JP2021033518A - Failure determination device, and failure determination method - Google Patents

Abstract

To perform appropriate and corresponding processing to failures occurred in a system.SOLUTION: A failure determination device 50 comprises a computation device for executing: processing in which, response data of a settlement device 20 to a prescribed processing request is obtained from a settlement intermediation system 30 in which the processing request that is between a store terminal 10 and the settlement device 20 and is made by the store terminal 10 is intermediated to the settlement device 20, and the presence/absence of a failure in the settlement intermediation system 30 is determined based on the response data; and processing in which, if the failure is identified by this determination, whether process information including information of a response status to a resource use status and the process request that are obtained concerning the settlement intermediation system 30 is determined to satisfy a prescribed condition, and if the process information satisfies the condition thereto, intermediation processing is switched to a stand-by system 40 from the settlement intermediation system 30.SELECTED DRAWING: Figure 1

Description

The present invention relates to a failure determination device and a failure determination method.

In recent years, options for payment methods other than cash, such as credit cards and various types of electronic money, have increased, and the entry of various companies that provide these services has also increased. Therefore, the payment system related to these payments is also complicated. Therefore, a relay system has been developed to realize smooth multi-payment by performing relay processing between the system operated by each payment company and the terminal of each contract store (for example, Non-Patent Document 1). ..

By the way, since such a relay system is required to operate 24 hours a day, 365 days a year, a standby system is often provided as a backup thereof. For example, if something goes wrong with the relay system, the payment service can be operated stably by temporarily switching the relay system to a standby system having an equivalent configuration.

In such a relay system, it is important to appropriately determine the presence or absence of a failure. For example, Patent Document 1 is disclosed as an information processing technique for determining a system failure. Patent Document 1 describes that each of a plurality of nodes in a distributed system includes a failure monitoring unit that monitors a failure with respect to another node, and a failure identification unit that identifies which node has a failure. .. From the failure monitoring results, the failure identification department takes a majority vote on the presence or absence of abnormalities for each node and each failure monitoring item, and if there is a majority of "abnormalities" for a certain node, it identifies that the node has a failure. It is stated that. In addition, it is described that it is determined whether the node causing the error is the node to be monitored or the node being monitored itself.

Japanese Unexamined Patent Publication No. 2009-909557

http://j-mups.com/ (Viewed on July 16, 2019)

When a system failure occurs, the current system is usually switched to the standby system. However, since there are various failures that occur in the system, it may be preferable not to switch to the standby system. For example, if the load exceeds the performance of the system, it is better not to switch the system in comparison with the cost related to switching the system (for example, the cost in terms of time and resources). It may be stable as a whole. However, there has been no technology that fully examined such points.

The present invention has been made in view of such a current situation, and an object of the present invention is to provide a failure determination device and a failure determination method capable of performing appropriate response processing for a failure that has occurred in a system. There is.

One of the present inventions for solving the above problems is that a failure determination device receives a predetermined processing request from an intermediary device that mediates a processing request by the terminal between the terminal and the information processing device to the information processing device. The process of acquiring the response data of the information processing device to the information processing device and determining the presence or absence of a failure in the intermediary device based on the response data, and when the failure is identified by the determination, the resource obtained for the intermediary device. It is determined whether the process information including the information of the usage status and the response status to the processing request satisfies the predetermined condition, and if the process information satisfies the condition, the mediation process is transmitted from the mediation device to another mediation device. It is provided with a computing device that performs switching processing and execution.

Further, another one of the present invention is a failure determination method, in which an information processing device including an arithmetic device makes a processing request by the terminal between the terminal and the other information processing device. Response data of the other information processing device to a predetermined processing request is acquired from the intermediary device that mediates the information processing device, and the failure is identified by the process of determining the presence or absence of a failure in the intermediary device based on the response data and the determination. If so, it is determined whether the process information including the information on the resource usage status and the response status to the processing request obtained with respect to the intermediary device satisfies the predetermined condition, and if the process information satisfies the condition, the said The process of switching the intermediary process from the intermediary device to another intermediary device is executed.

According to the present invention, it is possible to take an appropriate response process for a failure that occurs in the system.

Issues, configurations and effects other than those described above will be clarified by the description of the following embodiments.

It is a figure which shows an example of the structure of the payment system which concerns on this embodiment. It is a figure explaining an example of the function which a payment intermediary system has. It is a figure explaining an example of the function which a failure determination apparatus has. It is a figure which shows an example of the data structure of a process information DB. It is a figure which shows an example of the switching determination table. It is a figure explaining an example of the hardware provided in each information processing apparatus in a payment system. It is a flow chart explaining an example of settlement intermediary processing. It is a flow diagram explaining an example of a process information collection process. It is a flow chart explaining an example of fault handling processing (first half). It is a flow chart explaining an example of fault handling processing (the latter half). It is a figure which shows an example of the response data history table.

[System configuration]
FIG. 1 is a diagram showing an example of a configuration of a payment system according to the present embodiment. The payment system 1 is an information processing system (multi-payment system) that provides a plurality of types of payment services (for example, various credit cards or electronic money) by each payment company.

The payment system 1 includes one or a plurality of store terminals 10 used by a user such as a purchaser of a product, a plurality of payment devices 20 that perform various procedures related to payment based on a request from the store terminal 10, the store terminal 10, and the store terminal 10. It is configured to include a payment intermediary system 30, a standby system 40, and a failure determination device 50 that mediate between the payment devices 20.

The store terminal 10 is, for example, a POS (Point of Sales) terminal corresponding to each payment service.
It is an information processing device composed of a card reader / writer of a CAT (Credit Authorization Terminal) terminal, etc., and transmits payment and other processing requests via a payment mediation system 30 based on the read information. The store terminal 10 is provided, for example, at each store of a member store of the payment service.

The payment device 20 is provided at a business establishment of a company that provides a payment service, a predetermined data center, or the like. Each payment device 20 is an information processing device that executes various processes in response to a processing request from the store terminal 10 received via the payment mediation system 30.

The payment intermediary system 30 is provided at a predetermined business establishment, data center, or the like. The payment mediation system 30 is an information processing system that mediates processing (for example, processing of payment, inquiry, etc.) performed between the store terminal 10 and the payment device 20. Specifically, the payment intermediary system 30 includes an AP server 31 and a DB server 32.

The AP server 31 identifies the payment device 20 to perform processing based on the processing request received from the store terminal 10. The DB server 32 stores predetermined data (information for identifying the settlement company, sales information of each settlement company, etc.) necessary for the mediation process. Then, while accessing such a DB server 32, the AP server 31 mediates the procedure processing performed between the payment device 20 and the store terminal 10 that has transmitted the processing request.

The standby system 40 is a standby system of the payment intermediary system 30, and has the same configuration as the payment intermediary system 30. That is, the standby system 40 includes the AP server 41 and the DB server 42, and can perform the same mediation processing as the payment mediation system 30.

The failure determination device 50 is provided at a predetermined business establishment or data center. The failure determination device 50 determines whether or not a failure has occurred in the payment mediation system 30, and switches the payment mediation system 30 to the standby system 40.

Specifically, the failure determination device 50 transmits a predetermined processing request (hereinafter referred to as dummy transaction data) to each settlement device 20 via the settlement mediation system 30, and receives response data for the dummy transaction data. Then, the presence or absence of a failure is determined. Then, the failure determination device 50 changes the subject of the mediation process from the payment mediation system 30 to the standby system 40 only when the payment mediation system 30 has a failure and the predetermined switching conditions are satisfied. Switch.

In the present embodiment, the dummy transaction data is assumed to be the data of a fictitious settlement request, and the settlement device 20 is assumed to be the data of a fictitious settlement result for the fictitious settlement request.

The store terminal 10 and the payment intermediary system 30 are communicably connected by, for example, a wired or wireless communication network 5 such as the Internet, LAN (Local Area Network), and WAN (Wide Area Network). Further, between the payment intermediary system 30 and the payment device 20, and between the payment intermediary system 30 and the failure determination device 50, for example, a dedicated line, the Internet, a LAN (Local Area Network), a WAN (Wide Area Network), etc. It is communicably connected by a wired or wireless communication network 6.

[Payment system functions]
Next, the main functions of each information processing device in the payment system 1 will be described.

<Payment brokerage system>
FIG. 2 is a diagram illustrating an example of a function provided in the payment intermediary system 30. The payment intermediary system 30 includes a payment intermediary processing unit 35 and a process information acquisition processing unit 37. The standby system 40 also has the same function.

The payment intermediary processing unit 35 mediates the processing request by the store terminal 10 between the store terminal 10 and the payment device 20 to the payment device 20.

The process information acquisition processing unit 37 acquires process information including information on the resource usage status and the response status to the processing request at a predetermined timing (for example, a predetermined time and a predetermined time interval).

<Failure judgment device>
FIG. 3 is a diagram illustrating an example of a function included in the failure determination device 50. The failure determination device 50 includes a failure occurrence determination processing unit 51, a switching processing unit 52, and a feedback processing unit 53.

The failure occurrence determination processing unit 51 receives a predetermined processing request from the payment intermediary system 30 that mediates the processing request (payment request, inquiry request, etc.) by the store terminal 10 between the store terminal 10 and the payment device 20 to the payment device 20. The response data of the payment device 20 to the payment device 20 is acquired, and the presence or absence of a failure in the payment mediation system 30 is determined based on the response data.

The history of the response data acquired by the failure occurrence determination processing unit 51 is stored in the response data history table 100, which will be described later.

When the failure occurrence determination processing unit 51 determines the failure, the switching processing unit 52 determines in advance the process information including the resource usage status and the response status information to the processing request obtained for the settlement mediation system 30. It is determined whether or not the above condition (switching condition) is satisfied, and if the process information satisfies the condition, the intermediary process is switched from the settlement intermediary system 30 to the standby system 40.

For example, when the switching processing unit 52 identifies a failure in the payment intermediary system 30, and determines that the processing retention status in the payment intermediary system 30 is equal to or higher than a predetermined standard, the DB in the payment intermediary system 30 If the response of the server 32 is equal to or higher than the predetermined standard, the mediation process is switched to the standby system 40, and if the response of the DB server 32 in the payment mediation system 30 is less than the predetermined standard, the mediation process is not switched to the standby system 40. ..

More specifically, in the switching processing unit 52, when the response of the DB server 32 in the payment intermediary system 30 is less than the predetermined standard, the number of communication connections established by the DB server 32 is equal to or more than the predetermined standard. Therefore, the intermediary process is not switched to the standby system 40 only when the occupancy rate of the storage area of the DB server 32 is less than the predetermined reference.

The switching processing unit 52 records the acquired process information in the process information DB 200. Further, the switching processing unit 52 stores the switching conditions in the switching determination table 300. Here, the details of the process information DB 200 and the switching determination table 300 will be described.

(Process information DB)
FIG. 4 is a diagram showing an example of the data structure of the process information DB 200. The process information DB 200 has each item of time 201, AP server settlement request queue retention 202, AP server inquiry request queue retention 203, number of connections used by DB server 204, DB server disk usage rate 205, and DB server response time 206. It consists of the above records.

The AP server settlement request queue retention 202 stores an unprocessed data amount (settlement request retention queue) for an access request from the AP server 31 regarding settlement at the timing indicated by time 201.

The AP server inquiry request queue retention 203 stores the amount of unprocessed data (inquiry request retention queue) for the access request from the AP server 31 regarding the inquiry at the timing indicated by the time 201.

The number of connections used by the DB server 204 stores the number of communication connections (number of connections used) established by the DB server 32 at the timing indicated by the time 201.

The DB server disk usage rate 205 stores the usage rate (disk usage rate) of the DB server 32 (storage device 13) at the timing indicated by the time 201.

The DB server response time 206 stores the response time (response time) of the DB server 32 to the access request from the AP server 31 at the timing indicated by the time 201.

(Switching judgment table)
FIG. 5 is a diagram showing an example of the switching determination table 300. The switching determination table 300 sets each item of the determination condition number 301 in which the number assigned to each determination condition is stored, the condition 302 in which the specific content of the condition indicated by the determination condition number 301 is set, and the switching presence / absence 308. It consists of records that it has.

The condition 302 has each sub-item of the processing type 303, the request retention queue condition 304, the number of connections used condition 305, the disk usage rate condition 306, and the response time condition 307.

The processing request type (settlement request or inquiry request) is set in the processing type 303. In the request retention queue condition 304, a condition related to the request retention queue for the processing request indicated by the processing type 303 is set. In the used connection number condition 305, a condition related to the number of used connections for the processing request indicated by the processing type 303 is set. The disk usage condition is set in the disk usage condition 306. In the response time condition 307, a condition related to the response time for the processing request indicated by the processing type 303 is set. In the switching presence / absence 308, information indicating whether or not to perform switching when the switching condition indicated by the condition 302 is satisfied is set. Conditions based on the respective criteria (threshold values) are set for each of these sub-items.

In the example of the figure, the settlement request retention queue is equal to or more than a predetermined threshold value, the number of connected connections is equal to or more than a predetermined threshold value, the disk usage rate is less than a predetermined threshold value, and the response time in the failure determination period is a predetermined threshold value. If it is less than, the switching is not performed (judgment condition "1"). On the other hand, if the response time in the failure determination period is equal to or greater than a predetermined threshold value and the others are the same as "1", switching is performed (determination condition "2").

If the inquiry request retention queue is equal to or greater than a predetermined threshold value, the number of connected connections is equal to or greater than a predetermined threshold value, and the response time is less than the predetermined threshold value, switching is not performed (determination condition "3"). The reason why the condition related to the disk usage rate condition 306 is not required in the inquiry system is that, as will be described later, in the inquiry processing mediation, data is written to the DB server 32 (unlike the settlement processing mediation). This is because it is not broken.

The content of the switching determination table 300 as described above is set in advance by the user, but the content may be modified by the feedback processing unit 53 described below.

That is, as shown in FIG. 3, the feedback processing unit 53 determines whether the processing efficiency in the standby system 40 is higher than the processing efficiency in the settlement intermediary system 30 after executing the switching process by the switching processing unit 52, and waits. When the processing efficiency in the system 40 is not higher than the processing efficiency in the payment intermediary system 30, parameters relating to at least one of the resource usage status and the response status to the processing request are modified by a predetermined rule.

Specifically, the feedback processing unit 53 determines whether or not the processing efficiency in the standby system 40 is higher than the processing efficiency in the settlement intermediary system 30, the resource usage status of the standby system 40, the response status to the processing request, and the settlement. Judgment is made by comparing the resource usage status of the intermediary system 30 and the response status to the processing request.

Note that FIG. 6 is a diagram illustrating an example of hardware included in each information processing device in the payment system 1. Each information processing device includes a computing device 11 such as a CPU (Central Processing Unit), a memory 12 such as a RAM (Random Access Memory) and a ROM (Read Only Memory), an HDD (Hard Disk Drive), and an SSD (Solid State Drive). ), Etc., a communication device 14, an input device 15 such as a keyboard, a mouse, or a touch panel, and an output device 16 such as a display and a touch panel. Each functional unit of each information processing device described so far uses the hardware of each information processing device, or the arithmetic device 11 of each information processing device stores each program stored in the memory 12 or the storage device 13. It is realized by reading and executing. Further, these programs are non-temporary readable by, for example, a secondary storage device, a non-volatile semiconductor memory, a hard disk drive, a storage device such as an SSD, or an information processing device such as an IC card, an SD card, or a DVD. It is stored in a target data storage medium.

[Processing description]
Next, the processing performed in the payment system 1 will be described.

<< Processing of payment intermediary system >>
First, the payment intermediary system 30 in the payment system 1 executes a payment intermediary process that mediates various procedures performed between the store terminal 10 and the payment device 20.

<Payment brokerage processing>
FIG. 7 is a flow chart illustrating an example of payment brokerage processing. The settlement mediation process is started, for example, when the AP server 31 and the DB server 32 are started. In addition, the standby system 40 also performs settlement mediation processing in the same manner.

First, the AP server 31 waits for the reception of the processing request from the store terminal 10 (s11: NO). Upon receiving the processing request (s11: YES), the AP server 31 identifies the payment device 20 for which the store terminal 10 is requesting processing (s13). Specifically, for example, the AP server 31 requests processing by comparing the destination information included in the processing request received from the store terminal 10 with a predetermined list stored in the DB server 32. Identify the payment device 20 that is installed.

Further, the AP server 31 specifies the type of processing (for example, inquiry processing or settlement processing) requested by the store terminal 10 (s15). Specifically, for example, the AP server 31 compares and refers to the request information included in the processing request received from the store terminal 10 with a predetermined list stored in the DB server 32, so that the store terminal 10 Determines whether the process requested by is a process related to settlement or a process related to information inquiry.

The AP server 31 executes the mediation of the process specified in s15 as follows (s17-s25), and then repeats the process from s11.

Specifically, for example, the AP server 31 has data (for example, a product) necessary for mediating between the payment device 20 specified by the store terminals 10 and s13 that have transmitted the processing request in s11 and the type of processing specified in s15. Information, store information, amount information, customer credit information, etc.) are sent and received (s19, s21).

Further, the AP server 31 transmits or receives necessary data from the DB server 32. For example, when the process specified in s15 is the process related to payment, the AP server 31 has data registered in the DB server 32 (for example, information on purchased products of each customer, information on sales of each store). Data is sent and received to and from the DB server 32 for updating (s23). Further, for example, when the process specified in s15 is a process related to an inquiry, the AP server 31 receives various data registered in the DB server 32 (s25).

<< Processing of fault determination device >>
Next, the processing performed by the failure determination device 50 will be described. The failure determination device 50 executes a process information collection process for accumulating process information of the settlement intermediary system 30 (or standby system 40) and a failure response process for determining the presence or absence of a failure in the settlement intermediary system 30 and switching the main body of the intermediary process. To do. Hereinafter, these processes will be described.

<Process information collection process>
FIG. 8 is a flow chart illustrating an example of the process information collection process. The process information collection process is repeatedly executed, for example, at a predetermined timing (for example, a predetermined time or a predetermined time interval) after the failure determination device 50 is activated.

That is, the failure determination device 50 acquires the process information of the AP server 31 of the payment intermediary system 30 (or the AP server 41 of the standby system 40) (s31). Further, the failure determination device 50 acquires the process information of the DB server 32 (or the DB server 42 of the standby system 40) of the payment intermediary system 30 (s33). Then, the failure determination device 50 stores the acquired process information in the process information DB 200 (s35). After that, the process of s31 is repeated.

<Failure handling>
Subsequently, FIGS. 9 and 10 are flow diagrams for explaining an example of the failure handling process (divided into two diagrams for the convenience of space). The failure handling process is, for example, repeatedly executed at a predetermined timing (for example, a predetermined time, a predetermined time interval) after the failure determination device 50 is activated.

First, the failure determination device 50 transmits dummy transaction data to each payment device 20 via the payment mediation system 30 (s51). Then, the failure determination device 50 waits for the reception of the response data from each payment device 20 transmitted via the payment mediation system 30.

The failure determination device 50 determines whether or not response data has been received from all the settlement devices 20 that have transmitted the dummy transaction data (s53). When the response data is received from all the payment devices 20 (s53: YES), the failure determination device 50 executes the process of s57 described later, and when there is a payment device 20 that has not received the response data (s53: YES). s53: NO), the failure determination device 50 executes the process of s55 described below.

In s55, the failure determination device 50 determines whether or not a predetermined time (for example, 1 minute) has elapsed (that is, whether or not a timeout has occurred) since the dummy transaction data was transmitted in s51. When the predetermined time has passed (s55: YES), the failure determination device 50 considers that there is a possibility that the communication device 14 of each information processing device or its port, or the communication networks 5, 6 and the like have a problem, and next When the process of s57 described above is performed and the predetermined time has not elapsed (s55: NO), the failure determination device 50 repeats the process of s53.

In s57, the failure determination device 50 selects one of the payment devices 20, and whether or not the selected payment device 20 receives data (normal data) indicating that the payment has been completed normally as the response data. Is determined (s59).

When normal data is received (s59: YES), the failure determination device 50 registers information indicating "OK" with respect to the payment device 20 selected in s57 in the response data history table 100, and processes s65 described later. I do. On the other hand, if the received response data is not normal data (or has timed out and the response data itself has not been received) (s59: NO), the failure determination device 50 determines "NG" with respect to the payment device 20 selected in s57. Is registered in the response data history table 100, and the process of s65 described later is performed.

Here, the details of the response data history table 100 will be described.

(Response data history table)
FIG. 11 is a diagram showing an example of the response data history table 100. The response data history table 100 includes a record having each item of the terminal ID 101 and the response result 102.

The terminal ID 101 is set with the identification information of the payment device 20 which is the destination of the dummy transaction data. For the timings 102a, 102b, 102c, 102d, ..., Which are sub-items of the response result 102, the response data to the effect of "OK" is provided to the dummy transaction data transmitted by the failure determination device 50 at each timing. When the failure determination device 50 receives it, "○" is displayed, and in other cases (when response data indicating "NG" is received or response data cannot be received), "x" is displayed. Each is set.

Next, as shown in s65 of FIG. 9, the failure determination device 50 determines whether or not the registration of information in the response data history table 100 has been completed for all the settlement devices 20 for which the dummy transaction data has been transmitted in s51. judge. Specifically, the failure determination device 50 sets "○" or "x" in the response result 102 (more accurately, the sub-item of the response result 102 related to the latest timing) of all the records in the response data history table 100. It is determined whether or not the information of "" is set.

When the registration of information in the response data history table 100 for all the payment devices 20 is completed (s65: YES), the failure determination device 50 executes the process of s66 described below and registers the information in the response data history table 100. If there is a payment device 20 for which information registration has not been completed (s65: NO), the failure determination device 50 returns to the process of s57 to select one of the payment devices 20.

In s66, the failure determination device 50 outputs a warning message or the current process information of the payment intermediary system 30 when "NG" is set in the response result 102 of the majority of the records in the response data history table 100. May be shown to the administrator or the like that the system may be switched (s66). The failure determination device 50 may display such process information until it is determined whether or not the system is switched.

Next, as shown in s71 of FIG. 10, the failure determination device 50 determines whether or not there is a failure in the payment intermediary system 30 based on the result of information registration in the response data history table 100 obtained up to s65. Specifically, for example, the failure determination device 50 sets "NG" in the response result 102 of all the records in the response data history table 100 consecutively for a predetermined number of times (for example, the most recent three consecutive times). It is determined whether or not the state is present. In the following, this period in which "NG" is continuously set in the response result 102 is referred to as a failure determination period.

When it is determined that the payment intermediary system 30 has a failure (s71: YES), the failure determination device 50 performs the process of s73 described below. If it is determined that the payment intermediary system 30 has not failed (s71: NO), the failure handling process ends (s87).

In s73, the failure determination device 50 determines whether or not the current situation is a case in which the system should be switched even if the payment intermediary system 30 has a failure.

Specifically, for example, the failure determination device 50 has the contents of each record of the failure determination period in the process information DB 200 (AP server settlement request queue retention 202, AP server inquiry request queue retention 203, number of connections used by DB server 204, DB. Acquire the server disk usage rate 205 and the DB server response time 206). Then, the failure determination device 50 compares these acquired contents with the contents of each record in the switching determination table 300.

For example, in the failure determination device 50, the average value (or recent value) of the settlement request retention queue in the failure determination period is equal to or more than a predetermined threshold value, and the average value of the number of connected connections used in the failure determination period is equal to or more than the predetermined threshold value. When the average value of the disk usage rate in the period is equal to or greater than the predetermined threshold value and the average value of the response time in the failure determination period is equal to or greater than the predetermined threshold value, the switching condition "1" in the switching determination table 300 is satisfied. Is not performed.

On the other hand, when the average value of the response times in the failure determination period is less than the predetermined threshold value and the other items are the same as the switching condition "1", the failure determination device 50 satisfies the switching condition "2" in the switching determination table 300. Since it is, it is determined that the switching is performed.

Further, for example, in the failure determination device 50, the average value (or recent value) of the inquiry request retention queue in the failure determination period is equal to or more than a predetermined threshold value, and the average value of the number of connected connections used in the failure determination period is equal to or more than the predetermined threshold value. When the average value of the response times in the failure determination period is equal to or greater than a predetermined threshold value, it is determined that switching is not performed because the switching condition "3" in the switching determination table 300 is satisfied.

When it is determined that the switching is to be performed (s73: YES), the failure determination device 50 executes the process of s75 described below. On the other hand, when it is determined that the switching is not performed (s73: NO), the failure handling process ends (s87).

In s75, the failure determination device 50 switches the payment intermediary system 30 currently in operation to the standby system 40. It should be noted that this switching process requires, for example, a predetermined period (for example, about a dozen minutes).

Specifically, for example, the failure determination device 50 transmits a switching notification to the settlement intermediary system 30 and the standby system 40 so that the standby system 40 receives the processing request transmitted by the store terminal 10. Upon receiving the switching notification, the payment intermediary system 30 and the standby system 40 execute a predetermined process for causing the standby system 40 to communicate with each store terminal 10 and each payment device 20 on behalf of the payment intermediary system 30. .. Note that this process may be performed by the payment intermediary system 30 or the standby system 40 instead of the failure determination device 50.

After that, the standby system 40 executes the intermediary process on behalf of the settlement intermediary system 30 until a predetermined condition is satisfied (s77). For example, the standby system 40 executes the mediation process until a predetermined input is received from the user or a predetermined time elapses.

When the above-mentioned predetermined condition is satisfied, the failure determination device 50 executes a return process for the settlement mediation system 30 to execute the mediation process again (s79).

Specifically, for example, the failure determination device 50 transmits a switching notification for the payment intermediary system 30 to receive the processing request from the store terminal 10 to the payment intermediary system 30 and the standby system 40. Upon receiving the switching notification, the payment intermediary system 30 and the standby system 40 execute a predetermined process for causing the payment intermediary system 30 to communicate with each store terminal 10 and each payment device 20. Note that this process may be performed by the standby system 40 or the payment intermediary system 30 instead of the failure determination device 50.

The failure determination device 50 acquires the process information of the standby system 40 during the period (switching period) during which the standby system 40 was executing the mediation process (s81). Specifically, for example, the failure determination device 50 acquires the contents of the record of the process information DB 200 related to the standby system 40 during the switching period.

Based on the process information of the switching period acquired in s81, the failure determination device 50 has a higher processing efficiency of the intermediary processing of the standby system 40 in the switching period than the processing efficiency of the intermediary processing of the settlement intermediary system 30 in the period before the switching period. It is determined whether or not it is (s83).

Specifically, for example, in the failure determination device 50, the request queue retention in the switching period is less than the request queue retention in the predetermined period (for example, the failure determination period) before the switching period, or the number of connections used in the switching period is the switching period. The number of connections used in the previous predetermined period was less than the number of connections used in the previous predetermined period, the used disk usage rate in the switching period was less than the disk usage rate in the predetermined period before the switching period, or the response time in the switching period was smaller than the response time in the predetermined period before the switching period. Determine if it was short, etc., or all. It should be noted that the process information of items other than those listed here may be determined.

When the processing efficiency of the intermediary processing of the standby system 40 in the switching period is higher than the processing efficiency of the intermediary processing of the settlement intermediary system 30 (s85: YES), the failure handling process ends (s87). On the other hand, when the processing efficiency of the intermediary processing of the standby system 40 in the switching period is equal to or less than the processing efficiency of the intermediary processing of the settlement intermediary system 30 (s85: NO), the failure determination device 50 performs the processing of s85 described below. Do.

That is, in s85, the failure determination device 50 modifies the switching condition according to a predetermined rule, and stores the modified switching condition in the switching determination table 300. After that, the failure handling process ends (s87).

Specifically, for example, the failure determination device 50 increases or decreases the threshold value of the request retention queue condition 304 and / or the number of connections used condition 305 of each record in the switching determination table 300 by a predetermined value. Further, for example, the failure determination device 50 increases or decreases the threshold values of the disk usage rate condition 306 and the response time condition 307 of each record in the switching determination table 300 by a predetermined value. The failure determination device 50 may accept corrections of the contents of each item in the switching determination table 300 from the user.

As described above, the failure determination device 50 of the present embodiment determines the presence or absence of a failure in the payment intermediary system 30 by acquiring the response data of the payment device 20 to the processing request, and the payment intermediary system 30. When the process information satisfies the switching condition, the subject of the mediation process is switched from the payment mediation system 30 to the standby system 40.

That is, the failure determination device 50 of the present embodiment not only detects the occurrence of a failure, but also switches to the standby system 40 only when the process information of the payment intermediary system 30 satisfies the switching condition. Appropriate response processing can be performed for a failure that occurs in the payment system 1.

That is, if the cause of the failure is based on the processing performance of the device (resource usage status and response status to the processing request), the failure does not recover even if the system is switched, and the load (time) related to the system switching itself. And resources), it may be judged that it is more appropriate not to switch in relation to the balance. The failure determination device 50 of the present embodiment can perform appropriate response processing even in such a case.

The above description of the embodiment is for facilitating the understanding of the present invention, and does not limit the present invention. The present invention can be modified and improved without departing from the spirit of the present invention, and the present invention includes its equivalents.

For example, the main body of each function described in the present embodiment is an example, and a part or all of the functions of each information processing device may be provided in another information processing device.

Further, in the present embodiment, the dummy transaction data is assumed to be fictitious settlement request data, but the format and contents of the data are not particularly limited as long as the request data can generate response data.

Further, each switching condition in the switching determination table 300 of the present embodiment is an example, and various conditions related to process information can be set. Further, as each process information in the process information DB 200, various information related to resources and processing of each information processing apparatus can be set in addition to those described in the present embodiment.

Further, in the present embodiment, it is determined that a failure has occurred when there is no response data from the majority of the payment devices 20 three times in a row, but the method for determining the failure is not particularly limited. For example, 2/3 may be adopted instead of the majority, or other criteria may be adopted instead of 3 times in a row.

Further, in the present embodiment, the process information of the payment intermediary system 30 and the standby system 40 are acquired by themselves and the failure determination device 50 stores them in the process information DB 200, but the failure determination device 50 is responsible for each process. The information may be acquired and stored in the process information DB 200.

Further, in the present embodiment, the payment system is mentioned as a system to which the present invention is applied, but the present invention can also be applied to other information processing systems.

The above description of the present specification clarifies at least the following contents. That is, the arithmetic unit in the failure determination device of the present embodiment identifies the failure in the intermediary device in the switching process, and the retention status and response time of the process in the intermediary device indicated by the process information are respectively. If it is determined that the value is equal to or greater than the reference value, the switching may be executed, and if it is determined that the retention status is equal to or greater than the reference value but the response time is less than the reference value, the switching may not be executed.

That is, if the processing in the payment intermediary system 30 is stagnant but the response of the disk itself is not bad, the cause of the failure cannot be removed even if the systems are switched (especially in the payment intermediary system 30 and the standby system 40). (When the performance difference is small), by not switching in such a case, it is possible to prevent an extra load from being applied to the system as a whole.

Further, in the switching process, the arithmetic unit uses the storage device in the intermediary device when the response time is less than the reference and the number of communication connections established by the intermediary device is equal to or more than the predetermined reference. If it is determined that the rate is less than the predetermined standard, the switching may not be executed.

In this way, even if it seems that the response of the disk is poor and the effect of switching is small, the merit of switching may increase if the number of connections related to the disk is small or the disk usage rate is high. Therefore, the effect of switching to the standby system 40 can be further enhanced by excluding the switching target only when the number of communication connections is high and the disk occupancy rate is low.

Further, after executing the switching process, the arithmetic unit determines whether the processing efficiency in the other parameter is higher than the processing efficiency in the other parameter, and the processing efficiency in the other parameter is higher than the processing efficiency in the other parameter. If it is determined that the processing efficiency is not higher than the processing efficiency in the above conditions, the feedback processing for modifying at least one of the parameters related to the usage status and the response status under the conditions according to a predetermined rule may be further executed.

As described above, when the processing efficiency in the standby system 40 is not higher than the processing efficiency in the payment parameter 30, it can be said that the merit of the alternative processing by the standby system 40 is small. By modifying the parameters of the usage status or the response status, the effect of switching to the standby system 40 can be improved.

Further, the arithmetic unit compares whether or not the processing efficiency of the other intermediary device is higher than the processing efficiency of the intermediary device in the feedback processing with respect to the resource usage status and the response status to the processing request. It may be determined.

In this way, by comparing the processing status (resource usage status and response status) performed by the standby system 40 with the processing status performed by the payment intermediary system 30, cases to be switched are appropriately extracted. can do.

Further, the arithmetic unit may display the process information when the failure is identified.

By displaying the process information when a failure is identified in this way, the administrator or the like can predict whether or not the system will switch in response to the failure that has occurred, and take appropriate measures based on this. (Perform the prescribed response work such as stopping the system).

1 Payment system 10 Store terminal 20 Payment device 30 Payment mediation system 40 Standby system 50 Failure judgment device 100 Response data history table 200 Process information DB
300 switching judgment table

Claims (12)

The response data of the information processing device to a predetermined processing request is acquired from the mediation device that mediates the processing request by the terminal between the terminal and the information processing device to the information processing device, and the mediation is based on the response data. The process of determining the presence or absence of a failure in the device and
When the failure is identified by the determination, it is determined whether the process information including the information on the resource usage status and the response status to the processing request obtained for the intermediary device satisfies the predetermined condition, and the process information is the said. When the conditions are met, the process of switching the intermediary process from the intermediary device to another intermediary device, and
A failure determination device including an arithmetic unit that executes the above. When the arithmetic unit identifies a failure in the intermediary device in the switching process and determines that the retention status and the response time of the process in the intermediary device indicated by the process information are equal to or greater than each reference, the arithmetic unit is described. The failure determination device according to claim 1, wherein the switching is executed, and when it is determined that the retention status is equal to or higher than the reference but the response time is less than the reference, the switching is not executed. In the switching process, the arithmetic unit has a response time less than the reference, and the number of communication connections established by the intermediary device is equal to or more than a predetermined reference, and the utilization rate of the storage device in the intermediary device is high. The failure determination device according to claim 2, wherein the switching is not executed when it is determined that the value is less than a predetermined standard. After executing the switching process, the arithmetic unit determines whether the processing efficiency in the other mediation device is higher than the processing efficiency in the mediation device, and the processing efficiency in the other mediation device is the processing in the mediation device. The failure determination device according to claim 1, wherein if it is determined that the efficiency is not higher than the efficiency, a feedback process for modifying at least one of the usage status and the response status under the conditions is performed according to a predetermined rule. In the feedback processing, the arithmetic unit determines whether or not the processing efficiency of the other intermediary device is higher than the processing efficiency of the intermediary device by comparing the resource usage status and the response status to the processing request. , The failure determination device according to claim 4. The failure determination device according to claim 1, wherein the arithmetic unit displays the process information when the failure is identified. An information processing device equipped with an arithmetic unit
The response data of the other information processing device to a predetermined processing request is acquired from the intermediary device that mediates the processing request by the terminal to the other information processing device between the terminal and the other information processing device, and the response is obtained. Based on the data, the process of determining the presence or absence of a failure in the intermediary device and
When the failure is identified by the determination, it is determined whether the process information including the information on the resource usage status and the response status to the processing request obtained for the intermediary device satisfies the predetermined condition, and the process information is the said. When the conditions are met, the process of switching the intermediary process from the intermediary device to another intermediary device, and
How to determine a failure. When the arithmetic unit identifies a failure in the intermediary device in the switching process and determines that the processing retention status and the response time in the intermediary device indicated by the process information are equal to or greater than each reference, the above. 7. If the switching is executed and it is determined that the retention status is equal to or higher than the reference but the response time is less than the reference, the switching is not executed.
The failure determination method described in. In the switching process, the arithmetic unit has a response time less than the reference, and the number of communication connections established by the intermediary device is equal to or more than a predetermined reference, and the utilization rate of the storage device in the intermediary device is high. The failure determination method according to claim 8, wherein the switching is not executed when it is determined that the value is less than the predetermined standard. In the feedback processing, the arithmetic unit determines whether or not the processing efficiency of the other intermediary device is higher than the processing efficiency of the intermediary device by comparing the resource usage status and the response status to the processing request. , The failure determination method according to claim 7. Whether or not the processing efficiency of the other intermediary device is higher than the processing efficiency of the other intermediary device in the feedback processing by the arithmetic unit is determined by the resource usage status of the other intermediary device and the response status to the processing request. The failure determination method according to claim 10, wherein the failure determination method is determined by comparing the resource usage status in the intermediary device with the response status to the processing request. The failure determination method according to claim 7, wherein when the arithmetic unit identifies the failure, the process information is displayed.

Images