JP5493696B2 - Information processing system, information processing apparatus, and program - Google Patents

Description

  The present invention relates to an information processing system, an information processing apparatus, and a program.

  In a service such as ASP (Application Service Provider) or SaaS (Software as a Service) that provides an application via a network, when a user of the service processes and stores data on a server operated by the service provider, , Putting your data under the control of others, you may feel security anxiety. For this reason, a technique for improving information security in a technique for providing an application via a network has been proposed.

  For example, in the technology described in Patent Document 1, a business software processing result recording unit is provided in a company terminal that uses business software provided by an ASP company, and the computer system on the ASP company side receives a report from a company user. When the business software is transmitted in response to the access, an execution file for writing the processing result of the business software in the recording unit of the company terminal is also transmitted.

  In the technique described in Patent Document 2, a local database in which personal information is stored is provided in a terminal connected to a server that executes business processing via the Internet. When the terminal receives the result of processing executed by the server in response to a request from the terminal, the terminal synthesizes the received processing result with the corresponding personal information in the local database and displays or prints the result.

  In the technology described in Patent Literature 3, in an information processing system having a client for a user to input / output data and a server for storing data in a database, data input / output communication is performed behind a Web browser in the client. A function is provided to intervene and encrypt / decrypt data so that the data is encrypted on the server side.

JP 2002-163232 A JP 2002-99511 A JP 2005-242740 A

  In a technique for providing an application via a network, it is desired that a value of data to be processed cannot be acquired in a server under the control of the application provider from the viewpoint of ensuring security. However, if the server under the control of the application provider cannot obtain the value of the data to be processed, the process that uses the data value cannot be executed by the application, and the process that can be executed by the application There will be restrictions.

  An object of the present invention is to provide an information processing system, an information processing apparatus, and a program for ensuring the security of data to be processed and reducing restrictions on processing according to an application in a technique for providing an application via a network. That is.

The invention according to claim 1 is a first information processing apparatus that provides an application, and a second information processing apparatus connected to the first information processing apparatus via first communication means, wherein the first communication means A second information processing device connected to the terminal device via a different second communication means, the first information processing device responding to the processing request according to the application from the terminal device, the processing request The first communication means transmits a response including procedure information indicating the procedure of the processing according to the requested application in a format including data identification information for specifying the data to be processed requested in Response sending means, wherein the second information processing apparatus stores data that can be processed and associated with the data identification information that identifies the data; The data represented by the data identification information in the procedure information included in the response received from the first information processing apparatus via one communication unit is read from the storage unit, and the received response to the read data Processing execution means for executing the processing of the procedure represented by the procedure information included in, and result transmission means for transmitting the result of the processing by the processing execution means to the terminal device by the second communication means, An information processing system characterized by this.

  The invention according to claim 2 is the invention according to claim 1, wherein the second information processing device receives the input request when receiving an input request including data from the terminal device via the second communication means. Registration means for registering the data included in the storage means in association with the data identification information for identifying the data, and notification information indicating that the data included in the input request is registered in the storage means, Notification information transmitting means for transmitting to the first information processing apparatus using first communication means.

  According to a third aspect of the present invention, in the first or second aspect of the invention, the response transmitted by the response transmission unit is a process to be executed when data is registered in the storage unit of the second information processing apparatus. The registration means registers the data included in the input request in the storage means in accordance with the procedure described in the registration procedure information.

  According to a fourth aspect of the present invention, in the invention according to any one of the first to third aspects, the response transmitted by the response transmitting means is a display device that displays the result of the processing requested by the processing request. Display control information for controlling the display mode of the second information processing device, wherein the result transmission means of the second information processing device executes the processing of the display control information included in the response transmitted by the first information processing device. It transmits to the said terminal device with the result of the process by a means.

  According to a fifth aspect of the present invention, in the first aspect of the invention according to any one of the first to fourth aspects, the first information processing apparatus stores data that can be processed, and processing from the terminal apparatus Of the processing requested by the request, execute processing for processing the data stored in the storage unit of the first information processing apparatus, and the result of execution of this processing and the processing requested by the processing request Among them, the procedure information that represents the procedure of the process that targets the data stored in the storage unit of the second information processing apparatus in a format that includes the data identification information of the data that is the target of the process. Response generation means for generating a response, wherein the response transmission means transmits the response generated by the response generation means by the first communication means.

  The invention according to claim 6 is the invention according to claim 5, wherein in the first information processing device and the second information processing device, which data is stored in the first information processing device and the second information processing device. It is possible to refer to registration location information indicating which of the storage means of the apparatus should be registered, and the second information processing apparatus has received an input request including data from the terminal device via the second communication means The registration location information is referred to, and if the data included in the input request is to be registered in the storage means of the second information processing apparatus, the data included in the input request is the data of the data Registration means for registering in the storage means of the second information processing apparatus in association with identification information; and referring to the registration location information, and the data included in the input request is the first information processing apparatus. Input request transmitting means for transmitting the input request to the first information processing apparatus using the first communication means if it is to be registered in the storage means. The apparatus further includes registration means for registering data included in the input request in the storage means of the first information processing apparatus when the input request is received from the second information processing apparatus.

  The invention according to claim 7 is the invention according to any one of claims 1 to 4, wherein in the first information processing apparatus, encrypted data that can be processed and encrypted, and The encrypted data storage means that stores the data identification information of the encrypted data in association with each other, and the encrypted data storage means among the data that is the target of the processing requested by the processing request from the terminal device. The requested encrypted data is read from the encrypted data storage means, and the requested processing procedure in a format including the read encrypted data and the data identification information of the data to be processed requested by the processing request. Response generation means for generating a response including the response information, wherein the response transmission means transmits the response generated by the response generation means to the first communication means. The second information processing apparatus further includes a decryption unit that decrypts the encrypted data included in the response, and the process execution unit reads the data decrypted by the decryption unit and the storage unit The process of the procedure represented by the procedure information included in the response is executed on the received data.

  The invention according to claim 8 is the invention according to claim 7, wherein in the first information processing apparatus and the second information processing apparatus, which data is stored in the encrypted data storage means of the first information processing apparatus and the second information processing apparatus. It is possible to refer to registered location information indicating which of the storage means of the second information processing apparatus should be registered, and the second information processing apparatus sends an input request including data from the terminal device via the second communication means. If the data included in the input request is to be registered in the storage means of the second information processing apparatus with reference to the registered location information, the data included in the input request is Registration means for registering in the storage means of the second information processing apparatus in association with the data identification information, and referring to the registration location information, and the data included in the input request is the first information If it is to be registered in the storage means of the information processing apparatus, the first information processing apparatus sends the input request including the encryption means for encrypting the data and the encrypted data encrypted by the encryption means. Input request transmitting means for transmitting to the first information processing apparatus, wherein the first information processing apparatus receives the input request when receiving the input request from the second information processing apparatus. Registration means for registering the encrypted data included in the encrypted data storage means in association with the data identification information of the encrypted data.

The invention according to claim 9 is a first information processing apparatus that provides an application, and a second information processing apparatus connected to the first information processing apparatus via first communication means, wherein the first communication means A second information processing device connected to the terminal device via different second communication means, wherein the first information processing device encrypts data that can be processed and the encrypted data. In response to a processing request in accordance with an application from the terminal device, the storage unit that stores the data identification information for specifying the data identification information, the encrypted data of the data that is the target of the processing requested by the processing request the reading from the memory means, read and encrypted data, read hands of the data identification information according to the requested application in a format that includes the processing of the encrypted data And a response transmission means for transmitting a response including the procedure information representing the first communication means, wherein the second information processing apparatus is included in the response transmitted by the first information processing apparatus. Decryption means for decrypting encrypted data, and process execution means for executing the process of the procedure represented by the procedure information included in the response transmitted by the first information processing apparatus for the data decrypted by the decryption means And a result transmission means for transmitting the result of the process by the process execution means to the terminal device by the second communication means.

  The invention according to claim 10 is the invention according to claim 9, wherein the second information processing device receives the input request when receiving an input request including data from the terminal device via the second communication means. Encryption means for encrypting data included in the encrypted data transmission, and encrypted data transmission for transmitting the encrypted data encrypted by the encryption means to the first information processing apparatus using the first communication means Means for registering the encrypted data transmitted by the second information processing apparatus in the storage means in association with the data identification information of the encrypted data, Is further provided.

The invention according to claim 11 is a first information processing apparatus that provides an application, a terminal device connected to the first information processing apparatus via first communication means, and a second communication different from the first communication means. A second information processing device connected to the terminal device via means, wherein the first information processing device is requested by the processing request in response to a processing request according to an application from the terminal device. A response including procedure information indicating a procedure of processing according to the requested application in a format including data identification information for specifying data to be processed is sent to the terminal device by the first communication unit. Response transmitting means for transmitting to the terminal device, wherein the terminal device receives the procedure information included in the response received from the first information processing apparatus via the first communication means as the second information. Transmitting means for transmitting to the second information processing apparatus by a communication means, wherein the second information processing apparatus stores data that can be processed in association with the data identification information that identifies the data The procedure information is received from the terminal device via the storage means and the second communication means, the data represented by the data identification information included in the received procedure information is read from the storage means, and the read data is A process execution unit that executes the process of the procedure represented by the received procedure information; and a result transmission unit that transmits a result of the process performed by the process execution unit to the terminal device by the second communication unit. This is an information processing system characterized by that.

  The invention according to claim 12 is the invention according to claim 11, wherein the response transmitted by the response transmission unit of the first information processing apparatus registers data in the storage unit of the second information processing apparatus. Further including registration procedure information describing a procedure of processing to be executed, and the transmission means of the terminal device further transmits the registration procedure information included in the response to the second information processing device, The process execution means of the second information processing apparatus further registers data and the identification information of the data in association with the storage means in accordance with the process of the procedure represented by the registration procedure information received from the terminal device. .

  The invention according to claim 13 is the invention according to any one of claims 1 to 12, wherein the data to be processed includes a numerical value, and the processing of the procedure represented by the procedure information includes an operation on the numerical value. .

According to the fourteenth aspect of the present invention, there is provided storage means for storing data that can be processed and data identification information for specifying the data in association with each other, and other information processing in response to a processing request in accordance with an application from the terminal device. A response that is transmitted by the apparatus and includes procedure information that represents a procedure of processing according to the requested application in a format that includes the data identification information of the data to be processed requested by the processing request. When the data is acquired, the data represented by the data identification information in the procedure information included in the response is read from the storage unit, and the processing of the procedure represented by the procedure information included in the response is performed on the read data And a result transmitting means for transmitting the result of the process performed by the process executing means to the terminal device. It is an information processing apparatus according to symptoms.

According to the fifteenth aspect of the present invention, the computer refers to the storage means that stores the data that can be processed and the data identification information that identifies the data in association with each other, and responds to the processing request according to the application from the terminal device. Response information sent by another computer, and procedure information representing the procedure of the process according to the requested application in a format including the data identification information of the data to be processed requested by the process request Is acquired from the storage unit, the procedure information included in the response represents the read data. Executing the process of the procedure; and transmitting the result of the execution of the process to the terminal device. Is a program.

According to a sixteenth aspect of the present invention, in response to a processing request in accordance with an application from a terminal device that can use a storage unit that stores and stores data to be processed and data identification information that identifies the data, the processing request A response including procedure information representing the procedure of processing according to the requested application in a format including the data identification information of the data to be processed requested in step 1 is sent to the other information processing apparatus. Response transmitting means for transmitting by communication means , and the other information processing apparatus is connected to the terminal device by second communication means different from the first communication means, and the response is sent via the first communication means. An information processing apparatus that receives and executes processing of a procedure represented by the procedure information included in the response .

In the invention according to claim 17, in response to a processing request in accordance with an application from a terminal device that can use a storage unit that stores and associates data to be processed with data identification information that identifies the data, A response including procedure information representing a procedure of processing according to the requested application in a format including the data identification information of the data to be processed requested by the processing request is sent to another information processing apparatus. Transmitting by the first communication means , the other information processing apparatus is connected to the terminal device by a second communication means different from the first communication means, and the first communication means via the first communication means A program that receives a response and executes processing of a procedure represented by the procedure information included in the response .

According to an eighteenth aspect of the present invention, the first communication is performed with another information processing apparatus including a storage unit that stores encrypted data obtained by encrypting data that can be processed and identification information that identifies the encrypted data in association with each other. Connected to the terminal device via a second communication means different from the first communication means, and transmitted from the other information processing apparatus in response to a processing request according to an application from the terminal device. A response, the encrypted data read from the storage means, the encrypted data of the data to be processed requested by the processing request, and the data identification of the read encrypted data a procedure information by including the information format showing a procedure of processing according to the requested application, a response containing, when receiving via the first communication means, in the response Decryption means for decrypting the encrypted data, process execution means for executing the process of the procedure represented by the procedure information included in the response to the data decrypted by the decryption means, and the process execution means And a result transmitting means for transmitting the result of the processing by the second communication means to the terminal device.

According to the nineteenth aspect of the present invention, there is provided a first communication unit in another computer including a storage unit that stores encrypted data obtained by encrypting data that can be processed and identification information that identifies the encrypted data in association with each other. A response transmitted by the other computer in response to a processing request in accordance with an application from the terminal device to a computer connected to the terminal device via a second communication unit different from the first communication unit. The encrypted data read from the storage means and the data to be processed requested by the processing request, and the data identification information of the read encrypted data a procedure information in inclusive format showing a procedure of processing according to the requested application, a response containing, received via the first communication means situ A decrypting step of decrypting the encrypted data included in the response; and a process executing step of executing processing of a procedure represented by the procedure information included in the response with respect to data decrypted by the decrypting step; And a result transmission step of transmitting the result of the process in the process execution step to the terminal device by the second communication means.

The invention according to claim 20 is a storage means for storing encrypted data obtained by encrypting data that can be processed and identification information for identifying the encrypted data, and processing according to an application from the terminal device In response to the request, the encrypted data of the data to be processed requested by the processing request is read from the storage unit, and includes the read encrypted data and the data identification information of the read encrypted data. Response transmission means for transmitting a response including a procedure information representing a procedure of processing according to the requested application in the form of the first communication means to another information processing apparatus, and the other The information processing apparatus includes a decryption unit connected to the terminal device by a second communication unit different from the first communication unit, and decrypts the encrypted data. Preparative an information processing apparatus according to claim.

The invention according to claim 21 causes a computer to refer to storage means that stores encrypted data obtained by encrypting data that can be processed and identification information that identifies the encrypted data in association with each other. In response to the processing request according to the application, the encrypted data of the data to be processed requested by the processing request is read from the storage unit, the read encrypted data, and the read encrypted data Transmitting a response including a procedure information indicating a procedure of processing according to the requested application in a format including data identification information to the other information processing apparatus by the first communication unit. The other information processing device is connected to the terminal device by a second communication means different from the first communication means, and decrypts the encrypted data. It comprises a decryption means that a program characterized by.

According to the invention according to claim 1, 11, 14, 15, 16, or 17, in the technology of providing an application via a network, while ensuring the security of data to be processed, restrictions on the processing according to the application , This can be reduced compared to the case without this configuration .

  According to the second aspect of the present invention, the fact that the data is registered in the storage means that stores the data to be processed and that is provided in the second information processing apparatus different from the first information processing apparatus that provides the application. The first information processing apparatus can be notified.

  According to the invention of claim 3 or 12, the registration of data to the storage means provided in the second information processing apparatus different from the first information processing apparatus that stores the data to be processed and that provides the application, It can be executed according to the process according to the application.

  According to the invention according to claim 4, the result of processing according to the application executed by the second information processing apparatus different from the first information processing apparatus that provides the application is displayed in a display mode according to the application. Can be displayed on the device.

  According to the fifth aspect of the invention, the first information processing apparatus performs processing according to the application depending on which storage means of the first information processing apparatus or the second information processing apparatus stores the data to be processed. Alternatively, it can be executed by the second information processing apparatus.

  According to the invention of claim 6, in response to an input request from the terminal device, the data to be held by the first information processing device is stored in the storage means of the first information processing device and the data to be held by the second information processing device. Can be registered in the storage means of the second information processing apparatus.

  According to the invention of claim 7, the storage means of the first information processing apparatus that provides the application stores the encrypted data, and the storage means of the second information processing apparatus stores the non-encrypted data, according to the application. Can be executed by the second information processing apparatus.

  According to the invention of claim 8, in response to an input request from the terminal device, the data to be held by the second information processing device is registered in the storage means of the second information processing device, and the first information processing device holds the data. The power data can be encrypted and registered in the storage unit of the first information processing apparatus.

  According to the invention according to claim 9, 18, 19, 20, or 21, the storage means of the first information processing apparatus that provides the application stores only the encrypted data, while processing the data according to the application And the result can be used by the terminal device.

  According to the invention which concerns on Claim 10, according to the input request from a terminal device, encryption data can be registered into the memory | storage means of the 1st information processing apparatus which provides an application.

  According to the thirteenth aspect of the present invention, in the second information processing apparatus different from the first information processing apparatus that provides the application, it is possible to execute numerical calculations according to the application.

It is a block diagram which shows the example of schematic structure of the information processing system of 1st embodiment. It is a figure which shows the example of the content of an input request. It is a figure which shows the example of the content of the input notification. It is a figure which shows typically the example of the content of the response which an application server returns with respect to a terminal. It is a figure which shows the example of the result of having substituted the display unit identifier with the calculation result of data in HTML. It is a sequence diagram which shows the example of operation | movement of the information processing system of 1st embodiment. It is a sequence diagram which shows the example of other operation | movement of the information processing system of 1st embodiment. It is a block diagram which shows the example of schematic structure of the information processing system of 2nd embodiment. It is a figure which shows typically the other example of the content of the response which an application server returns with respect to a terminal. It is a sequence diagram which shows the example of operation | movement of the information processing system of 2nd embodiment. It is a sequence diagram which shows the example of other operation | movement of the information processing system of 2nd embodiment. It is a block diagram which shows the example of schematic structure of the information processing system of 3rd embodiment. It is a figure which shows typically the other example of the content of the response which an application server returns with respect to a terminal. It is a figure which shows typically the example of the input request transmitted with respect to an application server from a proxy server. It is a sequence diagram which shows the example of operation | movement of the information processing system of 3rd embodiment. It is a sequence diagram which shows the example of other operation | movement of the information processing system of 3rd embodiment. It is a block diagram which shows the example of schematic structure of the information processing system of 4th embodiment. It is a figure which shows typically the further another example of the content of the response which an application server returns with respect to a terminal. It is a sequence diagram which shows the example of operation | movement of the information processing system of 4th embodiment. It is a sequence diagram which shows the example of other operation | movement of the information processing system of 4th embodiment. It is a block diagram which shows the example of the hardware constitutions of a computer.

  Hereinafter, exemplary embodiments of the present invention will be described with reference to the drawings.

<First embodiment>
In FIG. 1, the example of schematic structure of the information processing system in 1st embodiment is shown. The system in the example of FIG. 1 has a configuration in which the application server 10 and the proxy server 20 are connected via the Internet 30, and the proxy server 20 and the terminal 40 are connected via the network 50. The network 50 is a communication means different from the Internet 30 and may be, for example, a LAN (Local Area Network) or an intranet. While an unspecified device can be connected to the Internet 30, only a specific device managed by an administrator of the network 50 is connected to the network 50.

  The terminal 40 is a device that uses an application provided by the application server 10. When the terminal 40 communicates with the application server 10, the proxy server 20 connects to the Internet as a proxy for the terminal 40, and enables communication between the application server 10 and the terminal 40. In other words, the terminal 40 communicates with the application server 10 via the network 50, the proxy server 20, and the Internet 30.

  The application server 10 is a server device that provides an application via the Internet 30. The application server 10 includes a distribution unit 100. When receiving the HTML request from the terminal 40 via the proxy server 20 and the Internet 30, the distribution unit 100 returns a response 60 including the script 62 and the HTML 64. The script 62 describes a procedure for processing an application provided by the application server 10. This description includes a data identifier for specifying data to be processed and a calculation procedure to be performed on the data to be processed. The data identifier is an identifier for specifying data stored in the DB 202 which is a database provided in the proxy server 20 described later. The data identifier of the data in the DB 202 may be notified to the application server 10 in advance, for example, before the terminal 40 starts using the application of the application server 10 (for example, when initial setting is performed). As will be described in detail later, when data is input to the DB 202 from the terminal 40 during processing by the application, the data identifier of the input data is notified from the proxy server 20 to the application server 10 via the Internet 30. Is done. The HTML 64 is information for controlling the mode of the display screen displayed on the display device of the terminal 40, and is described in HTML (Hyper Text Markup Language).

  The proxy server 20 is a server device that relays communication between a device connected to the network 50 and another device on the Internet 30. The proxy server 20 includes a proxy unit 200, a DB 202, a data calculation unit 204, an HTML replacement unit 206, and an input data processing unit 208.

  The proxy unit 200 performs communication with a device on the Internet 30 on behalf of a device connected to the network 50. For example, the proxy unit 200 acquires an HTML request transmitted from the terminal 40 to the application server 10 via the network 50, and transmits the acquired request to the application server 10 via the Internet 30. Then, the response 60 to the HTML request is received from the application server 10, and the received response 60 is passed to the data calculation unit 204. Further, the proxy unit 200 transmits a response 66 as a result of processing the response 60 by the data calculating unit 204 and the HTML replacing unit 206 to the terminal 40 via the network 50. For example, the proxy unit 200 may receive a data input request 70 addressed to the application server 10 from the terminal 40. In this case, the proxy unit 200 passes the input request 70 to the input data processing unit 208 for processing, and transmits an input notification 72 as a result of this processing to the application server 10 via the Internet 30. The proxy unit 200 also has functions for centrally managing communication data transmitted and received in the network 50, limiting the content of information transmitted from the network 50, and preventing unauthorized access to the network 50. It may be.

  The DB 202 is a database that stores data to be processed by applications used by the terminal 40. Each data stored in the DB 202 is given a data identifier unique within the system. The value of each data can be a numerical value or a character string. In the example of the present embodiment, it is assumed that at least a part of the data stored in the DB 202 has a numerical value instead of a character string as its value.

  The input data processing unit 208 processes the input request 70 from the terminal 40. The input request 70 represents a request for new registration or update of data to be processed by an application provided by the application server 10, that is, a request for data input to the DB 202. The input request 70 is generated at the terminal 40 and transmitted to the application server 10 when, for example, an input of a user instructing new registration or update of data is received at the terminal 40. The proxy unit 200 of the proxy server 20 that has received the input request 70 causes the input data processing unit 208 to process the received input request 70.

  FIG. 2A is a diagram schematically illustrating an example of the content of the input request 70. “Table: dataA = 100 & dataB = 200” in the input request 70 of FIG. 2A is a table in which the table name is “table” among the tables in the DB 202 for associating the data identifier with the data, and the data identifier is “dataA”. Represents a request to set the value of the data with “100” to “100” and the value of the data with the data identifier “dataB” to “200”. The input data processing unit 208 registers actual data (data value) included in the input request 70 in the DB 202. In the example of FIG. 2A, the value “100” is registered in the DB 202 as the data with the data identifier “dataA”, and the value “200” is registered as the data with the data identifier “dataB”. Then, the input data processing unit 208 deletes the value of the registered data in the DB 202 from the input request 70, thereby generating an input notification 72 indicating that the input has been performed and passes it to the proxy unit 200. The proxy unit 200 transmits an input notification 72 to the application server 10.

  FIG. 2B is a diagram schematically illustrating an example of an input notification 72 generated after data is registered in the DB 202 in accordance with the input request 70 of FIG. 2A. The input notification 72 of FIG. 2B includes the table name “table” and the data identifiers “dataA” and “dataB” in the input request 70 of FIG. 2A, but the actual value “100” of the data of these data identifiers. , "200" is not included. The input notification 72 only indicates that the data identifiers “dataA” and “dataB” are registered in the DB 202.

  The data calculation unit 204 executes processing described by the script 62 included in the response 60 from the application server 10. For example, data represented by the data identifier in the script 62 is read from the DB 202, and the calculation described in the script 62 is executed on the read data. Hereinafter, a specific example of the processing of the data calculation unit 204 will be described with reference to FIG. 3A.

  FIG. 3A is a diagram schematically illustrating an example of the contents of the script 62 and the HTML 64 included in the response 60. The script 62 illustrated in FIG. 3A has a configuration in which a display unit identifier and a calculation formula are associated with each other. The display unit identifier is an identifier that specifies an area in which one value is displayed on the display screen of the display device of the terminal 40. The calculation formula represents a calculation procedure for obtaining a value to be displayed in the area represented by the display unit identifier. In the calculation formula, data to be calculated is represented by a data identifier. The calculation represented by the calculation formula may be, for example, four arithmetic operations for numerical values, or a calculation for obtaining a statistic (total, average, standard deviation, variance, etc.) for a plurality of data. Further, the calculation formula does not necessarily have to be a formula that actually performs some calculation. For example, a calculation formula indicating that the data value of the data identifier is displayed in the display unit identifier area as it is may be associated with the display unit identifier. In the example of FIG. 3A, the calculation unit “SELECT dataA + dataA * 1000 FROM table” described in SQL (Structured Query Language) is associated with the display unit identifier “value1”. An SQL calculation formula “SELECT dataB + dataB * 1000 FROM table” is associated with the display unit identifier “value2”. In these calculation formulas, “dataA” and “dataB” are the above-described data identifiers, and “table” represents the table name of the table in the DB 202. These formulas are used to calculate the value of “x + (x × 1000) = 1001x”, where x is the value associated with the data identifier (“dataA” or “dataB”) in the table “table”. Represent. When the data calculation unit 204 processes the script 62 in the example of FIG. 3A, the data calculation unit 204 first sets a value corresponding to the data identifier “dataA” included in the calculation formula associated with the display unit identifier “value1”. Obtained from the table “table” in the DB 202. In this example, it is assumed that “100” registered in the DB 202 is acquired as the value of the data identifier “dataA” in accordance with the input request 70 in the example of FIG. 2A. Then, the data calculation unit 204 calculates the above calculation formula using the acquired value “100” as a processing target, and obtains the value “100100 (= 100 + 100 × 1000)”. Similarly, for the display unit identifier “value2”, the value “200” (see “dataB = 200” of the input request 70 in FIG. 2A) corresponding to the data identifier “dataB” is acquired from the table “table” in the DB 202. Then, a calculation according to the above-described calculation formula is performed to obtain a value “200200 (= 200 + 200 × 1000)”.

  The HTML 64 illustrated in FIG. 3A includes a display unit identifier in the script 62 in the HTML description that defines the display mode. In FIG. 3A, the display unit identifiers “value1” and “value2” in the script 62 correspond to “value1” and “value2” in HTML64. FIG. 3A shows only the description including the display unit identifier in HTML64. However, HTML64 is not only a display mode of calculation results according to an application, but also a display mode of elements that enable user operations in application processing, such as operation buttons that accept user instructions or data input forms. It may also contain a description that defines

  Referring again to FIG. 1, the HTML replacing unit 206 replaces the part where the display identifier in the script 62 is described in the HTML 64 with the calculation result of the data calculating unit 204. In the case of the response 60 in the example of FIG. 2A, the HTML replacing unit 206 replaces each display unit identifier in the HTML 64 with the value calculated by the data calculating unit 204 according to the calculation formula associated with the display unit identifier. . For example, in the case of the above-described example referring to FIG. 3A, the values of the calculation results of the display unit identifiers “value1” and “value2” in the HTML 64 are “100100” and “200200”, respectively. Replaces “value1” and “value2” in HTML64 with “100100” and “200200”, respectively. FIG. 3B shows an example of HTML 66 as a result of such substitution. In this example with reference to FIG. 3A and FIG. 3B, the calculation formula returns one numerical value as the calculation result, so the calculation result replaced with the corresponding display unit identifier includes one numerical value. If the corresponding calculation formula returns a plurality of numerical values as a result, the calculation result replaced with the display unit identifier may include a plurality of numerical values. The HTML replacement unit 206 passes the replaced HTML 66 to the proxy unit 200. The proxy unit 200 transmits the replaced HTML 66 to the terminal 40 as a response to the request to the application server 10 of the terminal 40.

  Hereinafter, an example of the operation of the system of the first embodiment will be described.

  FIG. 4 is a sequence diagram showing an example of the operation of the system when the terminal 40 makes an input request. The sequence in the example of FIG. 4 is started when, for example, the terminal 40 receives a data input instruction from a user via an input device (not shown). Before the start of the sequence in the example of FIG. 4, for example, the terminal 40 accesses the application server 10 via the proxy server 20, and the application server 10 proxies HTML that displays a display screen that accepts input of data used in the application. You may acquire via the server 20, and you may display HTML according to the acquired HTML with the display apparatus (not shown) of the terminal 40. FIG. The user's data input instruction may be performed according to such a display screen.

  With reference to FIG. 4, first, the terminal 40 transmits an input request 70 to the application server 10 using the network 50 (step S30). The input request 70 includes a data identifier of data to be input and an input value. The input request 70 transmitted from the terminal 40 is received by the proxy server 20.

  The proxy unit 200 of the proxy server 20 passes the input request 70 received from the terminal 40 to the input data processing unit 208. The input data processing unit 208 registers the data identifier and the input value included in the input request 70 in the DB 202 in association with each other (step S32).

  After registering the data in the DB 202, the input data processing unit 208 generates the input notification 72 by deleting the actual value of the data registered in the DB 202 from the input request 70 (step S34). The generated input notification 72 is passed to the proxy unit 200.

  The proxy unit 200 transmits the input notification 72 received from the input data processing unit 208 to the application server 10 via the Internet 30 (step S36).

  With the sequence in the example of FIG. 4, the application server 10 grasps the completion of the data input process to the DB 202. Upon receiving the input notification 72, the application server 10 may generate HTML for displaying a new display screen on the terminal 40 and return it to the terminal 40, for example, in accordance with application processing.

  FIG. 5 is a sequence diagram showing an example of the operation of the system when the terminal 40 makes an HTML request to the application server 10.

  First, an HTML request (GET command) is transmitted from the terminal 40 to the application server 10 (step S10). This HTML request includes a request to execute processing by an application provided by the application server 10. This HTML request is received by the proxy server 20 via the network 50, and transmitted to the application server 10 via the Internet 30 by the proxy unit 200 of the proxy server 20 (step S12).

  The application server 10 that has received the HTML request generates a response 60 including the script 62 and the HTML 64 in accordance with the application provided by itself, and returns the generated response 60 to the terminal 40 (step S14).

  The response 60 is received by the proxy server 20 via the Internet 30. The proxy unit 200 of the proxy server 20 passes the response 60 to the data calculation unit 204, and the process described in the script 62 in the response 60 is executed by the data calculation unit 204 (step S16). In step S <b> 16, the data calculation unit 204 performs a calculation using the data in the DB 202 for each display unit identifier in the script 62 according to a calculation formula associated with the display unit identifier.

  The data calculation unit 204 passes the processing execution result of step S16 and the HTML 64 in the response 60 to the HTML replacement unit 206, and the HTML replacement unit 206 calculates the calculation result of step S16 corresponding to the display unit identifier in the HTML 64. (Step S18).

  The proxy unit 200 receives the replaced HTML 66 from the HTML replacing unit 206, and transmits the received HTML 66 to the terminal 40 as a response from the application server 10 via the network 50 (step S20).

  In the terminal 40 that has received the HTML 66, a display screen according to the HTML 66 is displayed on the display device by, for example, a web browser function (not shown) (step S22).

  With the operation in the example of FIG. 5, a display screen including the value of the result of processing according to the application is displayed on the display device of the terminal 40 in response to the HTML request from the terminal 40. The user of the terminal 40 may confirm this display screen, and may instruct execution of further processing by operating an operation button or the like in the display screen with an input device (mouse, keyboard, etc.), for example. In this case, an HTML request corresponding to the user's instruction is generated at the terminal 40 and transmitted to the application server 10, and the sequence operation in the example of FIG. 5 is performed again.

  After the operation of the sequence of the example of FIG. 5, when the terminal 40 receives an instruction for inputting further data, the operation of the sequence of the example of FIG. 4 for processing the input request is performed again.

  In the example of the first embodiment described above, the application server 10 does not process the processing target data, but the processing according to the application provided by the application server 10 is executed on the processing target data. The result is transmitted to the terminal 40.

<Second embodiment>
In FIG. 6, the example of schematic structure of the information processing system in 2nd embodiment is shown. In the system of the second embodiment illustrated in FIG. 6, the application server 10 and the proxy server 20 are connected via the Internet 30 as in the system of the first embodiment illustrated in FIG. 1, and the proxy server 20 and the terminal 40 are connected. Are connected via a network 50. In FIG. 6, the same components as those in FIG. Hereinafter, the system of the example of FIG. 6 will be described focusing on differences from the system of the example of FIG.

  In the system of the example of FIG. 6, the data to be processed by the application provided by the application server 10 is stored in the DB 102 of the application server 10, not the proxy server 20. However, the data is stored in an encrypted state in the DB 102 of the application server 10. The encrypted data stored in the DB 102 is encrypted in a format that can be decrypted by the proxy server 20 but cannot be decrypted by the application server 10.

  When receiving the HTML request from the terminal 40 via the proxy server 20 and the Internet 30, the distribution unit 100 of the application server 10 generates a response 63 including the script 62, HTML 64, and encrypted data 67 and transmits it to the terminal 40. To do.

  FIG. 7 schematically shows an example of the contents of the response 63. The script 62 and HTML 64 included in the response 63 illustrated in FIG. 7 may be the same as the script 62 and HTML 64 included in the response 60 in the example of FIG. 3A, respectively. The response 63 includes encrypted data 67 of data to be processed by the calculation formula of the script 62. The encrypted data 67 includes a data identifier and encrypted data corresponding to the data identifier. The distribution unit 100 of the application server 10 reads the encrypted data of the data identifier included in the calculation formula of the script 62 from the DB 102 and associates the read data identifier with the read encrypted data as the encrypted data 67.

  Returning to the description of FIG. 6, the proxy server 20 includes a decryption unit 210 and an encryption unit 212 in addition to the proxy unit 200, the data calculation unit 204, and the HTML replacement unit 206 similar to the proxy server 20 in the example of FIG. 1. Prepare. The decryption unit 210 decrypts the encrypted data 67 included in the response 63 received from the application server 10 via the Internet 30 and passes the decrypted data to the data calculation unit 204. The data calculation unit 204 executes processing according to the script 62 on the decrypted data. The encryption unit 212 encrypts the value of the data included in the input request 70 received from the terminal 40 and passes the input request 73 including the encrypted data to the proxy unit 200. The encryption unit 212 encrypts data in a format that can be decrypted by the decryption unit 210 but cannot be decrypted by the application server 10. The input request 73 including the encrypted data is transmitted to the application server 10 via the Internet 30, and the encrypted data is registered in the DB 102 together with each data identifier in the application server 10.

  Hereinafter, an example of the operation of the system of the second embodiment will be described.

  FIG. 8 is a sequence diagram illustrating an example of the operation of the system when the terminal 40 makes an input request. The sequence in the example of FIG. 8 confirms the display screen, for example, by performing display according to HTML of the display screen that accepts data input acquired from the application server 10 via the proxy server 20 in the terminal 40. This is started when the user instructs data input.

  Referring to FIG. 8, the terminal 40 transmits an input request 70 to the application server 10 (step S30). The input request 70 includes a data identifier of data to be input and an input value. The input request 70 transmitted from the terminal 40 is received by the proxy server 20.

  The proxy unit 200 of the proxy server 20 passes the input request 70 received from the terminal 40 to the encryption unit 212, and the value of the data to be input is encrypted by the encryption unit 212 (step S31).

  The encryption unit 212 passes the input request 73 including the data identifier and the encrypted data of the corresponding input value to the proxy unit 200, and the input request 73 is transmitted to the application server 10 by the proxy unit 200 (step S33). ).

  The application server 10 that has received the input request 73 registers the encrypted data included in the input request 73 together with the corresponding data identifier in the DB 102 (step S35).

  FIG. 9 is a sequence diagram illustrating an example of the operation of the system when the terminal 40 makes an HTML request to the application server 10.

  First, an HTML request (GET command) is transmitted from the terminal 40 to the application server 10 (step S10). This HTML request is received by the proxy server 20 via the network 50, and transmitted to the application server 10 via the Internet 30 by the proxy unit 200 of the proxy server 20 (step S12).

  The application server 10 that has received the HTML request generates a response 63 including the script 62, HTML 64, and encrypted data 67 according to the application provided by itself, and returns the generated response 63 to the terminal 40 (step S14). ).

  The response 63 is received by the proxy server 20 via the Internet 30. The proxy unit 200 of the proxy server 20 passes the response 60 to the decryption unit 210, and the decryption unit 210 decrypts the encrypted data 67 included in the response 63 (step S15).

  The decryption unit 210 passes the script 62 and HTML 64 in the response 63 together with the data obtained as a result of decrypting the encrypted data 67 to the data calculation unit 204, and the data calculation unit 204 executes the process described in the script 62 ( Step S16).

  The replacement of HTML (step S18), the transmission of the replaced HTML to the terminal 40 (step S20), and the display process (step S22) in the terminal 40 will each be described with reference to the sequence diagram of the example of FIG. It may be the same as the processing of steps S18, S20, and S22.

  In the example of the second embodiment described above, since the data stored in the DB 102 of the application server 10 is encrypted data, the application server 10 does not grasp the actual value of the data to be processed. The process according to the application provided by is executed on the data, and the result is transmitted to the terminal 40.

<Third embodiment>
In FIG. 10, the example of schematic structure of the information processing system in 3rd embodiment is shown. In the system of the third embodiment illustrated in FIG. 10, the application server 10 and the proxy server 20 are connected via the Internet 30 as in the first and second embodiments illustrated in FIGS. 1 and 6, respectively. The proxy server 20 and the terminal 40 are connected via the network 50. 10, components similar to those in FIG. 1 are denoted by the same reference numerals as in FIG. Hereinafter, the system of the example of FIG. 10 will be described focusing on differences from the system of the example of FIG.

  In the system of the example of FIG. 10, a part of the data to be processed of the application provided by the application server 10 is stored in the DB 202 of the proxy server 20, and the other part of the data to be processed is the DB 102 of the application server 10. Is remembered. Each of the application server 10 and the proxy server 20 refers to data storage location information indicating which data to be processed is stored (saved) in its own DB 102 or 202 and performs processing on the data.

  The application server 10 in the example of FIG. 10 includes a DB 102, a storage location information storage unit 104, a response generation unit 106, and a data input unit 108 in addition to the distribution unit 100.

  When receiving the HTML request from the terminal 40 via the network 50, the proxy server 20, and the Internet 30, the distribution unit 100 requests the response generation unit 106 to generate a response, and in response to this request, the response generation unit The response generated by 106 is transmitted to the terminal 40.

  The DB 102 is a database that stores a part of data to be processed by an application provided by the application server 10. Each data registered in the DB 102 is given a unique data identifier in the system.

  The storage location information storage unit 104 stores storage location information indicating whether each of the processing target data is stored in the DB 102 of the application server 10 or the DB 202 of the proxy server 20. The storage location information includes, for example, information that associates each data identifier of data registered in the DB 102 or DB 202 with the storage location (DB 102 or DB 202) of the data. The storage location information may further include a storage location corresponding to the type of data. For example, when a new data identifier is assigned to unregistered data in both DB102 and DB202, the storage location (DB102 or DB202) indicated by the storage location information is displayed according to the type of the unregistered data. The unregistered data is registered together with the new data identifier. The storage location information storage unit 104 also stores storage location information as in the above example for each user of the application.

  When the response generation unit 106 is requested to generate a response from the distribution unit 100 that has received the HTML request from the terminal 40, the response generation unit 106 generates a response 65 to be transmitted to the terminal 40. The response 65 is generated by the following procedure, for example. First, the response generation unit 106 generates a script and HTML corresponding to the application. The script and HTML may be the same as the script 62 and HTML 64 described with reference to FIG. 3A. Next, the response generation unit 106 refers to the storage location information storage unit 104 and includes the data identifier of the data stored in the DB 102 of the application server 10 among the calculation formulas corresponding to each display unit identifier in the script, A calculation formula that does not include the data identifier of the data stored in the DB 202 of the proxy server 20 is specified. Then, for each of the specified calculation formulas, calculation according to the calculation formula is performed using data stored in the DB 102. Further, the corresponding display unit identifier in HTML is replaced by the calculation result according to each calculation formula. The display unit identifier replaced in HTML and the calculation formula corresponding to the display unit identifier (that is, the calculation formula that has been calculated) are deleted from the script. The response generation unit 106 also refers to the storage location information storage unit 104 and generates an input data table including data identifiers of data stored in the DB 202 of the proxy server 20. The generated input data table may further include information indicating the type of data to be stored in the DB 202. The response generation unit 106 returns a response 65 including the script 62 ′, the HTML 64 ′, and the input data table 69 as a result of the process of the above example procedure to the distribution unit 100. The response 65 is transmitted to the terminal 40 by the distribution unit 100 and received by the proxy server 20. In the above example, when referring to the storage location information storage unit 104, the response generation unit 106 refers to the storage location information corresponding to the user of the terminal 40 that requested the HTML request.

  FIG. 11 schematically illustrates an example of the content of the response 65 generated by the response generation unit 106. The script 62 ′ and HTML 64 ′ illustrated in FIG. 11 are generated as a result of calculation using the data stored in the DB 102 of the application server 10 after the generation of the script 62 and HTML 64 in the example of FIG. 3A. And an example of HTML. In this example, the data with the data identifier “dataA” is stored in the DB 202 of the proxy server 20, and the data with the data identifier “dataB” is stored in the DB 102 of the application server 10. Referring to FIG. 3A, the calculation expression “SELECT dataB + dataB * 1000 FROM table” corresponding to the display unit identifier “value2” includes the data identifier “dataB” of the data stored in the DB 102, and the data stored in the DB 202 Data identifier “dataA” is not included. In this example, when the calculation according to the calculation formula “SELECT dataB + dataB * 1000 FROM table” is executed by the response generation unit 106 and the value of the result is “200200”, as illustrated in FIG. In the script 62 ′, the display unit identifier “value2” and the corresponding calculation formula “SELECT dataB + dataB * 1000 FROM table” are deleted, and in the HTML64 ′, the display unit identifier “value2” is replaced with the calculation result value “200200”. Is done. The input data table 69 in the example of FIG. 11 indicates that data having a data identifier “dataA” is stored in the DB 202 of the proxy server 20. The input data table 69 may further include information (not shown) indicating the type of data to be stored in the DB 202.

  In addition, in a script corresponding to an application that is first generated in response to an HTML request, there is a calculation formula that includes both the data identifier of data stored in the DB 102 and the data identifier of data stored in the DB 202. For the data identifier of the data stored in the DB 102 in the calculation formula, the response generation unit 106 may read the data with the data identifier from the DB 102 and generate a response 65 that further includes the value of the read data.

  Referring to FIG. 10 again, when the data input unit 108 is requested to specify a data identifier of data stored in the DB 102 of the application server 10 and input a value in the input request from the terminal 40. Then, the value in the input request is registered in the DB 102 as the value of the data identifier.

  The proxy server 20 in the example of FIG. 10 includes an input data table storage unit 220 in addition to the proxy unit 200, DB 202, data calculation unit 204, HTML replacement unit 206, and input data processing unit 208 similar to those in the example of FIG. Prepare.

  When the proxy unit 200 receives the response 65 addressed to the terminal 40 from the application server 10 via the Internet 30, the proxy unit 200 registers the input data table 69 included in the response 65 in the input data table storage unit 220, and the script 62 ′ and HTML 64 ′. To the data calculation unit 204. As a result, the data identifier of the data stored in the DB 202 of the proxy server 20 is registered in the input data table storage unit 220. In addition, when the response 65 includes data associated with the data identifier of the data in the DB 102 of the application server 10, the proxy unit 200 further passes the data to the data calculation unit 204.

  The data calculation unit 204 and the HTML replacement unit 206 replace the display unit identifier in the HTML 64 ′ with the calculation result according to the calculation formula in the script 62 ′ by the same processing as described with reference to FIG. Is generated. For the calculation formula including only the data identifier of the data in the DB 202, the data calculation unit 204 reads the data of each data identifier from the DB 202 and executes the calculation as in the data calculation unit 204 in the example of FIG. The calculation formula including the data identifier of the data in the DB 102 together with the data identifier of the data in the DB 202 is calculated using the data read from the DB 202 and the data associated with the data identifier in the DB 102 included in the response 65. Execute. Note that the replaced HTML 66 is transmitted to the terminal 40 via the network 50 by the proxy unit 200.

  When the input request 70 for data from the terminal 40 is received by the proxy unit 200 via the network 50, the input data processing unit 208 receives the input request 70 from the proxy unit 200 and performs processing according to the request. . For example, the input data processing unit 208 first refers to the input data table storage unit 220 and identifies the data identifier of the data stored in the DB 202 among the data identifiers included in the input request 70. Then, the value requested to be input as the data value of the data identifier specified in the input request 70 is registered in the DB 202 as the data value of the data identifier. Thereafter, the input data processing unit 208 deletes the data identifier and the input value of the data registered in the DB 202 from the input request 70. The input request 75 after the deletion can include a data identifier of data stored in the DB 102 of the application server 10 and its input value. The deleted input request 75 is transmitted to the application server 10 via the Internet 30 by the proxy unit 200.

  FIG. 12 shows an example of the contents of the input request 75 after deletion. 12 shows an example of an input request 70 (table: dataA = 100) in the example of FIG. 3A when the input data table (including the data identifier “dataA”) in the example of FIG. 11 is stored in the input data table storage unit 220. & dataB = 200) is received by the proxy server 20 and processed by the input data processing unit 208. The input data processing unit 208 refers to the input data table storage unit 220 and identifies “dataA” as the data identifier of the data stored in the DB 202 among the data identifiers “dataA” and “dataB” included in the input request 70. To do. Then, “100” is registered in the table “table” of the DB 202 as the value of “dataA”, the “dataA = 100” portion is deleted from the input request 70, and the input request 75 (table: dataB = 200). The input request 75 is processed by the data input unit 108 of the application server 10, and “200” is registered as the value of the data identifier “dataB” in the table “table” of the DB 102.

  As another example of the input request 75 after deletion, only the value of the data registered in the DB 202 may be deleted, and the data identifier “dataA” of the registered data may be left in the input request 75.

  If all of the data identifiers included in the input request 70 received from the terminal 40 are data identifiers of data stored in the DB 202, the transmission of the input request 75 after deletion is omitted, or the data An input notification indicating that the input has been performed may be transmitted to the application server 10.

  Hereinafter, an example of the operation of the system of the third embodiment will be described.

  FIG. 13 is a sequence diagram illustrating an example of the operation of the system when the terminal 40 makes an input request. In the sequence of the example of FIG. 13, for example, in the terminal 40, display according to HTML of a display screen that receives data input acquired from the application server 10 via the proxy server 20 is performed, and the display screen is confirmed. This is started when the user instructs data input.

  Referring to FIG. 13, first, the terminal 40 transmits an input request 70 to the application server 10 using the network 50 (step S30). The input request 70 includes a data identifier of data to be input and an input value. The input request 70 transmitted from the terminal 40 is received by the proxy server 20.

  The proxy unit 200 of the proxy server 20 passes the input request 70 received from the terminal 40 to the input data processing unit 208. The input data processing unit 208 registers the input value corresponding to the data identifier stored in the input data table storage unit 220 among the data identifiers included in the input request 70 in the DB 202 as the data value of the data identifier (step S32). ).

  After registering the data in the DB 202, the input data processing unit 208 generates an input request 75 in which the data identifier and the value of the data already registered in the DB 202 are deleted from the input request 70 (step S37). The generated input request 75 is passed to the proxy unit 200.

  The proxy unit 200 transmits the input request 75 received from the input data processing unit 208 to the application server 10 via the Internet 30 (step S39).

  In the application server 10 that has received the input request 75, the data input unit 108 registers the data identifier and the input value included in the input request 75 in the DB 102 (step S41).

  FIG. 14 is a sequence diagram illustrating an example of the operation of the system when the terminal 40 makes an HTML request to the application server 10.

  First, an HTML request (GET command) is transmitted from the terminal 40 to the application server 10 (step S10). This HTML request is received by the proxy server 20 via the network 50, and transmitted to the application server 10 via the Internet 30 by the proxy unit 200 of the proxy server 20 (step S12).

  In the application server 10 that has received the HTML request, a response 65 including the script 62 ′, HTML 64 ′, and the input data table 69 is generated (step S13). In step S <b> 13, the response generation unit 106 of the application server 10 first generates a script describing a processing procedure according to the application and HTML indicating a display mode on the terminal 40. Then, with reference to the storage location information storage unit 104, the data identifier of the data in the DB 202 (of the proxy server 20) is included in the calculation formula in the script 62 but includes the data identifier of the data in the DB 102 (of the proxy server 20). A calculation formula that does not include is specified, and the calculation of the specified calculation formula is executed using the data in the DB 102. Next, the HMTL 64 ′ is generated by replacing the corresponding display unit identifier in the HTML with the result of the above calculation, and the calculated formula and the corresponding display unit identifier are deleted from the script to generate the script 62 ′. When a calculation formula including the data identifiers of both the data of DB 102 and DB 202 exists in the script, the response generation unit 106 transmits data associated with the data identifier of the data of DB 102 in the calculation formula from DB 102. read out. In addition, the response generation unit 106 refers to the storage location information storage unit 104 and generates an input data table 69 including a data identifier of data stored in the DB 202 of the proxy server 20.

  The distribution unit 100 of the application server 10 returns a response 65 including the script 62 ′, HTML 64 ′, and the input data table 69 generated by the response generation unit 106 in Step S 13 to the terminal 40 (Step S 14). In step S13, when data in the DB 102 is read with respect to the calculation formula using both data in the DB 102 and DB 202, the response 65 includes the data read from the DB 102.

  The response 65 is received by the proxy server 20 via the Internet 30. The proxy unit 200 of the proxy server 20 registers the input data table 69 in the response 65 in the input data table storage unit 220 and passes the script 62 ′ and HTML 64 ′ in the response 65 to the data calculation unit 204. The data calculation unit 204 executes the process described in the script 62 ′ (step S16).

  The replacement of HTML (step S18), the transmission of the replaced HTML to the terminal 40 (step S20), and the display process (step S22) in the terminal 40 will each be described with reference to the sequence diagram of the example of FIG. It may be the same as the processing of steps S18, S20, and S22.

  In the example of the third embodiment described above, storage location information indicating which data to be processed is stored in the application server 10 and which is stored in the proxy server 20 is set for each application user. Is done. Therefore, the data determined by the user that the application server 10 may be able to refer to the data content is stored in the application server 10 and processing is performed on the data, and other data is stored in the proxy server 20. It is preferable to set storage location information so that processing is performed on the data.

<Fourth embodiment>
FIG. 15 shows an example of a schematic configuration of an information processing system in the fourth embodiment. 15, elements similar to those in FIG. 1 are denoted by the same reference numerals as in FIG. The system in the example of FIG. 15 has a configuration in which the terminal 40 and the DB server 80 are connected to each other via the network 50, and the terminal 40 and the application server 10 are connected to each other via the Internet 30. As with the Internet 30 described above with reference to FIG. 1, an unspecified device can be connected to the Internet 30 in FIG. As in the example of FIG. 1, only a specific device is connected to the network 50 of FIG. Although not shown in FIG. 15, a server device that relays communication between the terminals 40 and the Internet 30 may be provided. For example, this server device communicates with a device on the Internet 30 instead of the terminal 40, restricts the contents of communication data between the terminal 40 and the device on the Internet 30, and prevents unauthorized access to the terminal 40. Or a server having a function of

  The application server 10 illustrated in FIG. 15 includes a distribution unit 100. The distribution unit 100 returns a response 61 including a calculation script 62a, an input script 62b, and an HTML 64 in response to an HTML request transmitted from the terminal 40 via the Internet 30. The calculation script 62a describes a processing procedure related to data calculation in an application provided by the application server 10. The calculation script 62a includes a data identifier for specifying data to be calculated, and a calculation procedure to be executed on the data. The input script 62b describes a processing procedure to be executed when data is input. The HTML 64 may be the same as the HTML 64 described with reference to FIGS. 1 and 3A.

  FIG. 16 schematically shows an example of the content of the response 61. The calculation script 62a included in the response 61 of FIG. 16 may have the same configuration as the script 62 described with reference to FIG. 3A. That is, the calculation script 62a may have a configuration in which a display unit identifier is associated with a calculation formula representing a calculation procedure for obtaining a value to be displayed in an area represented by the display unit identifier. The display unit identifier in the calculation script 62a corresponds to the display single identifier in HTML64. In the calculation formula in the calculation script 62a, data to be calculated is represented by a data identifier of data stored in a DB 800 provided in the DB server 80 described later. The input script 62b in the example of FIG. 16 has a configuration in which a data identifier of data in the DB 800 is associated with an input expression. The input formula represents a procedure of processing to be executed when data of a corresponding data identifier is input. The processing procedure includes data input from the terminal 40.

  Referring to FIG. 15 again, the terminal 40 communicates with the application server 10 via the Internet 30 and uses an application provided by the application server 10. The terminal 40 includes a browser unit 400 and a script transmission unit 402.

  The browser unit 400 makes an HTML request to the application server 10 via the Internet 30. When the response 61 to the HTML request is received from the application server 10 at the terminal 40, the browser unit 400 passes the calculation script 62 a included in the response 61 to the script transmission unit 402. As will be described in detail later, the calculation script 62a is transmitted to the DB server 80 by the script transmission unit 402, and the calculation result according to the calculation script 62a is returned from the DB server 80 to the terminal 40. The browser unit 400 of the terminal 40 that has received the returned calculation result replaces each display unit identifier in the HTML 64 included in the response 61 with the corresponding calculation result, and follows the replaced HTML in the display device of the terminal 40. Display. The HTML replacement process by the browser unit 400 may be the same process as the HTML replacement unit 206 of the proxy server 20 in the example of FIG. 1 described above. When the browser unit 400 receives an instruction to input data, the browser unit 400 passes the input script 62 b in the response 61 to the script transmission unit 402.

  When the script transmission unit 402 receives the calculation script 62 a or the input script 62 b from the browser unit 400, the script transmission unit 402 transmits the received script to the DB server 80 via the network 50.

  The DB server 80 includes a DB 800 and a script execution unit 802. The DB 800 is a database that stores data to be processed by an application provided by the application server 10. The script execution unit 802 executes processing according to the calculation script 62a or the input script 62b transmitted from the script transmission unit 402 of the terminal 40. The processing according to the calculation script 62a may be the same as the processing by the data calculation unit 204 of the proxy server 20 in the example of FIG. In the process according to the input script 62b, the script execution unit 802 inputs data to the DB 800 according to the procedure represented by the corresponding input formula for each data identifier. The script execution unit 802 also transmits the processing result according to the calculation script 62 a or the input script 62 b to the terminal 40 via the network 50.

  Hereinafter, an example of the operation of the information processing system according to the fourth embodiment will be described.

  FIG. 17 is a sequence diagram illustrating an example of the operation of the system when the terminal 40 makes an HTML request.

  Referring to FIG. 17, first, the browser unit 400 of the terminal 40 transmits an HTML request (GET command) to the application server 10 via the network 50 and the Internet 30 (step S40).

  The application server 10 that has received the HTML request from the terminal 40 generates a response 61 including the calculation script 62a, the input script 62b, and the HTML 64 according to the application provided by the terminal 40, and sends the generated response 61 to the terminal 40. Return (step S42).

  The browser unit 400 of the terminal 40 that has received the response 61 passes the input script 62b included in the received response 61 to the script transmission unit 402, and the script transmission unit 402 sends the input script to the DB server 80 via the network 50. 62b is transmitted (step S44).

  The script execution unit 802 of the DB server 80 that has received the input script 62b inputs data to the DB 800 according to the received input script 62b (step S46). In step S54, for each data identifier included in the input script 62b, data is input to the DB 800 by a procedure according to the input formula associated with the data identifier.

  Then, the script execution unit 802 transmits the result of data input to the DB 800 to the terminal 40 via the network 50 (step S48).

  Upon receiving the input result from the script execution unit 802, the terminal 40 notifies the application server 10 through the Internet 30 that the input has been made (step S50).

  FIG. 18 is a sequence diagram showing an example of the operation of the system when the calculation script 62a included in the response 61 is processed. The operation of the example of FIG. 18 is started after the sequence of the example of FIG. 17 ends, for example.

  Referring to FIG. 18, the browser unit 400 of the terminal 40 passes the calculation script 62a included in the received response 61 to the script transmission unit 402, and the script transmission unit 402 transmits the calculation script 62a received from the browser unit 400 to the DB server. It transmits to 80 via the network 50 (step S52).

  The script execution unit 802 of the DB server 80 that has received the calculation script 62a executes calculation for the data registered in the DB 800 according to the procedure described in the received calculation script 62a (step S54). The process of step S54 may be the same process as the calculation (step S16 of FIG. 5) executed by the data calculation unit 204 provided in the proxy server 20 of the example of FIG.

  When the execution of the calculation script 62a is completed, the script execution unit 802 transmits the calculation result to the terminal 40 via the network 50 (step S56).

  The browser unit 400 of the terminal 40 that has received the calculation result from the script execution unit 802 of the DB server 80 replaces the HTML obtained by replacing the display unit identifier portion in the HTML 64 included in the response 61 received in step S42 with the received calculation result. The generated display screen according to the replaced HTML is displayed on the display device (step S58).

  In the system of the fourth embodiment, after the processing of the calculation script 62a (FIG. 18), an HTML request is further made and a new response 61 is acquired by the terminal 40, and the processing of the input script 62b (steps S44 to S44 in FIG. 17). The processing of S50) and the calculation script 62a may be performed again. Further, the processing of the input script 62b may be started after an instruction to execute the input processing by the user after obtaining the response 61 in the terminal 40. If the value of the data identifier included in the calculation formula in the calculation script 62a has already been registered in the DB 800, the terminal 40 acquires the response 61 and before the processing of the input script 62b, or the input script In parallel with the process of 62b, the process of the calculation script 62b may be performed.

  According to the example of the fourth embodiment described above, the application server 10 does not process the data to be processed in the application server 10 as in the example of the first embodiment, but the application server 10 provides the data to be processed. Processing according to the application to be executed is executed, and the result is transmitted to the terminal 40.

  The first to fourth embodiments described above are merely examples of the embodiment of the present invention, and various modifications may be made in each of the above-described embodiments.

  For example, in the response that the application server 10 transmits in response to the HTML request, the first to third embodiments described above include the script 62 that represents the calculation formula for each display unit identifier (see FIG. 3A). The fourth embodiment includes a calculation script 62a that represents a calculation formula for each display unit identifier and an input script 62b that represents an input formula for each data identifier (see FIG. 16). In the modification, in each of the first to third embodiments, instead of the script 62, a response including the calculation script 62a and the input script 62b may be generated by the application server 10 and transmitted to the terminal 40. . In this case, the calculation script 62a may be executed in the same manner as the processing for the script 62 described above. With respect to the input script 62b, for example, in the case of the first embodiment illustrated in FIG. 1, the proxy server 20 that receives an input request from the terminal 40 inputs data to the DB 202 according to the input script 62b, and the result is the application The server 10 may be notified. In the case of the second embodiment illustrated in FIG. 6, a value input to the database according to the input script 62 b may be encrypted by the encryption unit 212 of the proxy server 20 and transmitted to the application server 10. Furthermore, in the case of the third embodiment illustrated in FIG. 10, the application server 10 or the proxy server 20 determines whether the data identifier data included in the input script 62 b is stored in the DB 102 or the DB 202. Data may be input according to an input formula associated with the data identifier of the data stored in the database.

  As another modified example of the response, for example, in the fourth embodiment illustrated in FIG. 15, instead of generating a response including the calculation script 62 a and the input script 62 b by the application server 10 and transmitting it to the terminal 40, first A response including the script 62 similar to each example of the embodiment to the third embodiment may be generated and transmitted. In the present modification, the processing relating to the script 62 may be performed in the same manner as the processing relating to the calculation script 62a described with reference to FIG. As for data input, for example, instead of the input script 62b, the terminal 40 transmits an input request 70 (see FIG. 2A) similar to that of the first embodiment to the DB server 80, and the DB server 80 transmits to the DB 800. It is sufficient to input the data. At this time, for example, the DB server 80 notifies the terminal 40 of the result of data input to the DB 800, and then the input notification 72 (see FIG. 2B) similar to that of the first embodiment is sent from the terminal 40 to the application server 10. ).

  In the third embodiment described with reference to FIGS. 10 to 14, data stored in the DB 102 of the application server 10 may be encrypted data. In the case of this example, the proxy server 20 includes a decryption unit 210 and an encryption unit 212 similar to the proxy server 20 in the second embodiment illustrated in FIG. When the response generation unit 106 of the application server 10 generates a script and HTML in response to the HTML request, the data identifier included in the calculation formula in the script is identified to represent data in the DB 102, and the identified data identifier Is read from the DB 102. Then, the response generation unit 106 generates a response including the read encrypted data, the generated script and HTML, and the input data table similar to that described with reference to FIG. The response is sent. In the proxy server 20, the encrypted data included in the response is decrypted by the decryption unit 210, and processing according to the script is executed. When processing a data input request from the terminal 40, the encryption unit 212 of the proxy server 20 encrypts the value of the data input to the DB 102 of the application server 10, and the encrypted data is transferred together with the corresponding data identifier to the application. It is transmitted to the server 10. Data input to the DB 202 of the proxy server 20 is processed in the same manner as the example described with reference to FIGS.

  Further, in the description of each of the embodiments described above, one terminal 40 and one application server 10 are illustrated in the diagrams illustrating examples of the configuration of the information processing system. A plurality of terminals 40 and a plurality of application servers 10 may be provided. Further, the network 50 or the Internet 30 may be connected to other devices shown in the figure. For example, various servers and image processing apparatuses (eg, printers, scanners, facsimiles, etc.) may be connected to the network 50. For example, a general web server may be connected to the Internet 30.

  Each of the application server 10, the proxy server 20, and the DB server 80 described above typically executes a program describing functions or processing contents of each unit of the above-described various servers by a general-purpose computer or the like. Is realized. FIG. 19 shows an example of the hardware configuration of a computer. The computer in the example of FIG. 19 has a circuit configuration in which a CPU (central processing unit) 90, a memory (primary storage) 91, various I / O (input / output) interfaces 92, and the like are connected via a bus 93. A disk drive 95 for reading portable non-volatile recording media of various standards such as an HDD (Hard Disk Drive) 94, a CD, a DVD, or a flash memory via the I / O interface 92, for example, is connected to the bus 93. Connected. Such a drive 94 or 95 functions as an external storage device for the memory. A program in which the processing content of the embodiment is described is stored in a fixed storage device such as the HDD 94 via a recording medium such as a CD or DVD, or via a network, and installed in a computer. The program stored in the fixed storage device is read into the memory and executed by the CPU, whereby the processing of the embodiment is realized. The same applies to terminals.

  10 application server, 20 proxy server, 30 Internet, 40 terminals, 50 network, 80 DB server, 90 CPU, 91 memory, 92 I / O interface, 93 bus, 94 HDD, 95 disk drive, 100 distribution unit, 102, 202 , 800 DB, 104 storage location information storage unit, 106 response generation unit, 108 data input unit, 200 proxy unit, 204 data calculation unit, 206 HTML replacement unit, 208 input data processing unit, 210 decryption unit, 212 encryption unit, 220 input data table storage unit, 400 browser unit, 402 script transmission unit, 802 script execution unit.

Claims (21)

A first information processing apparatus for providing an application, and a second information processing apparatus connected to the first information processing apparatus via a first communication means, via a second communication means different from the first communication means A second information processing device connected to the terminal device,
The first information processing apparatus
According to the processing request in accordance with the application from the terminal device, according to the requested application in inclusive format data identification information for identifying a subject to data processing requested by the processing request processing A response transmission unit that transmits a response including procedure information representing the procedure of the first communication unit;
With
The second information processing apparatus
Storage means for storing data that can be processed and the data identification information that identifies the data;
Data represented by the data identification information in the procedure information included in the response received from the first information processing apparatus via the first communication unit is read from the storage unit and received for the read data. Processing execution means for executing processing of a procedure represented by the procedure information included in the response;
A result transmitting means for transmitting the result of the process by the process executing means to the terminal device by the second communication means;
Comprising
An information processing system characterized by this. The second information processing apparatus
When an input request including data is received from the terminal device via the second communication unit, the data included in the input request is registered in the storage unit in association with the data identification information specifying the data. Registration means;
Notification information transmitting means for transmitting notification information indicating that data included in the input request is registered in the storage means to the first information processing apparatus using the first communication means;
Further comprising
The information processing system according to claim 1. The response transmitted by the response transmission unit further includes registration procedure information describing a procedure of processing to be executed when registering data in the storage unit of the second information processing apparatus,
The registration means registers data included in the input request in the storage means according to a procedure described in the registration procedure information;
The information processing system according to claim 1 or 2. The response transmitted by the response transmission unit further includes display control information for controlling a display mode when displaying a result of the process requested by the process request on a display device,
The result transmission unit of the second information processing device transmits the display control information included in the response transmitted by the first information processing device to the terminal device together with a result of processing by the processing execution unit. ,
The information processing system according to any one of claims 1 to 3. In the first information processing apparatus,
Storage means for storing data that can be processed;
Of the processing requested by the processing request from the terminal device, execute processing for processing the data stored in the storage means of the first information processing device, the result of execution of this processing, and the processing request The processing procedure for processing the data stored in the storage unit of the second information processing apparatus among the processing requested in step 2 is expressed in a format including the data identification information of the processing target data of the processing. Response generation means for generating a response including procedure information; and
The response transmission means transmits the response generated by the response generation means by the first communication means.
The information processing system according to any one of claims 1 to 4, wherein: In the first information processing apparatus and the second information processing apparatus, registered location information indicating which data should be registered in which of the storage means of the first information processing apparatus and the storage means of the second information processing apparatus Can be referred to,
The second information processing apparatus
When an input request including data is received from the terminal device via the second communication unit, the registration location information is referred to, and the data included in the input request is stored in the storage unit of the second information processing device. If it should be registered, registration means for registering the data included in the input request in the storage means of the second information processing apparatus in association with the data identification information of the data;
With reference to the registration location information, if the data included in the input request is to be registered in the storage unit of the first information processing apparatus, the input request is sent to the first information processing apparatus from the first information processing apparatus. An input request transmitting means for transmitting using a communication means;
Further comprising
The first information processing apparatus
Registration means for registering data included in the input request in the storage means of the first information processing apparatus when the input request is received from the second information processing apparatus;
Further comprising
The information processing system according to claim 5. In the first information processing apparatus,
Encrypted data storage means that associates and stores encrypted data that can be processed and the data identification information of the encrypted data;
The encrypted data stored in the encrypted data storage means among the data to be processed requested by the processing request from the terminal device is read from the encrypted data storage means, and the read encrypted data, Response generation means for generating a response including the procedure information representing the procedure of the requested processing in a format including the data identification information of the data to be processed requested by the processing request;
The response transmission means transmits the response generated by the response generation means by the first communication means,
In the second information processing apparatus,
Further comprising decryption means for decrypting the encrypted data included in the response;
The process execution unit executes a process of a procedure represented by the procedure information included in the response with respect to the data decoded by the decoding unit and the data read from the storage unit.
The information processing system according to any one of claims 1 to 4, wherein: In the first information processing apparatus and the second information processing apparatus, which data should be registered in the encrypted data storage unit of the first information processing apparatus or the storage unit of the second information processing apparatus You can refer to the registered location information,
The second information processing apparatus
When an input request including data is received from the terminal device via the second communication unit, the registration location information is referred to, and the data included in the input request is stored in the storage unit of the second information processing device. If it should be registered, registration means for registering the data included in the input request in the storage means of the second information processing apparatus in association with the data identification information of the data;
With reference to the registration location information, if the data included in the input request is to be registered in the storage unit of the first information processing apparatus, an encryption unit that encrypts the data;
An input request transmitting means for transmitting the input request including the encrypted data encrypted by the encrypting means to the first information processing apparatus using the first communication means;
Further comprising
The first information processing apparatus
Registration means for registering the encrypted data included in the input request in the encrypted data storage means in association with the data identification information of the encrypted data when the input request is received from the second information processing apparatus ,
Further comprising
The information processing system according to claim 7. A first information processing apparatus for providing an application, and a second information processing apparatus connected to the first information processing apparatus via a first communication means, via a second communication means different from the first communication means A second information processing device connected to the terminal device,
The first information processing apparatus
Storage means for storing encrypted data obtained by encrypting data that can be processed and data identification information for identifying the encrypted data;
In response to a processing request according to the application from the terminal device, the encrypted data of the data to be processed requested by the processing request is read from the storage unit, and the read encrypted data and the read encryption Response transmission means for transmitting, by the first communication means, a response including procedure information representing a procedure of processing in accordance with the requested application in a format including the data identification information of the digitized data;
With
The second information processing apparatus
Decryption means for decrypting the encrypted data included in the response transmitted by the first information processing apparatus;
Processing execution means for executing processing of a procedure represented by the procedure information included in the response transmitted by the first information processing apparatus with respect to data decoded by the decoding means;
A result transmitting means for transmitting the result of the process by the process executing means to the terminal device by the second communication means;
Comprising
An information processing system characterized by this. The second information processing apparatus
When an input request including data is received from the terminal device via the second communication unit, an encryption unit that encrypts data included in the input request;
Encrypted data transmitting means for transmitting the encrypted data encrypted by the encryption means to the first information processing apparatus using the first communication means;
Further comprising
The first information processing apparatus
Registration means for registering the encrypted data transmitted by the second information processing apparatus in the storage means in association with the data identification information of the encrypted data;
Further comprising
The information processing system according to claim 9. A first information processing device that provides an application; a terminal device connected to the first information processing device via a first communication unit; and a second communication unit different from the first communication unit to the terminal device A connected second information processing device,
The first information processing apparatus
According to the processing request in accordance with the application from the terminal device, according to the requested application in inclusive format data identification information for identifying a subject to data processing requested by the processing request processing A response transmission means for transmitting a response including procedure information representing the procedure of the above to the terminal device by the first communication means;
With
The terminal device
Transmitting means for transmitting the procedure information included in the response received from the first information processing apparatus via the first communication means to the second information processing apparatus by the second communication means;
With
The second information processing apparatus
Storage means for storing data that can be processed and the data identification information that identifies the data;
The procedure information is received from the terminal device via the second communication means, the data represented by the data identification information included in the received procedure information is read from the storage means, and the read data is received. Processing execution means for executing processing of the procedure represented by the procedure information;
A result transmitting means for transmitting the result of the process by the process executing means to the terminal device by the second communication means;
Comprising
An information processing system characterized by this. The response transmitted by the response transmission unit of the first information processing apparatus further includes registration procedure information describing a procedure of processing to be executed when registering data in the storage unit of the second information processing apparatus. ,
The transmission means of the terminal device further transmits the registration procedure information included in the response to the second information processing device,
The process execution means of the second information processing apparatus further registers data and the identification information of the data in association with the storage means in accordance with the process of the procedure represented by the registration procedure information received from the terminal device. ,
The information processing system according to claim 11. The data to be processed includes numerical values,
The process of the procedure represented by the procedure information includes an operation on a numerical value.
The information processing system according to claim 1, wherein: Storage means for storing data that can be processed and data identification information that identifies the data in association with each other;
A response sent by another information processing device in response to a processing request in accordance with an application from a terminal device, in a format including the data identification information of data to be processed requested by the processing request When a response including procedure information representing a procedure of processing according to the requested application is acquired, the data represented by the data identification information in the procedure information included in the response is read from the storage unit, and the read data Processing execution means for executing processing of a procedure represented by the procedure information included in the response;
A result transmission unit that transmits a result of the process performed by the process execution unit to the terminal device;
An information processing apparatus comprising: On the computer,
Reference is made to a storage means that associates and stores data that can be processed and data identification information that identifies the data,
A response sent by another computer in response to a processing request in accordance with an application from the terminal device, which is requested in a format including the data identification information of data to be processed requested in the processing request. When a response including procedure information indicating the procedure of processing according to the application is acquired, the data represented by the data identification information in the procedure information included in the response is read from the storage unit, and the read data is Executing a process of a procedure represented by the procedure information included in the response;
Transmitting a result of execution of the process to the terminal device;
A program that executes In response to a processing request in accordance with an application from a terminal device that can use the storage means that stores the data to be processed and the data identification information that identifies the data, the processing target requested by the processing request A response transmission unit that transmits a response including procedure information representing a procedure of processing according to the requested application in a format including the data identification information of the data to be transmitted to the other information processing apparatus by the first communication unit ,
Equipped with a,
The other information processing apparatus is connected to the terminal device by second communication means different from the first communication means, receives the response via the first communication means, and the procedure information included in the response is Execute the process of the procedure to represent,
An information processing apparatus characterized by that. On the computer,
In response to a processing request in accordance with an application from a terminal device that can use the storage means that stores the data to be processed and the data identification information that identifies the data, the processing target requested by the processing request Transmitting a response including procedure information representing a procedure of processing in accordance with the requested application in a format including the data identification information of the data to the other information processing apparatus by the first communication unit ;
Was executed,
The other information processing apparatus is connected to the terminal device by second communication means different from the first communication means, receives the response via the first communication means, and the procedure information included in the response is Execute the process of the procedure to represent,
A program characterized by that . Connected via the first communication means to another information processing apparatus comprising a storage means for storing encrypted data obtained by encrypting data that can be processed and identification information for identifying the encrypted data, Connected to the terminal device via a second communication means different from the first communication means,
A response sent by the other information processing device in response to a processing request in accordance with an application from the terminal device, which is encrypted data read from the storage means and requested by the processing request A response including encrypted data of the data to be processed and procedure information representing a procedure of processing according to the requested application in a format including the data identification information of the read encrypted data. Decrypting means for decrypting the encrypted data included in the response when received via the first communication means;
Processing execution means for executing processing of a procedure represented by the procedure information included in the response with respect to data decoded by the decoding means;
A result transmitting means for transmitting the result of the process by the process executing means to the terminal device by the second communication means;
An information processing apparatus comprising: Connected via a first communication means to another computer having a storage means for storing encrypted data obtained by encrypting data that can be processed and identification information for identifying the encrypted data in association with each other, To a computer connected to the terminal device via the second communication means different from the communication means,
A response sent by the other computer in response to a processing request in accordance with an application from the terminal device, which is encrypted data read from the storage means and subject to the processing requested by the processing request A response including encrypted data of the data to be obtained, and procedure information representing a procedure of processing according to the requested application in a format including the data identification information of the read encrypted data, A decryption step of decrypting the encrypted data included in the response when received via the first communication means;
A process execution step of executing a process of a procedure represented by the procedure information included in the response with respect to data decoded by the decoding step;
A result transmission step of transmitting a result of the process by the process execution step to the terminal device by the second communication unit;
A program that executes Storage means for storing encrypted data obtained by encrypting data that can be processed and identification information for identifying the encrypted data;
In response to a processing request in accordance with an application from the terminal device, the encrypted data of the data to be processed requested by the processing request is read from the storage unit, and the read encrypted data and the read encryption A response including a procedure information indicating a procedure of processing according to the requested application in a format including the data identification information of the digitized data to the other information processing apparatus by the first communication unit A transmission means;
With
The other information processing apparatus is connected to the terminal device by second communication means different from the first communication means, and includes decryption means for decrypting the encrypted data.
An information processing apparatus characterized by that. On the computer,
Reference is made to storage means that stores encrypted data obtained by encrypting data that can be processed and identification information that identifies the encrypted data,
In response to a processing request in accordance with an application from the terminal device, the encrypted data of the data to be processed requested by the processing request is read from the storage unit, and the read encrypted data and the read encryption Transmitting a response including procedure information representing a procedure of processing according to the requested application in a format including the data identification information of the digitized data to the other information processing apparatus by the first communication unit. ,
And execute
The other information processing apparatus is connected to the terminal device by second communication means different from the first communication means, and includes decryption means for decrypting the encrypted data.
A program characterized by that.

Images