JP2023051245A - electronic information management system - Google Patents

Abstract

To start a local application from a web browser in a secure environment.SOLUTION: An electronic information management system 100 comprises a server device 110 and a terminal device 120. The terminal device 120 includes a web browser 123 cooperative with a web server, and a tool 124 cooperative with the web server. The web server includes a first log-in unit 116 for performing first log-in authentication for cooperating with the web browser 123, and a second log-in unit 117 for performing second log-in authentication for cooperating with the tool 124. The tool 124 has a start unit 126 for starting a local application on the basis of the instruction from the web browser 123, in the state where the log-in authentication of the web server and the web browser 123 is established, and long-in authentication of the web server and the tool 124 is established.SELECTED DRAWING: Figure 2

Description

The present invention relates to an electronic information management system comprising a server device having a web server and a terminal device capable of communicating with the server device.

2. Description of the Related Art Conventionally, in a terminal device communicating with a server device, there are cases where it is desired to start a local application, which is an application provided in the terminal device. Patent Literature 1 describes a technique in which a server device manages activation information of a local application, and a terminal device downloads the activation information, thereby activating the local application in the terminal device.

JP-A-2003-256213

However, when the terminal device uses a web browser to cooperate with the web server of the server device, for example, in a web browser such as Google Chrome (registered trademark) of Google Inc. or Edge of Microsoft Corporation, for security reasons, the It may not be possible to launch a local application such as Microsoft's File Explorer based on an instruction from a web browser.

SUMMARY OF THE INVENTION It is an object of the present invention to provide an electronic information management system capable of starting a local application according to an instruction from a web browser in a secure state.

To achieve the above object, an electronic information management system according to one aspect of the present invention includes a server device having a web server, and a terminal device capable of communicating with the server device via a network. wherein the terminal device includes a web browser that cooperates with the web server, and a tool that cooperates with the web server, and the web server performs first login authentication for cooperation with the web browser. and a second login unit that performs second login authentication for cooperating with the tool, wherein the tool performs the first login authentication established and the second login An activation unit for launching a local application based on an instruction from the web browser when authentication is established.

By causing a terminal device to execute a tool capable of performing login authentication to a web server, it becomes possible to start a local application via the tool in a secure state.

It is a figure which shows the apparatus structure of an electronic information management system. It is a figure which shows the functional structure of an electronic information management system. 4 is a sequence diagram showing operations of the electronic information management system; FIG. It is a figure which shows a 1st login authentication screen. It is a figure which shows the screen at the time of giving a user instruction|indication. FIG. 11 is a sequence diagram showing another example 1 of the operation of the electronic information management system; FIG. 11 is a sequence diagram showing another example 2 of the operation of the electronic information management system;

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of an electronic information management system according to the present invention will be described below with reference to the drawings. It should be noted that the following embodiments are examples for explaining the present invention, and are not intended to limit the present invention. For example, the shapes, structures, materials, constituent elements, relative positional relationships, connection states, numerical values, formulas, contents of each step in the method, order of each step, etc. shown in the following embodiments are examples, and are described below. may include content not listed in In addition, geometric expressions such as parallel and orthogonal are sometimes used, but these expressions do not indicate mathematical rigor, and substantially allowable errors, deviations, and the like are included. Expressions such as "simultaneous" and "identical" also include substantially permissible ranges.

In addition, the drawings are schematic diagrams that have been appropriately emphasized, omitted, or adjusted in proportion in order to explain the present invention, and are different from the actual shape, positional relationship, and proportion.

Further, in some cases, a plurality of inventions will be collectively described as one embodiment below. Also, some of the contents described below are described as optional components related to the present invention.

FIG. 1 is a diagram showing the configuration of an electronic information management system. FIG. 2 is a diagram showing the functional configuration of the electronic information management system. The electronic information management system 100 is a user client system comprising a server device 110 and a terminal device 120 connected to a network. Note that the electronic information management system 100 may include a plurality of server devices 110 and may include a plurality of terminal devices 120 . Moreover, the server device 110 and the terminal device 120 may be connected to one type of network, or may be connected to a plurality of types of networks such as the first network 210 and the second network 220 connected via the address translation device 150. may be connected via In this embodiment, one server device 110 and one terminal device 120 connected via the first network 210 will be described.

The device configuration and functional configuration of the electronic information management system 100 will be described below in order, but the order of description does not necessarily match the order of control. The flow of control will be described later.

The type of the first network 210 is not particularly limited, and can be exemplified by, for example, a LAN (Local Area Network) that performs communication based on a private IP address (local IP address). The first network 210 may be a wired network or a wireless network. Specifically, the first network 210 is a network conforming to IEEE (The Institute of Electrical and Electronics Engineers) 802.3. A server device 110 and a terminal device 120 are connected to the first network 210 . Devices connected to the first network 210 are not limited to these.

The type of the second network 220 is not particularly limited. For example, a WAN (Wide Area Network) provided by a telecommunications carrier capable of communicating based on a global IP address, the so-called Internet, can be exemplified. can. The second network 220 may be a wired network or a wireless network.

The address translation device 150 is a device having a NAT (Network Address Translation) function to translate an IP address into another IP address. In this embodiment, the address translation device 150 is a so-called router.

The server device 110 is a device that includes a first storage device 111 that stores electronic information and a first processor 112 that is a processor that can execute programs, and that can communicate with the terminal device 120 via a network. . A specific server device 110 is not particularly limited, but in the case of the present embodiment, a NAS (Network Attached Storage) is shown as the server device 110 . Note that the server device 110 may be, for example, a desktop computer, a laptop computer, or the like.

Electronic information is a file that can be handled as one unit when saving, reading, moving, deleting, etc., or a folder (directory) that can classify multiple files and create a certain unit.

The first storage device 111 is a storage device included in the server device 110, and is a device capable of storing electronic information for a long period of time and outputting the stored electronic information. Examples of the first storage device 111 include an HDD (Hard Disk Drive) and an SSD (Solid State Drive). In the case of this embodiment, the first storage device 111 also stores an application such as a web server to be executed by the second processor 122 of the terminal device 120 .

The first processor 112 is a processor included in the server apparatus 110, and implements a server, an application, and the like by causing the first processor 112 to execute a predetermined program. In this embodiment, the server device 110 includes a first web server 113, which is one of web servers, a second web server 114, which is another web server, as functions realized by the first processor 112, A file server 115 is provided.

The web server is a server that transmits data such as images and text stored in the first storage device 111 to the web browser according to instructions from the web browser implemented by the terminal device 120 . The first web server 113 and the second web server 114 are web applications with different functions.

Although the functions realized by the first web server 113 are not particularly limited, in the case of the present embodiment, the first web server 113 receives various information for managing work related to the user of the terminal device 120. It is a web application that stores and processes. The first web server 113 has a first login unit 116 that performs first login authentication for cooperating with the web browser 123 executed on the terminal device 120 .

In the case of this embodiment, the first web server 113 includes an instruction transfer unit 131 that receives a user instruction from a web browser 123 running on the terminal device 120 and transfers the user instruction to the second web server 114. . The instruction transfer unit 131 transfers the ID and password instructed by the web browser 123 at the time of the first login authentication to the second web server 114 as user instructions. The second web server 114 establishes a cooperative relationship with the first web server 113 using the transferred ID and password.

Although the functions realized by the second web server 114 are not particularly limited in the same manner as the first web server 113, in the case of the present embodiment, the second web server 114 is a web application that manages the server device 110. be. The second web server 114 has a second login section 117 that performs second login authentication for cooperating with the tool 124 .

The second web server 114 outputs a user instruction to the tool 124 in the terminal device 120 based on the instruction receiving unit 132 that receives the user instruction from the first web server 113 and the user instruction received by the instruction receiving unit 132. and an instruction output unit 133 .

The file server 115 is a server that manages electronic information stored in the first storage device 111 and enables access from the terminal device 120 to the first storage device 111 in accordance with instructions from local applications executed on the terminal device 120. is. The file server 115 enables the terminal device 120 to access the first storage device 111 in response to an instruction from, for example, Microsoft's File Explorer running on the terminal device 120 . Note that the file server 115 may have a function of changing user or group access rights to the electronic information stored in the first storage device 111, a function of backing up the electronic information, and the like. In the case of this embodiment, the file server 115 has a third login unit 118 that performs third login authentication for cooperating with the local application started by the tool 124 .

The terminal device 120 is not particularly limited, and may be, for example, a desktop computer, a laptop computer, or the like. A first storage device 111 of 110 is a device capable of storing and retrieving electronic information. In the case of this embodiment, the terminal device 120 includes a second storage device 121 that stores electronic information, and a second processor 122 that is a processor capable of executing programs.

The terminal device 120 includes a web browser 123, a tool 124, and a file manager 125 as local applications realized by causing the second processor 122 to execute software. Note that the local application is not limited to the above, and can be exemplified by an application for creating documents, an application for executing spreadsheets, an application for browsing drawings, and the like.

Web browser 123 is a local application that interacts with at least one of first web server 113 , second web server 114 , and file server 115 . The web browser 123 can browse information provided by the web server of the server device 110 or the file server 115 and send instructions to the web server or the file server 115 . For security reasons, the web browser 123, for example, Google Chrome (registered trademark) or Microsoft Edge, normally launches a local application such as Microsoft's File Explorer based on instructions from the web browser. It is a web browser that cannot.

The tool 124 is a local application that can cooperate with the web server of the server device 110, and has an activation unit 126 that can launch other local applications.

The activation unit 126 is a processing unit that can cooperate with the web browser 123 via the web server in a state where multiple login authentications have been performed with the web server of the server device 110, and based on instructions from the web browser 123 to the web server. Can launch local applications.

The file manager 125 is an application capable of managing electronic information stored in a storage device, and cooperates with the file server 115 to access electronic information stored in the first storage device 111 in a predetermined authentication state. can be done. File manager 125 can also access electronic information stored in secondary storage device 121 . The file manager 125 is, for example, Microsoft's File Explorer.

Next, operations of the electronic information management system 100 will be described. FIG. 3 is a sequence diagram showing the operation of the electronic information management system 100. As shown in FIG.

The activated tool 124 establishes second login authentication with the second login unit 117 of the second web server 114 in advance (S101). In the case of this embodiment, an ID and a password for establishing login authentication with the second web server 114 are registered in the tool 124, and when the tool 124 is activated in the terminal device 120, it is automatically or by a user's operation. to perform a second login authentication.

Next, the user performs a first login operation by entering an ID and a password to the first login section 116 of the web browser 123 running on the terminal device 120 (S102). The login operation is performed by, for example, displaying the screen shown in FIG. 4 on the terminal device 120, entering an ID and password, and pressing a login button. The web browser 123 that has received the first login operation transmits the ID and password to the first web server 113 and executes first login authentication (S103). As described above, the first login authentication between the first web server 113 and the web browser 123 is established, and the second login authentication between the second web server 114 and the tool 124 is established.

Next, when the user instructs to browse the folder on the terminal device 120 by clicking the folder path (see FIG. 5) displayed on the web browser 123 cooperating with the first web server 113 (S104). , a user instruction including the path indicated by the web browser 123 is output to the first web server 113 (S105). The user instruction is, for example, information such as "browse the folder corresponding to the path". The instruction transfer unit 131 of the first web server 113 that has acquired the user instruction transfers the user instruction to the second web server 114 (S106).

The second web server 114 receives the user instruction through the instruction receiving unit 132 and outputs the received user instruction to the tool 124 (S107).

The tool 124 that has received the user instruction establishes third login authentication with the file server 115 so that the file manager 125, which is a local application to be started, can access the first storage device 111 (S108). In the case of this embodiment, the third login authentication is performed based on the ID and password registered in the tool 124 in advance.

Next, the tool 124 activates the file manager 125, which is one of the local applications, in a secure state in which the first login authentication, second login authentication, and third login authentication have been established (S109). At this time, the folder path included in the user instruction is output to the file manager 125 .

Note that in a secure state in which the first login authentication, the second login authentication, and the third login authentication have been established in advance, when the tool 124 receives a user instruction, the second login authentication is performed with the file server 115 again. The file manager 125 can be activated immediately after receiving the user instruction without the need for the third login authentication.

The file manager 125 accesses a predetermined folder in the first storage device 111 based on the received folder path (S110).

According to the electronic information management system 100 described above, when a user accesses the first web server 113 using the web browser 123 and performs work related to business management, files stored in the first storage device 111 can be accessed. When it becomes necessary to operate files and folders, it is possible to operate files and folders using the file manager 125 activated based on instructions from the web browser 123 under a secure environment.

This eliminates the need for the user to separately launch a local application on the terminal device 120 and establish login authentication with the file server. Electronic information in one storage device 111 can be easily accessed.

In this embodiment, when the first login authentication has been established, the second login authentication has been established, and the third login authentication has been established, a file as a local application can be created based on an instruction from the web browser 123. Although the mode of launching the manager 125 has been described, the conditions for launching a local application based on an instruction from the web browser 123 are that at least the first login authentication has been established and the second login authentication has been established. It may be in a state where the third login authentication has not been established. In other words, in a state where at least one of the first login authentication and the second login authentication has not been established, local applications are not launched based on instructions from the web browser 123 .

It should be noted that the present invention is not limited to the above embodiments. For example, another embodiment realized by arbitrarily combining the constituent elements described in this specification or omitting some of the constituent elements may be an embodiment of the present invention. The present invention also includes modifications obtained by making various modifications to the above-described embodiment within the scope of the gist of the present invention, that is, the meaning of the words described in the claims, which a person skilled in the art can think of. be

For example, in the above embodiment, one server device 110 has the first web server 113, the second web server 114, and the file server 115, but as shown in FIG. The two web servers 114 and the file server 115 may be distributed to each of the plurality of server devices 110 . Also, at least one server device 110 may be a cloud connected to the Internet. In this case, the second web server 114 issues a connection request to the first web server 113 on the cloud (S201), and the connection between the first web server 113 and the second web server 114 is established in advance.

Also, although the electronic information management system 100 has two web servers, the first web server 113 and the second web server 114, the web servers are the first web server 113 and the second web server 114. It may be one web server with integrated functions. In this case, the electronic information management system 100 does not have to include the instruction transfer section 131, the instruction reception section 132, and the like.

The local applications launched by the tool 124 are not only the file manager 125 that accesses the first storage device 111 provided in the server device 110, but also local applications corresponding to files stored in the second storage device 121 provided in the terminal device 120. You can start the application.

In addition, in the third login authentication, if the information necessary for login is not registered in the tool 124, as shown in FIG. 7, the user performs a third login operation (S111 ), a third login authentication may be performed between the tool 124 and the file manager 125 .

The present invention is applicable to an electronic information management system 100 comprising a server device such as a network storage device connected to a network such as the Internet or a LAN, and a terminal device.

100 Electronic information management system 110 Server device 111 First storage device 112 First processor 113 First web server 114 Second web server 115 File server 116 First login unit 117 Second login unit 118 Third login unit 120 Terminal device 121 Second Second storage device 122 Second processor 123 Web browser 124 Tool 125 File manager 126 Starting unit 131 Instruction transfer unit 132 Instruction receiving unit 133 Instruction output unit 150 Address translator 210 First network 220 Second network

Claims (5)

An electronic information management system comprising a server device having a web server and a terminal device capable of communicating with the server device via a network,
The terminal device
a web browser that cooperates with the web server;
a tool that cooperates with the web server;
The web server is
a first login unit that performs first login authentication for cooperating with the web browser;
A second login unit that performs second login authentication for cooperating with the tool,
Said tool is
An electronic information management system comprising an activation unit that launches a local application based on an instruction from the web browser when the first login authentication is established and the second login authentication is established. The server device
a storage device for storing electronic information;
a file server that manages electronic information stored in the storage device,
The file server is
A third login unit that performs third login authentication for linking with the local application launched by the tool,
the local application is a file manager capable of accessing electronic information stored on the storage device;
The activation unit
wherein said file manager is launched based on an instruction from said web browser in a state in which said first login authentication has been established, said second login authentication has been established, and said third login authentication has been established; 2. The electronic information management system according to 1. The web server is
an instruction output unit that, when receiving a user instruction from the web browser, outputs the user instruction to the tool;
The activation unit
3. The electronic information management system according to claim 1, wherein when said user instruction is received from said instruction output unit, said local application corresponding to said user instruction is launched. the web server comprises a first web server and a second web server;
The first web server is
an instruction transfer unit that receives a user instruction from the web browser and transfers the user instruction to the second web server;
The second web server is
an instruction receiver that receives the user instruction from the first web server;
an instruction output unit that outputs the user instruction to the tool based on the user instruction received by the instruction receiving unit;
The activation unit
4. The electronic information management system according to claim 3, wherein when said user instruction is received from said instruction output unit, said local application corresponding to said user instruction is launched. 5. The electronic information management system according to claim 1, wherein said web browser is Google Chrome (registered trademark) or Edge.

Images