JP2018077725A - Connection management system, connection management method, and connection management program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a connection management system, a connection management method, and a connection management program for efficiently continuing service provision at a connection terminal even when a repeating device is stopped.SOLUTION: A load balancing apparatus 20 includes a control unit 21 and a distribution information storage unit 22. The control unit 21 is connected to ATMs 10 and repeating devices 30. The distribution information storage unit 22 stores distribution management information that stores information on a repeating device 30 that is an ordinary distribution destination of a connection terminal and alternative management information that stores information on a repeating device 30 that is an alternative distribution destination when the repeating device 30 is stopped. In response to stop information acquired in an operation state of the repeating device 30, the control unit 21 specifies an ATM 10 connected as the ordinary distribution destination to the repeating device 30 having acquired the stop information with reference to the distribution management information, and sends a reset signal to the specified ATM 10. Upon receiving a connection request from the ATM 10 having received the reset signal, the control unit 21 connects the ATM 10 to the alternative distribution destination recorded in the alternative management information.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a connection management system, a connection management method, and a connection management program for connecting a plurality of connection terminals to a relay device.

  In a financial transaction terminal such as an ATM (automated teller machine) in a financial institution such as a bank or a securities company, transaction processing is performed using a card such as a cash card used by an account holder. Here, when the financial institution system connected to the ATM stops the service, the transaction cannot be performed. Therefore, even when the system of the financial institution at the relay destination stops the service due to a planned stoppage, failure, disaster, etc., a financial transaction processing system for continuing the processing of the financial transaction is being considered (for example, , See Patent Document 1). In the technology described in this document, when the financial institution center stops the service, the transaction agency response server responds to a financial transaction request for the financial institution center received from the ATM via the relay system. Whether or not financial transaction is possible is determined using the information of the account information transmitted from the cooperation server. When a transaction is possible, a transaction permission response is returned to the relay system on behalf of the financial institution center.

  Moreover, when providing a service in a plurality of servers connected to a terminal, a server load distribution device may be used. In such a server load distribution apparatus, a technique for performing error management in a server in order to suppress the occurrence of error termination in response to a processing request has been studied (for example, see Patent Document 2). In the technique described in this document, the server load balancing apparatus detects an abnormality for the first time by allocating a plurality of input transactions to a plurality of servers and monitoring anomalies of the plurality of servers at regular intervals. Recognize the server as a pre-error and output a pre-error signal. Then, when the pre-error signal is input, the distribution unit suppresses distribution of a new process to the server recognized as the pre-error state.

JP 2010-191852 A JP2015-118480A

  There may be a relay device (gateway device) that performs protocol and character code conversion between the automatic teller machine and the billing system. In this case, a TCP connection (connection by transmission control protocol) between the automatic teller machine and the relay apparatus is always established (always connected) in order to speed up the processing of the automatic teller machine. However, the automatic teller machine cannot detect the failure of the relay device, and the automatic teller machine may transmit a transaction message even in the event of a failure, resulting in an error. If an error occurs, the automatic teller machine is suspended and the cash card is held in the apparatus. The person in charge needs to confirm the processing result and cancel the transaction processing.

  In order to restore the automatic teller machine when a failure occurs in the relay device, it is necessary to reset and reconnect the TCP connection. In addition, all automatic teller machines connected to the relay device in which a failure has occurred require a restarting operator operation, which requires time and effort for recovery.

  The present invention has been made to solve the above-described problem, and an object of the present invention is to provide a connection management system and a connection management method for efficiently continuing service provision at a connection terminal even when a relay device is stopped. And providing a connection management program.

  A connection management system that solves the above problems includes a control unit connected to a connection terminal and a relay device, distribution management information that stores information related to a relay device that is a normal distribution destination of the connection terminal, and the relay device And a storage unit that stores replacement management information that stores information related to the relay device that is the destination of the alternative distribution. When the control unit acquires stop information in the operation status of the relay device, it uses the distribution management information to identify a connection terminal connected as a normal distribution destination to the relay device that acquired the stop information. The connection terminal is connected to the alternative distribution destination recorded in the alternative management information when a reset signal is transmitted to the identified connection terminal and a connection request is received from the connection terminal that has received the reset signal. To do. As a result, the connection terminal can recognize that the connection with the relay device has been lost, and can reconnect to the alternative distribution destination.

  -In the connection management system, when the control unit obtains the recovery information of the relay device that has been stopped, it identifies the connection terminal connected to the alternative distribution destination using the distribution management information, When the transaction status at the connection terminal is acquired and the transaction status is detected as being executed, a reset signal is transmitted after the transaction is completed, and a connection request is received from the connection terminal that has received the reset signal. In this case, it is preferable to reconnect the connection terminal to the normal distribution destination recorded in the distribution management information. Thus, reconnection can be performed in consideration of the transaction status at the connection terminal.

  In the connection management system, when the control unit acquires recovery information of the relay device that has been stopped, the connection terminal that has been allocated to an alternative distribution destination using the distribution management information is identified, and the connection terminal In response to sending a reset signal for reconnection after the end of the transaction and receiving a connection request from the connection terminal that received the reset signal, the normal distribution destination recorded in the distribution management information It is preferable to reconnect the connecting terminal. Thereby, reconnection can be performed in consideration of the transaction status at the connection terminal.

In the connection management system, it is preferable that the control unit obtains stop information based on the occurrence of a failure in the relay device. Thereby, the connection can be managed according to the occurrence of the failure.
In the connection management system, it is preferable that the control unit acquires stop information based on a switching plan of the relay device. Thereby, connection can be managed according to planned switching such as maintenance.

  ADVANTAGE OF THE INVENTION According to this invention, even when a relay apparatus stops, the service provision in a connection terminal can be continued efficiently.

The system schematic of this embodiment. FIG. 3 is an explanatory diagram of a hardware configuration example. Explanatory drawing of the process sequence of this embodiment. Explanatory drawing of the process sequence of this embodiment. Explanatory drawing of the process sequence of other embodiment. Explanatory drawing of the process sequence of other embodiment. Explanatory drawing of the process sequence of other embodiment.

Hereinafter, an embodiment embodying a connection management system will be described with reference to FIGS.
As shown in FIG. 1, in this embodiment, the ATM 10, the load balancer 20, the relay device 30, and the host system 40 are connected via a network. A plurality of ATMs 10 installed in a financial institution store are distributed and connected to a plurality of relay devices 30 via the load balancer 20. The load distribution device 20 performs connection management between the ATM 10 and the relay device 30. The relay device 30 transfers the transaction request message from the ATM 10 to the bank host system 40. In the host system 40, transaction processing is executed based on the transaction request message.

  The ATM 10 is an automated teller machine that functions as a connection terminal, is installed in each store of a financial institution, and performs transactions with a customer using a customer's cash card.

  The load balancer 20 is a computer system that manages load balancing of servers according to the status of connected devices. The load balancer 20 monitors the operation status of the relay device 30 and manages the connection (TCP connection) to the relay device 30. The load balancer 20 also has a TCP connection reset function.

The load distribution apparatus 20 includes a control unit 21 and a distribution information storage unit 22.
The control unit 21 executes processing such as a state monitoring stage and a distributed processing stage. Therefore, the control unit 21 functions as the state monitoring unit 211 and the distributed processing unit 212 by executing the connection management program.

The state monitoring unit 211 performs alive monitoring on the operating state of each relay device 30. Specifically, search data (PING, request, command, etc.) for detecting the operating state of the relay device 30 is transmitted, and the operating state is determined based on the response.
The distributed processing unit 212 executes processing for managing the connection to the relay device 30 that processes the transaction request message from the ATM 10.

  In the distribution information storage unit 22, a distribution management table 221, an alternative management table 222, an operation management table 223, and a connection management table 224 are recorded.

  In the distribution management table 221, substitution management information for specifying the relay device 30 that distributes connections of the ATMs 10 is recorded. Specifically, the address (device code) of the relay device 30 (normal distribution destination) that is connected at the normal time (when the service is provided) is recorded for the information (ATM code) that identifies each ATM 10.

  The substitution management table 222 records substitution management information for identifying the relay device 30 that substitutes for service provision when each relay device 30 stops providing service. Specifically, the address of the relay device 30 (alternate distribution destination) that is substituted when the service of the relay device 30 is stopped is recorded for each relay device 30 address (normal distribution destination).

  In the operation management table 223, information regarding the operation state of each relay device 30 is recorded. Specifically, a stop flag is recorded for the address of the relay device 30 that has stopped providing the service.

  In the connection management table 224, when a connection request is acquired from each ATM 10, information for specifying the relay device 30 that always connects the ATM 10 is recorded. Specifically, for the information (ATM code) specifying the ATM 10 that transmitted the connection request, the relay device 30 of the normal distribution destination or the alternative distribution destination according to the operation status recorded in the operation management table 223. Is recorded.

  The relay device 30 is an application gateway for connecting networks having different protocols by converting protocols, character codes, and the like. The TCP connection is always connected between the ATM 10 and the relay device 30 in order to increase the processing speed in the ATM 10.

The host system 40 is a billing system that manages customer information and transaction information of financial institutions. The host system 40 includes a customer information storage unit and an account information storage unit.
The customer information storage unit stores customer management records for customers of financial institutions. The customer management record is recorded when a customer opens an account with a financial institution. In the customer management record, data relating to the customer ID, name, and account identifier of the customer's holding account is recorded.

  In the account information storage unit, an account management record for managing transactions using an account opened by a customer is recorded. The account management record is recorded when an account is opened in a financial institution. In this account management record, data relating to an account identifier, an account balance, and a transaction history is recorded.

(Hardware configuration example)
FIG. 2 is a hardware configuration example of the information processing apparatus H10 that functions as the ATM 10 to the host system 40 or the like.

  The information processing device H10 includes a communication interface H11, an input device H12, a display device H13, a storage unit H14, and a processor H15. Note that this hardware configuration is an example, and other hardware may be included.

  The communication interface H11 is an interface that establishes a communication path with another device and executes data transmission / reception, and is, for example, a network interface card or a wireless interface.

  The input device H12 is a device that receives input from a user or the like, and is, for example, a mouse or a keyboard. The display device H13 is a display or a touch panel that displays various types of information.

  The storage unit H14 is a storage device that stores data and various programs for executing various functions of the ATM 10 to the host system 40. For example, the storage unit H14 stores information recorded in the distribution information storage unit 22. Examples of the storage unit H14 include a ROM, a RAM, and a hard disk.

  The processor H15 controls each process in the ATM 10 to the host system 40 using programs and data stored in the storage unit H14. Examples of the processor H15 include a CPU and an MPU. The processor H15 develops a program stored in the ROM or the like on the RAM and executes various processes corresponding to various processes. For example, the processor H15 operates a process for executing each process described later.

(Connection management procedure)
A processing procedure in the case of managing the connection between the ATM 10 and the relay device 30 using the system configured as described above will be described with reference to FIGS.

(ATM compatible processing)
First, the ATM handling process will be described with reference to FIG.
Here, ATM10 performs a transaction request process (step S101). Specifically, when a transaction input is made in the ATM 10, the ATM 10 transmits a transaction request message to the load balancer 20 through a TCP connection that is always connected. In this case, the load distribution apparatus 20 transfers the transaction request message to the relay apparatus 30 specified based on the connection management table 224 of the distribution information storage unit 22 through a TCP connection that is always connected.

  Next, the ATM 10 executes a determination process as to whether or not a failure has occurred (step S102). Specifically, the ATM 10 determines that a failure has occurred when a transaction response message cannot be acquired from the relay device 30 via the load balancer 20.

  When the transaction response message from the relay device 30 is acquired and it is determined that no failure has occurred (in the case of “NO” in step S102), the ATM 10 executes a transaction process (step S103). Specifically, ATM10 performs transaction processing based on a transaction response message.

  On the other hand, if the transaction response message from the relay device 30 cannot be acquired and it is determined that a failure has occurred ("YES" in step S102), the ATM 10 executes a pause display process (step S104). Specifically, the ATM 10 displays a message indicating that an error has occurred on the display and pauses the transaction process. In this case, the person in charge of the financial institution performs ATM 10 recovery processing.

(Failure handling process)
Next, a failure handling process when a failure occurs in the relay device 30 will be described with reference to FIG.

  Here, the control part 21 of the load distribution apparatus 20 performs the alive monitoring process (step S201). Specifically, the state monitoring unit 211 of the control unit 21 periodically transmits search data to each relay device 30 and monitors the operating state of each relay device 30 based on the response.

  When it is determined that no failure has occurred in the relay device (in the case of “NO” in step S202), the control unit 21 of the load distribution device 20 continues the alive monitoring process (step S201).

  When it is determined that a failure has occurred in the relay device (in the case of “YES” in step S202), the control unit 21 of the load distribution device 20 executes the identification process of the alternative distribution destination device (step S203). Specifically, the state monitoring unit 211 of the control unit 21 records a stop flag in association with the address of the relay device 30 in the operation management table 223 of the distribution information storage unit 22. Next, the distributed processing unit 212 uses the alternative management table 222 of the distribution information storage unit 22 to use the alternative distribution destination relay device 30 associated with the relay device 30 (ordinary distribution destination) determined to have failed. Specify the address.

  Next, the control unit 21 of the load distribution apparatus 20 executes the identification process of the ATM connected to the failure relay apparatus (step S204). Specifically, the distributed processing unit 212 of the control unit 21 uses the connection management table 224 of the distribution information storage unit 22 to identify the ATM 10 connected to the relay device 30 that has been determined to have failed. Further, the distributed processing unit 212 sets the address of the alternate distribution destination relay device 30 as the connection destination of the identified ATM 10 in the connection management table 224 of the distribution information storage unit 22.

  Next, the control unit 21 of the load distribution apparatus 20 performs a reset signal transmission process on the specified ATM (step S205). Specifically, the distributed processing unit 212 of the control unit 21 transmits a reset signal to the specified ATM 10.

Next, the ATM 10 performs a reset signal reception process (step S206). Specifically, the ATM 10 receives a reset signal from the load balancer 20.
Next, ATM10 performs a reconnection process (step S207). Specifically, the ATM 10 that is not performing transaction processing when acquiring the reset signal disconnects the TCP connection and transmits a connection request to the load balancer 20. It should be noted that the ATM 10 that is in the transaction at the time of acquiring the reset signal shifts to a dormant state and outputs an alarm for manual recovery.

  The control unit 21 of the load distribution apparatus 20 that has received the connection request from the ATM 10 executes a connection process to the distribution destination apparatus (step S208). Specifically, the distributed processing unit 212 of the control unit 21 sends the ATM 10 that transmitted the connection request to the distribution destination relay device 30 through the TCP connection based on the connection management table 224 of the distribution information storage unit 22. Connect always. In this case, the relay device 30 is connected to the alternative distribution destination.

(Recovery processing)
Next, the recovery handling process will be described with reference to FIG.
First, the control part 21 of the load distribution apparatus 20 performs alive monitoring processing similarly to step S201 (step S301).

  Next, the control unit 21 of the load distribution apparatus 20 executes a determination process as to whether or not the failure relay apparatus has been restored (step S302). Specifically, the state monitoring unit 211 of the control unit 21 recovers based on the response to the search data transmitted to the relay device 30 in which the stop flag is recorded in the operation management table 223 of the distribution information storage unit 22. Determine.

  When it is determined that the fault relay apparatus has not been restored (in the case of “NO” in step S302), the control unit 21 of the load distribution apparatus 20 continues the alive monitoring process (step S301).

  On the other hand, when it is determined that the fault relay apparatus has been restored (in the case of “YES” in step S302), the control unit 21 of the load distribution apparatus 20 executes the alternative distribution destination ATM specifying process (step S303). Specifically, the state monitoring unit 211 of the control unit 21 deletes the stop flag recorded in association with the address of the relay device 30 in the operation management table 223 of the distribution information storage unit 22. Next, the distributed processing unit 212 uses the distribution management table 221 of the distribution information storage unit 22 to distribute the ATM 10 associated with the relay device 30 (normal distribution destination) that has been determined to be restored to an alternative destination. Specified as ATM10. Then, the distributed processing unit 212 sets the address of the restored normal distribution destination relay device 30 in the connection management table 224 of the distribution information storage unit 22 as the identified connection destination of the ATM 10.

Next, the control unit 21 of the load distribution apparatus 20 repeats the following processing for each identified alternative allocation destination ATM.
The control unit 21 of the load balancer 20 executes ATM transaction state identification processing (step S304). Specifically, the distributed processing unit 212 of the control unit 21 specifies the communication status (transmission / reception of electronic messages) in the ATM 10.

  Next, the control part 21 of the load distribution apparatus 20 performs the determination process about whether it is in transaction (step S305). Specifically, the distributed processing unit 212 of the control unit 21 determines that a transaction is in progress when a message is transmitted and received in a communication state.

  When it is determined that a transaction is in progress (in the case of “YES” in step S305), the control unit 21 of the load distribution apparatus 20 performs a transaction end standby process (step S306). Specifically, the distributed processing unit 212 of the control unit 21 waits until transmission / reception of a message is completed in a communication state.

When it is determined that there is no transaction (in the case of “NO” in step S305), the control unit 21 of the load distribution apparatus 20 executes a reset signal transmission process in the same manner as in step S205 (step S307).
The control unit 21 of the load distribution apparatus 20 repeats the above processing until it is finished for all ATMs 10 distributed to the alternative destination.

Next, the ATM 10 executes reset signal reception processing in the same manner as in step S206 (step S308).
Next, ATM10 performs a reconnection process similarly to step S207 (step S309).

  Next, the control part 21 of the load distribution apparatus 20 performs the connection process to an allocation destination apparatus similarly to step S208 (step S310). In this case, the normal distribution destination relay device 30 is always connected by a TCP connection.

According to this embodiment, the following effects can be obtained.
(1) In the present embodiment, the control unit 21 of the load distribution apparatus 20 performs life / death monitoring processing (step S201). When it is determined that a failure has occurred in the relay device (in the case of “YES” in step S202), the control unit 21 of the load balancer 20 specifies the alternative distribution destination device (step S203), sends a reset signal to the specified ATM. A transmission process (step S205) is executed. Thereby, it is possible to make the ATM 10 connected to the relay device 30 in which the failure has occurred recognize the occurrence of the failure.

  (2) In this embodiment, ATM10 performs a reconnection process (step S207). And the control part 21 of the load distribution apparatus 20 performs the connection process to an allocation destination apparatus (step S208). As a result, the ATM 10 connected to the relay device 30 in which the failure has occurred can be connected to the relay device 30 of the alternative distribution destination. Therefore, redundancy can be ensured by using a plurality of relay devices 30 while using both the normal distribution destination and the alternative distribution destination. Furthermore, since the relay device 30 as an alternative distribution destination is also used as a normal distribution destination of another ATM 10, switching can be performed efficiently and quickly.

  (3) In this embodiment, when it is determined that the failure relay apparatus has been restored (in the case of “YES” in step S302), the control unit 21 of the load distribution apparatus 20 determines the ATM distributed to the alternative distribution destination relay apparatus. A specific process (step S303) and a determination process (step S305) as to whether the transaction is in progress are executed. When it is determined that a transaction is in progress (in the case of “YES” in step S305), the control unit 21 of the load distribution apparatus 20 performs a transaction end standby process (step S306). Thereby, the transaction state in ATM10 can be considered and the connection of the relay apparatus 30 of an alternative distribution destination can be maintained.

  (4) In the present embodiment, when it is determined that there is no transaction (in the case of “NO” in step S305), the control unit 21 of the load distribution apparatus 20 executes a reset signal transmission process (step S307). And ATM10 performs a reconnection process (step S309). Thereby, the transaction state in ATM10 can be considered and it can be connected to the relay apparatus 30 of a normal distribution destination.

Moreover, you may change the said embodiment as follows.
In the above embodiment, the control unit 21 of the load distribution apparatus 20 performs a determination process as to whether or not a transaction is in progress (step S305). Here, the ATM 10 may wait for the end of the transaction.

With reference to FIG. 5, a recovery handling process for waiting for the end of the transaction at ATM 10 will be described.
First, similarly to steps S301 to S303, the control unit 21 of the load distribution apparatus 20 determines whether or not the life and death monitoring process (step S401), the failure relay apparatus has been restored (step S402), and the alternative distribution destination. ATM identification processing (step S403) is executed.

Then, similarly to step S307, the control unit 21 of the load distribution apparatus 20 executes a reset signal transmission process for each alternative allocation destination ATM (step S404).
In this case, the ATM 10 executes a reset signal reception process in the same manner as in step S308 (step S405).

  Next, ATM10 performs the determination process about whether it is in transaction (step S406). Specifically, the ATM 10 specifies “initial state” or “transaction state” in the operation mode. In the case of a transaction state, it is determined that a transaction is in progress.

  When it is determined that a transaction is in progress (in the case of “YES” in step S406), the ATM 10 executes a transaction end standby process (step S407). Specifically, the ATM 10 waits until it returns to the initial state.

  On the other hand, when it is determined that there is no transaction (in the case of “NO” in step S406), the control unit 21 of the load distribution apparatus 20 executes the reconnection process in the same manner as in step S309 (step S408).

And the control part 21 of the load distribution apparatus 20 performs a connection process to an allocation destination apparatus similarly to step S310 (step S409).
As a result, the ATM 10 side can be connected to the relay device 30 at the normal distribution destination in consideration of the transaction state.

  In the above embodiment, the response and recovery when a failure occurs in the relay device 30 has been described. The processing provided in the load distribution device 20 is not limited to when a failure occurs, and can be applied when the relay device 30 stops providing services. For example, it can also be used when switching the distribution destination systematically for maintenance of the relay device 30 or the like. In this case, plan switching time information (switching plan schedule) is recorded in advance in the operation management table 223 of the distribution information storage unit 22 for the address of the relay device 30. Data related to the start date and time of service stop is recorded in the plan switching time information.

The process at the time of plan change is demonstrated using FIG.6 and FIG.7.
(Plan switching support processing)
First, the plan switching response process will be described with reference to FIG.
Here, the control part 21 of the load distribution apparatus 20 performs the acquisition process of switching time information (step S501). Specifically, the state monitoring unit 211 of the control unit 21 acquires plan switching timing information (service stop start date and time) from the operation management table 223 of the distribution information storage unit 22.

  Next, the control part 21 of the load distribution apparatus 20 performs the determination process about whether the switching time has come (step S502). Specifically, the state monitoring unit 211 of the control unit 21 acquires the current date and time and compares it with the service stop start date and time. When the current date / time reaches the service stop start date / time, it is determined that the switching time has come.

  When it is determined that the switching time has not arrived (in the case of “NO” in step S502), the control unit 21 of the load distribution apparatus 20 performs the switching time information acquisition process (step S501) until the switching time has come. Run regularly.

  On the other hand, when it is determined that the switching time has arrived (in the case of “YES” in step S502), the control unit 21 of the load distribution apparatus 20 executes the identification process of the alternative distribution destination apparatus (step S503). Specifically, the state monitoring unit 211 of the control unit 21 records a stop flag in association with the address of the relay device 30 in the operation management table 223 of the distribution information storage unit 22. Next, the distributed processing unit 212 uses the alternative management table 222 of the distribution information storage unit 22 to use the alternative distribution destination relay device 30 associated with the relay device 30 (normal distribution destination) determined to be the switching time. Specify the address.

  Next, an ATM specifying process connected to the switching target device is executed (step S504). Specifically, the distributed processing unit 212 of the control unit 21 uses the connection management table 224 of the distribution information storage unit 22 to identify the ATM 10 connected to the relay device 30 determined to be the switching time. Further, the distributed processing unit 212 sets the address of the alternative distribution destination relay device 30 as the connection destination of the identified ATM 10 in the connection management table 224 of the distribution information storage unit 22.

Next, the control unit 21 of the load distribution apparatus 20 repeats the following process for each ATM of the switching target apparatus.
First, similarly to step S304, the control unit 21 of the load distribution apparatus 20 executes ATM transaction state specifying processing (step S505).

Next, the control part 21 of the load distribution apparatus 20 performs the determination process about whether it is in transaction like step S305 (step S506).
When it is determined that a transaction is in progress (in the case of “YES” in step S506), the control unit 21 of the load distribution apparatus 20 executes a transaction end standby process in the same manner as in step S306 (step S507).

  When it is determined that there is no transaction (in the case of “NO” in step S506), the control unit 21 of the load distribution apparatus 20 executes reset signal transmission processing in the same manner as in step S205 (step S508).

And the control part 21 of the load distribution apparatus 20 repeats until the process about all ATM10 of a switching object apparatus is complete | finished.
Next, the ATM 10 executes a reset signal reception process (step S509) and a reconnection process (step S510) as in steps S206 and S207.
Next, the control part 21 of the load distribution apparatus 20 performs the connection process to an allocation destination apparatus similarly to step S208 (step S511).

  Next, when all the ATMs 10 to be switched are connected to the alternative distribution destination, the control unit 21 of the load distribution apparatus 20 executes a switching completion information output process (step S512). Specifically, the distributed processing unit 212 of the control unit 21 outputs a message indicating that the switching has been completed to an administrator terminal (not shown). Then, based on this message, the administrator stops the service of the relay device 30 of the switching target device and starts maintenance or the like.

(Plan switching end processing)
Next, the plan switching end process will be described with reference to FIG.
Here, first, the control unit 21 of the load distribution apparatus 20 executes standby processing for switching termination (step S601). Specifically, the state monitoring unit 211 of the control unit 21 specifies the end date and time of service stop included in the plan switching time information from the operation management table 223 of the distribution information storage unit 22. Then, after the elapse of the end date and time, the search data is periodically transmitted to the relay device 30, and the operating state of each relay device 30 is monitored based on the response.

  Next, the control unit 21 of the load distribution apparatus 20 executes a determination process as to whether or not the switching is finished (step S602). Specifically, the state monitoring unit 211 of the control unit 21 determines the end of switching based on the response to the search data transmitted to the relay device 30 in which the stop flag is recorded after the end date and time of the service stop. To do.

When it is determined that the switching has not ended (“NO” in step S602), the control unit 21 of the load distribution apparatus 20 continues the switching end standby process (step S601).
On the other hand, when it is determined that the switching has been completed (in the case of “YES” in step S602), the control unit 21 of the load distribution apparatus 20 executes an alternative allocation destination ATM identification process in the same manner as in step S303 (step S603). ).

  And the control part 21 of the load distribution apparatus 20 is the same as step S304-S307 for every alternative allocation destination ATM, The identification process (step S604) of the transaction state of ATM, and the determination process about whether it is under transaction ( Step S605), transaction end standby processing (Step S606), and reset signal transmission processing (Step S607) are executed.

Next, the ATM 10 executes a reset signal reception process (step S608) and a reconnection process (step S609) as in steps S308 and S309.
In this case, the control unit 21 of the load distribution apparatus 20 executes a connection process to the distribution destination apparatus as in step S310 (step S610).

  In addition, although the case where the load distribution device 20 confirms the transaction status of the ATM 10 and transmits a reset signal has been described here, the transaction status is confirmed and reset on the ATM 10 side as in FIG. Is also possible.

  In the above embodiment, the replacement management table 222 records information for specifying the relay device 30 that substitutes for service provision when each relay device 30 stops providing service. Here, as an alternative distribution destination, all the relay apparatuses 30 may be set and recorded so as to make a round. For example, when using the relay device (A to C), the relay device (B) as an alternative distribution destination of the relay device (A), the relay device (C) as an alternative distribution destination of the relay device (B), and the relay device The relay device (A) is set as an alternative distribution destination for (C). As a result, even when a plurality of relay devices 30 stop the service, as long as any one of the relay devices 30 is operating, it can be replaced in order.

In the above embodiment, the ATM 10 is used as the connection terminal, the relay device 30 as a gateway is used as the relay device, and the load distribution device 20 is used as the connection management system. The connection terminal, the relay device, and the connection management system are not limited to these.
In the above embodiment, when it is determined that a transaction is in progress (in the case of “YES” in step S305), the control unit 21 of the load distribution apparatus 20 performs a transaction end standby process (step S306). Here, the ATM 10 determined to be in a transaction may be postponed, and the ATM transaction state specifying process (step S304) and the subsequent steps may be executed for the other ATM 10 first. And when only ATM10 which has not transmitted the reset signal remains, the waiting process (step S306) of transaction completion is performed. Thereby, it is possible to preferentially execute the reset signal transmission process (step S307) for the ATM 10 that is not in a transaction.
In the above embodiment, in the distribution management table 221 and the alternative management table 222, the information for specifying the normal distribution destination and the relay device 30 for the alternative distribution destination with respect to the information (ATM code) specifying each ATM 10 Record. As long as the information identifies the ATM 10 to which the connection is distributed, the information (ATM code) need not be the information that identifies the ATM 10 itself. For example, when the ATM 10 installed in one store is distributed to the same relay device 30, the address of the relay device 30 (normal distribution destination) is associated with the store code in the distribution management table 221 and the alternative management table 222. It is also possible to record it. Here, when each ATM 10 is specified, an ATM management table in which store codes and ATM codes are recorded in association with each other is used.

Next, technical ideas that can be grasped from the above-described embodiment and other examples will be described below together with their effects.
(A) When the planned switching time arrives, the transaction is terminated at all connection terminals connected to the switching target relay device, and the switching completion information is output when the connection is reconnected to the alternative distribution destination. A connection management system, a connection management method, and a connection management program.
Thereby, in the plan switching, the connection can be switched accurately in consideration of the transaction status of the connection terminal.

(B) A connection management system, a connection management method, and a connection management program characterized in that the connection terminal and the relay device are always connected.
Thereby, it is possible to make the connection terminal recognize that the continuous connection has been disconnected.

  DESCRIPTION OF SYMBOLS 10 ... ATM, 20 ... Load distribution apparatus, 21 ... Control part, 211 ... Status monitoring part, 212 ... Distributed processing part, 22 ... Distribution information storage part, 221 ... Distribution management table, 222 ... Substitution management table, 223 ... Operation management table, 224 ... connection management table, 30 ... relay device, 40 ... host system.

Claims (7)

A control unit connected to the connection terminal and the relay device;
A storage storing information on distribution management that stores information on a relay device that is a normal distribution destination of the connection terminal, and alternative management information that stores information on a relay device that is an alternative distribution destination when the relay device is stopped A connection management system comprising:
The control unit is
When the stop information is acquired in the operation status of the relay device, the distribution management information is used to identify a connection terminal connected as a normal distribution destination to the relay device that acquired the stop information,
Send a reset signal to the identified connection terminal,
When receiving a connection request from a connection terminal that has received the reset signal, the connection management system connects the connection terminal to an alternative distribution destination recorded in the replacement management information. The control unit is
When acquiring the recovery information of the relay device that has been stopped, identify the connection terminal connected to the alternative distribution destination using the distribution management information,
Obtaining the transaction status at the connected terminal;
In the transaction status, if it is detected that the transaction is being executed, a reset signal is transmitted after the transaction ends,
The connection according to claim 1, wherein when a connection request is received from a connection terminal that has received the reset signal, the connection terminal is reconnected to a normal distribution destination recorded in the distribution management information. Management system. The control unit is
When the recovery information of the relay device that has been stopped is acquired, the connection terminal allocated to the alternative distribution destination using the distribution management information is identified,
Sending a reset signal for reconnection to the connection terminal after the transaction ends,
The connection according to claim 1, wherein when a connection request is received from a connection terminal that has received the reset signal, the connection terminal is reconnected to a normal distribution destination recorded in the distribution management information. Management system.   The connection management system according to claim 1, wherein the control unit acquires stop information based on a failure occurrence of the relay device.   The connection control system according to claim 1, wherein the control unit acquires stop information based on a switching plan of the relay device. A control unit connected to the connection terminal and the relay device;
A storage storing information on distribution management that stores information on a relay device that is a normal distribution destination of the connection terminal, and alternative management information that stores information on a relay device that is an alternative distribution destination when the relay device is stopped A connection management system using a connection management system comprising a
The control unit is
When the stop information is acquired in the operation status of the relay device, the distribution management information is used to identify a connection terminal connected as a normal distribution destination to the relay device that acquired the stop information,
Send a reset signal to the identified connection terminal,
When receiving a connection request from a connection terminal that has received the reset signal, the connection management method is characterized in that the connection terminal is connected to the alternative distribution destination recorded in the replacement management information. A control unit connected to the connection terminal and the relay device;
A storage storing information on distribution management that stores information on a relay device that is a normal distribution destination of the connection terminal, and alternative management information that stores information on a relay device that is an alternative distribution destination when the relay device is stopped A connection management system using a connection management system comprising a
The control unit
When the stop information is acquired in the operation status of the relay device, the distribution management information is used to identify a connection terminal connected as a normal distribution destination to the relay device that acquired the stop information,
Send a reset signal to the identified connection terminal,
When receiving a connection request from a connection terminal that has received the reset signal, the connection management program causes the connection terminal to function as means for connecting the connection terminal to the alternative distribution destination recorded in the replacement management information.