integration computer system comprising a management database for managing open source of a network service server, and a business server connected to the business application server via an intranet to store and execute closed data of business units A method,
A user site that manages an authentication key including an email address, an open ID, and an authentication protocol; an open site that includes a blog, a message, and a community; an open widget pool that stores open widgets; A social network service server having a closed site having an authentication function including login, LDAP authentication, and user authentication;
A business server having a plurality of business application programs, a widget pool that stores closed widgets, and a close management database that stores close management information of the business application programs,
A function for combining the plurality of business application programs to the user site when the user authenticates to the business server by the authentication function using the authentication key, and the closed widget stored in the widget pool The third feature is that the function of providing the social network service server is executed.

  Further, the present invention provides the menu construction method for the business integration computer system having the characteristics described above, wherein when the user is authorized by the authentication function using the authentication key to the business server, the number of accesses from the user. A fourth feature is that a determination function for determining a login method and a function of performing protocol authentication again or user authentication using a mail address when the number of accesses is determined to be the first time by the determination function.

  The business integration computer system and the menu construction method of the business integration computer system according to the present invention include a plurality of business application programs when the authentication function is used to authenticate a user to a closed business server by using the authentication key. By executing the function of combining with the user site and the function of providing the social network service server with the closed widget stored in the widget pool, the mechanism of the social network service and the mechanism of the business system can be merged.

The figure which shows the structure of the business integration computer system by embodiment of this invention. The figure which shows the processing flow of the business page access permission by this embodiment. The figure for demonstrating the various management tables by this embodiment. The figure for demonstrating the various management tables by this embodiment. The figure for demonstrating the link of the various tables and master by this embodiment. The figure for demonstrating the link of the various tables and master by this embodiment. The figure for demonstrating the security level by this embodiment.

Hereinafter, an embodiment of a business integration computer system for realizing a menu construction method according to the present invention will be described in detail with reference to the drawings.
[principle]
First, the principle of the business integration computer system and the menu construction method of the business integration computer system according to the present invention will be described.
In the present invention, in order to solve the above-described problems caused by the prior art, a mechanism of a social network service having a high degree of freedom and a mechanism of a business system are integrated to improve convenience for each user. The site that integrates a huge amount of information from a single source into a single screen) is replaced with a social network service (SocialNetworkService), and a security page is set in it, and then each widget's business component is a user By arranging them according to the needs of the user, a mechanism that allows the user to build a business menu that is unique to the user has been adopted.

  This social network service itself allows private / public (private / public) selection, and is a place for communication within the company or information gathering from outside the company. A system that enables business processing to be executed from a page.

  Here, since each business application has a security (login authentication) function individually, simply preparing a security page leaves the trouble of logging in. When logging in for the first time, the information is linked to general-purpose login information (in this case, log in to the security page in the form of login permission and can be officially logged in with the administrator's approval), and the second and subsequent times are automatically logged in And Furthermore, although it is necessary to execute the first login for each business, the information is linked with the security page login information, and each business is a kind of single sign-on image that enables automatic login for the second and subsequent times.

  The business widget in the present invention is managed differently from general information provision (weather etc.), the database to be managed is prepared separately from the usual social network service, and the business required by the user by category, business classification, etc. Necessary widgets can be easily selected and acquired at the time of selection, and business widgets can be provided not only in the link of the main screen of the business but also in granularity such as business-related personnel and menu units of each business.

[Constitution]
As shown in FIG. 1, a business integration computer system 300 according to the present embodiment includes a client group 100 including a plurality of client computers 101 to 103, and business applications that provide various application programs 201 such as SaaS and ASP (Application Service Provider). A social network service (SocialNetworkService) server 310 that is connected to the server 200 via the Internet and has a function of providing a widget (single-function small application software that can be displayed in a favorite place in a web browser start page); Management database 330 for managing a publicly open part of the social network service server 310 , And from the business server 320. for the connected business application server 200 and through the intranet to manage closing data of the business units.

  The social network service server 310 is an e-mail address / open ID / LDAP (Lightweight Directory Access Protocol): an authentication for accessing a directory database that manages information about a user's e-mail address and environment in a TCP / IP network such as the Internet or an intranet. A user site 311 for managing a protocol (including management of shared resources), an open site 312 including a blog, a message community, and the like, and a widget pool for storing published widgets and providing the widgets to the open site 312 313, and a close that is connected to the business server 320 and performs login, LDAP authentication, and user authentication for business processing. Made from the yarn 314..

  The business server 320 includes a Web browser, an application server, and a database server, as indicated by reference numeral 324, and includes a plurality of business applications (programs) 322 that are core businesses and a closed site 314 of the social network service server 310. A widget pool 321 for storing and providing closed widgets, and a close management database 340 for storing close management information for managing closed portions of the business application 322 are provided.

  The business integration computer system 300 according to the present embodiment integrates the social network service server 310 and the business server 320, and adopts a form that can be used in a private environment inside the company or an open environment including outside the company. Since it is a fusion of the open part and the part that remains within the company, the form of management is clearly divided on the internal structure. For this reason, the user site 311 provides an option of LDAP authentication as a private environment in the company in addition to invitation by e-mail and authentication by OpenID (these are general authentication means) depending on the form of introduction, etc. Performs LDAP authentication or user authentication, and the user site 311 and the closed site 314 are combined in the case of a qualified person, and the widgets are also related to open things and business (based on principle contracts). There is also a thing, and these are also managed separately, and a mechanism is provided to prevent unauthorized persons from accessing the business widget.

[Operation]
Now, as shown in FIG. 2, the business integration computer system 300 configured as described above includes a step S201 in which a user logs into the social network service server 310, and a general site such as a personal site or a blog by the step S201. When the OpenSocial function can be used in Step S202, in Step S201, the user can access the business page in Step S201, and in Step S203, the business page can be accessed. Since the authentication for the social network service server 310 and the procedure for accessing the business server 320 are different, the number of accesses and the SNS login method (LDAP authentication method, authentication method using an email address or OpenID) When the initial login and the SNS login method are determined to be the LDAP authentication method in step S204, the LDAP authentication is internally confirmed again. If there is no problem in the confirmation, the transition to the business page is permitted. In step S206, when it is determined in step S204 that the login is the first time and the login is based on the e-mail address or OpenID, the process proceeds to the user authentication screen to confirm the authentication and perform user registration, and in the user authentication screen in step S208 In addition to user registration and permission to use the business page, only when approved by the administrator, the process shifts to a state where the business page can be accessed after the next time, and the second and subsequent logins are determined in step S204. When A step of confirming LDAP authentication or user authentication internally (not re-authentication but confirmation of authentication), and opening the business page with the management information stored in the close management DB 340 associated with the confirmation By executing S210, when logging in for the first time, the information is linked with general-purpose login information (in this case, the security page is logged in in the form of login permission and can be officially logged in with the approval of the administrator). From the second time onward, it operates to automatically log in.

  For this reason, this system integrates the mechanism of a social network service with a high degree of freedom and the structure of a business system, and socializes the conventional corporate portal (site that integrates a large amount of information from a number of sources into a single screen). By replacing the network service, setting a security page in it, and then placing widget-based parts of each work according to the user's needs, constructing a user's own business menu Can do.

  When the business integration computer system 300 according to the present embodiment performs authentication confirmation in the above-described steps S206, S208, and S210, an authentication key (e-mail address or OpenID or LDAP) managed by the open management DB 330 in FIG. When the registered user ID is linked and managed by the close management DB 340, the information is linked to the general-purpose login information at the time of the first login described above, and the second and subsequent times operate as automatic login. Yes, this linking (link) will be described next.

  As shown in FIG. 3, the authentication key and the user ID are associated with each other by storing the mail address, open ID, LDAP (user ID), and password in the user management table 331 included in the open management DB 330 in the close management DB 340. Linking the authentication key and password of the social network service server in the included user management table 341, linking the user management table 341 and the user-specific application management table 344 via LDAP (user ID), This is performed by associating the user-specific application management table 344 and the application management table 343 through application identification. If there is no approval by the administrator, this association is not performed, the registered user ID is deleted, and this mechanism is monitored and managed by the business page access monitoring module.

  Further, the business integration computer system 300 according to the present embodiment, when executing the login process in step S201 of FIG. 2 described above, uses the program ID at startup as shown in FIG. ) And stored in DFN_DTLI (customization information detail table) using DFN_ID (customization definition ID), SEL_INT1 (extraction condition 1) and SEL_INT4 (extraction condition 4) included in the DFN_ACC (security item definition table) as keys. I_Bean (Bean name: a program part name having a specific function developed in the Java (registered trademark) language in accordance with the Beans specification of Java (registered trademark)) and I_FILD (Bean item name) and a function of acquiring the Bean item; Figure FIG. 5C shows a function for referring to M_ACCLEV (information disclosure level master) based on the user ID and table ID shown in (b) and searching for the information disclosure security level permitted for the user. The SITE_C (site code) of M_SECTN (department master) is referred to by referring to the department code of M_STAFF (department master) shown in FIG. 2, and the SITE_C (site code) of M_SITE (site master) is used as a key By executing the search function, the security level and the base permitted by the accessing user are searched, and the login is performed according to the search result.

  As shown in FIG. 7 (a), the security level searched for by the user in FIG. 5 (b) is “(access impossible)” for level “0” and “possible for the same person” for level “1”. Level “2” is set as “possible in the same department”, level “3” is set as “possible at the same site”, level “4” is set as “possible at the same office”, level “9” is set as “all possible” In accordance with each level, an error code as shown in the right column of FIG. 7B is generated.

  Further, the business integration computer system 300 according to the present embodiment is stored in DFN_ACC (security item definition table) as shown in FIG. 6A after shifting to a state where the business page can be accessed in step S209 of FIG. A function for referring to the extraction condition (SEL_INT), the Bean name (I_BEAN) and the field name (I_FIELD) stored in DFN_DTLI (security item definition table), and M_ACCLEV (information disclosure level master) shown in FIG. For example, the function of acquiring the department SECTN_C (base code) to which the user “TENSUITE” belongs from the M_STAFF (master master), with reference to the security level (LEVEL) of FIG. 6 and the M_STAFF (master master) shown in FIG. Run And by checking the value of the bean, if the value shown in FIG. 6 (d) is configured to generate an error code.

  Note that the widget itself according to the present embodiment is provided by a business application vendor or by using an interface or Web service provided by the application, so that services such as SaaS and ASP provided not only within the company but also externally are provided. It is possible to include. Widgets are managed in the category of general social network service server functions for open ones. However, widgets related to business are managed by the close management DB 340 and are completely different management. The widget is registered by the administrator, and the user selects the registered widget. In addition, the widget selected by the user is managed for each user, which user can use which widget can be managed, and in some cases, the administrator can stop the use of the widget.

  As shown in FIG. 4, the widget management includes a widget management table linked to the application management table 343 via application identification, a user-specific widget management table linked to the user management table 341 via LDAP (user ID), and Are linked by linking via application identification and widget identification.

  As described above, the business integration computer system 300 according to the present embodiment is connected to the client group 100 including the plurality of client computers 101 to 103 and the business application server 200 that provides various SaaS application programs 201 via the Internet. A social network service server 310 having a widget providing function, a management database 330 for managing an open part of the social network service server 310, and a business unit connected to the business application server 200 via an intranet A business server 320 for storing closed data, and the social network service server 310 includes an email address, an open ID, A user site 311 that manages an authentication key including an authentication protocol (LDAP), an open site 312 that includes a blog, a message, and a community, and a widget pool 313 that stores published widgets and provides the widgets to the open site 312. And a closed site 314 that is connected to the business server 320 and has an authentication function including login, LDAP authentication, and user authentication for business processing. The business server 320 includes a plurality of business applications (programs) 322. , A widget pool 321 for storing and providing closed widgets in the closed site 314 of the social network service server 310, and closed management for managing closed parts of the business application 322 A closed management database 340 for storing information, and when the closed site 314 determines that the authentication key is a user who has been authenticated by the authentication function, the business server 320 has the plurality of business applications (programs) 322. Is provided to the user site 311 and provided to the user, and the closed widget stored in the widget pool 321 is provided to the social network service server 310, thereby providing a highly flexible social network service mechanism and business system. The mechanism can be fused.

101-103 client computers, 100 client groups,
200 business application server,
201 Various application programs,
300 business integration computer system,
310 social network service server,
311 user site, 312 open site, 313 widget pool,
314 closed site, 320 business server, 321 widget pool,
322 business application, 330 management database,
331 User management table, 340 Close management database,
341 User management table, 343 Application management table,
344 Application Management Table by User

Claims (4)

A social network service server connected to a client group including a plurality of client computers and a business application server providing various SaaS application programs via the Internet and having a widget providing function, and an open source of the social network service server A business integration computer system comprising: a management database for managing a business server; and a business server connected to the business application server via an intranet to store and execute closed data of business units,
A user site that manages an authentication key including an email address, an open ID, and an authentication protocol; an open site that includes a blog, a message, and a community; an open widget pool that stores open widgets; A social network service server having a closed site having an authentication function including login, LDAP authentication, and user authentication;
A business server having a plurality of business application programs, a widget pool for storing closed widgets, and a close management database for storing close management information of the plurality of business application programs;
When the business server uses the authentication key to authenticate a user by the authentication function, the business server combines the business application programs with the user site, and stores the closed widget stored in the widget pool. A business integration computer system provided to the social network service server.   When the business server uses the authentication key to authorize that the user is authentic by the authentication function, the determination function that determines the access count and the login method from the user, and the determination function sets the first access count 2. The business integration computer system according to claim 1, wherein when the determination is made, a function of performing protocol authentication again or user authentication using a mail address is executed. A social network service server connected to a client group including a plurality of client computers and a business application server providing various SaaS application programs via the Internet and having a widget providing function, and an open source of the social network service server A business integration computer system menu construction method comprising: a management database for managing a business server; and a business server connected to the business application server via an intranet to store and execute closed data for business units,
A user site that manages an authentication key including an email address, an open ID, and an authentication protocol; an open site that includes a blog, a message, and a community; an open widget pool that stores open widgets; A social network service server having a closed site having an authentication function including login, LDAP authentication, and user authentication;
A business server having a plurality of business application programs, a widget pool that stores closed widgets, and a close management database that stores close management information of the business application programs,
A function for combining the plurality of business application programs to the user site when the user authenticates to the business server by the authentication function using the authentication key, and the closed widget stored in the widget pool A method for constructing a menu for a business integration computer system, characterized in that a function for providing the social network service server with a function is executed.   When the authentication function is used to authenticate the user to the business server by the authentication function, a determination function for determining the number of accesses and a login method from the user, and the number of accesses by the determination function is the first time. 4. The method for constructing a menu for a business integration computer system according to claim 3, wherein when the determination is made, a function for performing protocol authentication again or user authentication by a mail address is executed.

Images