JP4140121B2 - Service list display device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a service list display device for displaying a list of various service entities such as document information and application services to a user.
[0002]
[Background]
In recent years, information processing systems have been constructed in offices using the basic technology of the Internet. Under such a so-called intranet environment, it has become possible to easily share information and services among users by using an HTML (Hypertext Markup Lang Edge) web server and a browser (client). Yes. Furthermore, the scope of information and service provision may be extended to cooperative companies and customers without stopping within the office or organization, and information and services may be provided in a so-called extranet environment.
[0003]
When providing information in such an intranet environment or extranet environment, it is necessary to change the quality of information provision according to the authority of the user. For example, for confidential information, it is necessary for external users to be inaccessible, or for internal users to be provided only within a limited range. In addition, it is necessary to change the service fee or impose usage restrictions according to the user.
[0004]
By the way, when there are a plurality of services of the same type such as information provision, it is preferable to provide the same types of services to the user collectively. For example, if a list of services is displayed to the user so that the user can select a desired service, the user can easily enjoy the desired service.
[0005]
However, since the types of information and services that can be used vary depending on attributes such as user authority, use of a uniform list presents confusion. For example, when a service that cannot be used by the user is displayed, the user accesses the service without knowing that and wastes time. Further, when the confidential information providing service is uniformly displayed in the list, even a user who cannot access the confidential information can know the existence of the confidential information itself. Thus, indiscriminately disclosing the existence of confidential information is problematic in terms of security.
[0006]
[Problems to be solved by the invention]
The present invention has been made in view of the above circumstances. Many users can enter a desired service and information by accessing a single list, and the user is confused and has security. An object of the present invention is to provide a service list display device with less problems.
[0007]
[Means for Solving the Problems]
According to this invention, in order to achieve the above-mentioned object, the user attribute storage means for storing the user attribute in the service list display device, and when the user requests display of the service list, the attribute of the user is set. Display means for reading out from the user attribute storage means and displaying a service list in a display mode according to the read user attributes is provided.
[0008]
Here, the service includes an application service, a document, an object, a page, and the like.
[0009]
In this configuration, the display of the list can be changed according to the user's authority and other attributes, so the presence of confidential information can be hidden, services that cannot be used originally are not displayed, or individual operations can be performed. Or prompt.
[0010]
Specifically, the display means does not display an entry of a predetermined service according to the user attribute. The display means changes a description of a predetermined service according to the user attribute.
[0011]
When the display means displays the service list based on hypertext document information, the predetermined link information included in the document information may be changed according to the user attribute. . The predetermined link information included in the document information may be deleted according to the user attribute.
[0012]
According to the present invention, in order to achieve the above object, a service providing apparatus in which a hypertext document in a service list and a plurality of services are distributed and a service entry in the service list and the service are linked. In addition, user attribute management means for managing user attributes, browser means for displaying a service list, and when the user requests display of the service list, the user attributes stored in the user attribute management means are Based on this, there is provided means for assembling hypertext describing the service list, and the service list is displayed on the browser means in a manner corresponding to the attribute of the user.
[0013]
Even in this configuration, the display of the list can be changed according to the user's authority and other attributes, so the presence of confidential information can be hidden, services that cannot be used originally are not displayed, or individual operations can be performed. Or prompt.
[0014]
Further, according to the present invention, in order to achieve the above-mentioned object, the user attribute storage means for storing the user attribute in the entry list device, and when the user requests display of the entry list, the attribute of the user is set. Display means is provided for reading from the user attribute storage means and displaying the entry list in a display mode corresponding to the read user attributes.
[0015]
The display of the list can be changed according to the user's authority and other attributes, so that the presence of confidential information is hidden, entries that are not originally available are not displayed, or operations are individually prompted. be able to.
[0016]
The entries include document information entries and application service entries.
[0017]
BEST MODE FOR CARRYING OUT THE INVENTION
Examples of the present invention will be described below.
[0018]
FIG. 1 shows an embodiment of the present invention as a whole. In FIG. 1, the service list display system of the embodiment comprises a web browser 10, a web server 11, a CGI program unit 12, a database 13, and the like. The CGI (Common Gateway Interface) program unit 12 also constitutes a display control unit 14. The web browser 10 is installed on a client (not shown) used by the user. The web browser 10 (client), the web server 11, the CGI unit 12 (CGI server, etc.), and the database 13 are connected to a network such as a LAN. The web browser 10 sends a request to the web server 11 using the HTTP protocol, and obtains a response, for example, a predetermined HTML document (web page) from the web server 11. The CGI unit 12 executes predetermined processing based on the designation and arguments of the program sent from the web browser 10 to the web server 11, and sends a web page reflecting the processing result to the web browser 10. The CGI unit 12 may be held by the web server 11 in addition to being realized as a CGI server.
[0019]
The display control unit 14 configured by the CGI unit 12 configures a web page that performs a desired display by executing the procedure illustrated in FIG. 2, and presents a desired display to the user via the web browser 10. The database 13 manages information related to applications and services displayed by the service list display system (hereinafter also referred to as application information), user information, and approval information. User information is a record having a user ID, a user level, and the like as attributes (see FIG. 3). The user level of the user information is associated with the security level (see FIG. 4). As for the security level, whether or not a predetermined application procedure is necessary is defined in advance (see FIG. 6). The application information is a record having an application ID (hereinafter also referred to as application ID), a security level, an application name (hereinafter also referred to as application name), a link destination, and the like as attributes (FIG. 5). The approval information associates the application ID with the user ID (see FIG. 7).
[0020]
The display control unit 14 assembles a web page while referring to application information, user information, approval information, and the like in the database 13.
[0021]
FIG. 2 illustrates the operation of the display control unit 14. The operation of the display control unit 14 is as follows.
[0022]
[Step S50]: The user designates the address of the service list in the browser 10 to start the service list display, and starts the operation of the display control unit 14 in the web page assembly CGI.
[Step S51]: The user level of the accessing user is acquired with reference to the database 13 (see FIG. 3).
[Step S52]: A security level that can be disclosed at the user level is acquired with reference to the database 13 (see FIG. 4).
[Step S53]: App information of a corresponding security level is acquired with reference to a database (see FIG. 5) and stored in a predetermined buffer (not shown).
[Step S54]: Information indicating whether an application is required for each corresponding security level is acquired with reference to the database (see FIG. 6).
[Step S55]: Application information is extracted from the above-mentioned buffer for each application and service.
[Step S56]: The following processing is repeatedly executed for the application information in the buffer. That is, when application information remains, the process proceeds to step S57. When all the application information is extracted, the process proceeds to step S62 and the process is terminated.
[Step S57]: It is determined whether an application / service security level requires application. If the security level does not require application, the process proceeds to step S61. If the security level requires an application, the process proceeds to step S55.
[Step S58]: The disclosure approval information for the user's application service is acquired with reference to the database.
[Step S59]: It is determined whether approval has already been made based on the disclosure approval information. If the approval has been made, the process proceeds to step S61, and if the approval has not been made, the process proceeds to step S60.
[Step S60]: A web page is described so that there is no link to the application service and a link to the application form is formed instead. In addition, in response to the link to the application form, a text “application is required” is added (see FIG. 8).
[Step S61]: A display page having a link to the application service is set.
[Step S62]: Steps 57 to 61 are repeated for the application services that can be disclosed to the user, a list display page is assembled, and the processing of the display control unit 14 is terminated.
[0023]
FIG. 8 and FIG. 9 show display examples of list display for users at different user levels. In the case of the user 01 in FIG. 8, the application services that can be disclosed are Apl-001, Apl-002, Apl-003, and Apl. -004 (actually a descriptive app name understandable by the user) is displayed, Apl-001, Apl-003 and Apl-004 are linked (underline indicates that there is an anchor tag) In addition, Ap1-002 is not linked, and “requires application” is displayed in the remarks column. There is an anchor tag in the “Application” part, and it is linked to the application page.
[0024]
In the case of the user 02 in FIG. 9, only the applications that can be disclosed are Ap1-002 and Ap1-004, and the applications Ap1-001 and Ap1-003 that are not permitted to be disclosed are not displayed in the list.
[0025]
Hereinafter, the display control procedure for each of the user 01 and the user 02 will be described with reference to the data structure examples of FIGS.
[0026]
<For user 01>
(Step S50): Start.
[Step S51]: From FIG. 3, the user level of the user 01 is UL1.
[Step S52]: From FIG. 4, the security levels disclosed for UL1 are SL1, SL2, SL3, and SL4.
[Step S53]: From FIG. 5, the applications corresponding to these security levels are 001, 002, 003, and 004. Such application information is stored in the buffer as application information of an application displayed to the user 01.
[Step S54]: From FIG. 6, security levels SL1 and SL2 need to be applied.
[Step S55]: The data of Ap1-001 is extracted from the buffer.
[Step S56]: Extraction is not finished.
[Step S57]: Ap1-001 is security level SL1, and application is required.
[Step S58]: From FIG. 7, the user 01 is registered in the disclosure approval information for Ap1-001.
[Step S59]: It is determined that the approval has been made.
[Step S61]: Apl-001 describes a page to be displayed with a link (example of HTML code; <A HREF=“Link-001”> Apl-001 </A>).
[Step S55]: The data of Ap1-002 is extracted from the buffer.
[Step S56]: Extraction is not finished.
[Step S57]: Ap1-002 is security level SL2, and application is required.
[Step S58]: From FIG. 7, the user 01 is not registered in the disclosure approval information for Ap1-002.
[Step S59]: It is determined that it is not approved.
[Step S60]: Ap1-002 describes the page to be displayed with no link and with a link to the application form.
[0027]
Similarly, display is repeated up to the last data in the buffer. As a result, a service list as shown in FIG. 8 is displayed.
[0028]
<For user 02>
[Step S50]: Start.
[Step S51]: From FIG. 3, the user level of the user 02 is UL2.
[Step S52]: The security levels disclosed for the user level UL2 from FIG. 4 are SL2 and SL4.
[Step S53]: From FIG. 5, the applications corresponding to these security levels are Ap1-002 and 004. These are stored in the buffer as applications that can be displayed to the user 02.
[Step S54]: From FIG. 6, security levels SL1 and SL2 need to be applied.
[Step S55]: The data of Ap1-002 is extracted from the buffer.
[Step S56]: Not complete extraction [Step S57]: Ap1-002 is at the security level SL2, and application is required.
[Step S58]: From FIG. 7, the user 02 is registered in the disclosure approval information for Ap1-002.
[Step S59]: It is determined that approval has been made.
[Step S61]: Ap1-002 is described on the page so as to be displayed with a link.
[Step S55]: The data of Ap1-004 is extracted from the buffer.
[Step S56]: Extraction is not finished.
[Step S57]: Ap-004 is at the security level SL4 and no application is required.
[Step S61]: Ap-004 describes the page so that it is displayed with a link.
[Step S55]: Application information is extracted from the buffer.
[Step S56]: Extraction fails and the extraction ends.
[Step S62]: End.
[0029]
As described above, a list as shown in FIG. 9 is displayed for the user 002.
[0030]
This is the end of the description of the embodiment. The present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the invention. For example, the entries displayed in the list may be information such as text, images, sounds, etc. in addition to application services, and may be object entries widely. Moreover, although described in relation to the security level of the user, other attributes may be used. It may be sex, age, hobby, access history, and the like. Further, in the above description, the text “application is required” is added or not added. However, different text, icons, images, and other information may be changed according to user attributes and displayed. . Further, although the description has been made in the usage environment of the HTML document, the service list may be displayed by any document. In addition, a service list may be displayed using a dedicated interface without using a web browser or a web server so that the service can be accessed.
[0031]
Further, the disclosure approval information may be described for a user group instead of for each user, or may be described for a service group instead of for each service.
[0032]
【The invention's effect】
As described above, according to the present invention, since the service list or the entry list is displayed in a variable manner according to the user attributes, the user can use the list easily, and the list is preferable in terms of confidentiality. Can be done.
[Brief description of the drawings]
FIG. 1 is a block diagram showing an embodiment of the present invention as a whole.
FIG. 2 is a flowchart showing the operation of the display control unit 14 of the above-described embodiment.
FIG. 3 is a diagram illustrating a data structure managed in the database 13 of the above-described embodiment.
FIG. 4 is a diagram illustrating a data structure managed in the database 13 of the above-described embodiment.
FIG. 5 is a diagram illustrating a data structure managed in the database 13 of the above-described embodiment.
FIG. 6 is a diagram illustrating a data structure managed in the database 13 of the above-described embodiment.
FIG. 7 is a diagram illustrating a data structure managed in the database 13 of the above-described embodiment.
FIG. 8 is a diagram showing an example of a service list displayed on the web browser 10 of the above-described embodiment.
FIG. 9 is a diagram showing another example of a service list displayed on the web browser 10 of the above-described embodiment.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 10 Web browser 11 Web server 12 CGI program part 13 Database 14 Display control part

Claims (8)

In a server device that receives a user service list request from a client device and supplies hypertext describing the service list to the client device,
User attribute storage means for storing user attributes;
When a user requests display of a service list, the attribute of the user is read from the user attribute storage unit , and the entry of the service whose entry display is allowed in the attribute in a display mode according to the read user attribute Assembly means for assembling a hypertext describing a service list including
Transmitting means for transmitting the hypertext to the client device;
Furthermore, the assembly means for each of the list elements constituting the service list, if the user has use authority with respect to the service corresponding to the list elements are denoted by the links to the service to the list element , without adding a link to the service to the list of elements in the case does not have the authority to use, moreover, in terms of added the text on the use application in relation to the list item does not have use authority of the user, application service server device according to claim Rukoto subjecting the link to. In a service list display device comprising a client device and a server device that receives a user service list request from the client device and supplies hypertext describing the service list to the client device,
The server device is
User attribute storage means for storing user attributes;
When a user requests display of a service list, the attribute of the user is read from the user attribute storage unit , and the entry of the service whose entry display is allowed in the attribute in a display mode according to the read user attribute Assembly means for assembling a hypertext describing a service list including
Transmitting means for transmitting the hypertext to the client device;
The client device receives the hypertext and displays it on a browsing means;
Furthermore, the assembly means of said server device, for each of the list elements constituting the service list, if the user has use authority for the service corresponding to the list element, the list links to the service subjected to the elements, without adding a link to the service to the list of elements in the case does not have the authority to use, moreover, after having added the text on the use application in connection with the list item using the user does not have the user A service list display device characterized by attaching a link to the application service . In a server device that receives a user list request from a client device and supplies hypertext describing a list to the client device,
User attribute storage means for storing user attributes;
When a user requests display of the list, the attribute of the user is read from the user attribute storage means , and entries whose entry display is permitted for the attribute are listed in a display mode according to the read user attribute. An assembling means for assembling hypertext describing a list to be included as an element ;
Transmitting means for transmitting the hypertext to the client device;
Furthermore, the assembly means for each of the list elements constituting the list, if the user has access authority for access object corresponding to the list element, with links to the access subject on the list element and, in the case it does not have the access authority is not given a link to the access target to the list element, moreover, added the text on the use application in relation to the use list item of unauthorized access target of the user A server device characterized by attaching a link to the application service . The server apparatus according to claim 3 , wherein the access target includes each document of document information. The server device according to claim 3 , wherein the access target includes each application service. In a service list display control method in a server apparatus, which receives a user service list request from a client apparatus and supplies hypertext describing the service list to the client apparatus.
The user attribute storage means of the server device storing user attributes;
When the user requests the display of the service list, the assembly means of the server apparatus reads the attribute of the user from the user attribute storage means, in a display mode according to the attribute of the user who has read the above, an entry in the attribute Assembling hypertext describing a service list including service entries that are allowed to be displayed as list elements ;
A transmission unit of the server device transmits the hypertext to the client device;
The client device receives the hypertext and displays it on a browsing means;
Furthermore, the assembly means of said server device, for each of the list elements constituting the service list, if the user has use authority for the service corresponding to the list element, the list links to the service subjected to the elements, without adding a link to the service to the list of elements in the case does not have the authority to use, moreover, after having added the text on the use application in connection with the list item using the user does not have the user A service list display control method characterized by attaching a link to the application service . In a method of displaying a service list using a client device and a server device that receives a user service list request from the client device and supplies hypertext describing the service list to the client device,
The user attribute storage means of the server device storing user attributes;
When the user requests the display of the service list, the assembly means of the server apparatus reads the attribute of the user from the user attribute storage means, in a display mode according to the attribute of the user who has read the above, an entry in the attribute Assembling hypertext describing a service list including service entries that are allowed to be displayed as list elements ;
A transmission step in which the transmission means of the server device transmits the hypertext to the client device;
The client device receives the hypertext and the browser means of the client device displays a service list;
Furthermore, the assembly means of the server device, for each of the list elements constituting the service list, if the user for the service corresponding to the list element has the use authority is the list element links to the service to given, without adding a link to the service to the list of elements in the case does not have the authority to use, moreover, in terms of added the text on the use application in relation to the list item does not have authority to use the user A service list display method characterized by attaching a link to an application service . In a service list display control method in a server apparatus, which receives a user service list request from a client apparatus and supplies hypertext describing the service list to the client apparatus.
The user attribute storage means of the server device storing user attributes;
When the user requests display of the list, the assembling unit of the server device reads out the attribute of the user from the user attribute storage unit, and displays an entry in the attribute in a display mode according to the read-out user attribute. Assembling hypertext that describes a list that includes entries for allowed services as list elements ;
A transmission step in which the transmission means of the server device transmits the hypertext to the client device;
The client device receives the hypertext and displays it to the user with browsing means;
Furthermore, the assembly means of said server device, for each of the list elements constituting the service list, if the user has use authority for the service corresponding to the list element, the list links to the service subjected to the elements, without adding a link to the service to the list of elements in the case does not have the authority to use, moreover, after having added the text on the use application in connection with the list item using the user does not have the user A list display control method characterized by attaching a link to the application service .

Images