JP5091003B2 - Information processing system, information processing method, program, and recording medium - Google Patents

Description

  The present invention relates to an information processing system including a client, a plurality of web application servers on which a web application operates, and an information processing server, and more particularly to user authentication control over a plurality of web applications.

  When creating a workflow application for a core business, a business application and a workflow engine are combined. In addition, since a workflow application in a core business is processed across several different businesses, a plurality of systems are related.

  Patent Document 1 describes a technique for preventing a decrease in processing speed or the like in an environment where a plurality of systems are related.

Patent Document 1 does not disclose anything about authentication, but an actual system generally has an authentication function.
JP 2007-52697 A

  However, in the environment where the above multiple systems are related, if each application has an authentication function, each time a transition is made to a different application, login processing is required, which makes the user experience worse. . In addition, the number of IDs and passwords managed by the user has increased, which is very complicated.

  In such an application that spans multiple systems, it is ideal that the end user sees seamless connection as a single system.

  In order to construct such a system, it is necessary to transfer user information between different applications without displaying a login screen each time, even when transitioning to different applications. That is, it is necessary to pass login information and session information between different systems between different applications.

  As a method for constructing such a system, there is a method using an authentication management system such as single sign-on using LDAP (Lightweight Directory Access Protocol) or the like.

  However, in order to realize single sign-on, each application must (1) user authentication information must be unified, (2) authentication interface must be integrated, (3) access It is necessary to clear requirements such as control must be integrated. Therefore, the construction work for introducing the single sign-on environment is complicated and takes time.

  The present invention has been made to solve the above-described problems. In a small information processing system, seamless authentication can be easily performed in a plurality of applications without using a single sign-on technology such as LDAP. It is an object to provide a mechanism that can easily construct a system that enables it.

The present invention is an information processing system including a plurality of web application servers each holding a configuration file in which location information of a plurality of web application servers is described, and an information processing server, wherein the first web application server is: When a request for application screen information is received from a web client, a determination unit that determines whether the request includes an identifier indicating a login status to the information processing server, and the determination unit includes the identifier If determined, inquiry means for inquiring the validity of the identifier to the information processing server; and as a result of the inquiry by the inquiry means, if the identifier is valid, the web application screen information embedded with the identifier is To client A first screen information transmission means for signals, from said web client, if location information in the configuration file has accepted a request to transition the screen to the second web application server that is described, the second corresponding to the request The location information of the web application server is acquired from the held configuration file , and the identifier included in the request is added as a parameter to the location information of the acquired second web application server , A first notification means for notifying a web client, and when the information processing server accepts a login request from the web client, the login processing means for performing a login process, and the login processing means succeeds in the login process. If this occurs, the identifier is generated and An identifier generating means to be stored in the second identifier, a second notifying means for notifying the web client of the identifier generated by the identifier generating means, and whether the identifier inquired by the inquiry means is valid. And an identifier validity determination unit that determines whether or not the identifier is held in the holding unit and returns the determination result, and the first web application server includes the inquiry unit. If the identifier is valid as a result of the inquiry, the session state is set to be logged in, and the session management means for releasing the session when notification by the first notification means is performed, The management means receives a request for application screen information from the web client. In the case where the session state corresponding to the request is not logged in, the determination unit is caused to execute the determination process. On the other hand, when the login is already completed, the determination unit is not caused to execute the determination process. The screen information transmission means executes screen transmission processing .

  According to the present invention, it is possible to easily perform seamless authentication in a plurality of applications without using a single sign-on technology such as LDAP in a small-scale information processing system.

  FIG. 1 is a system configuration diagram showing an example of an information processing system showing an embodiment of the present invention. In this example, the configuration of the workflow application in the core business is shown.

  In FIG. 1, 001, 002 is an application server (web application server). The application servers 1 (001) and 002 execute business applications (web applications) for business processing (for example, order receiving system, shipping system, etc.) and store the information in the application DB 005.

  The workflow server 003 performs workflow operation (approval, denial, return, etc.) processing according to the workflow path information, and stores the information in the workflow DB 004.

  The client browser 006 indicates a web browser that operates as a web client on the client terminal. The client browser 006 communicates with the application server 1 (001), the application server 2 (002), and the workflow server 003 via the network 007 in accordance with a user instruction, and performs application processing.

  In the figure, 001 to 006 may be mounted on different information processing apparatuses, or any or all of them may be mounted on the same information processing apparatus.

  FIG. 2 is a block diagram illustrating an example of a hardware configuration of an information processing apparatus applicable to the application server 1 (001), the application server 2 (002), the workflow server 003, and the client browser 006 illustrated in FIG.

  In FIG. 2, reference numeral 101 denotes a CPU, which comprehensively accesses various devices connected to the system bus based on a control program stored in a ROM 103 or an external storage device (hard disk (HD) or the like) 104. Control.

  Reference numeral 102 denotes a RAM that functions as a main memory, work area, and the like for the CPU 101. The ROM 103 or HD 104 stores a BIOS (Basic Input / Output System) or an operating system (OS) program, which is a control program for the CPU 101, and various programs necessary for causing the CPU to execute the processes shown in the flowcharts to be described later. Yes. The CPU 101 implements various functions by loading necessary programs and the like into the RAM 102 and executing them.

  Reference numeral 105 denotes an input device such as a keyboard or a mouse. Reference numeral 106 denotes a display device such as an LCD or CRT. A network interface card (NIC) 107 is configured to be able to communicate with other apparatuses via a network 007 such as a LAN or WAN.

  A procedure for logging in to the application server 1 (001) from the client browser 006 will be described below with reference to the sequence chart of FIG.

  FIG. 3 is a sequence chart showing an example of a procedure for logging in to the application server 1 (001) from the client browser 006.

  In FIG. 3, first, S201 to S203 are operations when the processing screen of the application server 1 (001) is requested from the client browser 006 for the first time.

  In S201, the client browser 006 requests the application server 1 (001) for a login screen shown in FIG.

  In 202, the application server 1 (001) performs the processing shown in FIG. 4, and redirects the URL (location information) of the login screen (FIG. 7 described later) of the workflow server to the client browser 006 (S203). Note that redirection means transfer from one URL to another URL. In S203 of FIG. 3, the application server 1 (001) uses the URL of the application server 1 (001) as the URL of the workflow server 003 to request the login screen information from the client browser 006 to the workflow server 003. A process of adding the parameter and notifying the client browser 006 is performed.

  Here, the processing of S202 and S203 will be described in detail with reference to FIG.

  FIG. 4 is a flowchart showing an example of the operation of the application server 1 (001). Each step (S301 to S310) in this flowchart is realized by loading the program stored in the external storage device 104 into the RAM 102 and executing it by the CPU 101 of the information processing device that implements the application server 1 (001). Hereinafter, it is described that the application server 1 (001) executes.

  First, upon receiving a login screen display request (S201 in FIG. 3) from the client browser 006, the application server 1 (001) advances the process to S301.

  In S301, the application server 1 (001) determines the session state. In the case of S202 in FIG. 3, since the screen display request from the client browser 006 (S201 in FIG. 3) is the first request, there is no session. That is, since there is no logged-in flag on the session, the application server 1 (001) determines that S301 is false (N), and proceeds to S302.

  In S302, the application server 1 (001) determines whether the parameter has a value corresponding to the parameter name SsID. In the first request, the client browser 006 specifies no parameters. Therefore, the application server 1 (001) determines that S302 is false (N), and proceeds to S303. Note that SsID is an identifier used to confirm the login status to the workflow server 003.

  In step S <b> 303, the application server 1 (001) reads the setting file “workflow.conf” (FIG. 5) on the external storage device 104 of the application server 1 (001) and stores it in the RAM 102.

  FIG. 5 is a diagram illustrating an example of a setting file “workflow.conf” stored on the external storage device 104 of the application server 1 (001).

  As shown in FIG. 5, “workflow.conf” is prepared in advance for all application servers and workflow servers, and describes common information (URL information).

  Next, in S304, the application server 1 (001) acquires the URL of the workflow server 003 (for example, 901 in FIG. 5) from the information read in S303, and sets the URL of the current request as the acquired URL. It is added as a return URL parameter. Here, the URL of the application server 1 (001) is added as a return URL parameter.

  Next, in S305, the application server 1 (001) redirects the URL created in S304 (the URL of the workflow server with the URL of the current request added as a return URL parameter) to the client browser 006 (203 in FIG. 3). .

  The operations in S202 and S203 in FIG. 3 have been described above in detail.

  Next, S204 to S206 show operations until the workflow server 003 displays the login page.

  In S204, the client browser 006 accesses the redirect destination, that is, the URL of the workflow server 003, according to the response of the application server 1 (001).

  In S205, the workflow server 003 performs the process shown in FIG. 6, and in S206, the login screen (FIG. 7) is transmitted to the client browser 006, and the login screen (FIG. 7) is displayed on the client browser 006.

  Here, the processing of S205 and S206 will be described in detail with reference to FIG.

  FIG. 6 is a flowchart illustrating an example of the operation of the workflow server 003. Note that each step (S401 to S407) of this flowchart is realized by the CPU 101 of the information processing apparatus that implements the workflow server 003 loading the program stored in the external storage device 104 into the RAM 102 and executing it. Hereinafter, it is described that the workflow server 003 executes.

  First, upon receiving a request from the client browser 006 (S204 in FIG. 3), the workflow server 003 advances the process to S401.

  In step S401, the workflow application 004 determines whether a session ID exists on the user login information of the workflow DB 004. In the case of S204 in FIG. 3, since the request from the client browser 006 (S204 in FIG. 3) is the first access, the session ID does not exist in the user login information of the workflow DB 004. That is, the workflow server 003 determines that S401 is false (N), and advances the processing to S402.

  In step S402, the workflow server 003 determines whether the current request has been made by pressing the login button on the login page. In the case of S204 in FIG. 3, since it does not correspond, the workflow server 003 determines that S402 is false (N), and advances the processing to S403.

  In S403, the workflow server 003 acquires the return URL information added to the request as a parameter in S304 of FIG. 4, and sets it in the item of the login screen (FIG. 7) to hold this. Setting the item in the login screen is realized by, for example, describing it in a non-display item in a structured language such as HTML that constitutes the login screen.

  Next, in S404, the workflow server 003 responds to the client browser 006 with a login screen (FIG. 7) (S206 in FIG. 3).

  The operations in S205 and S206 in FIG. 3 have been described above in detail.

  FIG. 7 is a diagram illustrating an example of a login screen displayed on the client browser 006.

  The user inputs a user name (user ID) in 701 and a password in 702 from the client browser 006 and instructs to press the login button 703 to perform a login operation.

  Next, S207 to S210 in FIG. 3 show an operation in which the login button 703 on the login screen (FIG. 7) is pressed by the user and the login processing is performed in the workflow server.

  In step S <b> 207, the user inputs a user name and password to the client browser 006 and presses the login button 703.

  Upon detecting this operation, the client browser 006 transmits the input user name, password, and the return URL set in the login screen (FIG. 7) in S403 of FIG. 6 to the workflow server 003 in S208. Here, the URL of the application server 1 (001) is transmitted as a return URL.

  In step S209, the workflow server 003 performs the process illustrated in FIG. 6, performs a login confirmation process based on the user name and password received from the client browser 006, and performs a login process.

  In step S210, the workflow server 003 redirects the URL of the application screen. Specifically, in S210, the workflow server 003 causes the application server 1 included in the login screen information in the login request to request the application server 1 (001) to request the application screen information from the client browser 006. The identifier is added as a parameter to the URL of (001), and the client browser 006 is notified.

  Here, the processing of S209 and S210 will be described in detail with reference to FIG.

  First, when the user name, password, and return URL are received from the client browser 006 (S208 in FIG. 3), the workflow server 003 advances the processing to S401 in FIG.

  In step S401, the workflow application 004 determines whether a session ID exists on the user login information of the workflow DB 004. In the case of S208 in FIG. 3, it is the second access after S204, but the session ID has not yet been set, and no session ID exists in the user login information of the workflow DB 004 as in the case of S204. That is, the workflow server 003 determines that S401 is false (N), and advances the processing to S402.

  In step S402, the workflow server 003 determines whether the current request has been made by pressing the login button on the login page. In the case of S208 in FIG. 3, since the login button has been pressed, the workflow server 003 determines that S402 is true (Y), and advances the process to S405.

  In step S405, the workflow server 003 checks whether the received user name and password are valid. The workflow server 003 can check the validity by comparing the received user name and password with the user login information in the workflow DB 004, but the method is not particularly limited here, and is omitted here.

  If the user name and password are not valid (in the case of a login error), the workflow server 003 determines that S405 is true (Y). In S403 and S404, the login page is displayed again together with the error message information in the client browser. 006 is displayed. And the process of this flowchart is complete | finished.

  On the other hand, in S405, when the user name and password are valid (when the login is successful), the workflow server 003 determines that S405 is false (N), and proceeds to S406.

  In S406, the workflow server 003 generates SsID and registers it in the user login information of the workflow DB 004. The SsID may be anything that can be uniquely identified by the application server and the workflow server. Here, SsID is equivalent to the session ID. It is also possible to delete SsID due to timeout.

  Next, in S407, the workflow server 003 adds the SsID generated in S406 to the parameter of the return URL (the return URL set in the login screen (FIG. 7) in S403 in FIG. 6) (FIG. 8). A response is made to the client browser 006 using the URL as a redirect destination (S210 in FIG. 3).

  The operations in S209 and S210 in FIG. 3 have been described above in detail.

  FIG. 8 is a diagram showing an example of a return URL to which SsID is added as a parameter in S407 of FIG.

  Next, steps S211 to S216 in FIG. 3 show processing after the login processing until the application screen is displayed.

  In S211, the client browser 006 accesses the redirect destination, that is, the URL of the application server 1 (001) according to the response of the workflow server 003.

  In S212, the application server 1 (001) performs the process of FIG. 4, and confirms login to the workflow server 003 in S213.

  In S214, the workflow server 003 performs the login confirmation process shown in FIG. 9, and returns the login confirmation result to the application server 1 (001) in S215.

  In S216, if the login result is OK, the application server 1 (001) transmits an application screen (FIG. 11 described later) to the client browser 006, and causes the client browser 006 to display the application screen (FIG. 11).

  Here, the processing of S212 to S216 will be described in detail with reference to FIGS.

  First, upon receiving a request from the client browser 006 (S211 in FIG. 3), the application server 1 (001) advances the process to S301 in FIG.

  In S301, the application server 1 (001) determines the session state. In the case of S202 in FIG. 3, the session itself exists for the second access following S201, but the logged-in flag has not been set yet, and as in S201, the application server 1 (001) Is determined to be false (N), and the process proceeds to S302.

  In S302, the application server 1 (001) determines whether the parameter has a value corresponding to the parameter name SsID. Since SsID is designated as a parameter in S407 of FIG. 6, the application server 1 (001) determines that S302 is true (Y), and proceeds to S306.

  In S306, the application server 1 (001) inquires of the workflow server 003 whether the SsID acquired in S302 is valid (S213 to 215 in FIG. 3 and S501 to S503 in FIG. 9).

  S213 to S215 in FIG. 3 are processes for determining whether the SsID is registered in the login information of the workflow DB 004 in the workflow server 003.

  In S213 of FIG. 3, the application server 1 (001) designates SsID as a parameter and calls a Web Service as shown in FIG.

  S214 in FIG. 3 is a process on the workflow server side corresponding to the call of S213, and the detailed process is shown in FIG.

  FIG. 9 is a flowchart illustrating an example of the login confirmation operation of the workflow server 003. Note that each step (S501 to S503) of this flowchart is realized by the CPU 101 of the information processing apparatus that implements the workflow server 003 loading the program stored in the external storage device 104 into the RAM 102 and executing it. Hereinafter, it is described that the workflow server 003 executes.

  S501 to S503 in FIG. 9 are details of operations in which the application server 1 (001) receives a request (login confirmation request) including the parameter SsID, determines whether the SsID is valid, and returns the result.

  First, when receiving a request (login confirmation request) including the parameter SsID from the application server 1 (001) (S213 in FIG. 3), the workflow server 003 advances the process to S501.

  In S501, the workflow server 003 determines whether the SsID given by the parameter exists in the login information in the workflow DB 004 (registered).

  If it is determined that the SsID given by the parameter exists in the login information in the workflow DB 004 (registered), the workflow server 003 advances the process to S502.

  In S502, the workflow server 003 responds that the SsID given by the parameter from the application server 1 (001) is valid and is already registered in the application server 1 (001) (S215 in FIG. 3).

  On the other hand, in S501, when it is determined that the SsID given by the parameter does not exist in the login information in the workflow DB 004 (unregistered), the workflow server 003 advances the process to S503.

  In S503, the workflow server 003 responds that the SsID given by the parameter from the application server 1 (001) is not valid and is not registered in the application server 1 (001) (S215 in FIG. 3).

  When the application server 1 (001) receives the SsID validity inquiry result from the workflow server 003, the process proceeds to S307 in FIG.

  In S307, the application server 1 (001) determines the validity result of the SsID received from the workflow server in S215 of FIG.

  If the application server 1 (001) receives a result indicating that it has not been registered, the application server 1 (001) determines that S307 is false (N), and again executes processing for prompting login processing in S303 to S305. .

  On the other hand, if the application server 1 (001) receives a result indicating that it has already been registered, it determines that S307 is true (Y), and advances the processing to S308.

  In S308, the application server 1 (001) sets a logged-in flag on the session. This flag is used for the determination in S301.

  In step S309, the application server 1 (001) executes application processing. In this case, a process for generating an application initial screen after login (FIG. 11) is performed.

  Next, in S310, the application server 1 (001) outputs SsID (FIG. 10) to the item on the application screen (FIG. 11).

  FIG. 10 is a diagram showing an example of the SsID output to the item of the application screen in S310 of FIG. 4, showing a part of the HTML source constituting the application screen, and the SsID is not displayed on the screen. It is described in the tag.

  In the example shown in FIG. 10, SsID is converted and embedded in a serialized format of a JAVA (registered trademark) object. Note that SsID may be embedded in the format shown in FIG. 8 without being converted.

  The SsID embedded in the screen as described above is used to transmit the SsID as a request parameter from the client browser 006 again when a button or the like is pressed from the displayed application screen.

  In S216 of FIG. 3, the application server 1 (001) transmits the screen processed by the application server 1 (001) in S309 to S310 of FIG. 4 to the client browser 006 and displays it.

  FIG. 11 is a diagram illustrating an example of an application screen of the application server 1 (001) displayed on the client browser 006. In this application screen, SsID is embedded as shown in FIG. However, the embedded SsID is not displayed on the screen.

  Next, with reference to a sequence chart of FIG. 12, a flow of login information transfer processing at the time of screen transition from the application server 1 (001) to the application server 2 (002) will be described.

  FIG. 12 is a sequence chart showing an example of the flow of login information transfer processing at the time of screen transition from the application server 1 (001) to the application server 2 (002).

  In FIG. 12, first, S601 to S603 are the flow of processing of the transition source application server 1 (001).

  When the user presses a screen transition button (for example, order draft 1301) on the screen (FIG. 11), the client browser 006 that has detected this operation transmits a request including screen information to the application server 1 (001) in S601. To do. The screen information includes the SsID output on the screen in S310 of FIG.

  Next, in S602, the application server 1 (001) performs the processing shown in FIG. 13 to obtain the URL of the transition destination application corresponding to the button pressed from the request. In S603, the URL is sent to the client. Redirect to browser 006.

  Specifically, in S603, when the application server 1 (001) receives a request to change the screen from the client browser 006 to the application server 2 (002), the application server 1 (001) transmits the request from the client browser 006 to the application server 2 (002). The identification information included in the application screen information in the request is added as a parameter to the URL of the application server 2 (002) for requesting the web application screen information of 2 (002), and the client browser 006 Process to notify.

  Here, the operation of S602 and S603 will be described in detail with reference to FIG.

  FIG. 13 is a flowchart showing an example of the operation of the application server 1 (001). Note that each step (S701 to S704) of this flowchart is realized by the CPU 101 of the information processing apparatus that implements the application server 1 (001) loads a program stored in the external storage device 104 into the RAM 102 and executes it. Hereinafter, it is described that the application server 1 (001) executes.

  First, upon receiving a request from the client browser 006 (S601 in FIG. 12), the application server 1 (001) advances the process to S701.

  In step S <b> 701, the application server 1 (001) reads the setting file “workflow.conf” (FIG. 5) on the external storage device 104 of the application server 1 (001) and stores it in the RAM 102.

  In step S <b> 702, the application server 1 (001) determines a transition destination application ID corresponding to the button name (action) pressed on the client browser 006 from the request. This correspondence is determined from correspondence information in the program or file or DB. Further, the application server 1 (001) acquires a URL (for example, 902 in FIG. 5) corresponding to the logical application ID from the setting file “workflow.conf” (FIG. 5) read in S701, and sets SsID as a parameter thereof. Is added to the RAM 102 as a “next URL”. In S602 of FIG. 12, the URL of the application server 2 (002) is acquired, and SsID included in the screen information transmitted from the client browser 006 is added to the parameter.

  In step S <b> 703, the application server 1 (001) releases the session of the application server 1 (001) by discarding (invalidating) the session information of the transition source is unnecessary.

  In step S <b> 704, the application server 1 (001) redirects the “next URL” stored in step S <b> 702 to the client browser 006.

  In the above, the operation | movement of S601-S603 of FIG. 7 was demonstrated in detail.

  Next, S604 to S609 are a flow of a transition process to the application server 2 (002) and a login check process of the workflow server.

  In step S604, the client browser 006 sends a request to the application server 2 (002) that is the redirect destination “next URL” given from the application server 1 (001).

  In step S605, the application server 2 (002) performs the processing in FIG. 4. In step S606, the application server 2 (002) requests the workflow server 003 to confirm the validity of the SsID of the request parameter, and performs login confirmation. If the above SsID is valid, it is assumed that the user has logged in.

  In step S607, the workflow server 003 performs login confirmation processing, and in step S608, the login confirmation result is returned to the application server 2 (002).

  In S609, if the login result is OK, the application server 2 (002) transmits an application screen (FIG. 14 to be described later) to the client browser 006 and causes the client browser 006 to display the application screen (FIG. 14).

  FIG. 14 is a diagram illustrating an example of an application screen of the application server 2 (002) displayed on the client browser 006.

  As described above, according to the present embodiment, in a small-scale information processing system, a system that can easily perform seamless authentication in a plurality of applications without using a single sign-on technology such as LDAP. Easy to build.

  That is, as in single sign-on, each application must (1) user authentication information must be unified, (2) authentication interfaces must be integrated, and (3) access control is integrated. It is not necessary to clear requirements such as having to be done, and the system can be introduced in a short time with easy construction work.

  Therefore, it is possible to easily develop an application that passes user authentication information and session information between a plurality of business application servers and a workflow server.

  It should be noted that the configuration and contents of the various data described above are not limited to this, and it goes without saying that the various data and configurations are configured according to the application and purpose.

  Although one embodiment has been described above, the present invention can take an embodiment as, for example, a system, apparatus, method, program, or recording medium, and specifically includes a plurality of devices. The present invention may be applied to a system including a single device.

  The configuration of a data processing program that can be read by each information processing apparatus constituting the information processing system according to the present invention will be described below with reference to the memory map shown in FIG.

  FIG. 15 is a diagram illustrating a memory map of a recording medium (storage medium) that stores various data processing programs that can be read by each information processing apparatus constituting the information processing system according to the present invention.

  Although not specifically shown, information for managing a program group stored in the recording medium, for example, version information, creator, etc. is also stored, and information depending on the OS on the program reading side, for example, a program is identified and displayed. Icons may also be stored.

  Further, data depending on various programs is also managed in the directory. In addition, when a program or data to be installed is compressed, a program to be decompressed may be stored.

  The functions shown in FIGS. 3, 4, 6, 9, 12, and 13 in this embodiment may be performed by a host computer by a program installed from the outside. In this case, the present invention is applied even when an information group including a program is supplied to the output device from a recording medium such as a CD-ROM, a flash memory, or an FD, or from an external recording medium via a network. Is.

  As described above, a recording medium recording software program codes for realizing the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the recording medium in the recording medium. It goes without saying that the object of the present invention can also be achieved by reading and executing the programmed program code.

  In this case, the program code itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program code constitutes the present invention.

  As a recording medium for supplying the program code, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, A silicon disk or the like can be used.

  Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) or the like running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.

  Furthermore, after the program code read from the recording medium is written in a memory provided in a function expansion board inserted in the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that the case where the CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading the recording medium storing the program represented by the software for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention. .

  Furthermore, by downloading and reading out a program represented by software for achieving the present invention from a server, database, etc. on a network using a communication program, the system or apparatus can enjoy the effects of the present invention. It becomes.

  In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

It is a system configuration figure showing an example of an information processing system showing one embodiment of the present invention. FIG. 2 is a block diagram illustrating an example of a hardware configuration of an information processing apparatus applicable to the application server 1, the application server 2, the workflow server 003, and the client browser 006 illustrated in FIG. 10 is a sequence chart illustrating an example of a procedure for logging in to the application server 1 (001) from a client browser 006. 5 is a flowchart showing an example of the operation of the application server 1. 6 is a diagram illustrating an example of a setting file “workflow.conf” stored on the external storage device 104 of the application server 1. FIG. 10 is a flowchart illustrating an example of an operation of the workflow server 003. It is a figure which shows an example of the login screen displayed on the client browser 006. It is a figure which shows an example of the return URL which added SsID as a parameter by S407 of FIG. 10 is a flowchart illustrating an example of a login confirmation operation of the workflow server 003. FIG. 5 is a diagram illustrating an example of SsID output to an item on an application screen in S310 of FIG. It is a figure which shows an example of the application screen of the application server 1 (001) displayed on the client browser 006. It is a sequence chart which shows an example of the flow of the delivery process of the login information at the time of the screen transition from the application server 1 to the application server 2. 5 is a flowchart showing an example of the operation of the application server 1. It is a figure which shows an example of the application screen of the application server 2 (002) displayed on the client browser 006. It is a figure explaining the memory map of the recording medium (storage medium) which stores the various data processing program which can be read by each information processing apparatus which comprises the information processing system which concerns on this invention.

Explanation of symbols

001 Application server 1
002 Application server 2
003 Workflow server 004 Workflow DB
005 Application DB
006 Client browser 007 network

Claims (7)

An information processing system including a plurality of web application servers each holding a configuration file in which location information of a plurality of web application servers is described, and an information processing server,
The first web application server
When receiving a request for application screen information from a web client, a determination unit that determines whether the request includes an identifier indicating a login status to the information processing server;
When the determination means determines that the identifier is included, inquiry means for inquiring the information processing server about the validity of the identifier;
If the identifier is valid as a result of the inquiry by the inquiry means, first screen information transmission means for transmitting the web application screen information in which the identifier is embedded to the web client;
When a request to change the screen to the second web application server whose location information is described in the setting file is received from the web client , the location information of the second web application server corresponding to the request is retained. First notification means for acquiring from the setting file , adding the identifier included in the request to the location information of the acquired second web application server as a parameter, and notifying the web client Have
The information processing server
When a login request is received from the web client, login processing means for performing login processing;
If the login process is successful by the login processing means, an identifier generating means for generating the identifier and holding it in the holding means;
Second notification means for notifying the web client of the identifier generated by the identifier generation means;
Information having identifier validity determination means for determining whether or not the identifier inquired by the inquiry means is valid based on whether or not the identifier is held in the holding means and returning the determination result Processing system,
When the identifier is valid as a result of the inquiry by the inquiry unit, the first web application server sets the session state as logged in, and when performing the notification by the first notification unit, And further has a session management means to be opened,
When the session management unit receives a request for application screen information from the web client, if the session state corresponding to the request is not logged in, the session management unit causes the determination unit to execute a determination process, while the login is completed. In this case, the information processing system is characterized in that the first screen information transmission unit executes the screen transmission process without causing the determination unit to execute the determination process . The first web application server is
A third notification means for notifying the web client of the location information of the information processing server when the determination means determines that the identifier is not included;
The second notification means included in the information processing server includes:
In order to cause the first web application server to request the application screen information from the web client, the identifier generated by the identifier generating means is used as a parameter in the location information of the first web application server. In addition, the information processing system according to claim 1, wherein the information is notified to the web client. Wherein a plurality of web application server, the information processing server, an information processing system according to claim 1 or 2, characterized in that retaining same in the configuration file, respectively. Wherein each screen information processing system according to any one of claims 1 to 3, characterized in that it is written in a structured language. An information processing method in an information processing system including a plurality of web application servers each holding a configuration file in which location information of a plurality of web application servers is described, and an information processing server,
The first web application server runs ,
When receiving a request for application screen information from a web client, a determination step for determining whether the request includes an identifier indicating a login status to the information processing server;
If it is determined by the determination step that the identifier is included, an inquiry step of inquiring the information processing server about the validity of the identifier;
As a result of the inquiry by the inquiry step, when the identifier is valid, a first screen information transmission step of transmitting the web application screen information in which the identifier is embedded to the web client;
When a request to change the screen to the second web application server whose location information is described in the setting file is received from the web client , the location information of the second web application server corresponding to the request is retained. A first notification step of acquiring from the setting file , adding the identifier included in the request to the location information of the acquired second web application server as a parameter, and notifying the web client Including
Executed by the information processing server;
When a login request is received from the web client, a login processing step for performing a login process;
If the login process succeeds in the login process step, an identifier generation step for generating the identifier and holding it in a holding means;
A second notification step of notifying the web client of the identifier generated by the identifier generation step;
Information including an identifier validity determination step of determining whether or not the identifier inquired in the inquiry step is valid based on whether or not the identifier is held in the holding unit and returning the determination result Processing method,
As a result of the inquiry by the inquiry means executed by the first web application server, when the identifier is valid, the session state is set to be logged in, and the notification is made by the first notification means A session management means for releasing the session;
In the session management step, when a request for application screen information is received from the web client, if the session state corresponding to the request is not logged in, the determination process is executed in the determination step, while the login is completed. In this case, the information transmission method includes causing the screen transmission process to be executed in the first screen information transmission step without causing the determination process to be executed in the determination step . A program that can be executed in an information processing system including a plurality of web application servers each holding a setting file in which location information of a plurality of web application servers is described, and an information processing server,
The first web application server
When receiving a request for application screen information from a web client, a determination unit that determines whether the request includes an identifier indicating a login status to the information processing server,
Inquiry means for inquiring the information processing server about the validity of the identifier when the determination means determines that the identifier is included;
As a result of the inquiry by the inquiry means, when the identifier is valid, first screen information transmission means for transmitting the web application screen information in which the identifier is embedded to the web client,
When a request to change the screen to the second web application server whose location information is described in the setting file is received from the web client , the location information of the second web application server corresponding to the request is retained. As a first notification means for notifying the web client by adding the identifier included in the request to the location information of the acquired second web application server as a parameter. Make it work
The information processing server;
If a login request is received from the web client, login processing means for performing login processing,
If the login process is successful by the login processing means, an identifier generating means for generating the identifier and holding it in the holding means;
Second notification means for notifying the web client of the identifier generated by the identifier generation means;
A program for determining whether or not the identifier inquired by the inquiry means is valid based on whether or not the identifier is held in the holding means and functioning as an identifier validity determining means for returning the determination result And
If the identifier is valid as a result of the inquiry by the inquiry means, the first web application server is set to have logged in the session state, and when the notification is made by the first notification means, the session is Further function as a session management means to be released,
When the session management unit receives a request for application screen information from the web client, if the session state corresponding to the request is not logged in, the session management unit causes the determination unit to execute a determination process, while the login is completed. In this case, the program causes the first screen information transmission unit to execute the screen transmission process without causing the determination unit to execute the determination process . A recording medium storing the program according to claim 6 in a computer-readable manner.

Images