JP2020008970A - Information processing apparatus, information processing system and program - Google Patents

Abstract

To reduce the possibility that a process different from regular processing means is performed when an instruction is given to processing means of a subsequent stage using a processing result by alternative processing means instead of the regular processing means.SOLUTION: A delivery system includes: an alternative processing server 3 that alternatively performs processing for a delivery instruction system 1 by receiving a notification received from a contact server 11 from the outside when a failure occurs in the delivery instruction system 1; and a recovery support server 4 that stores order request information received from the alternative processing server 3 and requests an order server 2 to place an order in place of the delivery instruction system 1. After recovery from the failure, the delivery instruction system 1 restarts the processing including the notification sent to the alternative processing server 3. After the recovery from the failure, the recovery support server 4 compares the order request information received from the delivery instruction system 1 with the order request information received from the alternative processing server 3 to instruct the order server 2 to correct the order with regard to the order request information that does not match.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an information processing device, an information processing system, and a program.

  Conventionally, the result of processing the input data by the program is sent to the subsequent program, and the latter program processes the processing result of the preceding program as input data, finally outputting data as the processing result of a series of programs There is a system to do. In this system, a technique has been proposed in which, when a failure occurs in any of the programs, output data is output by causing a substitute program of the failed program to process the program (for example, Patent Document 1).

  When the program recovers from the failure, the program resumes processing. As a result, the restarted program processes the data that has not been processed at the time of occurrence of the failure, and instructs the processing by outputting the data to a subsequent program.

JP 2015-119251 A

  By the way, when the substitute processing unit cannot provide the same function as the regular processing unit, the processing result by the regular processing unit and the processing result by the substitute processing unit may not match.

  The present invention is to reduce the possibility that a process different from the legitimate processing unit is performed when an instruction is given to a subsequent processing unit using the processing result of the substitute processing unit instead of the legitimate processing unit. With the goal.

  In the information processing apparatus according to the present invention, when a regular processing unit that performs a predetermined process on input data cannot perform the predetermined process, an alternative processing unit performs the predetermined process on the input data. First obtaining means for obtaining a processing result at the time, processing instructing means for instructing a processing means subsequent to the formal processing means to execute processing based on the processing result obtained by the first obtaining means; A second acquisition unit for acquiring a processing result when the regular processing unit capable of executing the processing performs the predetermined processing on the input data, and a processing result acquired by the first acquisition unit And a correction instruction for instructing the subsequent processing unit to correct the processing instruction already performed by the processing instruction unit to the subsequent processing unit in accordance with a comparison result between the processing instruction acquired by the second acquisition unit and the processing result acquired by the second acquisition unit. And having a stage, a.

  The correction instructed by the correction instructing means may be at least one of cancellation or change of a processing instruction already performed by the processing instructing means on the subsequent processing means, or addition of a processing instruction to the subsequent processing means. It is characterized by being.

  Further, the correction instructing means instructs to cancel a processing instruction based on a processing result obtained by the first obtaining means but not in the processing result obtained by the second obtaining means.

  The correction instructing means may instruct to add a processing instruction based on a processing result in the processing result obtained by the second obtaining means, not in the processing result obtained by the first obtaining means.

  Further, the correction instruction means instructs to change a processing instruction based on a processing result in which the processing result obtained by the first obtaining means and the processing result obtained by the second obtaining means are different. .

  An information processing system according to the present invention includes: a regular processing unit that performs a predetermined process on input data; and the predetermined process on the input data when the regular processing unit cannot perform the predetermined process. A first processing unit that obtains a processing result when the substitute processing unit performs the predetermined process on the input data when the regular processing unit cannot perform the predetermined process. Acquiring means, processing instructing means for instructing a processing means subsequent to the formal processing means to perform processing based on the processing result acquired by the first acquiring means, and wherein the predetermined processing can be performed. A second acquisition unit for acquiring a processing result when the regular processing unit performs the predetermined processing on the input data; a processing result acquired by the first acquisition unit; Correction instruction means for instructing the subsequent processing means to modify the processing instruction already performed by the processing instruction means for the subsequent processing means in accordance with a comparison result with the acquired processing result. Features.

  A monitoring unit that monitors a state of the legitimate processing unit, wherein the monitoring unit performs the predetermined process on the input data when the legitimate processing unit cannot perform the predetermined process; It is characterized by instructing the alternative processing means.

  Further, the monitoring means instructs the alternative processing means to stop the execution of the predetermined processing when the legitimate processing means can execute the predetermined processing.

  The program according to the present invention causes the computer to execute the predetermined processing on the input data when the regular processing means for performing the predetermined processing on the input data cannot execute the predetermined processing. First obtaining means for obtaining a processing result when the processing is performed, processing instructing means for instructing a processing means subsequent to the normal processing means to execute processing based on the processing result obtained by the first obtaining means, and the predetermined processing A second obtaining unit that obtains a processing result when the normal processing unit is capable of performing the predetermined processing on the input data; a processing result obtained by the first obtaining unit; According to a comparison result with the processing result acquired by the second acquiring means, the processing instruction means instructs the subsequent processing means to correct the processing instruction already given to the subsequent processing means. Positive indication means, to function as a.

  According to the first aspect of the present invention, when an instruction is given to the subsequent processing unit using the processing result of the substitute processing unit instead of the normal processing unit, processing different from the normal processing unit is performed. Can be reduced.

  According to the second aspect of the present invention, it is possible to instruct the subsequent processing means to add, change, or cancel processing.

  According to the third aspect of the invention, it is possible to instruct the subsequent processing means to cancel the processing.

  According to the fourth aspect of the present invention, it is possible to instruct the subsequent processing means to add processing.

  According to the fifth aspect of the invention, it is possible to instruct the subsequent processing means to change the processing.

  According to the sixth aspect of the present invention, when an instruction is given to the subsequent processing unit using the processing result of the substitute processing unit instead of the normal processing unit, a process different from the normal processing unit is performed. Can be reduced.

  According to the seventh aspect of the invention, the predetermined processing for the input data can be performed by the alternative processing means.

  According to the invention described in claim 8, it is possible to return to the execution of the predetermined processing by the regular processing means.

  According to the ninth aspect of the present invention, when an instruction is given to the subsequent processing unit using the processing result of the substitute processing unit instead of the normal processing unit, a process different from the normal processing unit is performed. Can be reduced.

It is a figure showing an example of the whole composition of the delivery system in this embodiment, and is a figure showing the flow of data when the delivery system is operating normally. FIG. 2 is a block diagram illustrating a recovery support server according to the embodiment. It is a figure which shows an example of the information which the logistics business server uses for determination of necessity of an order in this Embodiment in a table format. FIG. 9 is a sequence diagram of a process according to the present embodiment. FIG. 4B is a sequence diagram of a process following FIG. 4A. FIG. 4 is a diagram showing a data flow when a failure occurs in the delivery system according to the present embodiment. FIG. 7 is a diagram showing a data flow after recovery from a failure in the delivery system according to the present embodiment.

  Hereinafter, a preferred embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram showing an example of the entire configuration of a delivery system, which is an embodiment of the information processing system according to the present invention. The delivery system according to the present embodiment requests delivery of an article in response to a notification from a facility such as a building or a store of a customer. FIG. 1 shows a delivery instruction system 1, an ordering server 2, an alternative processing server 3, and a recovery support server 4.

  The delivery instruction system 1 sends an order request to the order server 2 when the delivery of the article is required in response to the notification from the customer. The delivery instruction system 1 has a window server 11, a distribution server 12, a distribution business server 13, a maintenance business server 14, and a management server 15. Of these, the counter server 11, the distribution server 12, the distribution business server 13, and the maintenance business server 14 each function as a regular processing unit by executing a regular program. Then, it requests the ordering server 2 to place an order as needed according to the notification from the customer side.

  The window server 11 is a server computer serving as a window for receiving a notification from the customer side. In the present embodiment, description will be made assuming that some notification is given from the multifunction peripheral or the customer in response to occurrence of some event in the multifunction peripheral installed at the customer's facility. The contact processing program using the notification from the customer side as input data is executed as a regular program. The notification includes, for example, a notification about an event that requires an article, such as breakage of a component or an out-of-consumable item, or a notice about an event that does not require an article at this time, such as a notice of occurrence of an out-of-consumable item. Upon receiving the notification from the customer, the window server 11 records the content of the received notification in a communication log (not shown).

  The distribution server 12 is a server computer that distributes the notification received by the window server 11. The distribution server 12 uses the notification from the contact server 11 as input data, and executes a distribution processing program for distributing the notification according to the content of the notification as a regular program. For example, the distribution server 12 distributes a notification to be notified to the engineer to the logistics operation server 13 at the subsequent stage, and distributes another type of notification to another server.

  The distribution business server 13 is a server computer used to determine whether or not to request an order in response to a notification from a customer. The distribution business server 13 uses the notification from the distribution server 12 as input data, and executes an order necessity determination processing program as a regular program.

  The maintenance service server 14 is a server computer used to request the ordering server 2 to place an order. The maintenance business server 14 generates order request information in response to a notification (order request instruction) sent when the distribution business server 13 determines that an order is required, and converts the order processing program to be sent to the order server 2 to a regular program. Run as The order request information includes the order date and time, the type of the article, the quantity, the delivery request destination, the scheduled delivery date, and the like. The order request information itself may be the same as before.

  The management server 15 manages each of the servers 11 to 14 included in the delivery instruction system 1. The management server 15 functions as a monitoring unit that monitors the status of each of the servers 11 to 14, and performs, for example, management of a fault that has occurred, management of a fault log, and notification to each of the servers 11 to 14 when a fault has occurred. . Further, the management server 15 instructs the alternative processing server 3 to execute the alternative processing when any of the servers 11 to 14 cannot execute the predetermined processing by the regular program. Further, the management server 15 instructs the alternative processing server 3 to stop the execution of the alternative processing when the servers 11 to 14 that have failed to execute the predetermined processing can execute the predetermined processing.

  When receiving the order request, the order server 2 requests delivery of the article to the request destination specified by the order request. The order server 2 executes a delivery request program for requesting delivery of an article to a designated request destination using the order request from the maintenance service server 14 of the delivery instruction system 1 as input data. The delivery request program executed by the order server 2 is also a legitimate program, and the order server 2 functions as a legitimate processing means. When a failure has occurred in the delivery instruction system 1, the delivery request program is executed using the order request from the recovery support server 4 as input data.

  In the present embodiment, a plurality of servers 11 to 14 are provided in the delivery instruction system 1 as regular processing means. However, since the order server 2 receives the input data from the delivery instruction system 1, from the viewpoint of the order server 2, it can be said that the entire delivery instruction system 1 corresponds to one regular processing means located at the preceding stage. In other words, from the viewpoint of the delivery instruction system 1, the ordering server 2 is a regular processing unit located at a subsequent stage.

  Note that the predetermined delivery request destination of the ordering server 2 corresponds to a distribution center for delivering parts and a business office where an engineer who performs a part replacement work at a customer is located.

  The substitute processing server 3 performs a predetermined process in place of the delivery instruction system 1 when the legitimate processing means does not function in the delivery instruction system 1 and cannot execute the predetermined process, and requests the ordering server 2 to place an order. It is a computer. For example, the alternative processing server 3 functions as an alternative processing unit that executes a predetermined process by executing a predetermined alternative program in place of the regular processing unit (servers 11 to 14) in the delivery instruction system 1. If a failure occurs in the distribution server 12, the alternative processing server 3 performs a predetermined process in place of the distribution server 12, the distribution business server 13 and the maintenance business server 14 at the subsequent stage of the distribution server 12. Further, when a failure occurs in the distribution business server 13, the substitute processing server 3 performs predetermined processing in place of the distribution business server 13 and the maintenance business server 14 subsequent to the distribution business server 13.

  The substitute processing server 3 is equipped with the above-described contact processing program, distribution processing program, judgment processing program, and order processing program, and can perform predetermined processing in place of the servers 11 to 14. However, although the details will be described later, the alternative processing performed by executing the alternative program may not necessarily provide completely the same function as the regular program, and may have some of the functions provided by the regular program. stay.

  The above-mentioned “when the predetermined processing cannot be performed” is not limited to the case where any one of the servers 11 to 14 is inoperable due to a failure, but the case where it is not possible to operate for any reason other than a failure such as maintenance, or This includes cases where normal operation is difficult due to high load or the like.

  The recovery support server 4 is a server computer used to support recovery of the delivery instruction system 1 when any of the servers 11 to 14 functioning as regular processing means in the delivery instruction system 1 cannot execute predetermined processing. is there.

  The recovery support server 4 according to the present embodiment can be realized with a general-purpose hardware configuration that has existed similarly to the servers 11 to 15, 2, and 3 described above. That is, the recovery support server 4 is configured by connecting a CPU, a ROM, a RAM as a storage unit, a hard disk drive (HDD), a user interface, and a network interface as a communication unit for communicating with another server computer to an internal bus. You. The user interface has input means such as a mouse and a keyboard, and display means such as a display. Alternatively, it may be formed by a touch panel or the like which also serves as input means and display means.

  FIG. 2 is a block diagram illustrating the recovery support server 4 according to the present embodiment. The recovery support server 4 in the present embodiment has an alternative data acquisition unit 41, a processing instruction unit 42, a regular data acquisition unit 43, a correction instruction unit 44, and an alternative data storage unit 45. Note that components not used in the description of the present embodiment are omitted from the drawings.

  The substitute data acquiring unit 41 functions as a first acquiring unit, and acquires a processing result in the substitute processing server 3. As described above, the substitute processing server 3 performs the predetermined processing when any of the servers 11 to 14 in the delivery instruction system 1 cannot perform the predetermined processing. Get order request information.

  The processing instruction unit 42 functions as a processing instruction unit. Upon receiving the processing result (order request information) obtained by the alternative data obtaining unit 41, the processing instruction unit 42 stores the processing result in the alternative data storage unit 45, and places an order request based on the processing result. The delivery is instructed by performing to the server 2. The data structure of the order request information stored in the substitute data storage unit 45 may be the same as the order request information generated by the maintenance service server 14.

  The regular data acquisition unit 43 functions as a second acquisition unit, and when the delivery instruction system 1 that has failed to perform the predetermined process can perform the predetermined process, the input that the delivery instruction system 1 has failed to process. A processing result when a predetermined process is performed on the data, that is, order request information generated by the maintenance service server 14 of the delivery instruction system 1 is obtained.

  The correction instructing unit 44 functions as a correction instructing unit, and in accordance with a comparison result between the order request information stored in the substitute data storage unit 45 and the order request information acquired by the regular data acquiring unit 43, Reference numeral 42 instructs the order server 2 to correct the processing instruction already given to the order server 2, that is, to correct the order request.

  The substitute data storage unit 45 stores order request information acquired by the substitute data acquisition unit 41 and sent to the order server 2 by the processing instruction unit 42.

  Each of the components 41 to 44 in the recovery support server 4 is realized by a cooperative operation of a computer forming the recovery support server 4 and a program running on a CPU mounted on the computer. Further, the alternative data storage unit 45 is realized by an HDD mounted on the recovery support server 4. Alternatively, a RAM or an external storage means may be used via a network.

  In addition, the program used in the present embodiment can be provided not only by communication means but also stored in a computer-readable recording medium such as a CD-ROM or a USB memory. The program provided from the communication unit or the recording medium is installed in the computer, and various processes are realized by the CPU of the computer sequentially executing the program.

  Here, a method of determining whether or not an order is necessary in the distribution business server 13 will be described with reference to the table shown in FIG.

  FIG. 3 shows a result of the necessity of ordering (ordering, no ordering) and conditions for obtaining the result. The combination pattern is a combination of conditions, for example, a combination pattern No. As shown in FIG. 1, when the notification to be determined satisfies only conditions 1 and 5 among all conditions 1 to 7 (in FIG. 3, the case where the conditions are satisfied is indicated by ““ ”), the determination processing program It is determined that an order is required for the notification. The determination result is either “order placed” or “do not place order”, and in FIG. 3, the corresponding one is marked with “方”. Also, for example, the combination pattern No. As shown in FIG. 7, when the notification to be determined does not satisfy all of the conditions 1 to 7 (in FIG. 3, the case where the conditions are not satisfied is indicated by “×”), the determination processing program Judge not to place an order.

  As shown in FIG. 3, conditions for determining whether or not an order is necessary include conditions 1 to 4 based on publicly available information and conditions 5 to 7 based on information in the delivery instruction system 1. The former condition is a condition by which it is possible to determine whether or not the condition is satisfied by referring to only the published information. That is, the information referred to in the determination of the former condition is information without confidentiality (security) for the delivery instruction system 1 and information that can be referred to even by the alternative processing server 3 located outside the delivery instruction system 1. is there. On the other hand, the latter condition determines whether or not the condition is satisfied only by referring to information that can be referred to only by the servers 11 to 15 inside the delivery instruction system 1 (at least information that can be referred to by the distribution business server 13). It is a condition that can be determined. That is, at least one of the information referred to in the determination of the latter condition is confidential (security) information for the delivery instruction system 1, and is referred to by the alternative processing server 3 located outside the delivery instruction system 1. It is information that cannot be done.

  Note that the number of conditions, combination patterns, and the number of conditions shown in FIG. 3 are merely examples, and the present invention is not limited to these numbers and patterns. Further, in the present embodiment, the conditions are shown in a table format for convenience of explanation, but the determination processing program may be created so that it is possible to determine the necessity of ordering without necessarily referring to the table.

  Next, the operation in the present embodiment will be described. First, an operation in a normal state in which the normal processing means can execute a predetermined process will be described with reference to FIGS. 1 and 4A and 4B.

  In FIG. 1, the flow of data in the normal state is indicated by arrows. That is, upon receiving the notification from the customer side (step 101), the window server 11 performs a window process of storing the content of the notification in the communication log (step 102). Then, the contact server 11 sends the received notification to the distribution server 12 (Step 103).

  Note that the notification sent to the subsequent server in the delivery instruction system 1 may be the notification itself stored in the communication log, or the identification information (notification ID) of the notification allocated when the window server 11 stores the communication log. Good. When sending a notification to a subsequent server, a notification ID is added. Each of the servers 11 to 15 in the delivery instruction system 1 can refer to the communication log and acquire a desired notification by the notification ID.

  The distribution server 12 performs distribution processing of the notification sent from the window server 11 (step 104). If the notification is a notification to be notified to an engineer of the multifunction peripheral, the notification is sent to the distribution business server 13 (step 105).

  Based on the notification sent from the distribution server 12, the distribution business server 13 determines whether or not an order is necessary according to the setting contents of the table shown in FIG. 3 (step 106). If it is determined that an order is required, an order request is instructed to the maintenance service server 14 by sending a notification sent from the distribution server 12 (step 107). If it is determined that an order is not required, no order request instruction is given. The determination result indicating that an order is unnecessary may be sent to the management server 15 to be managed.

  The maintenance service server 14 performs a process of generating order request information by specifying a delivery request destination in accordance with the contents of the notification (order request instruction) sent from the distribution service server 13 (step 108). Then, the generated order request information is sent to the order server 2 (step 109). The order request information includes a notification ID of a notification that is a source of information generation.

  The order server 2 requests delivery to the designated request destination in accordance with the order request information sent from the maintenance service server 14 (step 110).

  At normal times, the above-described processing (steps 101 to 110) is repeatedly performed. Here, it is assumed that a failure has occurred in the distribution server 12 of the delivery instruction system 1 (step 120). When a failure occurs in the distribution server 12, a notification is not sent from the previous stage to the distribution business server 13 and the maintenance business server 14 in the latter stage. FIG. 5 shows the data flow at this time.

  When the management server 15 detects that a failure has occurred in the distribution server 12 by, for example, monitoring an error log of the delivery instruction system 1, the management server 15 notifies at least the window server 11 of the failure.

  Upon receiving the notification from the customer side (step 121), the window server 11 performs a window process for storing the content of the notification in the communication log (step 122). Then, the counter server 11 sends the received notification to the alternative processing server 3 instead of the distribution server 12 in which a failure has occurred (step 123). The management server 15 may directly instruct the alternative processing server 3 to execute the alternative processing, or may send the notification received by the counter server 11 to the alternative processing server 3 as described above, thereby It may be an instruction to execute the processing.

  Upon receiving the notification sent from the window server 11, the alternative processing server 3 performs the alternative processing (step 124). In this case, since the alternative processing server 3 has been notified from the contact server 11, the occurrence of the failure in the distribution server 12 and the distribution server 12 following the distribution server 12 in addition to the distribution server 12. 13 and the processing to be performed by the maintenance service server 14 need to be performed together. That is, the alternative processing server 3 executes the alternative processing by executing each of the alternative programs of the distribution processing program, the determination processing program, and the order processing program. The content of the substitution process is the same as the content of the execution of the regular program, and the description is omitted. However, even if the alternative program of the judgment processing program can refer to the table shown in FIG. 3, it cannot refer to the information to be referred to for verifying the conditions 5 to 7 based on the information in the delivery instruction system 1. The necessity of ordering is determined based on only the conditions 1 to 4 based on the published information. Therefore, according to the setting example shown in FIG. 3 and No. When the notification corresponding to No. 4 is received, the alternative processing server 3 erroneously determines that an order should be determined to be unnecessary when it should be determined that an order is required.

  The alternative processing server 3 may erroneously determine that it is necessary to place an order other than that described above as an order required, or the alternative program of the order processing program may calculate the order quantity incorrectly. In the alternative program, the function is restricted, so that different processing results may be obtained by performing processing different from that of the regular program.

  When the alternative processing server 3 executes the alternative processing as described above, the processing result, that is, the order request information generated when the order is required, is sent to the recovery support server 4 (step 125).

  Upon receiving the order request information sent from the alternative processing server 3, the recovery support server 4 stores it in the alternative data storage unit 45 (step 126). Note that the order request information sent from the alternative processing server 3 includes the notification ID. Then, by performing order processing for sending the order request information to the order server 2, the delivery is requested to the order server 2 (step 127).

  Upon receiving the order request information from the recovery support server 4, the order server 2 requests delivery to the designated request destination in accordance with the received order request information in the same manner as in the case of being sent from the delivery instruction system 1. (Step 129).

  While a failure has occurred in the delivery instruction system 1, the above-described processing (steps 121 to 129) is repeatedly performed. Here, it is assumed that the failure that has occurred in the distribution server 12 of the delivery instruction system 1 has been recovered (step 130). FIG. 6 shows the flow of data after the distribution server 12 has recovered from a failure.

  When the management server 15 detects that the distribution server 12 has recovered from the failure, for example, by monitoring a system log (error log) or the like, the management server 15 notifies at least the window server 11 and the maintenance operation server 14 of the fact.

  Upon receiving the notification from the customer side (step 131), the window server 11 performs a window process of storing the content of the notification in the communication log (step 132). Then, since it is notified that the distribution server 12 has recovered from the failure, the window server 11 sends the received notification to the distribution server 12 (step 133). In the alternative processing server 3, the notification is not sent from the counter server 11, so that the alternative processing is not performed. As described above, by not sending the notification to the alternative processing server 3, the management server 15 may implicitly instruct the stop of the execution of the alternative processing, or may explicitly indicate to the alternative processing server 3. It may be instructed in a specific manner.

  After that, the distribution server 12 receives the notification from the window server 11, executes the distribution process, and performs the processing (steps 133 to 138) from the maintenance work server 14 to the order request information generation processing described above. The description is omitted because it is the same as the process in the normal state (steps 103 to 108).

  By the way, each notification stored and managed in the communication log by the window server 11 is managed by adding a notification ID. The notification ID is preferably assigned to each notification so that the order in which the window processing program in the window server 11 processes the notification can be known. The management server 15 has acquired from the contact server 11 a list of notification IDs of the notifications sent to the alternative processing server 3 when a failure of the distribution server 12 has occurred. Alternatively, the list of notification IDs of the notifications acquired by the window server 11 from the occurrence of the failure until the recovery may be obtained. Further, instead of a list of notification IDs, information that indicates the range of the notification that the alternative processing server 3 has performed the alternative processing, such as the first notification ID and the last notification ID sent to the alternative processing server 3, may be acquired. Then, the management server 15 includes the notification ID list of the notification sent to the alternative processing server 3 in the restoration notification of the distribution server 12 sent to the maintenance service server 14.

  The maintenance service server 14 generates the order request information as described above, but all the notification IDs (notification of the notification sent to the alternative processing server 3) included in the recovery notification of the distribution server 12 from the management server 15 are generated. After generating the order request information corresponding to (ID), the request is sent to the recovery support server 4 instead of the order server 2 (step 139).

  When the order processing generated between the occurrence of the failure and the recovery in the delivery instruction system 1 is completed, the maintenance service server 14 returns to the normal processing state and responds to the notification sent from the distribution service server 13. The generated order request information is sent to the order server 2.

  When the regular data acquisition unit 43 in the recovery support server 4 receives the order request information sent from the maintenance service server 14 of the delivery instruction system 1, the correction instruction unit 44 is included in the received order request information. The order request information including the same notification ID as above is read from the alternative data storage unit 45 and compared (step 140).

  By the way, as described above, since the alternative program has only a part of the functions provided by the regular program, the processing results may be different from each other. In other words, there is no guarantee that the substitute processing server 3 has generated the order request information having the same contents as the logistics business server 13.

  As the order request information having different contents, it is conceivable that the order quantity is different or the order target article is different as described above. In addition, as described with reference to the table shown in FIG. 3, due to the difference in function (access authority) between the regular program in the physical distribution business server 13 and the substitute program in the substitute processing server 3, the substitute program needs to be ordered. However, there are cases where it is determined that an order is unnecessary, and where an order is unnecessary, it is determined that an order is required. The former case corresponds to omission of order. In the latter case, the order is useless.

  Therefore, when the contents of the order request information of the same notification ID do not match, the correction instruction unit 44 in the recovery support server 4 instructs the order server 2 to correct (steps 141 and 142).

  More specifically, if the order request information with the same notification ID exists and the contents are different, the correction instruction unit 44 determines that the order request information already sent in the order request information (alternative It instructs the order server 2 to change the order request information generated by the processing server 3).

  Further, if the order request information with the same notification ID as the order request information generated by the delivery instruction system 1 is not stored in the substitute data storage unit 45, this corresponds to the order omission, and the correction instruction unit 44 Sends a new order request to the order server 2 by sending the order request information generated by the delivery instruction system 1. On the other hand, if the order request information with the same notification ID as the order request information stored in the alternative data storage unit 45 is not sent from the delivery instruction system 1, this case corresponds to an unnecessary order, The correction instruction unit 44 instructs the order server 2 to cancel the order request information already sent, that is, cancel the delivery request. If the processing instruction unit 42 in the recovery support server 4 has not transmitted the order request information, processing may be performed so as not to transmit the order request information, and there is no need to instruct the order server 2 to cancel the delivery request.

  If the order request information generated by the delivery instruction system 1 matches the order request information with the same notification ID generated by the alternative processing server 3, the alternative processing server 3 has generated correct order request information. Therefore, it is not necessary to make the order request information the target of the correction instruction.

  When the processing for the order request information generated from the occurrence of the failure to the recovery in the delivery instruction system 1 ends, the recovery support server 4 deletes the order request information stored in the alternative data storage unit 45.

  Then, the ordering server 2 requests the delivery reflecting the correction instruction from the recovery support server 4 (step 143).

  As described above, the order request information generated by the substitute program does not always match the order request information generated by the regular program. That is, the processing result in the alternative processing server 3 can be a processing result with low accuracy. However, there is a case where the business provided by the delivery instruction system 1 cannot be stopped for a long time. In order not to stop the business provided by the delivery instruction system 1, it is conceivable to construct the system by multiplexing, but the cost increases due to the redundancy. In some cases, as in the present embodiment, confidential information cannot be provided to an external server (in the case of the present embodiment, the alternative processing server 3).

  Therefore, in the present embodiment, when a failure occurs in the delivery instruction system 1, the accuracy may be low in order to avoid the suspension of the business, but the alternative processing server 3 is made to execute the alternative processing. . Then, in order to guarantee a processing result (order request information) with low accuracy after restoration from the failure, the recovery support server 4 verifies the validity of the order request information, and corrects an incorrect order request. In some cases, even after the ordering server 2 makes a delivery request to the delivery request destination, delivery is not actually performed at the delivery request destination, so that the delivery can be corrected by telephone or the like.

  In the above description, the case where a failure has occurred in the distribution server 12 has been described as an example. However, the same processing may be performed when a failure has occurred in another server, that is, the distribution business server 13 or the maintenance business server 14. . Further, in the present embodiment, the substitute processing server 3 is provided as the substitute processing means and the substitute processing in the delivery instruction system 1 is collectively executed. However, the substitute processing means is provided in correspondence with each of the servers 12 to 14. It may be provided.

1 delivery instruction system, 2 order server, 3 alternative processing server, 4 recovery support server, 11 window server, 12 distribution server, 13 logistics business server, 14 maintenance business server, 15 management server, 41 alternative data acquisition unit, 42 processing Instruction unit, 43 regular data acquisition unit, 44 correction instruction unit, 45 alternative data storage unit.

Claims (9)

A first processing unit that obtains a processing result when the normal processing unit that performs predetermined processing on the input data cannot perform the predetermined processing and the substitute processing unit performs the predetermined processing on the input data; Acquisition means;
Processing instructing means for instructing a processing means subsequent to the formal processing means to perform processing based on the processing result obtained by the first obtaining means;
A second acquisition unit that acquires a processing result when the regular processing unit that can perform the predetermined process performs the predetermined process on the input data;
According to a comparison result between the processing result obtained by the first obtaining unit and the processing result obtained by the second obtaining unit, the processing instruction unit corrects the processing instruction already performed on the subsequent processing unit by the processing unit. Correction instructing means for instructing the subsequent processing means,
An information processing apparatus comprising:   The correction instructed by the correction instructing means is at least one of cancellation or change of a processing instruction already given to the subsequent processing means by the processing instruction means, or addition of a processing instruction to the subsequent processing means. The information processing apparatus according to claim 1, wherein:   3. The apparatus according to claim 2, wherein the correction instruction unit instructs to cancel a processing instruction based on a processing result obtained by the first obtaining unit and not included in the processing result obtained by the second obtaining unit. An information processing apparatus according to claim 1.   3. The method according to claim 2, wherein the correction instruction unit instructs to add a processing instruction based on a processing result in the processing result obtained by the second obtaining unit, not in the processing result obtained by the first obtaining unit. An information processing apparatus according to claim 1.   2. The method according to claim 1, wherein the correction instruction unit instructs to change a processing instruction based on a processing result in which the processing result obtained by the first obtaining unit and the processing result obtained by the second obtaining unit are different. 3. The information processing device according to 2. Regular processing means for performing predetermined processing on the input data;
An alternative processing unit that performs the predetermined process on the input data when the legitimate processing unit cannot perform the predetermined process,
A first obtaining unit that obtains a processing result when the substitute processing unit performs the predetermined process on the input data when the legitimate processing unit cannot perform the predetermined process;
Processing instructing means for instructing a processing means subsequent to the formal processing means to perform processing based on the processing result obtained by the first obtaining means;
A second acquisition unit that acquires a processing result when the regular processing unit that can perform the predetermined process performs the predetermined process on the input data;
According to a comparison result between the processing result obtained by the first obtaining unit and the processing result obtained by the second obtaining unit, the processing instruction unit corrects the processing instruction already given to the subsequent processing unit by the processing unit. Correction instructing means for instructing the subsequent processing means,
An information processing system comprising: Monitoring means for monitoring the state of the legitimate processing means,
7. The information according to claim 6, wherein the monitoring unit instructs the alternative processing unit to execute the predetermined process on the input data when the legitimate processing unit cannot execute the predetermined process. Processing system.   7. The method according to claim 6, wherein the monitoring unit instructs the alternative processing unit to stop the execution of the predetermined process when the normal processing unit can execute the predetermined process. Information processing system. Computer
A first processing unit that obtains a processing result when the normal processing unit that performs predetermined processing on the input data cannot perform the predetermined processing and the substitute processing unit performs the predetermined processing on the input data; Acquisition means,
Processing instructing means for instructing a processing means subsequent to the formal processing means to perform processing based on the processing result obtained by the first obtaining means;
A second acquisition unit that acquires a processing result when the regular processing unit that can perform the predetermined process performs the predetermined process on the input data;
According to a comparison result between the processing result obtained by the first obtaining unit and the processing result obtained by the second obtaining unit, the processing instruction unit corrects the processing instruction already performed on the subsequent processing unit by the processing unit. Correction instruction means for instructing subsequent processing means,
Program to function as.

Images