JP3361743B2 - Information browsing system - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information browsing system, and more particularly to an information browsing system for browsing various information using an internet browser.

[0002]

2. Description of the Related Art In recent years, in the computer network system called the Internet or Intranet, which is rapidly spreading, WWW (World Wide W
An information browsing technique called eb) is used. WW
W is an HTML (HyperText Mark-up)
Data written in a language called "Language" is converted into HTTP (HyperText Transfer).
It is a mechanism provided by using Protocol.

In this type of network system, a Web server program is installed in a computer, that is, a Web server terminal connected to this network at various places, and a data file to be browsed is placed under the control of the Web server program. A user (user) activates a browser (browsing program) installed in each personal computer connected to the network, that is, a client terminal, and a URL (Uniform Resource Local) indicating a storage location of a predetermined data file.
input).

[0004] In response to this, the browser is set to the designated W
The eb server terminal is connected via a communication line such as a LAN line or a telephone line by a communication protocol called TCP / IP, and the data received from the Web server terminal is displayed on the screen. After receiving the data, the connection with the Web server terminal is disconnected, the connection is made again in response to the user's request for new data, and the desired data is received and displayed.

FIG. 18 is an explanatory view showing a general information browsing system, and particularly shows an example of a system operated in an office building. In this case, tenants A to F live on the 2nd to 4th floors respectively, and building equipment maintenance and
There is a building management room and parking lot for operation, and an elevator is installed on each floor. In particular, parking lots and elevators are managed by different management companies, and the building is operated by a plurality of management companies.

A LAN line 10 is provided on each floor of the building, client terminals 21 to 26 provided for each tenant on each floor, a client terminal 27 provided in a parking lot on the first floor, and a building on the first floor. We in the control room
The server terminal (server terminal) 11 and the client terminal 28 are connected to each other via the LAN line 10.

[0007] In addition to the information to be notified to the resident of the building, such as an HTML document indicating the floor cleaning notice and the menu of the cafeteria, the Web server terminal 11 is managed by the manager of each building facility to control the equipment. An HTML document indicating a menu for performing the above is stored and can be browsed from each client terminal 21 to 28 using a browser.

Therefore, depending on the content of the document, it is necessary to limit the users who can browse the document. Conventionally, in such a system, a user who can view a document is registered in advance, the user is authenticated by performing a login operation, and the user can judge whether or not the document can be displayed. Was there.

[0009]

However, in such a conventional information browsing system, there are two ways whether the user can access the document (information) or not. Therefore, the WWW is applied to the business system or the building. There is a problem in that it is not possible to deal with a system that needs to manage the displayability and changeability of each document for each user having an arbitrary access level, such as when building an application of a monitoring control system. .

For example, in a business application,
When the screen for inputting personnel information is displayed on the browser of the client terminal, only a limited user such as a personnel department can access the HTML document for this screen. However, there are cases where it is desired that ordinary employees only display the personnel information entered here.

In such a case, in the conventional information browsing system, a method of performing login operation by simply using a login name for which information can be browsed and a login name for which information can be changed is used. According to this method, A specific user had to have two different login names, which made it difficult to use.

Further, in the building monitoring and control system, when displaying a screen for displaying the status of devices and operating instructions by a browser of a client terminal, a department A within a tenant A
Users who belong to are able to view the list of devices in their department,
Although the setting change operation is possible, only the display of the device list of the other department B can be displayed, and the user belonging to the tenant B cannot access the device list of the tenant C, which requires access management to the document.

However, regarding such complicated control,
There is a problem that the conventional method of properly using the user name by the information browsing system cannot handle it. The present invention is intended to solve such a problem, and an object of the present invention is to provide an information browsing system capable of accurately managing access to various documents for each user.

[0014]

In order to achieve such an object, the information browsing system of the present invention uses various HTML.
In an information browsing system including a server terminal that delivers a document via a communication line such as a LAN line and a telephone line, and a client terminal that browses various information distributed via the communication line, an arbitrary client is added to the server terminal. In response to a request for browsing a predetermined HTML document from the terminal, the login information file corresponding to the login name input from the client terminal is referred to, and the client terminal is used in the login information file in the hierarchical data file directory. When the access level is acquired from the user information file in the directory associated with the user, whether the requested HTML document for the client terminal user is displayable or modifiable based on the access level, and the displayable or modifiable Distribute the requested HTML document only It is provided with a display control processing means for. And the data file directory is available
Individual companies, departments, and users themselves
Multiple registered hierarchically using each code set in
User information in a hierarchical structure consisting of
File is it out of the data file directory
Use each code corresponding to each user to
And are stored in user directories hierarchically registered in
, The access level of the user is described,
The display control processing means, when acquiring the access level,
Acquire each code entered from the client terminal and
User based on each code in the data file directory
Browse the directory and within that user directory
From the stored user information file of the user
The access level is acquired.

Another information browsing system of the present invention is
In an information browsing system including a server terminal that distributes various HTML documents via a communication line such as a LAN line and a telephone line, and a client terminal that browses various information distributed via the communication line, the server terminal may optionally be In response to a login request from a client terminal of, the login information file corresponding to the login name input from that client terminal is referenced, and the login information file in the hierarchical data file directory is
From the user information file in the di <br/> directory associated with the said client terminal user to obtain a unique password to the client terminal user, the password
And login authentication means for performing user authentication of the client terminal user on the basis of the de, HTM from the client terminal after the authentication is confirmed by the login authentication means
Acquires the access level from the user information file in response to the L document browsing request, determines whether or not the requested HTML document for the client terminal user can be displayed and changed based on the access level, and requests only when the display or change is possible Display control processing means for delivering an HTML document is provided. And the data file directory
The bird is the company to which the user belongs, the department, and the user's own
Register hierarchically using each code set individually.
It has a hierarchical structure consisting of multiple recorded directories,
The login information file is for each code corresponding to the user.
The user information file contains data
Corresponding to each user in the file directory
Registered hierarchically for each user using each code
Stored in the user directory
The access level is described and the login authentication method
Uses the login information file to retrieve the password
Get each code corresponding to the user by referring to
In the data file directory, the user corresponding to each code is
User directory and browse for that user directory.
User information file of the user stored in the bird
The password is acquired from the file and the display control processing means
Input from client terminal when acquiring access level
Get each code that was created, data file directory
Refer to the user directory based on each code in
The use stored in its User over Heather directory
Access level from the user information file of
It was done so.

At this time, the login authentication means transmits each code to the client terminal in response to the successful user authentication, and the client terminal receives each code from the server terminal transmitted in response to the successful user authentication. depending on the viewing request operation by the client terminal user, each
The browsing request with the code attached is sent to the server terminal, and the display control processing means selects the user directory based on each code attached to the browsing request from the client terminal, and stores it in the user directory. You may refer to the user information file that exists .

[0017]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing an information browsing system according to an embodiment of the present invention, and the same or equivalent parts as those in the above description (see FIG. 18) are denoted by the same reference numerals. Below, from any client terminal 21 Web
An example will be described in which the information browsing system is applied to a building monitoring and control system that monitors and controls the devices constituting the building facility via the server terminal 11. The system configuration is the same as that shown in FIG.

In FIG. 1, the client terminal 21 includes an arbitrary H stored in the Web server terminal 11.
A browser 210 for browsing and displaying a TML document is provided. On the other hand, the Web server terminal 11 is provided with a login authentication processing unit 12, a display control processing unit 13, a data update processing unit 14, a device monitoring control processing unit 15, and an information storage unit 16.

In particular, the information storage unit 16 has various HTMLs.
In addition to the document, a login information file used for login authentication of each user and a user information file storing management information of each user are stored. The login authentication processing unit 12 refers to a predetermined login information file according to a login operation from the client terminal 21, and performs login authentication for the user.

The display control processing unit 13 reads out the requested document from the information storage unit 16 and delivers it only when the requested document can be displayed or changed in response to a browsing request from the client terminal 21. The data update processing unit 14 determines the information storage unit 1 according to the input data from the client terminal 21.
The contents of the predetermined file stored and held in 6 are changed.

In addition, in the Web server terminal 11, a controller 30 for centrally managing devices such as an air conditioner 31, a temperature sensor 32, a lighting 33, and an elevator 34, which constitutes a building facility, includes a LAN line and a telephone line. It is connected via a predetermined communication line. The device monitoring control processing unit 15 monitors and controls a predetermined device by communicating with the controller 30 according to a control instruction from the client terminal 21.

With reference to FIG. 2, an operation when an arbitrary user browses a predetermined HTML document in the Web server terminal will be described as the first embodiment of the present invention. FIG. 2 is a sequence diagram showing a document browsing process procedure. When browsing an HTML document, the desired HTML document is displayed on the client terminal 21 by the processing procedure shown in FIG.
Will be delivered to.

First, the browser 2 of the client terminal 21
From 10, enter the user name and password to perform the login operation. The user name and password are information unique to the user (user) and are registered in the Web server terminal 11 in advance. Accordingly
The login authentication processing unit 12 of the Web server terminal 11
The login authentication process shown in FIG. 3 is started.

First, it is confirmed whether or not there is a login information file corresponding to the user name input from the client terminal 21 (step 121). FIG. 5 is an explanatory diagram showing a file storage state in the information storage unit. In this example, a user management directory 51 is provided in the data file directory 50, and each directory for each company, department, and user is provided in a hierarchical structure below the user management directory 51.

The user management directory 51 includes a company A directory 52 as a directory for each company.
A and company B directories 52B, ... Are provided.
In the directory for each company, for example, the company A directory 52A, a company information file 53 showing the management information of the company A and a directory for each department are provided.
Department A directory 53A, Department B directory 53
B, ... And are provided.

Furthermore, these department-unit directories,
For example, in the department A directory 53A, a department information file 54 showing management information of the department A and user A directories 54A, user B directories 54B, user C directories 54C, ... Is provided,
User information files 55A and 55 showing management information of each user in the directory of each user
B, 55C, ... Are stored.

A login management directory 56 is provided in the user management directory 51 as a directory for storing information used for login authentication. In this login management directory 56, a login name 1 directory 57A, a login name 2 directory 57B, ... Are provided as directories for each login name, and each login name has its own login name. Login information files 58A, 58B, ... Which indicate corresponding management information are stored.

A name of a character string consisting of a company code, a department code, a user code and a login name which is preset in correspondence with the company, department, user and login name is assigned to these directories at the time of registration. Has been. FIG. 6 is an explanatory diagram showing a description example of the login information file, in which the code of the company and department to which the user corresponding to each login name belongs and the user code of the user himself / herself are registered. In addition,
From the "#" symbol to the end of the line, indicate the comment part (below,
the same).

Therefore, the login authentication processing unit 12 of the Web server terminal 11 performs the login operation by referring to the corresponding login name directory in the login management directory 56 according to the login name input from the client terminal 21. It is confirmed whether or not there is a login information file of the user (step 121). If the login information file is found here (step 12
1: YES), the company code, department code, and user code are acquired from the login information file (step 122).

Then, by referring to the directory indicated by these codes, the presence or absence of the user information file of the user is confirmed (step 123). here,
If the user information file is found (step 1
23: YES), the password is obtained from the user information file (step 124), and compared with the password input from the client terminal 21 by the login operation (step 125).

If both passwords match,
It is determined that the user who has performed the login operation is a legitimate user who has already been registered, and the menu page for selecting the HTML document to be browsed is distributed to the client terminal 21 (step 126). At this time, the user identification information including the company code, the department code, and the user code acquired in step 122 described above is attached to the HTML document showing the menu page and distributed to the client terminal 21, and a series of processing is ended. .

The user identification information consisting of the company code, department code, and user code attached here is:
As will be described later, it is used when the client terminal 21 makes a request for browsing a predetermined HTML document thereafter. In addition,
For sending and receiving these codes, a function called "Cookie" may be used.

The "cookie" is an information transfer function of transmitting a predetermined information file from the Web server terminal to the client terminal and storing it in the client terminal, which is a function attached to a browser or the like. . In this case, each code and each encryption key are set as a set, and a plurality of sets are transferred as needed.

If the login information file is not found in step 121 (step 12)
1: NO), if the user information file is not found in step 123 (step 123: N)
O) and when the passwords do not match in step 125 (step 125: NO), it is determined that the login operation is performed by an unregistered user, and information indicating a login error is sent to the client terminal 21 as an error response. The process is returned (step 127) and the process ends.

As a result, when the user can log in normally,
On the screen of the client terminal 21, the browser 210 displays a menu page for selecting an HTML document to browse. Also, the user identification information received at the same time is stored in the client terminal 21.

Next, when the desired HTML document to be browsed is selected on the client terminal 21, the browser 210 sets the URL of the browse request HTML document to We.
b Send a request to the server terminal to make a browsing request. At this time, the user identification information previously received and stored is attached. In response to this, the Web server terminal 1
The display control processing unit 13 of No. 1 starts the display control processing as shown in FIG.

First, it is confirmed whether or not the user identification information is attached to the received browsing request (step 13).
1). Here, when the user identification information is attached (step 131: YES), the directory in the information storage unit 16 indicated by the company code, department code, and user code of the user that constitutes the user identification information is set. The user information file provided in advance corresponding to the user is opened with reference (step 132).

From the user information file,
Access level (access right) of the user who requested browsing
Is acquired, and it is determined whether the browse request document is displayable or changeable (step 133). Here, when it is determined that the HTML document can be displayed or changed (step 133: YES), the HTML document requested for browsing is read from the information storage unit 16 and distributed to the client terminal 21 (step 13).
4) Then, a series of processing is ended.

If the user's company code, department code, and user code are not attached in step 131 (step 131: NO), or if it is determined in step 133 that display is not possible (step 133: If NO, it is determined that the requested HTML document cannot be browsed, and information indicating a browsing request error is returned to the client terminal 21 as an error response (step 135), and the process ends.

Therefore, for example, when a user having a predetermined access level displays or changes the user information, that is, the user information file, the browser 210 of the client terminal 21 issues a request for browsing an HTML document showing a user list screen. Done and accordingly We
The display control processing unit 13 of the server terminal 11 performs the following determination process.

Here, each of the information files described above with reference to FIG. 5, that is, the company information file 53, the department information file 54 and the user information files 55A, 55B,
55C ... Stores information of an administrator who manages each information file of the company, department, or user.

For example, in the description example of the company information file shown in FIG. 7, in addition to the company name, various information files belonging to the company, that is, various information files stored in directories under the company directory are managed. The administrator name and the like having the access level to be described are described.
Further, as the company attribute, information indicating what kind of authority this company has is described.

In this example, a building management company or a company equivalent thereto, a Web server terminal maintenance company,
Which of the management companies of facilities A to E corresponds to is "Tru
e / False ”.

Similarly, in the description example of the department information file shown in FIG. 8, in addition to the department name, various information files belonging to the department, that is, various information files stored in directories under the department directory. A department manager name or the like having an access level for managing is described. Further, as a department attribute, information indicating what kind of authority this department has is described.

In this example, a building management company or a department equivalent thereto, a Web server terminal maintenance department,
Which of the management departments of facilities A to E corresponds to is "Tru
e / False ”.

In the description example of the user information file shown in FIG. 9, the user name and the like are described in addition to the login name and password. In addition, as the user attribute, information indicating what kind of authority this user has is described.

In this example, the access levels of the building manager, the Web server terminal maintainer, the facilities AE manager, the company manager, the department manager, and the general users AE manager are set. Or "True / F
“Alse”. Here, it can be seen that this user is the administrator of the general users A to E and has the authority to change the user information files of these users.

It is assumed that the building manager and the Web server terminal maintainer are given access levels for displaying and changing all user information registered in this system. In addition, the company administrator is given the access level to display and change all user information belonging to the company to which the company administrator belongs, and the department administrator can access the department to which the department administrator belongs. It is assumed that the access level to display and change the information of all the users who belong to the user is given.

Therefore, the HT showing the user list screen
When there is a request for browsing the ML document, the display control processing unit 13
At, the user information file of the user who made the browsing request is referred to, and it is determined what kind of access level the user has (see step 133 in FIG. 4 :).

Then, for example, when the user who has issued the browsing request has the same access level as the building administrator or the maintenance person of the Web server terminal, the display of all the user information registered in this system. And it is judged that the change is possible. As a result, as a user list screen, a menu page for selecting all user information registered in this system, for example, company A, company B,
An HTML document showing a menu page for selecting ... Is generated and returned to the browser 210 of the client terminal 21 (FIG. 4: step 134).

When the user has the same access level as the company administrator, the user list screen is a menu page for selecting only all user information belonging to the company, for example, department A of company A, An HTML document showing a menu page for selecting the department B, ... Is generated and returned. Similarly, when the user has the same access level as the department administrator, a menu page for selecting only all user information belonging to the department as a user list screen, for example, user A and user B of department A , An HTML document for selecting the user C ... Is generated and returned.

Further, as shown in FIG. 9, when there is an access level for a specific user, a menu page for selecting only the user information of these general users A to E is shown as a user list screen. HTML
The document is generated and returned. If the user does not have any access level, an HTML document indicating that the user list screen cannot be browsed is returned (FIG. 4:
Step 135).

As described above, in this embodiment, when the client terminal 21 issues a request for browsing a predetermined HTML document, the display control processing unit 13 of the Web server terminal 11 causes the user information file of the user of the client terminal 21 to be displayed. The access level is acquired from the above, and whether the requested HTML document for the user can be displayed or changed based on the access level is determined, and the requested HTML document is delivered only when the display or change is possible.

Therefore, it is possible to accurately manage whether or not each document can be viewed according to the access level of each user, without the troublesome work of the same user properly using a plurality of login names as in the conventional case. Further, according to the access level of the user, a new HTML document including only displayable or changeable contents is generated and distributed, so that the contents that cannot be displayed or changed are displayed on the screen of the client terminal 21. It is possible to avoid misunderstanding by the user that may occur when an inaccessible content, for example, an inaccessible document selection menu is displayed.

Further, since the corresponding user information file is selected based on the user identification information unique to the user, which includes the company code, department code and user code attached to the browsing request, Even in the case of WWW in which the connection is disconnected each time the client terminal 21 accesses the Web server terminal 11, it is not necessary to authenticate the user of the user for each access, and the connection process can be reduced.

Further, in accordance with the login operation from the client terminal performed prior to the document browsing request, the login authentication of the user is performed, and if the authentication is obtained, the user identification attached to the subsequent document browsing request. Since the information is transmitted, the user identification information can be managed by the Web server terminal 11, and unauthorized access can be reduced.

In the above description, when the user identification information is transmitted from the login authentication processing unit 12 to the client terminal 21, the expiration date of the user identification information may be managed. For example, when the user identification information is transmitted according to the determination that login is possible, the expiration date of the user identification information is set to be indefinite.

Then, when a logout operation is performed by the user thereafter, the login authentication processing unit 12 transmits the user identification information of which the expiration date is zero (relative time) to the client terminal 21. As a result, the user identification information held in the client terminal 21 can be valid only during the period from the login operation to the logout operation, and the system safety can be improved.

Next, referring to FIG. 10, as a second embodiment of the present invention, a processing operation in the case of monitoring and controlling various devices constituting a building facility from a client terminal will be described. FIG. 10 is a flowchart showing another example of the display control process, and particularly shows a case where an HTML document showing a device list screen is requested.

To monitor and control a predetermined device, first, from the browser 210 of the client terminal 21, in order to select a device to be monitored and controlled, an HTML document browsing request showing a device list screen is issued. In response to this, the display control processing unit 13 of the Web server terminal 11 starts the display control processing shown in FIG.

First, it is judged whether or not the user identification information of the user, that is, the company code, the department code, and the user code are attached to the received browsing request (step 151), and the user identification information is included in the browsing request. If is not attached (step 151: NO), an HTML document indicating that the device list screen cannot be browsed is returned as an error response (step 168), and the process ends.

If the user identification information is attached (step 151: YES), the user information stored based on the company code, department code and user code is the same as in FIG. 4 described above. The file (see FIG. 9) is opened (step 152). Then, based on the company code of the received user identification information, the public device information file provided corresponding to the company to which the user belongs is opened (step 153), and the user belongs based on the department code. The list information setting file provided corresponding to the department is opened (step 154).

FIG. 11 is an explanatory diagram showing another file storage state in the information storage unit, and the same parts as those described above (see FIG. 5) are designated by the same reference numerals. Here, a device information directory 61 is provided in a company-based directory, for example, a company A directory 52A, and is open to devices that users belonging to the company A can monitor and control, that is, users of the company A. A public device information file 62 indicating a device is stored.

Further, the device information directory 6 is also provided in the department unit directory, for example, the department A directory 53A.
3 is provided, and a list information setting file 64 indicating the access level to each device of each user belonging to the department A
A, 64B, ... Are stored.

FIG. 12 is an explanatory diagram showing a description example of the public device information file. Here, as the format of each column is described in the first line, in order from the first column, the management number for identifying the device, the device management point code, the device (management point) name, and the company The access level to the device of the user to which the user belongs is described. In particular, as the access level, displayable (R: Read), operable (W: Write), and not displayable (manipulating) (-) are set.

FIG. 13 is an explanatory diagram showing a description example of the list information setting file. Here, as the format of each column is described in the first line, the management number for identifying the device and the access level of the department administrator for the device are described in order from the first column.
The access level of each user (users A to E) to the device is described.

The list information setting file is provided corresponding to each page of the device list screen. For example, the list information setting file 64A has access to the device displayed on the first page of the device list screen. The level is described, and the list information setting file 64B describes the access level to the device displayed on the second page of the device list screen.

Therefore, the display control processing unit 13 opens the public device information file 62 of the company to which the user belongs and the list information setting file corresponding to the page of the device list screen requested to be browsed, for example, the list information setting file 64A. (Steps 153, 154). Then, for each device described in the list information setting file 64A, the access level in the list information setting file 64A is compared with the access level in the public device information file 62, and whichever access level is lower, It is adopted as the access level of the user to the device (steps 155 to 16).
3).

First, unprocessed information is searched from the list information setting file 64A (step 155), and if an unprocessed device is found (step 155: YES),
One piece of information on the device is read (step 156). If the information of the device is successfully read (step 157: YES), the list information setting file 64A is displayed.
The access level of the user to the device set in step 1 is stored in the variable X (step 157).

Subsequently, the access level for the device set in the public device information file 62 is stored in the variable Y (step 157), and both access levels X and Y are stored based on the logical table as shown in FIG. The lower one of the access levels is stored in the variable A (step 158). Then, the variable A is inspected (step 16
1) If the variable A is "W", the user's access level to the device is set to "operable (changeable)" (step 162), and the process returns to step 155.

If the variable A is "R", the access level of the user to the device is set to "displayable" (step 163). If the variable A is "-", the user to the device is set to "displayable". The access level is set to "display not possible (operation not possible)" (step 164), and each step 15
Return to 5. In addition, in step 157, when reading of the information of the device fails (step 157: NO),
The list information setting file 64A is set to end reading (step 165), and the process returns to step 155.

In this way, the list information setting file 6
The unprocessed information of 4A is processed in order, and step 155
If there is no unprocessed information in step (Step 1
55: NO), of the list information setting file 64A, the state of the device whose user access level is displayable or operable is acquired from the controller 30 (step 16).
6).

Then, based on the acquired status of each device, a new HTML document showing a list screen of devices that can be displayed or operated by the user is created and returned to the client terminal 21 (step 167). ), A series of processing ends. In this case, the device determined to be undisplayable is not described in the new HTML document.

Further, regarding the equipment judged to be operable,
When the device is the start / stop point or the set point in the building monitoring control system, hyperlink information for calling the operation screen (HTML document) for giving the operation instruction is described in the new HTML document. . Note that this hyperlink information is not described for devices that are determined to be displayable (operation not possible).

Therefore, when the public device information file shown in FIG. 12 and the list information setting file shown in FIG. 13 are set when the user C makes a request for browsing the device list screen, the device 1 "air conditioner" is set. Only "Device 1" can be operated and displayed with hyperlink information. FIG. 15 is a display output example of the device list screen, and the solid underline of “air conditioner 1” in the device name column indicates that hyperlink information is added. The operation screen of "1" can be called.

Further, the device 3 "air conditioner A" and the device 7
“Lighting 1” can be displayed and is displayed without hyperlink information. In this case, the broken line underlines (or no underline) of “air conditioner A” and “lighting 1” in the device name column indicate that there is no hyperlink information. The device 2 "air conditioner 2" and the device 6 "common area air conditioner" cannot be displayed and are not displayed on the device list screen.

As described above, in the present embodiment, the user's access level to each device is inspected, and for devices that can be operated (that is, changeable), a screen for changing the operation status is shown. Since the information of the HTML document, for example, the hyper ring information is added, the user can immediately call the operation screen of the operable device by operating the obtained device list screen.

The browser 2 of the client terminal 21
When the HTML document of the device operation screen for the operable device is requested from the device list screen displayed by 10, the display control processing unit 13 of the Web server terminal 11
A display control process as shown in FIG. 16 is started. FIG.
Is a flowchart showing another example of the display control process,
(A) is a general case where an operation screen of an arbitrary device is requested, and (b) is an HTML showing an operation screen of "elevator"
A case where a document is requested is shown, and is almost the same as that in FIG. 4 described above.

In FIG. 16A, first, the URL of the HTML document corresponding to the operation screen of the requested device is received as a device operation screen request, and the user identification information of the user is attached to this request. If (Step 171: YE
S), open the user information file of the user based on each code of the user identification information (step 172), and check the access right of the general users A to E (step 173).

If the access level of the user matches the access level of the general users A to E set in the device from the user attribute of the list information setting file (step 174: YES), the received U is received.
The HTML document indicated by RL, that is, the HTML document indicating the operation screen of the device is read from the information storage unit 16 and returned (step 175), and a series of processing is ended. In addition, the association between each facility and the device is set in advance.

After that, the data input from this operation screen is transferred from the browser 210 of the client terminal 21 to the W
It is transferred to the device monitoring control processing unit 15 of the eb server terminal 11, the device operation instruction is output to the controller 30,
Various devices are controlled. If the user identification information is not attached in step 171 (step 171: NO), or if the access level of the user is lower than that of the facility manager in step 174 (step 174: NO), browsing When it is determined that it is impossible, an error response is made (step 176).

Similarly, when the operation screen of "elevator" is requested as the device operation screen, as shown in FIG. 16 (b), at the step 173 of FIG. 16 (a) described above, Equipment A corresponding to elevator equipment
~ E are checked (step 193). Then, only when the access level of the user matches the access level set to the “elevator”, which is one of the managers of the facilities A to E corresponding to the “elevator” here (step 194: YES). , The elevator operation screen is returned (step 195).

The contents of the public device information file 62 and the list information setting files 64A, 64B, ... Are set by the building manager. FIG. 17 is a flowchart showing another example of the display control process, and particularly shows a case where an HTML document showing an edit screen of the public device information file 62 is requested, which is almost the same as the above-mentioned FIG.

First, when the URL of the HTML document corresponding to the edit screen of the public device information file 62 is received as the edit screen request and the user identification information of the user is attached to the request (step 181: YES). ), The user information file of the user is opened based on each code of the user identification information (step 182).

If the user's access level is the same as the building manager based on the user attributes of the user information file (step 183: YES), the HTML document indicated by the received URL, that is, the public device information file 62 is edited. The HTML document showing the screen is stored in the information storage unit 16
Is read out and returned (step 184), and a series of processing is ended.

After that, the data input from the edit screen is transferred from the browser 210 of the client terminal 21 to the W
Transferred to the data update process 14 of the eb server terminal 11, the corresponding public device information file 62 in the information storage unit 16 is updated based on the received input data. If the user identification information is not attached in step 181 (step 181: NO), or if the user's access level is lower than that of the building administrator in step 183 (step 183: NO), editing is not possible. If it is possible, give an error response (Step 1
85).

[0087]

As described above, according to the present invention, the server terminal allows the predetermined HT from any client terminal to be transmitted.
In response to the browsing request of the ML document, the login information file corresponding to the login name input from the client terminal is referred to, and the login information file in the hierarchical data file directory is associated with the client terminal user. The access level is obtained from the user information file in the specified directory, and whether the requested HTML document for the client terminal user is displayable or modifiable based on the access level is determined. Only when displayable or modifiable, the requested HTML document is requested. Is to be delivered. Then, the data file
The directory is the company to which the user belongs, the department, and the user
Hierarchical with each code set individually for each body
A hierarchical structure consisting of multiple directories registered in
However, the user information file is
Use each code corresponding to each user of the birds
User accounts registered hierarchically for each user.
Stored in the directory and the access level of the user is
It is described, the display control processing means, access level
Each code entered from the client terminal when acquiring
Get the code and each code in the data file directory
Browse the user directory based on that user
User of the user stored in the directory
Changed to get access level from information file
It is a thing. Therefore, only when the access level of the user information file of the user is displayable or changeable with respect to the requested HTML document, the requested HTML document is delivered, and the same user uses different login names as in the past. Whether or not each document can be viewed can be accurately managed according to the access level of each user without performing a troublesome work.

[Brief description of drawings]

FIG. 1 is a block diagram showing an information browsing system according to an embodiment of the present invention.

FIG. 2 is a sequence diagram showing a document browsing processing procedure.

FIG. 3 is a flowchart showing an operation of a login authentication processing section.

FIG. 4 is a flowchart showing an operation of a display control processing unit.

FIG. 5 is an explanatory diagram showing a file storage state in an information storage unit.

FIG. 6 is an explanatory diagram showing a description example of a login information file.

FIG. 7 is an explanatory diagram showing a description example of a company information file.

FIG. 8 is an explanatory diagram showing a description example of a department information file.

FIG. 9 is an explanatory diagram showing a description example of a user information file.

FIG. 10 is a flowchart showing another operation example of the display control processing unit.

FIG. 11 is an explanatory diagram showing another file storage status in the information storage unit.

FIG. 12 is an explanatory diagram showing a description example of a public device information file.

FIG. 13 is an explanatory diagram showing a description example of a list information setting file.

FIG. 14 is an explanatory diagram showing a logical table for calculating an access level.

FIG. 15 is a display output example of a device list screen.

FIG. 16 is a flowchart showing another operation example of the display control processing unit.

FIG. 17 is a flowchart illustrating another operation example of the display control processing unit.

FIG. 18 is an explanatory diagram showing a general information browsing system.

[Explanation of symbols]

10 ... LAN line, 11 ... Web server terminal, 12 ...
Login authentication processing unit, 13 ... Display control processing unit, 14 ... Data update processing unit, 15 ... Device monitoring control processing unit, 16 ... Information storage unit, 21-28 ... Client terminal, 210 ... Browser, 53 ... Company information file, 54 ... Department information file, 55A, 55B, 55C ... User information file, 58A, 58B ... Login information file, 62 ... Public device information file, 64A, 64B ... List information setting file.

Front page continuation (51) Int.Cl. ⁷ Identification symbol FI G06F 15/00 330 G06F 15/00 330D (72) Inventor Hideo Nakagawa 1-34 Roppongi, Minato-ku, Tokyo NTT Corporation In Facilities (72) Inventor Kazuo Oshima 1-34 Roppongi, Minato-ku, Tokyo NTT Utility Co., Ltd. (56) Reference Japanese Patent Laid-Open No. 64-51527 (JP, A) Kaihei 11-161602 (JP, A) JP 9-288609 (JP, A) JP 9-69112 (JP, A) JP 8-339352 (JP, A) JP 8-320846 ( JP, A) JP 8-6839 (JP, A) JP 2-128248 (JP, A) JP 2-69853 (JP, A) Takafumi Shimizu, Masahiro Kurata, Kunihiro Saito, Special Feature Nikkei Byte WWW Declaration of Entry, Nikkei Byte July 1996, Nikkei BP, Japan, June 22, 1996, No. 153, pp. 178-207 Kenichi Matsuki, Intranet made with Notes, Nikkei Open System, Nikkei BP, Japan, July 15, 1997, No. 52, pp. 292-297 (58) Fields surveyed (Int.Cl. ⁷ , DB name) G06F 17/30 G06F 12/00 G06F 15/00

Claims (3)

(57) [Claims] 1. An information browsing system comprising a server terminal for delivering various HTML documents via a communication line such as a LAN line and a telephone line, and a client terminal for browsing various information distributed via the communication line, The server terminal refers to a login information file corresponding to a login name input from the client terminal in response to a browsing request for a predetermined HTML document from any client terminal,
The access level is acquired from the user information file in the directory associated with the client terminal user in the login information file in the data file directory having the hierarchical structure, and the request HTML to the client terminal user is based on the access level.
To determine the display whether or not and whether to change the document, a display control processing means for delivering the requested HTML document only when the display Yes or be changed, the data file directory, meeting the user belongs
It was set individually for each company, department and user
Multiple directories registered hierarchically using each code
The user information file is a data file directory.
Of the directories, each of the above-mentioned corresponding to each user
Users registered hierarchically for each user using the code
Stored in the user directory and accessed by the user
The level is described, and the display control processing means acquires the access level.
When the code is input from the client terminal,
Get the code in the data file directory
Refer to the user directory based on each code, and
For the user stored in the user directory
An information browsing system characterized by acquiring an access level from a user information file . 2. Various HTML documents for LAN lines and telephone calls
Communication with server terminals that deliver via communication lines such as
A client who browses various types of information distributed via the network.
In the information browsing system consisting of a client terminal , the server terminal, in response to a login request from any client terminal,
Corresponds to the login name entered from the client terminal
Make a hierarchical structure by referring to the login information file
The login information file in the data file directory
File associated with the client terminal user
From the user information file in the directory
Obtain a unique password for the client terminal user,
Based on the password, the client terminal user
The login authentication method for user authentication and the class after the authentication is confirmed by this login authentication method.
In response to the HTML document browsing request from the client terminal,
Obtain the access level from the user information file,
The client terminal user based on the access level
It is determined whether the requested HTML document can be displayed and changed.
HTML document required only if it is refused and can be displayed or changed
And a display control processing means to deliver, the data file directory, meeting the user belongs
It was set individually for each company, department and user
Multiple directories registered hierarchically using each code
The login information file has a hierarchical structure consisting of
Each code is described, and the user information file is the data file
Of the directories, each of the above-mentioned corresponding to each user
Users registered hierarchically for each user using the code
Stored in the user directory and accessed by the user
The level is described, and the login authentication means acquires the password.
When referring to the login information file,
Acquire each of the corresponding codes and enter the data file
User directory corresponding to each code above in the directory
Browse to the directory
From the stored user information file of the user
The password is acquired, and the display control processing means acquires the access level.
When the code is input from the client terminal,
Get the code in the data file directory
Refer to the user directory based on each code, and
Of the user stored in the user directory
An information browsing system characterized by acquiring an access level from a user information file . 3. The information browsing system according to claim 2.
The login authentication means responds to the success of the user authentication.
Then, each code is transmitted to the client terminal, and the client terminal responds to the user authentication success.
Received each code from the server terminal
Browsing and operation of requesting browsing by the client terminal user
Depending on the
To the bar terminal, and the display control processing means sends the message from the client terminal.
Based on each code attached to the browsing request,
Select a user directory, and in that user directory
An information browsing system characterized by referring to user information files stored in .