JP5345432B2 - Web logon control method, system and program - Google Patents

Description

  The present invention relates to a processing control technique for an application on a user terminal that accesses a web system via a network, and more particularly, to a technique suitable for improving the efficiency of frequent access control for a web system that performs authentication. Is.

  In the web system, in order to identify the user of the terminal that has accessed and to maintain security, it is necessary to enter an ID and password for identifying the user at logon, and the user (user) is authenticated based on such information. There is something.

  In such a web system, generally, information indicating that the user has logged on is held by a cookie on the web browser side. Hereinafter, “web browser” may be referred to as “browser”.

  When automatically accessing the web system from an application on the user terminal, it is necessary to automatically perform the same processing as that performed manually on the web browser side. An equivalent function (interpretation / execution function of client-side script such as HTML and Java (registered trademark) Script) needs to be provided in the application, which is extremely difficult to implement.

  In addition, when an application frequently accesses the web system, it is necessary to perform authentication processing every time, which increases the load on the web system side and the processing waiting time of the application.

  For example, Patent Document 1 discloses a conventional technique for executing processing in cooperation with an application and a web browser. This technique is intended to provide a browser that can easily cope with an information service that requires an extension of a markup language and meta information. A browser information part that makes it possible to refer to structured document information from the application program, a browser core part that displays a document based on the structured document information according to an instruction from the application program, and a display When an event related to the document being generated occurs, an event information notification unit for notifying the application program of event information indicating the type of the event and the portion in which the event has occurred in the document is provided. According to instructions , Techniques for converting the document data in the structured document information is described.

  However, in the technique described in Patent Document 1, as described above, when the application on the user terminal is accessed manually on the web browser side when accessing the web system that requires authentication processing at the time of logon. It is not possible to automatically perform the same processing as on the application side.

JP 2004-171257 A

  The problem to be solved is that, in the conventional technology, when repeatedly connecting to and disconnecting from the web system of the URL that requires authentication from the application on the user terminal, the logon ID accompanied by the user operation every time access is performed. And security information such as passwords must be entered.

  An object of the present invention is to solve these problems of the prior art, and to reduce the mounting difficulty in an application accessing a web system, reduce the web system side authentication load, and reduce the application side processing time.

  In order to achieve the above object, in the present invention, a web browser component (component) is held in an application, and security information such as a logon ID and a password from a user for a web system that requires authentication via the web browser component. And the response from the web system is received for authentication, and thereafter, the authenticated logon state is maintained. If there is an access request input to an arbitrary URL from the user, a browser screen for accessing the arbitrary URL is generated via the web browser component, and the generated browser screen is used to generate an authenticated web system. The URL information is transmitted, and the screen information returned from the web system is received and displayed on the browser screen.

  According to the present invention, authentication with the web system is performed by the web browser component held in the application, and the authentication information is held, so that it is possible to reduce the difficulty of implementing the application, and the authenticated web The browser component can generate a browser that accesses another screen, eliminates the need for authentication each time, and can reduce the load on the web system side and the increase in application processing time.

It is a block diagram which shows the structural example of the web logon control system which concerns on this invention. It is a flowchart which shows the 1st processing operation example which concerns on this invention of the web logon control system in FIG. It is a flowchart which shows the 2nd processing operation example which concerns on this invention of the web logon control system in FIG. It is a flowchart which shows the 3rd processing operation example which concerns on this invention of the web logon control system in FIG. It is a block diagram which shows the hardware structural example of the web logon control system in FIG.

  Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings. As shown in FIG. 1, the web logon control system of this example has a user terminal (indicated as “PC” in the figure and uses a personal computer in this example) 100 in a memory (in the figure, “in-PC memory”). The web browser component 103 is held in the application 102 installed in 101.

  With this configuration, the application 102 is connected to the Internet (denoted as “NW” in the figure) 200 via the web browser component 103, and a logon ID and password from the user for the web system 300 that requires authentication. The security information such as the above and the response from the web system 300 are received and authenticated, and thereafter, the authenticated logon state is maintained.

  Then, if there is an access request input to an arbitrary URL from the user, the application 102 generates a browser screen 104 (described as “Web browser screen” in the figure) for accessing the URL via the web browser component 103. In the generated browser screen 104, the URL information is transmitted to the authenticated web system 300, and the screen information returned from the web system 300 is received.

  In the user terminal 100, as shown in FIG. 3, a CPU (Central Processing Unit) 100a controls information display processing on a CRT (Cathode Ray Tube) 100e, information from a row driver 100d, a keyboard 100g, and a mouse 100h. A keyboard / mouse driver 100f that performs input control of the disk device, a disk device driver 100i that performs input / output control of information with the disk device 100j, and the like are connected via a system bus 100k.

  The CPU 100a reads a program and data stored in a recording medium such as a CD-ROM (Compact Disc-Read Only Memory) 100b or an FD (Flexible Disk) 100c through a driver (not shown), and passes through the disk device 100i. 1 is installed in the disk device 100j and read from the disk device 100j into the memory 101 shown in FIG. 1, thereby executing the functions of the application 102, web browser component 103, and browser screen 104 in FIG.

  As shown in FIG. 1, in this example, the functions according to the present invention are generated from an application 102, a web browser component 103 that is generated in the application 102 and maintains an authentication state, and a web browser component 103. This is a browser screen 104 that takes over the authentication state held by the user 103.

  Hereinafter, the processing operation example according to the present invention of the web logon control system of the present example provided in the user terminal 100 having such a configuration will be described with reference to FIGS. 2A to 2C.

  The process of “Block A” in FIG. 2A is a sequence from the activation of the application 102 to automatic logon to the web system 300.

  In step S <b> 201, the application 102 is automatically activated by the user's operation of the keyboard 100 g and the mouse 100 h or the operating system of the user terminal 100.

  In step S202, in the activated application 102, an ID and a password for logging on to the web system are input in response to an input operation of the keyboard 100g, mouse 100h, and the like by the user, and the input ID and password are used as data in the application. Hold.

  In step S <b> 203, the application 102 activates the web browser component 103. For the activation, an API (Application Program Interface) of the operating system is used. When the web browser component 103 is activated, the application 102 is activated so as not to display the browser screen on the display (CRT 100e or the like) of the user terminal 100 (hereinafter, this state is referred to as “invisible state”). ).

  In step S204, the application 102 instructs the web browser component 103 to transmit the ID and password to the web system.

  In step S205, the web browser component 103 receives a command from the application 102 in step S204, and transmits a request including the instructed ID and password to the web system 300.

  In step S206, the web system 300 returns a response of the logon processing result in response to the request from the web browser component 103 in step S205.

  In step S207, the application 102 acquires the response returned from the web system 300 in step S206 from the web browser component 103.

  In step S208, the application 102 determines whether the response acquired in the processing in step S207 is successful logon (normal time) or failed logon (error). For the determination, an address (URL) indicated by the web browser component 103, a specific sentence of a response content, or the like is used. Processing in the case where the determination result is an error will be described later as a block (D) shown in FIG. 2C.

  Through the above processing, the web browser component 103 is logged on to the web system 300 (authentication state) (step S209).

  In the process at step S208, when the application 102 determines that the logon is successful (normal), the process of “block (B)” in subsequent steps S210 to S216 is performed and it is determined that the logon has failed (at the time of error). Performs the process of “block (D)” shown in FIG. 2C.

  The processing of “Block (B)” is a sequence from the processing of Block (A) until a specific screen on the Web system 300 is displayed in response to some user operation (such as pressing a button) in the application 102. .

  In step S210, when an instruction to open a screen on the web system 300 is input by a user operation, the application 102 instructs the web browser component 103 to generate a new browser screen in step S211. . At that time, a URL to be opened on a new browser screen is simultaneously designated.

  In step S212, the web browser component 103 that has received an instruction from the application 102 in step S211 generates a new browser screen 104 in a state in which the URL instructed in step S211 is opened based on the instruction. At this time, since the authentication state of the browser is taken over, the generated browser screen 104 is in a state of being logged on to the web system 300.

  In step S213, the browser screen 104 makes a request to the web system 300 using the URL instructed from the web browser component 103 in step S212.

  In step S214, the web system 300 returns the contents of the designated URL based on the request from the browser screen 104 in step S213.

  In step S214, the browser screen 104 displays a screen based on the response from the web system 300 in step S214.

  In step S215, the browser screen 104 is closed in response to the user's termination operation on the displayed browser screen 104.

  That is, in step S215, the browser screen 104 is continuously displayed until the user performs a termination operation.

  Even if the browser screen 104 is terminated in step S216, the authentication state in the web browser component 103 is maintained by the processing in step S209, so that the sequence (processing) in the block (B) is repeated any number of times. Is possible.

  Thus, in the web logon control system of this example, the invisible web browser component 103 is kept in the authentication state, and the screen is generated by generating a necessary screen from the state in response to a request from the user. It is possible to eliminate the need to perform the authentication process every time it is displayed.

  Next, processing in sequence (C) following processing in block (B) will be described. The process of block C is a process necessary for keeping the web browser component 103 in the authenticated state even when the web system 300 does not communicate for a certain time and times out (loses the authenticated state).

  In step S217, the application 102 detects the elapse of a predetermined interval (an interval shorter than the timeout time of the web system 300), and repeatedly executes the processing of the subsequent steps S218 to S220 for each detected fixed interval. .

  In step S <b> 218, the application 102 instructs the web browser component 103 to execute request transmission for the web system 300. Note that the URL specified in this request is the URL to be displayed after logging on to the web system 300.

  In step S219, the web browser component 103 transmits a request to the web system 300 based on the instruction in step S218.

  In step S220, the web browser component 103 receives the response returned from the web system 300 in response to the request in step S219.

  As a result of this processing, the state of “no communication” is canceled for the web system 300, so the time until timeout is extended (generally, this processing is performed in the form of extending the effective time of the cookie).

  Next, in the processing in step S208 of FIG. 2A, processing when the application 102 determines that logon has failed (at the time of error) will be described using the sequence of block (C) shown in FIG. 2C.

  In general, in the web system 300, when an error is determined, a screen for notifying the user of the error is returned to the web browser component 103 in the process in step S206 of FIG. 2A. Must be displayed to the user.

  That is, in step S222, when the application 102 determines that the logon has failed (at the time of error) in the processing in step S208 of FIG. 2A, the application 102 receives the web browser component 103 from the web system 300 in response to the web browser component 103. An operation instruction is issued to display the screen thus displayed on the display of the user terminal 100 (step S223).

  Upon receiving this instruction, the web browser component 103 displays the screen received from the web system 300 based on this instruction (from the invisible state to the visible state) (step S224).

  By the processing in the block (C), the user can see the screen on which the error has occurred, and the subsequent determination (password error, web system error, etc.) and the countermeasure can be taken.

  As described above with reference to FIGS. 1 to 3, in the web logon control system of this example, the application 102 is provided with the web browser component 103 for executing the logon process to the web system 300, and the application 102 inputs the information. The authentication information for logging on to the web system 300 input from the device (keyboard 100g) is stored in a storage device (disk device 100j or the like), and the web browser component 103 is activated from the application 102 in a non-display state. The web browser component 103 executes logon processing to the web system 300 using logon authentication information.

  Then, a response from the web system 300 corresponding to the logon process is input to the application 102 via the web browser component 103, and the logon result is determined by the application 102. If the logon result is normal, the web browser component By 103, the logon state with the web system 300 is continued.

  Further, the URL information input from the input device by the application 102 is passed to the web browser component 103 that is continuing the logon state, the browser screen 104 is generated by the web browser component 103, and the browser screen 104 sends the information to the web system 300. A request using URL information is transmitted to the browser screen 104 using the screen information of the URL returned from the web system 300 in response to the request transmission, and the browser screen thus displayed is displayed. In response to the input of the end instruction based on the user operation on the screen on 104, the screen on the browser screen 104 is closed while the logon state with the web system 300 by the web browser component 103 is continued.

  Further, in a state in which the web browser component 103 continues to log on to the web system 300, a request to the web system 300 is sent from the application 102 to the web browser component 103 every time shorter than a predetermined timeout time in the web system 300. The web browser component 103 continues to log on with the web system 300 by instructing the transmission of.

  If the logon result is abnormal, the application 102 instructs the web browser component 103 to generate the browser screen 104 that displays the error information returned from the web system 300, and the web browser is based on the instruction from the application 102. A browser screen 104 that displays error information is generated and displayed by the component 103.

  As described above, in this example, the web browser component 103 held in the application 102 performs authentication with the web system 300 and holds the authentication information, so that the difficulty of mounting the application can be reduced. The authenticated web browser component 103 can generate a browser for accessing other screens, eliminates the need for authentication every time, and reduces the load on the web system side and the increase in processing time of the application 102. Is possible.

  In addition, this invention is not limited to the example demonstrated using FIGS. 1-3, In the range which does not deviate from the summary, various changes are possible. For example, in this example, a description is given of a configuration in which the user terminal 100 and the web system 300 are connected using the Internet 200, but a configuration using a network such as an intranet may be used instead of the Internet.

  Also, the computer configuration example in this example is not limited to the configuration shown in FIG. 3, and may be a computer configuration without a keyboard or optical disk drive. Further, the program may be installed by downloading and installing the program via a network via a communication device.

  As for the user terminal 100, a PC (personal computer) is used as an example in this example. However, any communication device having a browser communication function with another web system 300 such as a workstation may be used.

  100: User terminal (PC), 100a: CPU, 100b: Recording medium (CD-ROM), 100c: Recording medium (FD), 100d: CRT driver, 100e: CRT, 100f: Keyboard / mouse driver, 100g: Keyboard , 100h: mouse, 100i: disk device driver, 100j: disk device, 101: storage device (in-PC memory), 102: application, 103: web browser component, 104: web browser screen (browser screen), 200: network ( NW), 300: Web system.

Claims (3)

By programmed computer processing
A web logon control method for a system for controlling access by an application to a web system that requires input of authentication information at logon,
The application is provided with a web browser component that executes logon processing to the web system,
As a process execution procedure of the programmed computer,
A first procedure for storing, in a storage device, authentication information for logging on to the web system input from the input device by the application;
From the application to start the first Web browser component based on the web browser component in a non-display state, the web browser component of the first, the process of logging on to the web system using the authentication information for the logon A second procedure to perform;
A third procedure for inputting a response from the web system corresponding to the logon process in the second procedure to the application via the first web browser component, and determining a logon result by the application. When,
A fourth procedure for continuing a logon state with the web system by the first web browser component when the logon result in the third procedure is normal ;
The URL information input from the input device by the application is passed to the first web browser component that is in the logon state, and the first web browser component generates a first browser screen. A fifth procedure for transmitting a request using the URL information from the browser screen to the web system;
A sixth procedure for displaying a screen on the first browser screen using screen information corresponding to the URL information returned from the web system in response to a request transmission in the fifth procedure;
In response to the input of the end instruction based on the user operation on the screen on the first browser screen displayed in the sixth procedure, the logon state with the web system by the first web browser component is continued. , A seventh procedure for closing the screen on the first browser screen,
In a state where the logon state with the web system by the first web browser component is continued, the first web browser component from the application to the first web browser component every time shorter than a predetermined timeout time in the web system. Instructing transmission of a request to the web system, transmitting a request from the first web browser component to the web system, and receiving a response from the web system to the first web browser component to continue the logon state The eighth step;
If the logon result in the third procedure is abnormal, the application instructs the first web browser component to generate a browser screen that displays error information returned from the web system, and the application A ninth procedure for generating and displaying a browser screen for displaying the error information by the first web browser component based on the instruction of;
A web logon control method. A web logon control system for controlling access by an application to a web system that requires input of authentication information at logon by a programmed computer process,
As a means for executing a programmed computer processor,
2. The web logon control system according to claim 1, further comprising means for executing each processing procedure by the application and the web browser component in the web logon control method according to claim 1 . The program for making a computer perform each processing procedure by the said application and the said web browser component in the web logon control method of Claim 1 .

Images