JP5466614B2 - Data transmission / reception service system and method - Google Patents

Description

  The present invention relates to a data transmission / reception service system and method, and in particular, a wrapping file including a data file to be distributed (hereinafter referred to as a target file), a decompression module, an authentication module, a replace module, and an upload module. Create a file, distribute the wrapping file via the communication network from the data transmission / reception server to the client terminal that requested the distribution of the target file, and re-wrap and upload the distribution target file updated on the client terminal to the server The present invention relates to a data transmission / reception service system and method thereof.

  For example, Patent Document 1 proposes a system that executes license management using encryption information. The license management server to which the encryption specific information is transmitted from the client terminal registers the information and determines whether or not a legitimate user is operating the client terminal. If it is recognized that the user is a legitimate user, the server transmits key information to the client terminal. The client terminal sets various environment information based on this key information. As a result, the client terminal can execute a licensed application program, that is, a licensed application program.

  Patent Document 2 proposes a license management system in which a license management server distributes a wrapping file including a target file requested from a client terminal, a deployment module, an authentication module, and a monitoring module. . The client terminal executes the deployment module to release the wrapping state, executes the authentication module to send authentication information, and when a license is granted from the license management server, the monitoring module is executed. Use a file. When the monitoring module detects that the usage period of the target file has ended, a system has been proposed in which the client terminal deletes the target file.

JP 2004-38247 A JP 2008-117191 A

  Here, terms used in the present specification are defined as follows. The target file is a data file that is a distribution target for which a distribution request is made from the client terminal to the data transmission / reception server. Target files include executable files with the extension “.EXE”, data files used in application programs such as word processors and spreadsheet software, still images, digital contents given as moving image files, and various CAD tools. The specific format file to be used is assumed.

  The wrapping file is a data transmission / reception of a wrapping module having a function of releasing wrapping, an authentication module, a target file, a replacement module having a function of updating and / or rewrapping the target file, and rewrapped information. An apparently single file created by combining files containing any of the upload modules uploaded to the server. Hereinafter, in this specification, the first wrapping is simply referred to as wrapping or initial wrapping, and wrapping again at the client terminal is referred to as rewrapping.

  When the target file is wrapped as it is without data conversion, the unwrapped state is canceled and the wrapped file is decomposed into the original file, and the decompression module, authentication module, This means that the target file, replace module, etc. can be handled as individual files. The expansion module may be composed of a self-extracting function and a launcher function.

  In addition, when data conversion processing based on a predetermined algorithm such as encryption processing, compression processing, or a combination of encryption processing and compression processing is applied to the target file, expansion refers to the wrapping state. In addition to canceling the data, a decryption process is performed if the data conversion applied to the target file is an encryption process, and a decompression process is performed if the applied data conversion is a compression process. This refers to restoring the target file to a usable state by applying an inverse data conversion process based on the above algorithm.

  The use of the target file means to execute the target file when the target file is an executable file. When the target file is a file other than the execution format file, it means that the target file is applied to an execution format file such as an existing application program and executed. When the target file is composed of a first target file that is an executable format file and a second target file that is one or more files other than the executable format file, the second target file is included in the first target file. To apply and execute a file. Here, existing application programs include, for example, word processor software, spreadsheet software, still image, moving image reference, editing software, or CAD software for drawing reference, editing, update, etc. Software is included.

  In the license management method using encryption information disclosed in Patent Document 1, it is necessary to install a related program for managing a license such as an encryption program. In order to construct a license management system, a client terminal The user has to perform various procedures, which is not convenient for the user. In particular, when distributing a target file from a server to an unspecified user, requesting various procedures from the client terminal user is refrained from the user, so that the system can be widely used. It was an obstacle. Further, in the license management server, when distributing the target file requested to be distributed from the client terminal, the target file is modified to perform the license management related to the target file, or the license management sub-module is converted into the target file. However, it is necessary to develop a modification / addition program or the like according to the type of the target file, which requires a large development cost.

  In addition, users of distribution destinations (application service users) need to update even when there are changes or updates to parts that are not directly related to application functions, making it difficult to understand the differences between versions. . Furthermore, in an execution application that saves data in a cell, represented by a Microsoft Excel (registered trademark) macro application, input data cannot be reflected in the wrapping file, and the application range of the system is narrowed.

  The user of the client terminal does not only refer to the distributed target file but also changes the content of the target file. It has become necessary to take security measures for the modified target file and to register the modified target file with the management server again. However, in order to wrap the modified target file, it is necessary to install a wrapping tool on the client terminal. Furthermore, a change accompanying an upgrade of the wrapping tool itself is also expected. It has been a problem that the user of the client terminal performs these operations with a heavy burden.

  Although the target file distributed from the server to the user of the client terminal can monitor the expiration date, it is difficult to flexibly set or change the usage right such as update or change of the license period. In addition, it is difficult to freely perform version upgrade (exchange) of the target file after distribution, billing based on the frequency of use of the target file, and the like.

  The present invention has been made in view of the above circumstances. When distributing the target file, the client terminal wraps the replacement module for updating and re-wrapping the target file together with the target file at the client terminal, and the user of the client terminal that uses the target file updates the target file It is an object to make it possible to rewrap an updated target file.

  Furthermore, when authenticating the user of the client terminal, the server checks the version information of the wrapping tool (deployment module, replace module, etc.) and automatically updates it to the latest version of the module. The purpose is to improve convenience.

  Also, by including an upload module for uploading the rewrapped file to the server, the user of the client terminal can rewrap the updated target file and send it to the server. Become. As a result, the updated target file can be used by users of other client terminals. In other words, the updated target file can be shared with other users.

  Furthermore, by enabling re-wrapping by the user of the client terminal, the use after the re-wrapping requires a predetermined authentication procedure, and in that procedure, flexible setting of usage rights such as renewal and change of the license period, Changes can be made. In addition, it is possible to upgrade (exchange) the target file after distribution, and charge based on the frequency of use of the target file.

  In one embodiment of the present invention, in response to a target file delivery request from a client terminal, a server that transmits a wrapping file in which the target file is first wrapped via a communication network, and the wrapping file, The wrapping file including the client file received via the communication network and using the target file includes the target file, the expansion module, the authentication module, and the replacement module. The wrapping file is created and expanded by the expansion module, and each wrapped file becomes a state that can be handled as an individual file. The replacement module copies the replacement module, and the replacement module (or the copied replacement module) replaces the target file with the updated target file, and the target file (or update) The target file), the expansion module, the authentication module, and the copied replacement module (or replacement module) are re-wrapped, and the initial wrapping is performed at a predetermined terminal or the server, and the expansion and authentication are performed. , Replacement, and re-wrapping are performed at the client terminal.

  By having the above feature, the user of the client terminal can update the contents of the distributed target file and can further wrap the updated target file. The re-wrapped target file cannot be used unless the authentication procedure through the server is performed again, and the security of the updated target file can be ensured.

  According to an embodiment of the present invention, an upload module is further wrapped by the initial wrapping, re-wrapped by the replace module (or a copied replace module) at the client terminal, the upload module is copied, The upload module (or the copied upload module) is re-wrapped together with the expansion module and the like, and is uploaded to the server by the copied upload module (or upload module).

  By having the above characteristics, the updated target file can be uploaded to the server after rewrapping. The uploaded wrapping file is stored in the server, and the updated target file can be reliably stored, and can be used by other users, so that the target file can be shared by a plurality of users.

  In one embodiment of the present invention, the authentication module authenticates that the user is an authorized user of the target file, and the server includes the expansion module, the authentication module, the replacement module, and the replacement module included in the wrapping file. Each version information of the upload module is confirmed, the latest module is downloaded to the client terminal, and each wrapped module is replaced with the latest module.

  By having the above characteristics, version management of each module of the wrapping tool is performed, and each module included in the wrapping file is automatically replaced with the latest module when it is authenticated as an authorized user of the target file. . The user of the client terminal does not need to upgrade the wrapping tool, and can concentrate on the use, editing, and updating of the target file.

  In one embodiment of the present invention, after the data conversion process based on a predetermined algorithm such as an encryption process and a compression process is applied to the target file, and the wrapping file is expanded by the expansion module, the target file When the re-wrapping is performed by the replacement module (or the copied replacement module), the target file (or the updated target file) is encrypted and compressed. A data conversion process based on a predetermined algorithm is applied.

  By having the above characteristics, the security of distributed data can be ensured and the data can be compressed, so that the user of the client terminal can concentrate on the use, editing, and updating of the target file with confidence.

  One embodiment of the present invention is characterized in that a record relating to the time, number of times, frequency, etc. of the authentication procedure is stored in the server when the user is authenticated by the server.

  By having the above features, flexible management of the usable period of the target file, billing according to the number of times of use, collection of data regarding the use frequency, and the like can be performed.

  According to an embodiment of the present invention, URL information for receiving the email address of at least one user who receives the wrapping file from the provider of the target file and downloading the wrapping file, the user The mail address, ID for the user, and password are stored in the server, the ID and password are transmitted to the user, or URL information for uploading the rewrapped file is stored in the server. And storing for each user ID and transmitting the upload URL information to the user.

  By having the above characteristics, it is possible to manage URL information, ID information, password information, and the like for each user of the target file.

  One embodiment of the present invention is characterized in that the initial wrapping is performed in a predetermined terminal, and the wrapped file is transmitted to the server.

  By having the above characteristics, it becomes possible to perform wrapping work at a place other than the server, and this system can be used even in a form where the person who provides the target file and the person who manages the server are different.

In one embodiment of the present invention, a server that transmits an initially wrapped target file to a client terminal via a communication network, the first wrapped file that is received via the network, and the target In a data transmission / reception service system configured with the client terminal using a file,
(A) First wrapping the target file, a deployment module for releasing wrapping, an authentication module for authenticating a user of the target file, and a replace module for updating and rewrapping the target file;
(B) the wrapped file is transmitted from the server to the client terminal via the communication network;
(C) The received wrapping file is released from a wrapping state by the expansion module, and the authentication module is executed;
(D) the authentication module authenticating a user of the target file to the server;
(E) After the authentication is performed, the user of the client terminal performs any one or more of use of the target file, change of contents, and update of the file;
(F) The replacement module copies the replacement module, updates the target file if necessary, the target file (or the updated target file), the expansion module, the authentication module, and the replacement And rewrapping the module (or the copied replacement module).

  By having the above feature, the user of the client terminal can update the contents of the distributed target file and can further wrap the updated target file. The re-wrapped target file cannot be used unless the authentication procedure through the server is performed again, and the security of the updated target file can be ensured.

  In one embodiment of the present invention, the upload module is further wrapped in the step (A), the upload module further copies the upload module in the step (F), and the step (F). And (G) the upload module (or the copied upload module) uploads the rewrapped file to the server.

  By having the above characteristics, the updated target file can be uploaded to the server after rewrapping. The uploaded re-wrapping file is stored on the server, and the updated target file can be securely stored, and can also be used by other users, so that the target file can be shared by multiple users. .

  In one embodiment of the present invention, when it is authenticated in step (D) that the user is an authorized user of the target file, (D1) the expansion module included in the wrapping file at the server Each version information of the authentication module, the replacement module, and the upload module is confirmed, the latest module is downloaded to the client terminal, and each wrapped module is replaced with the latest module. And

  By having the above features, the version management of each module of the wrapping tool is performed by the server, and when it is authenticated that the user is the authorized user of the target file, each module included in the wrapping file is automatically updated to the latest module. Will be replaced. The user of the client terminal does not need to upgrade the wrapping tool and can concentrate on the use, editing, and updating of the target file.

In one embodiment of the present invention, when it is authenticated in step (D) that the user is a regular user, the target file is further based on a predetermined algorithm such as encryption processing, compression processing, etc. After the data conversion process is applied and the wrapping file is expanded by the expansion module, the decryption process and the decompression process of the target file are performed,
In the step (F), when re-wrapping is performed by the replacement module (or the copied replacement module), the target file (or the updated target file) is subjected to predetermined processing such as encryption processing and compression processing. A data conversion process based on the algorithm is applied.

  By having the above characteristics, the security of distributed data can be ensured and the data can be compressed, so that the user of the client terminal can concentrate on the use, editing, and updating of the target file with confidence.

  One embodiment of the present invention is characterized in that the step of performing the first wrapping in (A) is performed in a predetermined terminal, and the wrapped file is transmitted to the server.

  By having the above characteristics, it becomes possible to perform wrapping work at a place other than the server, and this system can be used even in a form where the person who provides the target file and the person who manages the server are different.

  According to the present invention, the user of the client terminal can rewrap after updating the target file distributed from the server, and is freed from wrapping tool installation work, wrapping tool version upgrade work, and the like. More specifically, since the first wrapped information includes a replacement module and an upload module in addition to the expansion module and the authentication module, the user of the client terminal can download and distribute the target file. A series of operations such as file update, upload, and re-download can be performed without being aware of the version of the wrapping tool.

According to the present invention, by re-wrapping a target file used, edited, or updated by a user of a client terminal after the work is completed, security management of the target file can be entrusted to the data transmission / reception server.
According to the present invention, a user of a client terminal can share the target file with other client terminal users by re-wrapping and uploading the target file edited and updated to the transmission / reception server. More specifically, a plurality of physically separated workers can jointly use, edit, and update the target file via the data transmission / reception server.

It is a figure which shows the example of the network structure of the data transmission / reception service system which concerns on this invention. It is a system configuration | structure figure which shows an example of the hardware constitutions of the data transmission / reception server of the data transmission / reception service system which concerns on this invention. It is a system configuration | structure figure which shows an example of the hardware constitutions of the client terminal of the data transmission / reception service system which concerns on this invention. It is a conceptual diagram which shows embodiment of the data transmission / reception service system which concerns on this invention. It is a flowchart figure which shows an example of the procedure which produces the wrapping file which concerns on this invention. It is a flowchart figure which shows an example of the procedure which authenticates the user of the object file which concerns on this invention.

DESCRIPTION OF SYMBOLS 1 Data transmission / reception server 2 Communication network 3 Client terminal (3a, 3b, ... 3n)
11 Keyboard 12 Mouse 13 Display 14 Network Interface Unit 15 Input / Output Interface Unit 16 Control Unit 17 File Transmission / Reception Unit 18 File Storage Unit 19 Deployment Module Storage Unit 20 Authentication Module Storage Unit 21 Replace Module Other Storage Unit 22 Temporary Storage Unit 23 Authentication Information Storage Unit 24 client terminal information storage unit 31 network interface unit 32 input / output interface unit 33 control unit 34 file transmission / reception unit 35 main storage device 36 file storage unit 37 authentication information storage unit

  Hereinafter, a data transmission / reception service system and method according to the present invention will be described based on embodiments. These embodiments are described to help understanding of the present invention, and the present invention will be described below. It is not intended to be limited to what has been described.

  Embodiments according to the present invention will be described below with reference to the accompanying drawings. FIG. 1 is a diagram showing an example of a network configuration of a data transmission / reception service system according to the present invention. The data transmission / reception server 1 is connected to client terminals 3a, 3b,... 3n via a communication network 2. In the present invention, in the distribution of the target file via the Internet, in the data transmission / reception service system for managing the usage permission of the target file for each user, or in the corporate network via the intranet, the file stored in the server, A data transmission / reception service system that prevents unauthorized use by employees, or multiple companies using their respective client terminals 3a, 3b,... 3n to jointly update the target file distributed from the data transmission / reception server 1. It is intended to be applied to work forms etc.

  FIG. 2 is a diagram showing an example of the system configuration of the data transmission / reception server according to the present invention. In FIG. 2, 14 is a network interface unit, and 16 is a control unit such as a CPU. For example, the wrapping file stored in the temporary storage unit 22 is distributed to the client terminal 3 via the communication network 2 by the file transmission / reception unit 17. Reference numeral 18 denotes a file storage unit that stores a target file to be distributed to the client terminal, 19 denotes a decompression module, 20 denotes an authentication module, and 21 denotes a storage unit (for example, a hard disk) that stores a replace module, an upload module, and the like.

  FIG. 3 is a diagram illustrating an example of a system configuration of the client terminal 3. Reference numeral 31 denotes a network interface unit that controls communication with the communication network 2, and reference numeral 33 denotes a control unit that includes a CPU or the like. An authentication information storage unit 37 stores authentication information such as a user ID and a password (for example, a hard disk).

Example 1
FIG. 4 is a diagram showing an example of a working mode using the data transmission / reception service system according to the present invention. The data transmission / reception server is shown in the upper right of the figure, and the client terminal is shown in the lower right. The processing outline of the wrapping tool is shown in the upper left of the figure. The wrapping tool is assumed to operate on a computer terminal having a hardware configuration equivalent to that of the client terminal, but can also operate in the data transmission / reception server. In the following description, the target file is described as an executable application file, but various files such as a design drawing, a CAD drawing, a still image, a moving image, and a text file can be targeted.

  As an example of an embodiment of the system of the present invention, for example, a wrapping tool operates on a terminal (not shown) of company A that is a provider of a distribution target file, and a data transmission / reception server provides a data transmission / reception service B It is assumed that the client terminal is installed in a company and the client terminal is installed in one of a plurality of companies, for example, company C, receiving the service. The wrapping tool may be configured to operate on a server of company B, and the client terminal may be configured to be used by a plurality of organizations or individuals such as company D and company E in addition to company C.

  Company A can entrust management data created in-house to the data transmission / reception server of Company B by contract with Company B. First, as a procedure for confirming that the company is an authorized user of the wrapping tool provided by Company B, Company A accesses the server of Company B through a network such as the Internet, and performs an authentication procedure for authenticity of the authorized user. Perform ((1) Tool user authentication). The user of company A authenticated by the procedure wraps the data to be distributed using the wrapping tool provided by company B ((2) wrapping).

  The wrapping is a deployment module that decompresses the wrapped information, an authentication module that performs an authentication procedure for the data transmission / reception server, a replacement module that performs update (replacement) and rewrapping of the distributed target file, and data that is wrapped. By combining files including any of the upload modules uploaded to the transmission / reception server, an apparent single file is obtained.

  Transmission information for uploading the wrapped information to the data transmission / reception server is set ((3) transmission information setting), and information is first (wrapped) from the terminal of company A to the data transmission / reception server of company B Is uploaded ((4) Upload). The uploaded information is stored, for example, in a database of a server of company B named request DB, and is stored and managed by the data transmission / reception server.

  Company C, which uses, edits, and updates the wrapped information stored in the company B server, accesses the data transmission / reception server of company B via the network. After the predetermined procedure, the wrapped information is downloaded to the client terminal ((5) Download).

  The downloaded wrapping information is released from the wrapping state by the self-decompression function of the expansion module, and the target file and various modules that have been wrapped are expanded. FIG. 4 shows only the target file (displayed as data in the figure) and the authentication module (displayed as authentication M) in the downloaded wrapping information. The same information as the wrapped information shown on the left) is downloaded in a batch.

  The wrapped information is expanded (self-decompressed) by the expansion module, so that the expansion module, the authentication module, the target file, the replacement module, and the like can be handled as individual files.

  When the deployed authentication module is executed by the launcher function of the deployment module, the client terminal authenticates whether the user is a legitimate user, ID, password, and license It is performed based on the period etc. ((6) Authentication). If the user is recognized as a legitimate user, the downloaded target file is decrypted and decompressed as necessary ((7) decompression). After that, it becomes possible to use and edit the target module ((8) editing).

  In this authentication process, the data transmission / reception server can manage versions of the expansion module, authentication module, replacement module, etc. included in the first wrapping file. That is, the version information of each module is checked, and if there is a module that is not the latest version, the latest module is downloaded to the client terminal. The latest downloaded module is replaced with the corresponding module that was wrapped. The user of the client terminal automatically replaces each module of the wrapping tool with the latest version. Therefore, the user does not need to perform the wrapping tool installation work and version upgrade work, and can concentrate on work such as use and editing of the distributed target file.

  Thereafter, the user of the client terminal uses the distributed target file. That is, when the target file is an executable file, the file is executed. If the file is not an executable format file, it is applied to an existing application program (for example, a CAD tool) and executed.

There may be various forms in which the user of the client terminal uses the distributed target file. For example,
(A) Case of using the target file but not changing its contents (b) Case of using the target file and changing part of it (c) Changing the contents of the target file and changing the target file (D) I want to prevent third-party browsing and use until the next use or update after using or updating the target file (take security measures) ) Cases can be assumed. In the cases (c) and (d) above, re-wrapping of the target file by the user of the client terminal is particularly necessary.

  The user of the client terminal performs re-wrapping using the replacement module (indicated as “replace M” in the figure) that has been wrapped and then decompressed ((9) replace). At this time, if the contents of the distributed work file (data) are changed and it is desired to replace the work file after the change, the replacement module performs rewrapping after updating (replacement) of the file. In FIG. 4, the data of the work file before the update is indicated as “data”, and the data of the updated work file is indicated as “data 2”. In the figure, only the updated work file (data 2), the replace module (replace M), and the upload module (upload M) are shown as re-wrapped information. As shown in FIG. 4, the rewrapped information includes a deployment module and an authentication module.

  In the case of (d) above (security countermeasure), for example, when the target file is being updated, but the operation is interrupted, a form of re-wrapping the target file updated at that time can be considered. In order to decompress the wrapped information, the above-described authentication procedure for the data transmission / reception server ((6) authentication) is required. Even if the target file being worked out leaks at night or on holidays, By wrapping the file, it is possible to prevent the contents of the target file from being known to a third party.

  When editing and updating of the distributed target file on the client terminal is completed, the updated working file may be re-wrapped and the wrapped information may be uploaded to the data transmission / reception server. . At that time, the upload module included in the first wrapped information is executed ((10) upload).

  The updated work file uploaded to the data transmission / reception server managed by company B can be used by a user other than company A or company C, for example. The procedure at that time is the same as the work on the client terminal ((5) download, (6) authentication, (7) decompression), but the content of the target file is changed from “data” to “data 2”. Therefore, (11) download (data 2) and (12) decompression (data 2) are shown in the upper left of FIG.

  According to the present invention, it is possible to manage, charge, etc., that a user such as company C uses a target file distributed. That is, in order for a user to use a target file that has been wrapped or rewrapped, an authentication procedure by an authentication module is required. In the above authentication procedure ((6) authentication), when it is necessary to restrict the use of the distributed target file, the data transmission / reception server indicates that the target file has expired and cannot be used. And the like can be transmitted to the client terminal (step S25 in FIG. 6 described later).

  Alternatively, in the form of adopting a charging system according to the number of times the target file is used, the number of times the target file has been downloaded through the authentication procedure is recorded in, for example, the “request DB” of the data receiving server, and It is also possible to charge the user. The data to be recorded in the “request DB” includes the time, number of times, frequency, etc. of the authentication procedure, as well as the download of the target file, the number of uploads, the number of updates of various modules, the total capacity of transmitted and received data, and various other types of data. Management data can be recorded.

  Further, the company B can provide data as a basis for paying the usage fee of the file to the company A that is the provider of the distribution target file. It is possible for the company A, the provider of the target file, to know how often the target file is used by each user, and it can be used for marketing surveys of the target file. It can be used in various business forms.

  The data transmission / reception server receives a mail address of at least one user who is the distribution destination of the target file from the company A that is the distribution target file provider, and a URL (Uniform) for downloading the wrapping file of the target file Resource Locator) information, ID for each user, and password information are stored and managed. The server transmits the ID and password information for the user to each user.

  Further, the data transmission / reception server stores and manages URL information for uploading the rewrapped file for each user ID. The URL information can be a different URL for each user. The data transmission / reception server transmits the URL information for upload to each user.

  As described above, for convenience of explanation, the “development module”, “authentication module”, “replacement module”, and “upload module” have been described separately. However, how these module configurations and functions of each module are specifically divided Can be designed freely. For example, the expansion module is divided into “self-extracting module” and “launcher module”, and the replacement module is divided into “replacement module” and “re-wrapping module”. It is also possible within the scope of the present invention to execute the decryption processing and decompression processing of the target file with the “authentication module” or with the “decompression module”.

  Next, an example of a procedure for creating a wrapping file from a wrapping tool in a predetermined terminal or data transmission / reception server will be described with reference to the flowchart of FIG. The expansion module, authentication module, replacement module, and the like are taken out from the respective storage units (19, 20, 21) (steps S11, S12, S13). The expansion module may further be composed of a self-extracting module and a launcher module. The self-decompression module is a module that releases the wrapped self-module from the wrapping state. The launcher module may be a module that activates an authentication module, execution of a target file, a replace module, an upload module, and the like. For example, activation according to the type of the target file, monitoring of the usage state, deletion of the target file, and the like are performed. Next, the target file is taken out from the file storage unit (18) (step S14). Finally, various files to be distributed are combined with the assembly of these modules to create a wrapping file (step S17).

  An embodiment in which the process of creating the wrapping file is performed not by the data transmission / reception server but by the terminal of the target file creation source (Company A) is also possible. In this case, based on the expansion module, authentication module, replacement module, and upload module sent as wrapped information from the data transmission / reception server of company B in advance, the objects created by company A for these modules A wrapping file may be created by combining modules. By downloading the wrapping file in which the latest version of the module is wrapped from company B, company A does not need to perform wrapping tool installation work, version update work, or the like.

  On the other hand, FIG. 6 shows an example of the procedure of expansion, authentication, decompression, and execution of the target file at the client terminal where the wrapping file has been downloaded. The wrapping file downloaded from the data transmission / reception server is released from the wrapping state by executing the self-decompression function of the expansion module (step S21). The expansion module activates the launcher module (step S22). Further, the launcher module activates the authentication module, and the authentication information is transmitted to the data transmission / reception server by the authentication module (step S23). The restoration of the target file may be performed by the authentication module (step S26). When the data transmission / reception server authenticates that the user of the client terminal is a legitimate user, the target file may be executed by the launcher module (step S27).

  When the user of the client terminal performs re-wrapping after using, editing, and updating the distributed target file, the copied replace module is executed. The replacement module replaces the distributed target file with the updated target file. After that, the unwrapping module, authentication module, target module (or updated target module), replace module (or copied replacement module), and upload module (or copied upload module) included in the wrapping file are rewrapped. To do.

  At this time, when data conversion processing based on a predetermined algorithm such as encryption processing or compression processing is applied to the target file, the target file (or the updated file) is used when wrapping is performed by the replacement module. Data conversion processing based on a predetermined algorithm such as encryption processing and compression processing is applied to the target file).

  The copy of the replace module and the upload module is to copy the same module as itself for re-wrapping and for upload after re-wrapping. Actually, the module for performing re-wrapping or uploading may be a module that was originally wrapped or a copied module. Modules that have performed rewrapping or uploading may then disappear.

In a form where only the target file is used and editing and updating are not performed, rewrapping may be performed for security measures of the target file. When the user who used the target file on the terminal leaves the terminal, even if the target file leaks out by re-wrapping, authentication work is required to cancel the wrapping state. There is an advantage that the security of the target file is easy to be protected.
(Example 2)

  In the above embodiment, it is assumed that the target file is distributed between the server and the client terminal via the network. However, even in a closed computer system not via the network, the important file is wrapped and expanded. , Authentication, use, editing, updating, and rewrapping are possible.

  The present invention relates to a data transmission / reception service system and method thereof, and more particularly, to create a wrapping file including a data file to be distributed, a deployment module, an authentication module, a replacement module, and an upload module from a data transmission / reception server. A data transmission / reception service system capable of delivering a wrapping file via a communication network to a client terminal that requested delivery of the target file, and re-wrapping and uploading the target file updated on the client terminal to a server And its method.

Claims (12)

In response to a delivery request for the target file from the client terminal, via the communication network, a server that transmits the wrapping file in which the target file is first wrapped, and the wrapping file are received via the communication network, The client terminal using the target file,
By the first wrapping, a wrapping file including the target file, an expansion module, an authentication module, and a replacement module is created,
The wrapping file is expanded by the expansion module, and each wrapped file can be handled as an individual file.
The authentication module authenticates that the user is a regular user by inquiring the server,
The replacement module copies the replacement module, and the replacement module (or the copied replacement module) replaces the target file with the updated target file, and the target file (or the updated target file). , The deployment module, the authentication module, and the copied replace module (or replace module) are re-wrapped,
The data transmission / reception service system, wherein the first wrapping is performed by a predetermined terminal or the server, and the expansion, authentication, replacement, and rewrapping are performed by the client terminal.   The upload module is further wrapped by the initial wrapping, and is re-wrapped by the replace module (or the copied replace module) at the client terminal, the upload module is copied, and the upload module (or the copied upload is copied). Module) is re-wrapped together with the deployment module, authentication module, target file, and replace module, and the re-wrapped file is uploaded to the server by the copied upload module (or upload module). The data transmission / reception service system according to claim 1, wherein:   The authentication module authenticates that the user is an authorized user, and the server confirms each version information of the expansion module, authentication module, replace module, and upload module included in the wrapping file. 3. The data transmission / reception service system according to claim 1, wherein the latest module is downloaded to the client terminal and each wrapped module is replaced with the latest module.   Data conversion processing based on a predetermined algorithm such as encryption processing and compression processing is applied to the target file, and after the wrapping file is expanded by the expansion module, the target file is decrypted and decompressed. When the re-wrapping is performed by the replacement module (or the copied replacement module), data based on a predetermined algorithm, such as encryption processing and compression processing, is applied to the target file (or the updated target file). The data transmission / reception service system according to any one of claims 1 to 3, wherein conversion processing is applied.   The server stores various management data such as the time, frequency, and frequency of the authentication procedure, or marketing information when the user is authenticated by the server. 5. The data transmission / reception service system according to any one of 4. The mail address of at least one user who receives the wrapping file is received from the provider of the target file, the URL information for downloading the wrapping file, the mail address of the user, the user's mail address, Store the ID and password in the server and send the ID and password to the user, or
The URL information for uploading the rewrapped file is stored in the server for each ID for the user, and the URL information for upload is transmitted to the user. The data transmission / reception service system according to claim 5.   The data transmission / reception service system according to claim 1, wherein the initial wrapping is performed in a predetermined terminal, and the wrapped file is transmitted to the server. From the server that transmits the first wrapped file to the client terminal via the communication network, and the client terminal that receives the first wrapped file through the network and uses the target file. In the configured data transmission / reception service system,
(A) First wrapping the target file, a deployment module for releasing wrapping, an authentication module for authenticating a user of the target file, and a replace module for updating and rewrapping the target file;
(B) the wrapped file is transmitted from the server to the client terminal via the communication network;
(C) The received wrapping file is released from a wrapping state by the expansion module, and the authentication module is executed;
(D) the authentication module authenticating a user of the target file to the server;
(E) After the authentication is performed, the user of the client terminal performs any one or more of use of the target file, change of contents, and update of the file;
(F) The replace module copies the replace module, updates the target file if necessary, and the target file (or updated target file), expansion module, authentication module, replace module (or copied) A data transmission / reception service method comprising: a step of re-wrapping a replacement module. In the step (A), the upload module is further wrapped. In the step (F), the upload module further copies the upload module. After the step (F),
(G) the upload module (or copied upload module) uploads the rewrapped file to the server;
The data transmission / reception service method according to claim 8, comprising: When it is authenticated in the step (D) that the user is a regular user of the target file,
(D1) The server confirms the version information of the expansion module, authentication module, replacement module, and upload module included in the wrapping file, and the latest module of each module is downloaded to the client terminal and wrapped. Each module was replaced with the latest module,
The data transmission / reception service method according to claim 8 or 9, characterized by comprising: In the step (D), when it is authenticated that the user is an authorized user of the target file, data conversion processing based on a predetermined algorithm such as encryption processing and compression processing is further applied to the target file. Sometimes, after the wrapping file is expanded by the expansion module, the target file is decrypted and decompressed,
In the step (F), when re-wrapping is performed by the replacement module (or the copied replacement module), the target file (or the updated target file) is subjected to predetermined processing such as encryption processing and compression processing. 11. The data transmission / reception service method according to claim 8, wherein a data conversion process based on the algorithm is applied.   9. The data transmission / reception service method according to claim 8, wherein the first wrapping step (A) is performed in a predetermined terminal, and the wrapped file is transmitted to the server.

Images