JP3696804B2 - Service providing method, service providing system, processing center apparatus, and program - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a service providing method, a service providing system, a processing center apparatus, and a program for providing a service to a terminal device via a network.
[0002]
[Prior art]
In recent years, mobile communication services for accessing a site using a mobile communication terminal device equipped with a web (Web) browser, searching for information, and obtaining information have become widespread.
[0003]
[Problems to be solved by the invention]
However, in the conventional mobile communication service, it is difficult for the individual mobile communication terminal device to be specified, and it may be illegally accessed by a third party other than a regular registered user. There was a problem that it was difficult to manage. Further, the conventional mobile communication service has a problem that it takes time to manage the session. In particular, unlike normal HTML (Hyper Text Markup Language), when a cookie cannot be used, the service provider takes much time to manage the session. Further, in the conventional mobile communication service, data such as contents provided to the terminal device is converted on the service provider side into data in a language format that can be recognized by the terminal device. There was a problem that it took.
[0004]
As described above, in the conventional mobile communication service, it is necessary to perform security management, session management, and data conversion processing on the service provider side. Note that at least a part of the problems as described above may occur in communication services other than the mobile communication service.
SUMMARY An advantage of some aspects of the invention is that it provides a service providing method, a service providing system, a processing center apparatus, and a program that can reduce the burden on a service provider.
[0005]
[Means for Solving the Problems]
The present invention provides a service providing method in which a processing center device (4) mediates between a terminal device (1) receiving service provision via a network (2) and a service provider device (3-1 to 3-3). Because The processing center device is When there is an access from the terminal device that wishes to provide a service, authentication of the access source terminal device The line A unique authentication procedure for each access, for identifying an access destination corresponding to the service selected by the access source terminal device after the authentication is completed URL Is transmitted from the processing center apparatus to the access source terminal apparatus, and the service provider apparatus that provides the selected service is accessed, and the service provider apparatus corresponds to the selected service. A session management procedure for transmitting a processing request to be performed, and data returned from the service provider device as a result of the processing request in a display format suitable for the terminal device of the access source and recognizable by the terminal device A data conversion procedure for converting the data into language format and transmitting the converted data from the processing center device to the access source terminal device via the network is executed.
In the configuration example of the service providing method of the present invention, the authentication procedure is performed by a user of the terminal device. Using a user ID set for each and each service provider device, and a one-time password, This is a procedure for authenticating the terminal device.
[0006]
The service providing system according to the present invention includes a terminal device (1) that receives a service provision via a network (2), and service provider devices (3-1 to 3-3) that provide a service to the terminal device. ) And a processing center device (4) provided between the network and the service provider device, and the processing center device is accessed from the terminal device that wishes to provide a service. Authentication means (42) for authenticating the terminal device of the access source, and for each access for identifying an access destination corresponding to the service selected by the terminal device of the access source after completion of the authentication Specific URL Is transmitted to the access source terminal device, the service provider device that provides the selected service is accessed, and a processing request corresponding to the selected service is transmitted to the service provider device. A session management means (431) for performing the processing, and the data returned from the service provider device as a result of the processing request in a display format suitable for the terminal device of the access source and a language format that can be recognized by the terminal device And data conversion means (432) for transmitting the converted data to the access source terminal device via the network.
In the configuration example of the service providing system according to the present invention, the authentication unit is a user of the terminal device. Using a user ID set for each and each service provider device, and a one-time password, The terminal device is authenticated.
[0007]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing a configuration of a service providing system according to an embodiment of the present invention. The service providing system according to the present embodiment includes a terminal device 1 such as a mobile phone equipped with a web browser, a mobile communication network 2, and a service provider device 3 (3-1) that provides services to the terminal device 1. 3-3) and a processing center device 4 provided between the mobile communication network 2 and the service provider device 3.
[0008]
The mobile communication network 2 and the processing center apparatus 4 are connected by a dedicated line 5, and the service provider apparatus 3 and the processing center apparatus 4 are connected by a communication line 6 such as a dedicated line or a frame relay. ing. Each of the service provider apparatuses 3-1 to 3-3 manages a firewall / router (hereinafter abbreviated as FW / RT) 31 that connects a server 32 and a mail server 34, which will be described later, and the communication line 6, and a database. There is a server 32, a database 33 (33-1 to 33-4) such as an inventory management / ordering system, work management system, electronic approval system or groupware, and a mail server 34 for sending and receiving e-mails. are doing.
[0009]
The server 32 has database access means 321 that accesses the database 33 corresponding to the processing request from the processing center apparatus 4 and returns processing result data to the processing center apparatus 4.
[0010]
When there is an access from a firewall (hereinafter abbreviated as FW) 41 for connecting a web (Web) server, which will be described later, to the dedicated line 5, and a terminal device 1 that wishes to provide a service, the processing center device 4 An authentication server 42 that authenticates the terminal device and a processing request corresponding to the service selected by the terminal device 1 are transmitted to the service provider device 3, and processing result data from the service provider device 3 is transmitted to the terminal device 1. A web server 43 for transmitting to the network, a router (hereinafter abbreviated as RT) 44 for connecting the web server 43 and the communication line 6, and a database 45 for storing user information of the terminal device 1 in advance. Yes.
[0011]
The web server 43 issues a unique URL for each access to identify the access destination corresponding to the service selected by the terminal device at the access source 1 and transmits it to the terminal device 1 at the access source to transmit the selected URL. Session management means 431 for accessing the service provider device 3 that provides the service and transmitting a processing request corresponding to the selected service to the service provider device 3, and the service provider device as a result of the processing request 3 is converted into data in a display format suitable for the terminal device 1 of the access source and in a language format that can be recognized by the terminal device 1, and the converted data is converted to the terminal device 1 of the access source. And a data conversion means 432 for transmitting the data.
[0012]
Hereinafter, the service providing system of the present embodiment will be described with reference to FIG. First, the user of the terminal device 1 performs operations such as inputting a known URL (Uniform Resource Locators) corresponding to a desired service to the terminal device 1. The terminal device 1 accesses the device (processing center device 4) having this URL through the mobile communication network 2 (step 101 in FIG. 2). The URL input by the user is set in advance for each user and for each service provider device 3-1 to 3-3. Hereinafter, the URL input by the user is referred to as a first URL.
[0013]
When the authentication server 42 of the processing center apparatus 4 is accessed using the first URL corresponding to any of the service provider apparatuses 3-1 to 3-3, a user identifier (hereinafter referred to as a user) is given to the user. The web page file that prompts the user to input the ID is transmitted to the access source terminal device 1 via the FW 41, the dedicated line 5, and the mobile communication network 2. In this way, the Web page of the processing center device 4 is displayed on the screen of the terminal device 1.
[0014]
While viewing the displayed web page, the user operates the terminal device 1 and inputs a known user ID corresponding to a desired service. The input user ID is sent from the terminal device 1 to the processing center device 4 through the mobile communication network 2. The user ID is set in advance for each user and for each of the service provider devices 3-1 to 3-3. Therefore, when the same user receives service provision from each of the service provider devices 3-1 to 3-3, a user ID is set for each of the service provider devices 3-1 to 3-3.
[0015]
User information is registered in the database 45 in advance for each of the service provider devices 3-1 to 3-3. The user information includes, for example, the telephone number of the terminal device 1, the above-described user ID, the location information of a random password described later, the mail account and password of the mail server 34, and the like. The user of the terminal device 1 registers his / her user information in the processing center device 4 (database 45) in advance for the service provider devices 3-1 to 3-3 who desire service provision.
[0016]
The authentication server 42 identifies the corresponding service provider device 3 based on the first URL sent from the terminal device 1 that is the access source, and stores a list of user information corresponding to the identified service provider device 3 in the database 45. The user ID corresponding to the telephone number of the terminal device 1 is obtained from the retrieved list. Then, the authentication server 42 performs user authentication by collating the user ID acquired from the database 45 with the user ID sent from the terminal device 1. Thus, authentication using the user ID is performed (step 102).
[0017]
If the result of authentication using the user ID is OK, the authentication server 42 performs authentication by issuing a one-time password to the terminal device 1 (step 103). The one-time password is issued for each service provider (company) and for each service provider device 3-1 to 3-3.
[0018]
The procedure for issuing a one-time password will be described below. First, at the time of initial registration when the user information is registered in the database 45 from the terminal device 1, the authentication server 42 is an electronic device that notifies the access source terminal device 1 of the initial one-time password information registration URL via the web server 43. send an email.
[0019]
The user of the terminal device 1 sees a web page as shown in FIG. 3 sent from the authentication server 42 via the web server 43 at the initial one-time password information registration URL, and has a random password of 4 vertical x 12 horizontal passwords. For example, four are selected from the above, and the selected passwords are input in the place where “password” is displayed in FIG. As shown in FIG. 4A, coordinates of (A, 1) to (D, 12) are assigned to each random password of 4 vertical × 12 horizontal.
[0020]
When the user of the terminal device 1 wants to register the position of coordinates (A, 3), (B, 7), (C, 4), (D, 9), for example, the random password arranged at each of these coordinate positions That is, “6”, “3”, “4”, “1” are input. Next, a second random password as shown in FIG. 4B is sent from the authentication server 42. The user of the terminal device 1 looks at the arrangement of the random password in FIG. The entered random password, that is, “3”, “2”, “0”, “2” is input. The authentication server 42 determines the position (A, 3), (B, 7), (C, 4), (D, 9) of the random password selected by the user by two inputs, and the determined position Information is registered in the database 45 as the user information.
[0021]
Finally, the authentication server 42 sends an e-mail for notifying the first URL that is different for each user of the access source terminal device 1 and each of the access destination service provider devices 3-1 to 3-3 to the web server 43. Is transmitted to the terminal device 1 that is the access source. This completes the initial registration.
[0022]
Next, after the user who wishes to provide the service accesses the processing center apparatus 4 using the first URL as described above (step 101), in step 103, the web page similar to FIG. Is sent to the terminal device 1 of the access source. At this time, the arrangement of 4 × 12 random passwords is different from the initial registration. The user of the terminal device 1 inputs a random password at the same position as when the position information was registered at the time of initial registration at a place where “password” is displayed in FIG.
[0023]
Here, for example, it is assumed that 4 × 12 random passwords as shown in FIG. 5 are displayed. In this case, the user of the terminal device 1 can use the random password arranged at the coordinates (A, 3), (B, 7), (C, 4), (D, 9) registered at the time of initial registration, that is, “4”. ”,“ 8 ”,“ 3 ”,“ 0 ”are sequentially input. The authentication server 42 collates the position of the password input by the user with the position registered at the time of initial registration, and if it is the same position, determines that it is the user himself / herself. As described above, authentication using a one-time password is performed (step 103).
[0024]
Next, when the result of the authentication using the one-time password is OK, the session management unit 431 of the web server 43 sets the file of the menu screen corresponding to the specified service provider device 3 as the FW 41, the dedicated line 5 and the It transmits to the terminal device 1 via the mobile communication network 2. As a result, a list of service menus is displayed on the screen of the terminal device 1. The user operates the terminal device 1 to select a desired service from the displayed list (step 104).
[0025]
After the user selects the service, the session management unit 431 generates a second URL unique to the current access for identifying the access destination corresponding to the selected service, and the generated second URL is stored in the database. The second URL is transmitted to the terminal device 1 via the FW 41, the dedicated line 5 and the mobile communication network 2 (step 105). In this way, the second URL is issued to the terminal device 1, and the terminal device 1 uses this second URL in the subsequent communication processing in the current access.
[0026]
After issuing the second URL, the session management unit 431 accesses the server 32 of the specified service provider device 3 or the mail server 34 of the provider device 3. If the selected service is related to the database 33 such as data search, acquisition, and deletion, the access destination is the server 32. If the selected service is confirmation of the number of received mails or browsing of received mails, the access destination is the mail server 34. Become. As described above, a communication session via the processing center device 4 is set between the terminal device 1 and the service provider device 3 (step 106).
[0027]
When accessing the mail server 34, the session management unit 431 searches the database 45 for a list of user information corresponding to the specified service provider device 3, and sets the telephone number of the terminal device 1 from the searched list. The corresponding mail account and password are acquired, and the mail server 34 is accessed using the mail account and password.
[0028]
Next, the session management unit 431 sends a processing request corresponding to the service selected by the terminal device 1 to the RT 44 in a format conforming to the protocol of the access destination server 32 or mail server 34 (step 107). The server 32 or the mail server 34 that has received the processing request via the communication line 6 and the FW / RT 31 executes processing according to the request, and returns processing result data to the processing center device 4 (step 108).
[0029]
For example, if the processing request requests data retrieval or acquisition, the database access unit 321 of the server 32 accesses the database corresponding to the processing request among the databases 33-1 to 33-4, and processes the request. The search result data and the data acquired in accordance with the processing request are returned to the processing center apparatus 4. If the processing request is a request for received mail or the number of received data, the mail server 34 returns the electronic mail addressed to the user corresponding to the mail account and the number of cases to the processing center apparatus 4.
[0030]
When the data conversion means 432 of the web server 43 receives data from the service provider device 3 via the communication line 6 and the RT 44, the data is converted into a screen size and display format suitable for the terminal device 1 that is the access source, and The terminal device 1 is converted into data in a language format (for example, compact HTML) that can be recognized by the terminal device 1 (step 109), and the converted data is accessed via the FW 41, the dedicated line 5 and the mobile communication network 2 (Step 110). In this way, data acquired using a desired service is displayed on the screen of the terminal device 1.
[0031]
6 and 7 are diagrams illustrating an example of information stored in the databases 33-1 to 33-4 of the service provider device 3. FIG. 6 and 7 show examples of the internal approval system. The internal approval system includes the name of the drafter, the name of the circulator, the name of the final decision, the contact information, the settlement amount, the contract period, the desired delivery date, the measure, the gist, Information such as purpose and summary is input. 6 and 7 are tables on the same database, but here, they are divided into two.
[0032]
8 to 11 are examples of screens displayed in the databases 33-1 to 33-4 of the service provider device 3. FIG. FIG. 8 shows a screen in which a certain approver searches for the number of approved cases in the in-house approval system described with reference to FIGS. When a desired settlement is selected on this search number screen, the settlement / reports of FIGS. 9 to 11 are displayed. When the approver approves the settlement, the approver selects a button “Approve” at the bottom of FIGS. 9 to 11.
[0033]
12 to 20 are examples of screens displayed on the terminal device 1 when the same access as that in FIGS. 8 to 11 is performed from the terminal device 1. FIG. 12 shows a screen in which a certain approver searches for the number of decisions related to himself / herself, as in FIG. The database access means 321 of the server 32 accesses the database 33 and returns the data of the search result according to the processing request (search for the number of payments) to the processing center device 4. In order to display the search number screen as shown in FIG. 12, a template as shown in FIG. 21 is prepared in advance, and the data conversion means 432 of the web server 43 receives the data received from the service provider device 3 as shown in FIG. After being applied to such a template, it is transmitted to the access source terminal device 1.
[0034]
When the desired settlement is selected on the search number screen of FIG. 12, the database access means 321 of the server 32 displays the display item data of the template received from the processing center device 4 (for example, “drafter” in FIG. 21 or FIG. 22). The database 33 is accessed using the “authorization subject name”, “settlement amount”, etc.) as search keys, and the retrieved / acquired data is returned to the processing center apparatus 4 in accordance with the processing request (acquisition / report data acquisition). For the settlement / reports of FIGS. 13 to 20, templates as shown in FIG. 22 are prepared in advance, and the data conversion means 432 of the web server 43 converts the data received from the service provider device 3 as shown in FIG. Is applied to the corresponding display location of the template and transmitted to the terminal device 1 of the access source. As a result, the settlement / reports shown in FIGS. 13 to 20 are displayed. By scrolling the screen, it is possible to go back and forth between FIGS. The approver selects the button “Approve” at the bottom of FIG. 20 when approving the settlement, selects the button “Return” when sending it back, and selects the button “Reject” when rejecting it. To do.
[0035]
In the present embodiment, a mobile communication terminal device such as a mobile phone has been described as an example of the terminal device 1. However, the present invention is not limited to this, and communication means with the processing center device 4 is provided. Others such as a computer may be used. Therefore, the network connecting the terminal device 1 and the processing center device 4 is not limited to the mobile communication network 2. The service described in the present embodiment is an example of a service that can be provided by the present invention, and needless to say, the service is not limited to this. Further, the authentication using the one-time password is not limited to the method exemplified in the present embodiment, and another one-time password may be used.
[0036]
Further, the authentication server 42, the web server 43, and the database 45 of the processing center apparatus 4 according to the present embodiment can be realized on a computer. The computer may have a known configuration including a CPU, ROM, RAM, a display device, a keyboard, or a circuit for interfacing with an external storage device. The CPU executes processing according to a program stored in the ROM or RAM or a command input from the keyboard. Further, the CPU can write data to the external storage device and read data from the external storage device.
[0037]
A program for realizing the service providing method of the present embodiment is provided in a state of being recorded on a recording medium such as a flexible disk, a CD-ROM, or a memory card. When this recording medium is inserted into an external storage device, a program recorded on the medium is read and transferred to a computer. Then, the CPU writes the read program into the RAM or the like. In this way, the computer executes processing as described above.
[0038]
【The invention's effect】
According to the present invention, the authentication procedure, the session management procedure, and the data conversion procedure are executed by the processing center device, whereby security management is realized by specifying the user by the authentication procedure, and communication is performed for each access by the session management procedure. Session management can be realized by managing the session, and data conversion processing can be realized by the data conversion procedure, eliminating the need for the service provider to spend cost and effort on security management, session management, and data conversion processing. The burden on the service provider can be reduced.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a service providing system according to an embodiment of the present invention.
FIG. 2 is a flowchart showing the operation of the service providing system in the embodiment of the present invention.
FIG. 3 is a diagram showing a one-time password registration screen at the time of initial registration displayed on the terminal device according to the embodiment of the present invention.
FIG. 4 is a diagram showing a one-time password issued at the time of initial registration and the coordinates of the one-time password.
FIG. 5 is a diagram showing a one-time password issued at the time of service provision and the coordinates of the one-time password.
FIG. 6 is a diagram showing an example of information stored in a database of a service provider device in the embodiment of the present invention.
FIG. 7 is a diagram showing an example of information stored in a database of a service provider device in the embodiment of the present invention.
FIG. 8 is a diagram showing an example of a screen displayed in the database of the service provider device in the embodiment of the present invention.
FIG. 9 is a diagram showing an example of a screen displayed in the database of the service provider device in the embodiment of the present invention.
FIG. 10 is a diagram showing an example of a screen displayed in the database of the service provider device in the embodiment of the present invention.
FIG. 11 is a diagram showing an example of a screen displayed in the database of the service provider device in the embodiment of the present invention.
FIG. 12 is a diagram showing an example of a screen displayed on the terminal device in the embodiment of the present invention.
FIG. 13 is a diagram showing an example of a screen displayed on the terminal device in the embodiment of the present invention.
FIG. 14 is a diagram showing an example of a screen displayed on the terminal device in the embodiment of the present invention.
FIG. 15 is a diagram showing an example of a screen displayed on the terminal device in the embodiment of the present invention.
FIG. 16 is a diagram showing an example of a screen displayed on the terminal device in the embodiment of the present invention.
FIG. 17 is a diagram showing an example of a screen displayed on the terminal device in the embodiment of the present invention.
FIG. 18 is a diagram showing an example of a screen displayed on the terminal device in the embodiment of the present invention.
FIG. 19 is a diagram showing an example of a screen displayed on the terminal device in the embodiment of the present invention.
FIG. 20 is a diagram showing an example of a screen displayed on the terminal device in the embodiment of the present invention.
FIG. 21 is a diagram showing a template for a search number screen in the embodiment of the present invention.
FIG. 22 is a diagram showing a settlement / report template in the embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Terminal device, 2 ... Mobile communication network, 3 ... Service provider apparatus, 4 ... Processing center apparatus, 5 ... Dedicated line, 6 ... Communication line, 31 ... Firewall router, 32 ... Server, 33 ... Database, 34 DESCRIPTION OF SYMBOLS ... Mail server, 41 ... Firewall, 42 ... Authentication server, 43 ... Web server, 44 ... Router, 45 ... Database, 321 ... Database access means, 431 ... Session management means, 432 ... Data conversion means.

Claims (8)

A service providing method for mediating between a terminal device receiving service provision via a network and a service provider device by a processing center device,
The processing center device is
When there access from the terminal device desired to service delivery, the authentication procedure intends line authentication of the access source terminal device,
After the authentication is completed, a unique URL is issued for each access for identifying an access destination corresponding to the service selected by the access source terminal device, and the access source terminal device is issued from the processing center device. Session management procedure for transmitting to the service provider device that provides the selected service and transmitting a processing request corresponding to the selected service to the service provider device;
The data returned from the service provider device as a result of the processing request is converted into data in a display format suitable for the terminal device that is the access source and in a language format that can be recognized by the terminal device. And a data conversion procedure for transmitting the data from the processing center device to the access source terminal device via the network. The service providing method according to claim 1,
The authentication procedure is a procedure for authenticating the terminal device using a user ID set for each user of the terminal device and for each service provider device, and a one-time password. Method. A terminal device that receives service provision via a network;
A service provider device that provides services to the terminal device;
A processing center device provided between the network and the service provider device;
The processing center device
When there is an access from the terminal device that wishes to provide a service, authentication means for authenticating the terminal device of the access source,
After the authentication is completed, a unique URL is issued for each access to identify an access destination corresponding to the service selected by the access source terminal device, and is transmitted to the access source terminal device. Session management means for accessing a service provider device that provides a selected service and transmitting a processing request corresponding to the selected service to the service provider device;
The data returned from the service provider device as a result of the processing request is converted into data in a display format suitable for the terminal device that is the access source and in a language format that can be recognized by the terminal device. And a data conversion means for transmitting the data to the access source terminal device via the network. The service providing system according to claim 3,
The service providing system, wherein the authentication means authenticates the terminal device using a user ID set for each user of the terminal device and for each service provider device, and a one-time password . A processing center device that mediates between a terminal device receiving service provision via a network and a service provider device,
When there is an access from the terminal device that wishes to provide a service, authentication means for authenticating the terminal device of the access source,
After the authentication is completed, a unique URL is issued for each access to identify an access destination corresponding to the service selected by the access source terminal device, and is transmitted to the access source terminal device. Session management means for accessing a service provider device that provides a selected service and transmitting a processing request corresponding to the selected service to the service provider device;
The data returned from the service provider device as a result of the processing request is converted into data in a display format suitable for the terminal device that is the access source and in a language format that can be recognized by the terminal device. And a data conversion means for transmitting the data to the access source terminal device via the network. The processing center apparatus according to claim 5, wherein
The processing center device , wherein the authentication means authenticates the terminal device using a user ID set for each user of the terminal device and for each service provider device, and a one-time password . A service providing program for causing a computer to execute a mediation process between a terminal device and a service provider device receiving service provision via a network,
An authentication procedure for authenticating the terminal device of the access source when there is an access from the terminal device that desires to provide a service;
After the authentication is completed, a unique URL is issued for each access to identify an access destination corresponding to the service selected by the access source terminal device, and is transmitted to the access source terminal device. A session management procedure for accessing a service provider device that provides a selected service and transmitting a processing request corresponding to the selected service to the service provider device;
The data returned from the service provider device as a result of the processing request is converted into data in a display format suitable for the terminal device that is the access source and in a language format that can be recognized by the terminal device. A service providing program for causing a computer to execute a data conversion procedure for transmitting the data of the data to the access source terminal device via the network. The service providing program according to claim 7,
The authentication procedure is a procedure for authenticating the terminal device using a user ID set for each user of the terminal device and for each service provider device, and a one-time password. program.

Images