JP7032742B2 - Accounting business management device, accounting business management system, accounting business management program, accounting business management method - Google Patents

Description

According to the accounting business management device, the accounting business management system, the accounting business management program, and the accounting business management method in the accounting business management when multiple server devices are used, when the server device is operated, the server device is further operated. It is related to technology that can reduce the management effort by allowing the administrator to easily copy and set information related to accounting work and server settings for a specific server device when adding a server. ..

Specifically, at accounting offices and tax accountant offices, when adding server equipment, when adding servers within a small group centered on tax accountants, or when adding servers due to the merger of new tax accountant groups. It is related to the technology to set the connection with other servers in the office while making the best use of the security and network settings of the independently managed server.

Accounting offices will start with small offices and expand in scale as the number of advisors and business partners increases. Therefore, at the beginning of opening an accounting office, etc., accounting work is performed with one PC, but as the scale grows, it becomes necessary to introduce a client server system, etc. as the number of personnel increases and the amount of data to be processed increases. Depending on the scale of the accounting office, etc., when adding additional servers to operate the business, it will be necessary to operate each server in cooperation with each other.
In addition, in tax accountant corporations, each tax accountant has a contract with each adviser, and the accounting data and personal information of each adviser must be kept secret from other tax accountants and cannot be viewed on the server. It will be necessary to divide them into groups.
Furthermore, if multiple accounting firms that operate individual accounting firms become tax accountant corporations, it is necessary to manage each individual accounting firm collectively, but each computer has a different network environment. In order to connect and manage the computer, an administrator who is familiar with computers needs to spend a lot of time to prepare for the introduction.
There was also a problem of unifying security policies when expanding the server.

Therefore, there is a technique in which the server has a master-slave relationship when there are a plurality of servers, and the slave data is updated when the master data is updated. (For example, refer to Patent Document 1 Japanese Patent Application Laid-Open No. 2001-34518).

Further, there is a technique for displaying a management menu in order to facilitate reference / copying to a server (see, for example, Patent Document 2 Japanese Patent Application Laid-Open No. 7-306768).

This is because when additional servers are added according to the growth scale of the office, for example, the server may have a slave relationship with the main server (master) or be operated as a server of the same rank. In its setting and operation, it is related to the setting of each server in the main server (master) and the additional server, the setting of the server of the same rank such as data update, the setting of the slave server, and the technology for updating the data.

Therefore, there is a technique capable of controlling file access when a plurality of single PCs are connected (see, for example, Patent Document 3 Japanese Patent Application Laid-Open No. 2010-123042).

Further, there is a technique that can flexibly change resources when the processing load becomes high by executing scale-out processing or scale-up processing (see, for example, Patent Document 4 Japanese Patent Application Laid-Open No. 2015-194810).

Japanese Unexamined Patent Publication No. 2001-34518

Japanese Unexamined Patent Publication No. 7-306768

Japanese Unexamined Patent Publication No. 2010-123042

JP-A-2015-194810

In the case of adding a new server to the environment of the client server used by the accounting office, etc., there are the following problems.

When managing multiple servers, when a new server is added to the network environment that is already in operation, the tax attorneys of the accounting office using the server each other's data such as accounting data and personal information. A system with specialized knowledge to set information necessary for accounting work for each group such as tax accountants and server management information, such as which data can be accessed and which server is used. Often an administrator is needed.
If an individual accounting firm has its own office and becomes a tax accountant corporation, how can it be easily managed as a corporation while maintaining an independent operation of the individual accounting firm and maintaining security? Was the issue.

In addition, while trying to reduce the load and scale out by linking multiple servers in the accounting office, set after grasping all the security policy, access authority and hardware resource information of the entire connected server system. However, it was a problem for the administrator that it took a lot of time and effort.

In such a case, how can you easily add a server, that is, connect it to the network of the client-server environment that has already been built, while ensuring the independence and security of the security policy and access authority of each server group? Was an issue.

Furthermore, when using multiple servers and managing account information etc. separately on each server, when logging in to another server from one server, how to log out of one server and log in to another server In that case, the problem is whether to register the account information of another server, that is, it is necessary to enter the account information and the password, the processing is complicated, and how to grasp the account information.

Next, there is a function called Active Directory as a method of managing servers, which is a function of authentication for Windows Server (Windows Server is a registered trademark of Microsoft Corporation in the United States and other countries). Once authenticated with Active Directory, you will not have to enter the user name and password each time you access each server under Active Directory management, but let's operate Active Directory. At that time, the problem was how to require a separate management server for Active Directory, an administrator, and the administrator to have advanced knowledge of computers and networks.

When using a computer at an accounting office, when the business gets on track, it will be operated with only one client PC at the beginning of the establishment, or the business will be carried out only in the virtual environment on the cloud. The challenge was how to expand the system in the facility according to the scale and smoothly proceed with the operation such as gradually increasing the number of servers.

Furthermore, if you want to open a tax accountant corporation by multiple certified accountants or tax accountants, if you build a client-server environment in both offices and use Active Directory, how to simplify the management in the office, that is, The problem was that it took a lot of time and effort.
Also, when the accounting firm connects to the accounting firm's consulting company via a network, both the accounting firm and the consulting firm use Active Directory, or when the companies merge, or when the parent company and the small company The problem was how to simplify the management, that is, it takes a lot of time and effort, even when the head office or branch office is connected to the network.

To solve the above problems

The first invention is
In a tax accountant corporation, a network consisting of a tax / accounting processing server and a client workstation that manages user information and company information independently for each server is managed independently of user information and company information that is set separately from the server. In a network consisting of multiple tax / accounting servers and client workstations that additionally install tax / accounting servers and client workstations, or manage individual user information and company information independently.
The plurality of tax and accounting servers and the client workstations
A storage unit that registers independent user information for each server,
A storage unit that registers independent company information for each server,
Equipped with a storage unit for registering server information on the network

The client workstation also has the server information display means,
Of the plurality of tax / accounting servers, the user information display means of one of the servers and
Of the multiple tax / accounting servers, the company information display means of the other server and
A server information display means, a user information display means, and a selection display means of user information and company information based on the company information display means.
It is characterized by having.

The second invention is in the network system described in the first.

A storage unit that registers server information on the network on the client workstation,
Information display means of the server information storage unit and
Available server selection means based on the information displayed by the server information display means,
It is characterized by having.

The third invention is the network system described in the first aspect.
For multiple tax and accounting servers and client workstations,
A storage unit that registers independent user information for each server,
A storage unit that registers independent company information for each server,
Equipped with a storage unit for registering server information on the network

The client workstation also has the server information display means,
User information display means of the multiple tax / accounting servers and
The company information display means of the multiple tax / accounting servers and
Based on the server information display means, the user information display means, and the company information display means, the server information and the user information, the company information selection means, the server information and the user information selected by the selection means, and the company. Search means that searched by information and
Search result display means searched based on the search means and
Search target information display means for displaying target information obtained in search results based on the search results, and
It is characterized by having.

The fourth invention is in the network system described in the first.
For multiple tax and accounting servers and client workstations,
A storage unit that registers independent user information for each server,
A storage unit that registers independent company information for each server,
Equipped with a storage unit for registering server information on the network

The client workstation also has the server information display means,
User information display means of the multiple tax / accounting servers and
The company information display means of the multiple tax / accounting servers and
Based on the server information display means, the user information display means, and the company information display means, the server information and the user information, the company information selection means, the server information and the user information selected by the selection means, and the company. Aggregation means that aggregated by information and
Aggregation result display means aggregated based on the aggregation means and
It is characterized by comprising a totaling result printing means based on the totaling result display means.



The fifth invention is
In an accounting business management system for managing accounting business, in which a server and one or more local terminals are connected by a network in an accounting business management system.
A way to easily add servers to your network
To select the server management information to be copied from the main server to the other server, which has a means to treat one specific server as the main server and a means to copy the server management information of the main server to the other server among multiple servers. Copy data selection means and
A reference user selection method for selecting users who can refer to each server,
By providing a management setting selection means for selecting the management setting of each server,
It is characterized by optimizing server management information copying to each server.

Moreover, the sixth invention is
In an accounting business management system for managing accounting business, in an accounting business management system in which a server and one or more local terminals are connected by a network.
A way to easily add servers to your network
To select the server management information to be copied from the main server to the other server, which has a means to treat one specific server as the main server and a means to copy the server management information of the main server to the other server among multiple servers. Copy data selection means and
A reference user selection method for selecting users who can refer to each server,
By providing a management setting selection means for selecting the management setting of each server,
It is characterized by optimizing server management information copying to each server.

Moreover, the seventh invention is
In an accounting business management system for managing accounting business, in which a server and one or more local terminals are connected by a network in an accounting business management system.
Steps to easily add a server to the network,
To select the server management information to be copied from the main server to the other server, including the step of treating one specific server as the main server and the step of copying the server management information of the main server to the other server among multiple servers. Copy data selection step and
A reference user selection step to select users who can refer to each server,
By providing a management settings selection step for selecting the management settings for each server
It is characterized by optimizing server management information copying to each server.

Moreover, the eighth invention is
It is a program for making a computer function as the accounting business management apparatus according to any one of 5th to 7th.

According to the present invention, it is possible to expand the network simply by adding a server of the present technology to a new group while keeping the server adopting the present technology that has already been introduced, which is extremely complicated when constructing a large-scale network. Various security settings can be easily implemented only by setting each server that adopts this technology of each group.
In addition, when operating a network using this technology, security can be set according to the needs of each group for each server that uses this technology, and the security of the entire network can be set even when a new group is added. It is possible to expand the system simply by setting the security for each group without the trouble of changing the system.

Next, the data of the accounting office itself, the data of the accounting office and the group in the accounting office, etc. are managed by providing a data area dedicated to the administrator, and the data area dedicated to the administrator is set with complicated security. It is possible to present an easy and easy-to-understand operation that does not require any operation.

Furthermore, without introducing a server when managing the whole as a corporation while operating each individual accounting firm independently, just by connecting, without changing each individual's server, network settings or security policy settings It can automatically recognize each other's servers, connect to them, and operate them.

It is possible to provide unified user management and facilitate scalable server expansion without changing the server directory (hierarchy), without changing policies such as accounts, networks, and operations, and it has the effect of switching servers without logging out. be.
Based on this, the data of the accounting office itself, the data of the accounting office, etc. and the group in the accounting office, etc. are managed by establishing a data area dedicated to the administrator, and the data area dedicated to the administrator is complicated. It is possible to present an easy and easy-to-understand operation without setting security, which has the effect of easily changing the system configuration such as system upgrade according to the business scale. Although it is explained here that it is for administrators only, it goes without saying that this function can be used even by non-administrators.

In the case of access in normal business, the authentication of "user", which is the information managed by the server, goes to the server with the original user information management table and is authenticated by the access permission of "company and data". Goes to the server that originally has the company information management table for authentication, so it has the effect of ensuring independence and security.

In addition, in access in normal business, after user authentication of the original server, the connection destination server is switched based on the accessible server information registered in the user information management table, and further to the connection destination server. There is an effect that the corresponding user is already registered or the user can be re-authenticated using the authentication protocol of the server.

For this reason, unlike many single sign-on systems, it does not inherit the authenticated information and continue to be logged on, but the available company data is preset by the tool, but the setting is the connection destination. It is not managed by a directory server that is a separate system from the server, but has the effect of being able to be managed by the connection destination server itself.

Secondly, the security system of each server is independent, and problems that tend to occur in conventional systems, such as the possibility that an unauthorized user who has gained unauthorized access can easily access all the connection destinations using the intruded server as a stepping stone, may occur. It has the effect of reducing sex.

In addition, when the access permission of "Company and Data" is authenticated, the server that originally has the company information management table is authenticated, which has the effect of ensuring independence and security.

Finally, if there is a person who manages each server, and if you want to set up a person who manages the entire server, and you do not want to have a domain server to manage the entire server, the administrator of each server In the present invention, the administrator of each server manages the problem of domain management that the data can be added and accessed but the user (person) cannot be added. In addition to the system management authority for the existing server, it has the effect of being able to manage everything from adding users to granting access rights to data.

Further, in the present invention, the administrator who executes the management tool of a plurality of servers only needs to have the access right setting for the data of the plurality of servers and the management authority of the user of the multiple servers, and all of the multiple servers. Since it is not necessary to give the management authority of, there is an effect that the setting can be simplified.

In addition, an administrator running a multi-server administration tool can only set access rights to data on multiple servers and not administer users on multiple servers. User management can be left to the administrator of each server, and the administrator who runs the management tool of multiple servers has only the management authority of the users of multiple servers without giving access to the data of multiple servers. However, there is an effect that the setting of data access authority can be left to the administrator of each server, which enables flexible operation.

FIG. 1-1 is a client-server configuration example in which a plurality of servers 100 and 101 are network-connected to one or more WS20s by LAN or WAN. FIG. 1-2 shows a cloud configuration example in which cloud servers 200 and 201 are network-connected to a plurality of real servers 100 and 101 by WAN, and one or more WS20s are network-connected by LAN or WAN. FIG. 1-3 is a block diagram of the case of “● private office”. FIG. 1-4 is a block diagram of the case of “● company”. FIG. 1-5 is a block diagram of the case of “● tax accountant corporation (conventional technology)”. FIG. 1-6 is a block diagram of the case of “● tax accountant corporation (invention)”. Is a functional block diagram in a client-server configuration. FIG. 3-1 is a user management setting processing flow of a plurality of servers. FIG. 3-2 shows a copy processing flow of a plurality of servers. FIG. 4-1 is an application information management table which is one of the server management information, and is a table which manages the relationship with the user for each application. FIG. 4-2 is a server information management table that is one of the server management information, and is a table that manages the relationship between each server and the user. FIG. 4-3 is a user information management table that is one of the server management information, and is a table that manages information when each user accesses the server. FIG. 4-4 is a company information management table which is one of the server management information, and is a table which manages the information of the adviser who carries out the accounting processing. FIG. 4-5 is a personal information management table that is one of the server management information, and is a table that manages personal information necessary for final tax returns and the like. FIG. 4-6 is a user management access restriction information management table of a plurality of servers, which is one of the server management information, and is a table that manages the user's access restriction status for the information of each server. FIG. 4-7 is a copy information management table that is one of the server management information, and is a table that manages information related to copying between each server. FIG. 4-8 is a copy error information management table which is one of the server management information, and is a table which manages information related to an error at the time of copying between each server. FIG. 4-9 is a user management information table of a plurality of servers, which is one of the server management information, and is a table that manages whether or not copying is possible in the user management of the plurality of servers. FIG. 4-10 is a user-managed copy information table of a plurality of servers, which is one of the server management information, and is a table that manages whether or not each copy item can be copied according to the copy implementation status. FIG. 4-11 is a table that manages whether or not each item belonging to the tax accountant staff information setting ID can be copied in the user management copy information table (FIG. 4-10) of a plurality of servers, which is one of the server management information. .. FIG. 4-12 is a table that manages whether or not each item belonging to the company information setting ID can be copied in the user-managed copy information table (FIG. 4-10) of a plurality of servers, which is one of the server management information. FIG. 4-13 is a table that manages whether or not each item belonging to the personal information setting ID can be copied in the user-managed copy information table (FIG. 4-10) of a plurality of servers, which is one of the server management information. FIG. 4-14 is a table that manages whether or not each item belonging to the logon user information setting ID can be copied in the user management copy information table (FIG. 4-10) of a plurality of servers, which is one of the server management information. .. FIG. 4-15 is a table that manages whether or not each item belonging to the access restriction information setting ID can be copied in the user-managed copy information table (FIG. 4-10) of a plurality of servers, which is one of the server management information. .. FIG. 4-16 is a server environment management table which is one of the server management information. FIG. 4-17-1 is a search condition management table managed by the search tool developed on the storage unit 25 of FIG. 6-1. FIG. 4-17-2 is a server information management table of a server that matches the search conditions by the search tool developed on the storage unit 25 of FIG. 6-1. FIG. 4-17-3 is a company information management table of a company that matches the search conditions with the search tool developed on the storage unit 25 of FIG. 6-1. FIG. 5-1 is a user management server selection screen for a plurality of servers. FIG. 5-2 is a user management user setting selection screen for a plurality of servers. FIG. 5-3 is a user management copy setting selection screen for a plurality of servers. FIG. 5-4 is a server copy selection screen. FIG. 5-5 is a server simple connection setting screen. FIG. 6-1 is a functional block diagram of the WS accessing the server. FIG. 6-2 is a company information management table of a management tool for a plurality of servers for setting necessary privileges and the like. FIG. 6-3 is a server information management table of a management tool for a plurality of servers for setting necessary privileges and the like. FIG. 6-4 is a user information management table of a management tool for a plurality of servers for setting necessary privileges and the like. FIG. 6-5 is a server information management table that stores that the user is a source server for performing normal business. FIG. 6-6 is a user information management table for storing user accounts in which users perform normal business. FIG. 7-1 is a company information access permission flow (1/4) to a server by a management tool of a plurality of servers. FIG. 7-2 is a company information access permission flow (2/4) to the server by the management tool of a plurality of servers. FIG. 7-3 is a company information access permission flow (3/4) to the server by the management tool of a plurality of servers. FIG. 7-4 is a company information access permission flow (4/4) to the server by the management tool of a plurality of servers. FIG. 8-1 is a user normal business processing flow (1/2) at the time of server switching. FIG. 8-2 is a user normal business processing flow (2/2) at the time of server switching. FIG. 9-1 is a search tool processing flow (1/3). FIG. 9-2 is a search tool processing flow (2/3). FIG. 9-3 is a search tool processing flow (3/3). FIG. 10-1 is an aggregation tool processing flow (1/4) of a plurality of servers. FIG. 10-2 is an aggregation tool processing flow (2/4) of a plurality of servers. FIG. 10-3 is an aggregation tool processing flow (3/4) of a plurality of servers. FIG. 10-4 is an aggregation tool processing flow (4/4) of a plurality of servers. FIG. 11-1 is a server information management table that stores servers selected from servers that match the search conditions when the aggregation tool for a plurality of servers is executed. FIG. 11-2 is a company information management table that stores companies selected from companies that match the search conditions when the aggregation tool of a plurality of servers is executed. FIG. 11-3 is an aggregation result table that stores the aggregation result of the company data selected by the aggregation tool when the aggregation tool of a plurality of servers is executed. FIG. 11-4 is an example of a print format (man-hour totaling table for each adviser) of the totaling result when the totaling tool of a plurality of servers is implemented.

In the present invention, it is possible to manage users of multiple servers by flexibly adding servers. In a large accounting office, a small server is introduced and an additional server is introduced, or when a small accounting office gradually increases in scale, an additional server is introduced. It is possible, but not limited to this.
In addition, convenience can be improved by using a mechanism of a multi-server configuration that takes into consideration the maintenance of independence of each server and the load balancing associated with the connection.

A user using a multi-server configuration can switch servers from the server switching screen if the settings are set so that they can access servers other than the one they normally use (Fig. 5-1). ..

When operating multiple servers by using a multiple server configuration, the administrator can easily copy the user information of one server to each server, so it is possible to reduce the management effort. Is.
At this time, by adding / correcting a user on the user management screen for any one server, copying to another server becomes possible easily (Fig. 5-2).
In addition, in a tax accountant corporation, multiple tax accountants have contracts with different companies and individuals in the same office, and it is necessary to classify the information from the viewpoint of security, so it is divided into "groups". Although it is necessary, by adding / correcting the group on the above user management screen, it is possible to easily copy it to another server, and it is possible to realize common data copying with tax accountants, staff, etc. in the group. When adding / correcting a user, all the copy settings are selected as shown in Fig. 5-2, but when a user is added, preset default values and templates are prepared to reflect the settings. It may be set by other methods.

By providing "user management of multiple servers", it is possible to set the same administrative user for each server in a multiple server configuration, which allows this administrative user to perform copy processing for each server. It becomes possible to carry out easily (FIGS. 5-1 to 5-4). Furthermore, by setting and managing the same management user for each server, it is possible to ensure the security of the copying process to each server (FIGS. 5-1 to 5-4).

Here, "server management information" refers to FIG. 4-1 application information management table, FIG. 4-2 server information management table, FIG. 4-3 user information management table, FIG. 4-4 company information management table, and FIG. 4-5. Personal information management table, Fig. 4-6 User management access restriction information management table, Fig. 4-7 Copy information management table, Fig. 4-8 Copy error information management table, Fig. 4-9 User management information table for multiple servers, Fig. 4 -10 User management copy information table for multiple servers, Fig. 4-11 Tax officer staff information setting ID copy availability management table for multiple servers, Fig. 4-12 Company information setting ID copy availability management table for multiple servers, Fig. 4-13 Multiple servers Personal information setting ID copyability management table in FIG. 4-14 Logon user information setting ID copyability management table in multiple servers, FIG. 4-15 Access restriction information setting ID copyability management table in multiple servers, FIG. 4- 16 It is a server environment management table, and an example of the table is illustrated as FIGS. 4-1 to 4-16, but the present invention is not limited to this.

In "User management of multiple servers", it is possible to set the copy processing of each information such as user-specific information and accompanying office-specific information (Fig. 5-2), and the information set here is for multiple servers. It is displayed with reference to each detail table (Fig. 4-11 to Fig. 4-15) based on the key described in the user-managed copy information table (Fig. 4-10), and when this setting is changed, each detail table is displayed. Will be updated.

In addition, here, the setting of copy processing of each information such as user-specific information and accompanying office-specific information using "user management of multiple servers" is realized, but it is initially set when the same management user is set. It is possible to set the value, and each detail table (Fig. 4-11 to Fig. 4-15) is based on the key described in the user management copy information table (Fig. 4-10) of multiple servers by another method. ) Can be changed, and is not limited to this.

In addition, here, as an example, as a table in which the copy processing settings in "user management of multiple servers" are described, (1) tax accountant, staff information, (2) company information, (3) personal information, and (4) logon. Detailed tables of user information and (5) access restriction information (Fig. 4-11 to Fig. 4-15) are provided, but the tables are not limited to this, and are separately copied as other information necessary for "user management of multiple servers". It is also possible to provide a detailed table that describes the processing settings.

Furthermore, here, all the "user management of multiple servers" can be set from a single setting menu. For example, in "user management of multiple servers", 1. (1) Tax accountant, staff information, (4) Logon user information, (5) Access restriction information setting "Office-related information management of multiple servers" and 2. Setting of (2) company information and (3) personal information regarding advisors and business partners may be divided into "information management of business partners of multiple servers", or further subdivided management may be performed.

As another example, when a small accounting firm or the like switches and introduces a new large-scale server when the number of advisors or business partners increases, it is possible to use "user management of multiple servers". It is possible. In this case, it can be easily switched by the following procedure.
(1) Incorporate a large-scale server into the conventional network environment (2) Add a large-scale server from "User management of multiple servers" (3) Implement settings to copy all data managed by the administrator (4) ) Copy data to a large-scale server with "Copy Now" in "User Management of Multiple Servers" (5) Separate the small server that was used from "User Management of Multiple Servers" and make the master server a large-scale server. Switch to (6) Remove the small server from the network environment Here, as a means of copying, copying was performed using "Copy Now" in "User Management of Multiple Servers", but in "User Management of Multiple Servers" Other means may be used, but are not limited to this.

1. 1. Configuration of Example of System The system configuration of the present invention describes as an example a client-server configuration as shown in FIG. 1-1 and a cloud configuration as shown in FIG. 1-2.
As a component of the system, in FIG. 1-1, there is one or more WS20, and a configuration in which a new real server n (101) is added to the place where the client server configuration is formed by the real server 1 (100) is considered. Be done. Here, the number of servers may be two or more, and the number of WS terminals may be one or a plurality.
Further, the WS terminal may be not only a desktop PC or a notebook PC but also a tablet terminal or a smartphone terminal.
The client-server configuration is used not only by accounting firms but also by accounting departments of companies, but is not limited to this.

Regarding FIG. 1-1, a real server n: 101 or a cloud server n: 201 is newly added to the place where the WS20 is 1 or more and the network is composed of the real server 1: 100 and the cloud server 1: 200. The configuration is conceivable.
The cloud configuration may be a real server + cloud server, two or more real servers + cloud server, a real server + two or more cloud servers, two or more real servers + two or more cloud servers, and even one WS terminal. It may be a plurality of units.
Further, the WS terminal may be not only a desktop PC or a notebook PC but also a tablet terminal or a smartphone terminal.
Needless to say, it may be configured with two or more real servers.
The cloud configuration is used not only by accounting firms but also by accounting departments of companies, but it is not limited to this.

Furthermore, as shown in Figure 1-3, it is conceivable that each accounting firm, etc. that is already conducting business will expand its scale. At first, accounting work was carried out with a single PC, but as the work progressed, the scale was expanded to the scale of connecting several WS to a small server, and the scale was further expanded, and dozens more to a large server. It is conceivable that a WS of a stand is connected.


2. 2. Functional block of each component Figure 2 shows a functional block diagram of each component. A client-server configuration, a cloud configuration, and a configuration that combines them are described as an example.
Each functional unit in FIG. 2 has a configuration in which a real server n (101) or a cloud server n (201) is added in addition to the real server (100) or the cloud server (200), and the configuration is such that the real server n (101) or the cloud server n (201) is added. Upon receiving the operation from the WS terminal 20, each functional unit of the control unit 140 (or 240) executes the process using the data of the storage unit 150 (or 250).
In the cloud configuration, various types such as a virtual server and a virtual PC can be used.

Further, the storage unit 150 is provided with an administrator data storage area and an employee data storage area. The purpose of this is to strengthen the security by providing a data area dedicated to the administrator for the data of the accounting office itself, the data of the accounting office, etc. and the group in the accounting office, etc.
Only the administrator who uses the administrator ID registered in the server division management table (Fig. 4-2) can write to the data storage area dedicated to the administrator. If this administrator is a management table of each information, for example, a company information management table (Fig. 4-4), the company information manager registration folder is referred to, and if it is a personal information management table (Fig. 4-5), an individual. Refer to the information administrator registration folder and copy the data to the administrator data storage area.
As an example of the information to be registered in the data storage area this time, the items are based on the table related to company information and personal information, but the items are not limited to this.

3. 3. Processing flow 3-1. Overall processing flow (user management settings for multiple servers)
FIG. 3-1 is a diagram showing an overall processing flow when registering the settings when a server is added in the accounting business management of the present invention.
A person who does not have specialized knowledge about computers and systems, such as a tax accountant at an accounting office or an employee in the accounting department of a company, operates a WS terminal 20 or the like to operate a real server 100 (101) or a cloud server 200 (201). ) Shows the overall processing flow when the processing is advanced by the control unit or the storage unit.

Start the server management application registered in the application information management table (Fig. 4-1) (S3-1-1), and select the server from the "Server user management user settings" screen (Fig. 5-1). (S3-1-2), and after performing the update lock processing of the server data by setting the server management information access flag in the server information management table (Fig. 4-2) (S3-1-3), "Server" User management of "User setting" input processing (S3-1-4) is executed.

If the server is already registered, based on the screen displaying the information acquired from the user management access restriction information management table of multiple servers (Fig. 4-6) and the user management information table of multiple servers (Fig. 4-9). You can select a server, but if it is an unregistered server, you need to perform initial input processing of server information. At this time, the "server user management user setting" is the table information (ST0001) at the time of new setting of the user management information table of multiple servers (Fig. 4-9) and the user management copy information table of multiple servers (Fig. 4-10). ) Will be implemented.
However, the "server user management user settings" may be finely set in detail, or default values may be set separately, but the present invention is not limited to these.
If you do not have permission to access this information regarding "Server User Management User Settings", the server selection button will be grayed out and cannot be operated on the server selection screen, so the server management application will end as it is.

After performing the "server user management user setting" input process (S3-1-4), perform the "server user management user setting" registration process (S3-1-5) to manage user management for multiple servers and access restriction information management. After registering the setting information in the table (Fig. 4-6) or the user management information table for multiple servers (Fig. 4-9), reset the server management information access flag in the server information management table (Fig. 4-2). The server data update unlock process (S3-1-6) is executed, and the user management setting process flow for multiple servers ends.

As selection items on the "User Management Server Selection for Multiple Servers" screen, in the examples, "Server Settings" for setting the server itself, "Copy Target Settings" for setting the copy target, and when each server is started. "Startup notification settings" for setting and "Error notification settings" for setting various error displays are described, but the settings are not limited to these.

3-2. Overall processing flow (copying processing flow for multiple servers)
FIG. 3-2 is a diagram showing an overall processing flow of an embodiment of copying processing of a plurality of servers in the accounting business management of the present invention.
Based on the user management settings for multiple servers (Fig. 3-1), a person who does not have specialized knowledge about computers and systems, such as a tax accountant at an accounting office or an employee in the accounting department of a company, can use the WS terminal 20. It shows the whole process when proceeding with the process for performing the copy process from the real server 1 (100) to the real server 2 (101) and the cloud server 1 (200) by operating and the like.

Start the server management application registered in the application information management table (Fig. 4-1) (S3-2-1), and select "Copy Now" on the "Server User Management User Settings" screen (S3). -2-2).
After performing update lock processing of server data by setting the server management information access flag in the server information management table (Fig. 4-2) (S3-2-3), copy destination server selection processing (copy destination server selection processing) from the server copy selection screen. Carry out S3-2-4).

On the server copy selection screen (Fig. 5-4), select the copy destination server. Here, one copy destination server may be selected, or a plurality of copy destination servers may be selected.
After selecting the copy destination server, click the "OK" button on the server copy selection screen (Fig. 5-4) to start the copy process.
Here, the data is copied from "Copy Now" on the "Server User Management User Settings" screen, but the copying method is not limited to this.

After the copy process is completed, the server data update unlock process (S3-2-6) is executed by resetting the server management information access flag in the server information management table (Fig. 4-2), and the user management setting process for multiple servers is performed. The flow ends.

4. Table Figure 4-1 is an application information management table, and in the user management setting processing flow of multiple servers (Fig. 3-1) and the copying processing flow of multiple servers (Fig. 3-2), "user management of multiple servers". This table is referenced when launching the "Settings" app. In the application information management table, not only the application ID and name, the server ID that can use the application and the staff ID that can use the application, but also the registration date, update date, and version information of the application are registered. Information and settings for automatic update of applications may be added to the table, and other information related to application information may be registered in this table.

FIG. 4-2 is a server information management table, which is a table for managing server information operated by the accounting office in the accounting office, and is a user management setting processing flow for multiple servers (Fig. 3-1) and multiple servers. The copy processing flow (Fig. 3-2) also refers to this table when selecting a server. In the server information management table, examples include the server ID and administrator ID, the staff ID used, the group ID to which the administrator and staff belong, the server management information access flag, the master server flag, the interval when automatic copying is performed, and the copying error flag. However, other server hardware and system information (MAC address, IP address, default gateway, etc.) may be registered, and other server-related information may be registered in this table.

FIG. 4-3 is a user information management table, which manages user information using the network system constructed by the accounting office, and is a user management setting processing flow of a plurality of servers (Fig. 3-3). This table is also referred to in 1) and the copy processing flow of multiple servers (Fig. 3-2) when identifying the user who uses the server. The user information management table manages not only information that requires authentication to the server in the network system of staff ID, name, account, and password, but also accessible server ID information such as administrator flag, staff group ID, and management server ID. However, information about other office users may be created in this table.

FIG. 4-4 is a company information management table, which manages information on advisors and business partners necessary for accounting offices and the like to carry out business, and is a user management server selection screen for multiple servers (Fig. 5-). Detailed copy target on the "User management copy setting selection screen" (Fig. 5-3) that is displayed when you select the copy target setting of multiple servers that is displayed when you specify the "copy target setting" button from 1) by clicking the mouse. Refer to this table for the company information to be listed when specifying. In the company information management table, the company ID, the adviser of the company name manages the information that identifies the business partner, as well as the company information registration server ID and the company information accessible staff ID that are necessary to access the company information. There is.
In addition, security is improved by providing a registration folder for company information managers and a registration folder for company information staff so that information that can be referred to by managers and staff other than managers can be distinguished. Here, the registration folders of the administrator and the staff other than the administrator are illustrated, but for example, by preparing the registration folders of the staff belonging to the group, more flexible management becomes possible.

It is also possible to aggregate and display information used by multiple apps specifically for a specific company (not shown). As an example of this, the company ID: SH0001 ○ × Industrial Co., Ltd. will be described. As shown in the application information management table (Fig. 4-2), the company ID: SH0001 (corporate tax return), which is information that would normally be used by multiple applications, is applied to the application ID 02 (accounting data input) and application ID 03 (corporate tax return). It is possible to collect and display information using (○ × Industrial Co., Ltd.) as a key (not shown).

FIG. 4-5 is a personal information management table, which is a table for managing personal information necessary for accounting offices and the like to perform business, from the "User management server selection of multiple servers" screen (Fig. 5-1). Specify the detailed copy target on the "User Management Copy Setting Selection Screen" (Fig. 5-3) that is displayed when you select the copy target settings for multiple servers that are displayed when you specify the "Copy Target Settings" button by clicking the mouse. Refer to this table for personal information that is sometimes listed.

FIG. 4-6 is a user management access restriction information management table for multiple servers, which manages personal information necessary for accounting firms and the like to perform business, and is a "user management server selection for multiple servers" screen ( It is a table that manages servers and information that can be accessed by registered users on Fig. 5-1) and "User management of multiple servers User setting selection" screen (Fig. 5-2). This table and the user management information table of multiple servers (Fig. 4-9), the user management copy information table of multiple servers (Fig. 4-10), and the user of multiple servers, which is a subtable of the user management copy information table of multiple servers. Management copy information detail table 1 (tax accountant, staff information) (Fig. 4-11), user management copy information detail table 2 for multiple servers (company information) (Fig. 4-12), user management copy information detail table 3 for multiple servers (Personal information) (Fig. 4-13), User management copy information detail table 4 for multiple servers (Logon user information) (Fig. 4-14), User management copy information detail table 5 for multiple servers (Access restriction information) (Fig.) From 4-15), it can be shown which information can be copied by each user on a plurality of servers.

Figure 5-1 is the "User Management Server Selection for Multiple Servers" screen, which is the first screen displayed by the application for managing server settings, user management settings, copy target settings, etc. when a server is added. Yes, from this screen you can select which server to implement the settings for, and select various settings. Note that this display screen is an example and is not limited to this.

FIG. 5-2 is a “user management user setting selection for a plurality of servers” screen, which is a screen for selecting what kind of setting is to be copied by each user. The setting items described here are just examples, and it is possible to display other settings as well.

FIG. 5-3 is a “user management copy setting selection for a plurality of servers” screen, which is a screen for selecting what kind of setting is to be copied by each user. The setting items described here are just examples, and it is possible to display other settings as well.

FIG. 5-4 is a “server copy selection” screen, which is a screen for selecting a copy destination when copying between servers. The setting items described here are just examples, and it is possible to display other settings as well.

6. Configuration of an example of a system for combining the systems of multiple individual accounting firms and managing the whole

The conventional configuration is "● private office case" (Fig. 1-3), "● company case" (Fig. 1-4), and "● tax accountant corporation case (conventional technology)" (Fig. 1-5). ) Is conceivable.
First, the configuration is such that several PCs are connected to a small server, and then several to dozens of PCs are connected to a large server, as in a private office (Fig. 1-3).
Next, as in the case of a company, it is a configuration that can be considered for operation in a company. Each department has a client-server configuration, and the network is connected via a firewall or router (Fig. 1-4).
Finally, it became necessary for individual offices that carry out accounting operations independently to establish a tax accountant corporation and manage the entire system (Fig. 1-5).

In particular, in the case of "● Tax accountant corporation case (conventional technology)" (Fig. 1-5), user management, data management, and security management were performed independently, so additional servers were added to each individual's network configuration. When I tried to add it, I couldn't build a network system without setting up each management server.

Here, the system configuration of the present invention is, for example, a case where a server incorporating the present invention is added to the office configuration of a plurality of individuals as in "● Case of a tax accountant corporation (conventional technology)" (Fig. 1-5). It is described. The server of the private office at this time uses the server of the conventional technology. When you add a server, you start managing server connections (Figure 5-5). In the server simple connection setting, the server ID and IP address, MAC address of the server information management table (Fig. 4-2), the server group ID and server ID of the server environment management table (Fig. 4-16), the identification code, and the server name are set. After inputting and pressing the "Connect" button, TCP / IP communication is used from the above information to search for a server on the same network and establish a network.

When adding a server to the system configuration used in multiple individual offices like this time, with the conventional technology, it is necessary to separately set network search, user management, and security management when adding a server. A database server, a directory management server, and a user management server are required, but they are not required in the system configuration of the present invention.

Also, the server added here is
Specifically, "Server Gr.ID: SG0010", "Server name: SV0010: ServerX", "Identification code: 100003", "IP address: 192.168.1.2", "MAC address: 66:33" on the server simple connection setting screen. : 82: 37: BB: 54 "etc. is entered and the additional server is published by pressing the" Publish "button.

As another embodiment, there is a case where a plurality of individual offices such as "● Case of tax accountant corporation (present invention)" (Fig. 1-6) have introduced the server of the present invention. In this configuration, since each individual office is the server of the present invention, server information is exchanged with each other based on the server information management table (Fig. 4-2) and the server environment management table (Fig. 4-16). It has a built-in function. Therefore, it is possible to search and recognize each other's servers simply by connecting to the network used in each individual's office. Furthermore, since it communicates with each other's servers using the function of exchanging server information with each other, it is easy to ensure security without changing the settings such as user management and data management of each individual office. It is possible to connect to the network.

Since the user ID and password that have been used before can be used here, it is possible to flexibly switch to another server.

Furthermore, since it is possible to communicate with each other's servers using the function of exchanging server information with each other, company information and personal information managed by both servers are collected, aggregated, and the results are displayed and printed. It is also possible to do. The company information shown here includes, but is not limited to, the electronic certificate of journal data, receipts and passbooks, and the electronic certificate of contracts.

When you want to give access to the company or data of one server to the user of the other server, the specific example of giving access by using the management tool of multiple servers is shown in FIGS. 7-1 to 7-. It will be explained using 4 mag. In this example, the information managed by the management tool refers to the information in the server information management table in FIG. 4-2, the user information management table in FIG. 4-3, and the company information management table in FIG. 4-4. , Not limited to this. Also, in this case, the explanation is developed as if the administrator is operating the management tool, but the word "administrator" is used as a definition for convenience, and the function of this management tool is used even if there is no administrator. Needless to say, you can use.

In the server used in the accounting office, etc., there is a company information management table in FIG. 4-4 as a table for managing company (advisor) information, and a user information management table in FIG. 4-3 as a table for managing staff information.

The company information management table manages data IDs, server IDs, employee IDs, etc. associated with company IDs, which data is associated with company information, and which employees and teachers can access the company information. Is managed. In the company information management table, in this example, the company ID and the data ID have a one-to-one correspondence, but it is possible to manage a plurality of data IDs for the company ID, and further for the data ID. Therefore, it is possible to manage by having a plurality of management IDs separately. Further, the company ID can manage the company information accessible staff ID, the company information manager registration folder, and the company information staff registration folder, but the present invention is not limited to these.

In the user information management table, the user's account and password associated with the employee ID, the administrator level that enables management of access authority as an administrator according to the level, the management server ID and accessible server in each server It manages ID information and so on. In the user information management table, in this example, a single staff ID, staff group ID, etc. are assigned to one person, but multiple staff IDs, multiple staff group IDs, etc. are assigned to one person. May be assigned.

Regarding the administrator level, an administrator may be set only for each server, an administrator may be set across a plurality of servers, and a plurality of administrators may be provided for one server. In addition, the administrator level has normal users who cannot make any additional corrections, data-only access rights management, data and user access rights management, and full-control access rights management. The levels are illustrated, but not limited to these. In addition, accounts and passwords can be managed for staff IDs, but they are not limited to these.

Next, when each server used in the accounting office etc. is connected to the network, how to deal with the company information managed by one server based on the managed company information and user information. An example will be described as to whether to grant the access permission to the user managed by the other server.

-About the procedure for setting permissions using the management tool for multiple servers

In this case, when a server managed by one accounting office is connected to a server managed by another accounting office, the administrator starts the management tool of multiple servers and accesses one server. Describes the procedure for allowing the server that has the company and data that you want to allow to be accessed by reflecting the information of the user that you want to access on the other server.
In such cases, for example, an individual accounting firm was run, but when an accounting firm corporation was established with multiple accountants, or when an individual accounting firm operated an office with a single server. However, as the number of advisors increases and the amount of information to be managed increases, it is conceivable that an additional server may be installed and connected, but this is not limited to this.

Here, the server that registers the information about the company to which the access permission is to be given and the data is referred to as the server 1, and the server that registers the information about the user to which the access permission is to be given is referred to as the server 2. Further, it is assumed that the user information of the user processed by the management tools of the plurality of servers is not registered in the server 3 this time.
In the example, the process is described as processing for two servers, but dozens of servers may be connected, or there may be multiple servers that give access permission to the company or data, or the company or There may be multiple servers in which users who receive access permission for data are registered.

There is a server 2 managed by the tax accountant corporation 2, and a staff member who has set the staff ID: TM2000 and the staff ID: TM0001 of the tax accountant corporation 2 receives a request from the customer and the server 1 managed by the tax accountant corporation 1. : Company of SV0001: Data of SH0003: When it is necessary to access DT0003, the employee who has set the employee ID: TM1000 and the employee ID: TM0001 of the tax accountant corporation 2 for the server 1 of the tax accountant corporation 1 is concerned. How the other user can access and log on to one server while selecting user information and management information, how the invention makes it possible to access the advisory data of the tax accountant corporation 1's server 1. Explain if it is possible.

-Step 1: Each server holds management information individually (each server is not connected to the network).

In the server 1 managed by the tax accountant corporation 1, 3 records are registered in the company information management table of the server 1 (SV0001) before starting the management tool of multiple servers. Specifically, the following It is a street. In the first record, company ID: SH0001, company name: ○ × Industrial Co., Ltd., data ID: DT0001, company information registration server ID: SV0001, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM0002 , Company information accessible staff ID3: TM0003, Company information accessible staff ID4: TM1000, Company information manager registration folder: \\ kaisha \ kanrisha \ data \ sh0001, Company information staff registration folder: \\ kaisha \ shokuin \ It is set as data \ sh0001. In the second record, company ID: SH0002, company name: Keihin Kotsu Co., Ltd., data ID: DT0002, company information registration server ID: SV0001, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM0002, Company information accessible staff ID 3: TM1000, company information manager registration folder: \\ kaisha \ kanrisha \ data \ sh0002, company information staff registration folder: \\ kaisha \ shokuin \ data \ sh0002 are set. In the third record, company ID: SH0003, company name: Seibu Kogyo, data ID: DT0003, company information registration server ID: SV0001, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM1000, company information The registration folder for administrators: \\ kaisha \ kanrisha \ data \ sh0003 and the registration folder for company information staff: \\ kaisha \ shokuin \ data \ sh0003 are set.
Here, "○ × Industrial Co., Ltd." is associated with the company ID: SH0001, "Keihin Kotsu Co., Ltd." is associated with the company ID: SH0002, and "Western Kogyo" is associated with the company ID: SH0003.
Further, the "Western Kogyo" of the company ID: SH0003 sets the staff ID: TM0001 and the staff ID: TM1000 as users who can access the data ID: DT0001.

Further, in the server 1 managed by the tax accountant corporation 1, 6 records are registered in the user information management table of the server 1 (SV0001) before starting the management tool of a plurality of servers. Specifically, It is as follows. In the first record, staff ID: TM0001, name: Suzuki ○ ro, account: suzu-1, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. In the second record, staff ID: TM0002, name: Kojima × ro, account: koji-1, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. In the third record, staff ID: TM0003, name: Ohno △ ta, account: ohno-1, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. In the 4th record, staff ID: TM0004, name: Takahashi ▽ man, account: taka-2, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. On the 5th record, staff ID: TM0500, name: Tanaka □ ro, account: tana-1, password: *****, administrator level: 4, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. In the 6th record, staff ID: TM1000, name: Higashiyama □hiko, account: higa-1, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. Here, the staff ID: TM0001 to TM0004, the manager level: "normal user" = 0 staff information, the manager level: "full control" = 4, the staff ID: TM0500, and the manager level: The information of the staff ID: TM1000 having "data and user access authority" = 3 is managed.

In the server 1 managed by the tax accountant corporation 1, 3 records are registered in the server information management table of the server 1 (SV0001) before starting the management tool of a plurality of servers. Specifically, the following It is a street. In the first record, server ID: SV0001, server name: ○ × office server 1, group ID 1: SG0001, server management information access flag: 1, master server flag: 1, interval at the time of automatic copying: 30, copying Error flag: 1, IP address: 172.16.1.2, MAC address: 00: CC: DD: 13: 57: 90 are set. In the second record, server ID: SV0002, server name: ○ × office server 2, group ID 1: SG0002, server management information access flag: 1, master server flag: 0, interval at the time of automatic copying: 60, copying The error flag is set to 0, the IP address is set to 192.168.1.2, and the MAC address is set to 12: 34: 56: 78: 9A: BC. In the third record, server ID: SV0003, server name: ○ × office server 3, group ID 1: SG0003, server management information access flag: 1, master server flag: 0, interval at the time of automatic copying: 40, copying The error flag is set to 0, the IP address is set to 192.168.1.3, and the MAC address is set to 66: 33: 62: 37: BB: 60. Since the information of each server connected to the network is collected and listed in this table when the server is started, the server IDs: SV0001, SV0002, SV0003, ... Are listed.

In the server 2 managed by the tax accountant corporation 2, two records are registered in the company information management table of the server 2 (SV0002) before starting the management tool of a plurality of servers. Specifically, the following It is a street. In the first record, company ID: SH0001, company name: Peace Pharmacy, data ID: DT0001, company information registration server ID: SV0002, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM0002, company information Accessable staff ID3: TM2000, registration folder for company information manager: \\ kaisha \ kanrisha \ data \ sh0001, registration folder for company information staff: \\ kaisha \ shokuin \ data \ sh0001 are set. In the second record, company ID: SH0002, company name: restaurant POP, data ID: DT0002, company information registration server ID: SV0001, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM0002, company information Accessable staff ID3: TM0003, Company information accessible staff ID4: TM2000, Company information manager registration folder: \\ kaisha \ kanrisha \ data \ sh0002, Company information staff registration folder: \\ kaisha \ shokuin \ data \ sh0002 Is set. Here, the company ID: SH0001 is associated with "peace pharmacy", and the company ID: SH0002 is associated with "restaurant POP".
Further, the "peace pharmacy" of the company ID: SH0001 sets the staff ID: TM0001, the staff ID: TM0002, and the staff ID: TM2000 as users who can access the data ID: DT0001.

In this way, since the server 1 managed by the tax accountant corporation 1 and the server 2 managed by the tax accountant corporation 2 manage the company information independently, the company in the company information management table in FIG. 4-4. The company linked to the ID is different.
For example, in the company information management table of FIG. 4-4 of the server 1 (SV0001) managed by the tax accounting corporation 1, the company ID: SH0001 is "○ × Industrial Co., Ltd." and the company ID: SH0002 is "Keihin Kotsu". However, in the company information management table of the server 2 (SV0002) managed by the tax accountant corporation 2, the company ID: SH0001 is "peace pharmacy" and the company ID: SH0002 is "restaurant POP". This is because each tax accountant corporation manages the company (advisor) individually and independently.
In this example, each tax accountant corporation manages an individual and independent company (advisor), but the company ID management method common to all connected tax accountant corporations, that is, the company You may take measures so that the IDs do not overlap.

Next, in the server 2 managed by the tax accountant corporation 2, 5 records are registered in the user information management table of the server 2 (SV0002) before starting the management tool of a plurality of servers. Is as follows. In the first record, staff ID: TM0001, name: Takahashi ▽ man, account: taka-2, password: *****, administrator level: 0, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 is set. In the second record, staff ID: TM0002, name: Yokoi ☆ 3, account: yoko-2, password: *****, administrator level: 0, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 is set. In the third record, staff ID: TM0003, name: Miyagawa ◇ beauty, account: miya-2, password: *****, administrator level: 0, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 is set. In the 4th record, staff ID: TM1000, name: Higashiyama □hiko, account: higa-1, password: *****, administrator level: 3, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 is set. On the 5th record, staff ID: TM2000, name: Nishio ◎ child, account: nishi-2, password: *****, administrator level: 4, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 is set. Here, the staff ID: TM0001 to TM0003, the manager level: "normal user" = 0, the staff information, the manager level: "full control" = 4, the staff ID: TM2000, and the manager level: The information of the staff ID: TM1000 having "data and user access authority" = 3 is managed.
As described above, the tax accountant corporation 1 and the tax accountant corporation 2 manage the user information independently as well as the company information, so that the users associated with the user IDs are different.

For example, in the user information management table of the server 1 (SV0001) managed by the tax accountant corporation 1, the user ID: TM0001 is "Suzuki ○ ro", the user ID: TM0002 is "Kojima × ro", and the user ID: TM0003 is "Ohno △ thick", but in the user information management table of server 2 (SV0002) managed by tax accountant corporation 2, user ID: TM0001 is "Takahashi ▽ man" and user ID: TM0002 is "Yokoi ☆ "Three", user ID: TM0003 is "Miyakawa ◇ Bi", because each tax accountant corporation manages individual and independent users.
In this example, each tax accountant corporation manages individual and independent users, but the common user ID management method for all connected tax accountant corporations, that is, user IDs do not overlap. You may take the following measures.

In the server 2 managed by the tax accountant corporation 2, 3 records are registered in the server information management table of the server 2 (SV0002) before starting the management tool of a plurality of servers. Specifically, the following It is a street. In the first record, server ID: SV0001, server name: ○ × office server 1, group ID 1: SG0001, server management information access flag: 1, master server flag: 1, interval at the time of automatic copying: 30, copying Error flag: 1, IP address: 172.16.1.2, MAC address: 00: CC: DD: 13: 57: 90 are set. In the second record, server ID: SV0002, server name: ○ × office server 2, group ID 1: SG0002, server management information access flag: 1, master server flag: 0, interval at the time of automatic copying: 60, copying The error flag is set to 0, the IP address is set to 192.168.1.2, and the MAC address is set to 12: 34: 56: 78: 9A: BC. In the third record, server ID: SV0003, server name: ○ × office server 3, group ID 1: SG0003, server management information access flag: 1, master server flag: 0, interval at the time of automatic copying: 40, copying The error flag is set to 0, the IP address is set to 192.168.1.3, and the MAC address is set to 66: 33: 62: 37: BB: 60. Since the information of each server connected to the network is collected and listed in this table when the server is started, the server IDs: SV0001, SV0002, SV0003, ... Are listed.

Finally, the multi-server management tool operates on the WS terminal based on the server information, as shown in the detailed functional block diagram of FIG. 6-1WS. It is the same as server 1 and server 2, but immediately after startup, each item of each record in the table on the management tool of multiple servers on WS is the same as server 1 and server 2, but all records are reset. , The value is not set.

-Step 2: After connecting each server to the network, start the management tool of multiple servers and collect management information from each server.

Here, a plurality of servers including the server 1 managed by the tax accountant corporation 1 and the server 2 managed by the tax accountant corporation 2 are connected to the network, and have an account having access authority to the plurality of servers. Employee ID: TM1000, who is a user who has "administrator authority for data and user access" on server 1 and server 2, logs in from the workstation connected to server 2 and starts the administrator tool (S7-1- 1. S7-1-2), send a broadcast message, which is a general technology for the entire network, find a server on the network, and then from the server information management table of each server, the staff ID: TM1000 says "Data and List the servers that have "user access administrator authority", and the management tool of multiple servers collects authority information etc. from server 1 and server 2, and the management tool of multiple servers is shown in Fig. 6-3 Fig. 6- 1 Register in the server information management table of the management tool of the multiple servers of the storage unit 25 (S7-1-3).

Here, 2 records are registered in the server information management table of the management tool of the plurality of servers of the management tool, FIG. 6-3, FIG. 6-1 storage unit 25, and the specifics are as follows. In the first record, server ID: SV0001, server name: ○ × office server 1, group ID 1: SG0001, server management information access flag: 1, master server flag: 1, interval at the time of automatic copying: 30, copying Error flag: 1, IP address: 172.16.1.2, MAC address: 00: CC: DD: 13: 57: 90 are set. In the second record, server ID: SV0002, server name: ○ × office server 2, group ID 1: SG0002, server management information access flag: 1, master server flag: 0, interval at the time of automatic copying: 60, copying The error flag is set to 0, the IP address is set to 192.168.1.2, and the MAC address is set to 12: 34: 56: 78: 9A: BC.

At this time, even if only server 2 can enumerate the servers, you may proceed with the startup process of the management tool for multiple servers, or even if you display an error and exit the management tool for multiple servers when multiple servers cannot be enumerated. good.

By displaying the server in the management tool screen of multiple servers in the server list of the registered management tool of multiple servers, it is possible to select the company and the server having the data for which access permission is to be obtained (S7-11-4).


In this embodiment, the server 1 managed by the tax accountant corporation 1 is selected, and the company and data managed by the server 1 are displayed on the management tool screen of a plurality of servers from the company information management table in FIG. 4-4 of the server 1. do. In the example, only the server 1 is selected, but a plurality of servers may be selected.

Here, the user who is logged in to the server 1 managed by the tax accountant corporation 1 with the management tool of the plurality of servers is logged in from the management tool of the plurality of servers. At this time, if this user does not have access authority to the server 1, the management tool of multiple servers cannot be continued, so the management tool is terminated.
Select server 1 on the management tool of multiple servers, enumerate the companies and data from the company information management table in Figure 4-4 of server 1, and select the company and data to which you want to give access permission. Here, the data ID: DT0001 of the company ID: SH0003 is selected (S7-1-5).
Then, in FIG. 4-4 company information management table of server 1 (SV0001) in which the management tool of multiple servers collects information, the management tool of multiple servers collects the record of company ID: SH0003 from server 1 and server 2. Then, it is registered in the company information management table of the management tool of the multiple servers of the storage unit 25 in FIG. 6-2 (S7-1-6).

Here, one record is registered in the company information management table of the management tool of the management tool of the plurality of servers of the management tool, FIG. 6-2, FIG. 6-1. Specifically, it is as follows. In the first record, company ID: SH0003, company name: Seibu Kogyo, data ID: DT0003, company information registration server ID: SV0001, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM1000, company information The registration folder for administrators: \\ kaisha \ kanrisha \ data \ sh0003 and the registration folder for company information staff: \\ kaisha \ shokuin \ data \ sh0003 are set.

Next, the management tool of multiple servers acquires the acquired server information management table again, displays the server selection screen, and selects which server user should be given the access permission of server 1 selected earlier (S7-). 2-1).
The administrator selects the server 2 in which the user to whom the access permission is to be granted is registered, and lists the users registered in the user information management table of FIG. 4-3 of the server 2.
Then select the user to give the permission. Here, the staff ID: TM2000 and the staff ID: TM0001 are selected (S7-2-2).

Further, in the user information management table of the server 2 (SV0002) in which the management tool of a plurality of servers collects authority information and the like from the servers 1 and 2, and the management tool of the multiple servers collects information, the staff ID: TM2000. Records and staff IDs: TM0001 records are collected by the management tool of multiple servers from server 1 and server 2, authority information, etc. Fig. 6-4 Fig. 6-1 In the user information management table of the management tool of multiple servers in the storage unit 25. Register (S7-2-3).

Here, 2 records are registered in the user information management table of the management tool of the management tool of the plurality of servers of the management tool, FIG. 6-4, FIG. 6-1. Specifically, it is as follows. In the first record, staff ID: TM0001, name: Takahashi ▽ man, account: taka-2, password: *****, administrator level: 0, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 is set. In the second record, staff ID: TM2000, name: Nishio ◎ child, account: nishi-2, password: *****, administrator level: 4, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 is set.

At this time, there is no change in the company information management table, FIG. 4-3 user information management table, and FIG. 4-2 server information management table of the server 1 and the server 2.

-Step 3: Management information managed by Server 1 and Server 2 after selecting the access permission for the data of Server 1 for the user of Server 2 based on each management information collected by the management tool of multiple servers. Update

Register the server, company and data for which you want to obtain access permission in the company information management table of the management tool for multiple servers, and manage the user information of the user who wants to access the server for which access is permitted for the management tool for multiple servers. Since it was registered in the table, in order to confirm whether the settings are correct, it was registered in the management tool of multiple servers. -2 Fig. 6-1 Company information management table of the management tool for multiple servers in the storage unit 25, Fig. 6-4 Fig. 6-1 User information management table for the management tool for multiple servers in the storage unit 25. After displaying it on the management tool screen (S7-2-4), log in as an administrator who has access to server 1, which is the server for which you want to obtain access permission. (S7-2-5), and confirm whether the logged-in administrator has the authority to access, add / correct users to the company and data in the company information management table of the server 1 in Fig. 4-4. (S7-3-1).

If you are logged in as an unauthorized user, an error will be displayed (S7-3-2) and the management tool for multiple servers will be closed (S7-3-3).
After displaying the error, the management tool of the multiple servers may not be terminated, and the user may be allowed to use the management tool of the multiple servers again to return to the process of prompting the login.

Next, acquire the information of the user information management table of the server 1 in which the server access permission is to be obtained, and the company information management table of the management tool of the multiple servers in the storage unit 25 in Fig. 6-2. Then, check if the user you want to add already exists for the server you want to allow access to (S7-3-4), and if the user does not exist, you need to add the user. 4 Figure 6-1 Register the user you want to add to the user information management table of the management tool of the multiple servers in the storage unit 25.

If a user exists, let the administrator select whether to add it as another user or use a registered user (S7-3-5), and confirm whether to proceed with the selected process (S7-3). -6) If you want to register as another user, register the user information you want to add in the user information management table of the management tool of the multiple servers in the storage unit 25 (S7-3-8). ), When using a registered user, do not add the user to the user information management table of the management tool of the multiple servers in Fig. 6-4 Fig. 6-1 storage unit 25 (S7-3-7).

If there is a user, you have the option of adding it as another user or using a registered user. For example, if you want to manage different groups with the same user, or if you want to manage different groups with the same user, set different access permissions to the company and data. This is effective when you want to do so, but this is just an example, and there may be other reasons.

If the user you want to add has administrator privileges on the user information management table of server 2, which is the original server, you may want to have privileges on the user information management table of server 1, which is the server you want to allow access to. Therefore, after confirming whether the administrator level is a normal user without administrator authority (S7-4-1), display the administrator level and let the administrator level be selected (S7-). 4-2) Define the required authority for the administrator level that you want to set in the user information of server 1, which is the server for which you want to allow access to the selected administrator level. Figure 6-4 Figure 6-1 Multiple storage units 25. Register the administrator level set by the tool in the administrator level item of the user information management table of the server management tool (S7-4-3).

In the example, the administrator level of the staff ID: TM2000 is shown in Fig. 6-4. Fig. 6-1 In the user information management table of the management tool of the multiple servers in the storage unit 25, the administrator level: "Full control" = 4 Although the level is set, in server 1, we want to register the administrator level of staff ID: TM2000 as administrator level: "normal user" = 0, so in S7-4-2, administrator level: "normal user" Select = 0 and define the required permissions, etc. Fig. 6-4 Fig. 6-1 Set "normal user" = 0 in the administrator level item of the user information management table of the management tool of multiple servers in the storage unit 25. to register.

In this case, all the administrator levels that can be set when the original server has administrator privileges are displayed and the administrator level can be set, but it is higher than the administrator level that the original server had. It may be possible to set the authority as needed, such as restricting the display so that the authority of the server cannot be set and selecting the administrator level.

Figure 4-4 Company Information Management Table, Figure 4-3 User Information Management Table, which are managed on the management tool by setting which user's access to which company data is permitted by the management tool. Figure 4-2 The status of the server information management table is organized as follows. By executing the management tool, Takahashi ▽ Otoko: TM0004 and Nishio ◎ ko: TM2000 have been added to the company data of Seibu Kogyo: SH0003 registered in Server 1, so they are managed on the management tool. Figure 4-4 One record is registered in the company information management table, company ID: SH0003, company name: Seibu Kogyo, data ID: DT0003, company information registration server ID: SV0001, company information accessible staff ID 1: TM0001. , Company information accessible staff ID2: TM1
000, Company information accessible staff ID3: TM0004, Company information accessible staff ID4: TM2000, Company information manager registration folder: \\ kaisha \ kanrisha \ data \ sh0003, Company information staff registration folder: \\ kaisha \ shokuin It is set as \ data \ sh0003.

In addition, two records are registered in the user information management table shown in Fig. 4-3 managed on the management tool. In the first record, the staff ID: TM0004, name: Takahashi ▽ man, account: taka-2. , Password: *****, Administrator level: 0, Staff group ID: GR0001, Management server ID: SV0001, Accessable server ID1: SV0001 are set, and as the second record, staff ID: TM2000, Name: Nishio ◎ Child, account: nishi-2, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, accessible server ID1: SV0001 are set.

Finally, regarding the server information management table in Fig. 4-2, there is no particular change in the server connection, so as the information for the two initially registered records, the first record contains the server ID: SV0001 and the server name. : ○ × Office server 1, Group ID 1: SG0001, Server management information access flag: 1, Master server flag: 1, Interval during automatic copying: 30, Copy error flag: 1, IP address: 172.16.1.2, MAC Address: 00: CC: DD: 13: 57: 90 is set, and in the second record, server ID: SV0002, server name: ○ × office server 2, group ID 1: SG0002, server management information access flag 1, Master server flag: 0, Interval during automatic copying: 60, Copying error flag: 0, IP address: 192.168.1.2, MAC address: 12: 34: 56: 78: 9A: BC ..

After setting the authority of the company information management table and user information management table with the management tool of multiple servers, Fig. 6-2 Fig. 6-1 The company information management table of the management tool of multiple servers in the storage unit 25 and Fig. 6-4. 6-1 User information of the management tool of multiple servers in the storage unit 25 The authority etc. is updated by the management tool of multiple servers, which is the server that grants access permission for the updated record of the table. Figure 4-4 Server 1 (SV0001) ) And the user information management table of the server 1 (SV0001) in FIG. 4-3, the access permission becomes valid (S7-4-4).

Further, with the staff ID: TM0001 and the staff ID: TM2000 of the target user in the user information management table of FIG. 4-3 server 2 (SV0002), which is the access source server, the ID of the server that has been permitted to access the "accessible server ID 2". Information on a certain SV0001 is additionally registered (S7-4-5).
By making this setting, it is possible to access the server pinpointly without reacquiring the information of all the servers connected to the network when performing normal business processing as a normal user.

The following settings can be obtained by organizing the status of the server 1, server 2, and management tool in step 3, the company information management table in Fig. 4-4, the user information management table in Fig. 4-3, and the server information management table in Fig. 4-2. ing.

After implementing a multi-server management tool and selecting permissions for server 1 data for server 2 users based on each management information collected by the multi-server management tool, server 1 and server 2 In step 3 of updating the management information managed by each, 3 records are registered in the company information management table of the server 1 (SV0001) at the server 1 managed by the tax accountant corporation 1. The target is as follows. In the first record, company ID: SH0001, company name: ○ × Industrial Co., Ltd., data ID: DT0001, company information registration server ID: SV0001, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM0002 , Company information accessible staff ID3: TM0003, Company information accessible staff ID4: TM1000, Company information manager registration folder: \\ kaisha \ kanrisha \ data \ sh0001, Company information staff registration folder: \\ kaisha \ shokuin \ It is set as data \ sh0001. In the second record, company ID: SH0002, company name: Keihin Kotsu Co., Ltd., data ID: DT0002, company information registration server ID: SV0001, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM0002, Company information accessible staff ID 3: TM1000, company information manager registration folder: \\ kaisha \ kanrisha \ data \ sh0002, company information staff registration folder: \\ kaisha \ shokuin \ data \ sh0002 are set. In the third record, company ID: SH0003, company name: Seibu Kogyo, data ID: DT0003, company information registration server ID: SV0001, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM1000, company information Accessable staff ID3: TM0004, company information accessible staff ID4: TM2000, company information manager registration folder: \\ kaisha \ kanrisha \ data \ sh0003, company information staff registration folder: \\ kaisha \ shokuin \ data \ sh0003 Is set. Here, TM0004 and TM2000 are added as accessible staff to "Western Kogyo" of company ID: SH0003 by executing the management tool.

After implementing a multi-server management tool and selecting permissions for server 1 data for server 2 users based on each management information collected by the multi-server management tool, server 1 and server 2 In step 3 of updating the management information managed by each, 7 records are registered in the user information management table of FIG. 4-3 of the server 1 (SV0001) at the server 1 managed by the tax accountant corporation 1. Specifically, the first to sixth records are as follows. In the first record, staff ID: TM0001, name: Suzuki ○ ro, account: suzu-1, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. In the second record, staff ID: TM0002, name: Kojima × ro, account: koji-1, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. In the third record, staff ID: TM0003, name: Ohno △ ta, account: ohno-1, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. In the 4th record, staff ID: TM0004, name: Takahashi ▽ man, account: taka-2, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. On the 5th record, staff ID: TM0500, name: Tanaka □ ro, account: tana-1, password: *****, administrator level: 4, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. In the 6th record, staff ID: TM1000, name: Higashiyama □hiko, account: higa-1, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, access Possible server ID 1: SV0001 is set. As the 7th record, staff ID: TM2000, name: Nishio ◎ child, account: nishi-2, password: *****, administrator level: 0, staff group ID: GR0001, management server ID: SV0001, accessible The server ID 1: SV0001 is set, and the staff ID: TM2000, which has been accessible only to the server 2 until now by the management tool, is registered in the user information management table of the server 1, so that the access to the server 1 is permitted.

After implementing a multi-server management tool and selecting permissions for server 1 data for server 2 users based on each management information collected by the multi-server management tool, server 1 and server 2 In step 3 of updating the management information managed by each, 3 records are registered in the server information management table of FIG. 4-2 of the server 1 (SV0001) at the server 1 managed by the tax accountant corporation 1. Specifically, it is as follows. In the first record, server ID: SV0001, server name: ○ × office server 1, group ID 1: SG0001, server management information access flag: 1, master server flag: 1, interval at the time of automatic copying: 30, copying Error flag: 1, IP address: 172.16.1.2, MAC address: 00: CC: DD: 13: 57: 90 are set. In the second record, server ID: SV0002, server name: ○ × office server 2, group ID 1: SG0002, server management information access flag: 1, master server flag: 0, interval at the time of automatic copying: 60, copying The error flag is set to 0, the IP address is set to 192.168.1.2, and the MAC address is set to 12: 34: 56: 78: 9A: BC. In the third record, server ID: SV0003, server name: ○ × office server 3, group ID 1: SG0003, server management information access flag: 1, master server flag: 0, interval at the time of automatic copying: 40, copying. The error flag is set to 0, the IP address is set to 192.168.1.3, and the MAC address is set to 66: 33: 62: 37: BB: 60. Since the information of each server connected to the network is collected and listed in this table when the server is started, the server IDs: SV0001, SV0002, SV0003, ... There is no change in the state in which is listed.

After implementing a multi-server management tool and selecting permissions for server 1 data for server 2 users based on each management information collected by the multi-server management tool, server 1 and server 2 In step 3 of updating the management information managed by each, 2 records are registered in the company information management table of FIG. 4-4 of the server 2 (SV0002) at the server 2 managed by the tax accountant corporation 2. The target is as follows. In the first record, company ID: SH0001, company name: Peace Pharmacy, data ID: DT0001, company information registration server ID: SV0002, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM0002, company information Accessable staff ID3: TM2000, registration folder for company information manager: \\ kaisha \ kanrisha \ data \ sh0001, registration folder for company information staff: \\ kaisha \ shokuin \ data \ sh0001 are set. In the second record, company ID: SH0002, company name: restaurant POP, data ID: DT0002, company information registration server ID: SV0001, company information accessible staff ID1: TM0001, company information accessible staff ID2: TM0002, company information Accessable staff ID3: TM0003, Company information accessible staff ID4: TM2000, Company information manager registration folder: \\ kaisha \ kanrisha \ data \ sh0002, Company information staff registration folder: \\ kaisha \ shokuin \ data \ sh0002 Since the access authority setting is not added to the company information of server 2, there is no change in the table.

After implementing a multi-server management tool and selecting permissions for server 1 data for server 2 users based on each management information collected by the multi-server management tool, server 1 and server 2 In step 3 of updating the management information managed by each, FIG. 4-3 of the server 2 (SV0002) at the server 2 managed by the tax accountant corporation 2. Five records are registered in the user information management table, and the specifics are as follows. In the first record, staff ID: TM0001, name: Takahashi ▽ man, account: taka-2, password: *****, administrator level: 0, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 and accessible server ID 2: SV0001 are set. In the second record, staff ID: TM0002, name: Yokoi ☆ 3, account: yoko-2, password: *****, administrator level: 0, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 is set. In the third record, staff ID: TM0003, name: Miyagawa ◇ beauty, account: miya-2, password: *****, administrator level: 0, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 is set. In the 4th record, staff ID: TM1000, name: Higashiyama □hiko, account: higa-1, password: *****, administrator level: 3, staff group ID: GR0002, management server ID: SV0002, access Possible server ID 1: SV0002 is set. On the 5th record, staff ID: TM2000, name: Nishio ◎ child, account: nishi-2, password: *****, administrator level: 4, staff group ID: GR0002, management server ID: SV0002, access Possible server ID1: SV0002, accessible server ID1: SV0002, and accessible server ID2: SV0001 are set. By setting the staff ID: TM0001 and the staff ID: TM2000 so that the data registered in the server 1 can be accessed by the management tool, SV0001 indicating the server 1 is added as an accessible server.

After implementing a multi-server management tool and selecting permissions for server 1 data for server 2 users based on each management information collected by the multi-server management tool, server 1 and server 2 In step 3 of updating the management information managed by each, in the server 2 managed by the tax accountant corporation 2, the server information management table of FIG. 4-2 of the server 2 (SV0002) before starting the management tool of a plurality of servers is displayed. Three records are registered, and the specifics are as follows. In the first record, server ID: SV0001, server name: ○ × office server 1, group ID 1: SG0001, server management information access flag: 1, master server flag: 1, interval at the time of automatic copying: 30, copying Error flag: 1, IP address: 172.16.1.2, MAC address: 00: CC: DD: 13: 57: 90 are set. In the second record, server ID: SV0002, server name: ○ × office server 2, group ID 1: SG0002, server management information access flag: 1, master server flag: 0, interval at the time of automatic copying: 60, copying The error flag is set to 0, the IP address is set to 192.168.1.2, and the MAC address is set to 12: 34: 56: 78: 9A: BC. In the third record, server ID: SV0003, server name: ○ × office server 3, group ID 1: SG0003, server management information access flag: 1, master server flag: 0, interval at the time of automatic copying: 40, copying. The error flag is set to 0, the IP address is set to 192.168.1.3, and the MAC address is set to 66: 33: 62: 37: BB: 60. Since the information of each server connected to the network is collected and listed in this table when the server is started, the server IDs: SV0001, SV0002, SV0003, ... There is no change in the state in which is listed.

-Step 4: Reset the information registered on the management tool for multiple servers and exit the management tool for multiple servers (S7-4-6).

Finally, Fig. 6-1 Storage unit 25 Reset each management table of the management tool of multiple servers (Fig. 6-2 to Fig. 6-4). After finishing the management tool of multiple servers, the server 2 connected to the workstation. Log out from and end the processing of the management tool of multiple servers (S7-4-7).

-Regarding the procedure for normal user business processing by normal users after implementing the management tool for multiple servers

A multi-server management tool that allows you to access a server that has data and a company that you want to allow access to on one server, reflecting the information of the user you want to access on the other server. An example of how a normal user can perform a normal user business process after the implementation will be described using a normal business process flow (FIGS. 8-1 and 8-2).

When logging in to the server 2 which is the server originally registered as a user (S8-1-1) from the WS terminal normally used by the user, the company refers to the user information management table of the server 2 in FIG. 4-3. And display the data access management screen.
On the company and data access management screen, a list of the company and data of the server 2 is displayed, and when a server ID other than the server 2 is registered in the accessible server ID of the user information management table of the server 2 in FIG. 4-3. Display the server switching button (S8-1-3) so that the server can be switched.

At this time, it is not necessary to list the servers connected to the network by setting the access permission to other servers in advance by the management tool of multiple servers.
With conventional technology, if you want to get permission to access another server and access another server, enumerate the servers connected to the network each time and create a server list or prepare a directory server each time. Therefore, in order to obtain access permission to the company and data, it is necessary to apply for access permission to the directory server, but in this invention, the access permission setting is reflected on each server by the management tool of multiple servers. Therefore, it is possible to limit the servers to be accessed only by referring to the company information management table of FIG. 4-4 and the user information management table of FIG. 4-3 of the server to be accessed.

Here, if you want to access the company and data of the server you are currently logged in to, you can select the company and data in the server and proceed as it is, or access the company and data of other servers. If you want to do so, you can switch the server by pressing the server switching button displayed on the display screen.

When you set the access permission to the company and data of server 1 with the management tool of multiple servers earlier, you can list the servers registered as the accessible server ID in the user information management table of server 2 in Fig. 4-3. Select which server you want to access. In this case, SV0001 indicating server 1 is registered as an accessible server ID, so when server 1 is selected (S8-1-4), the information of server 2 currently signed in is stored in the memory of WS. (S8-1-5, S8-1-6), automatically log out of server 2 and then automatically log in to server 1, which is the selected server (S8-1-7) (S8-2-). 1).

The server you logged in to Figure 4-3. After acquiring the access right of the server from the user information management table of the server 1 (S8-2-2), the normal business is executed by the application that can access the company and the data on the server 1 (S8-2-3).
After the normal work is completed, when the server 1 that was doing the normal work is automatically logged out (S8-2-4), the memory information saved in the WS memory is read again (S8-2-5, S8-). 6-6), automatically log in to the server 2 which is the original server again with the account of the server 2 which is the original server (S8-2-7), and continue the work as it is on the server 2 which is the original server.




y

-Regarding the procedure for normal users to use the search tool after implementing the management tool for multiple servers.

An administrator who uses a management tool for multiple servers wants to use it for a former server user. By selecting the company and data of the destination server, and making it possible for the management tool of multiple servers to perform the access authority to the required company and data and the registration requirements of the required user information, how to do after implementing the management tool of multiple servers. A specific example of enabling a user to find a desired company or data from each server connected to a network will be described with reference to FIGS. 9-1 to 9-3. Also, in this case, the explanation is developed as if the administrator is operating the management tool, but the word "administrator" is used as a definition for convenience, and even if there is no administrator, this management tool and search It goes without saying that the functions of the tool can be used.

In this case as well, for example, an individual accounting firm was run, but when an accounting firm corporation was established with multiple accountants, or when an individual accounting firm operated an office with a single server. As the number of advisors increases and the amount of information to be managed increases, it is conceivable to install an additional server and use the search tool in the environment when connecting, but this is not limited to this.
Also, in this flow, companies and data are searched from information registered in multiple servers connected to the network, but this information is not limited to companies and data. For example, for data, accounting data and declarations are made. It is possible to extract various data such as data and salary data, and it may be, for example, personal information in inheritance tax filing and salary, not limited to companies.

In the flow of the specific example, a normal user who uses the server 2 as the original server and whose user account is set so that the multiple servers can be accessed by the management tool of the multiple servers connects to the server 2 as the original server. Log in from the workstation that has been set up (S9-1-1). At that time, the user ID, password, etc. are referred from the user information management table of the server 2 which is the source server in which the user information is registered (Fig. 4-3 user information management table). The search tool may be used in an environment consisting of only one server. In this case, the companies and data registered in that one server will be searched.

After logging in to the server 2 which is the original server, the normal user starts the search tool installed on the workstation connected to the server 2 which is the original server (S9-1-2). At that time, the information for starting the search tool is acquired from the application information management table of the server 2 which is the original server (Fig. 4-1 application information management table). In this specific example, the application installed on the workstation is started, but the application registered on the cloud or on the server may be started.

The user who has started the search tool inputs search conditions from the search tool (S9-1-3). The entered search condition is registered in the search condition management table on the memory where the search tool in the workstation normally used by the user is expanded (Fig. 4-17-1 Fig. 6-1 Storage unit 25). Search condition management table).

Based on the information entered on the display screen of the search tool, the search tool first refers to the user information management table registered on each server to find out which valid servers are normally accessible to the user, and is normally accessible to the user. Create a server list and register it in the server information management table on the memory where the search tool is deployed on the workstation normally used by the user (S9-1-4) (Fig. 4-17-2). 6-1 Server information management table of storage unit 25).

Next, in the previous process, the following processes S9-1-6 to S9 while referring to the server list that can be accessed by normal users registered in the server information management table on the memory where the search tool is deployed on the workstation. The processing of -1-8 is looped for the number of servers registered in the list (S9-1-5).

First, the information in the company information management table of the search target server listed in the server list (Fig. 4-4 company information management table) and the search already entered and registered in the memory where the search tool in the workstation is deployed. Registration of condition management table Acquire search conditions and check whether the company and data in the company information management table correspond to the company and data in the search condition management table (S9-1-6).

Then, if there is a company and data that match the search conditions for the company and data in the search target server, register it in the company information management table on the memory where the search tool in the workstation is deployed (Fig. 4-17). -3 Fig. 6-1 Company information management table of storage unit 25) (S9-1-7), Check if all the search target servers have been searched, and if all have been searched, the process of collecting information from each server Is terminated (S9-1-8).

The company information management table of the searched and matched company registered in the storage unit in the workstation by the processing of S9-1-6 to S9-1-8 (Fig. 4-17-3 Fig. 6-1 storage unit 25). After acquiring the information of the company information management table), searching and displaying the company information of the matching company in a list, accepting the input from the display screen, select the company and data you want to find, and the server you want to use. Then, the results are displayed on the memory where the search tool in the workstation is deployed. The server information management table of the selected server (Fig. 11-1 Fig. 6-1 Server information management table of the storage unit 25) and the selected server. Register the company information management table (Fig. 11-2, Fig. 6-1, company information management table of storage unit 25) (S9-2-1).

In this case, in S9-2-1, "Server 1" was selected as the server that has the company and data that you want to access, so to switch to Server 1 where the company and data are registered based on the search results, currently As the logged-in source server information, the information of the source server 2 is used as the source information. The server information management table on the memory where the search tool in the workstation is expanded (Fig. 6-5, Fig. 6-1) In addition to registering in the information management table) (S9-2-2), the server that is the original server currently used by the normal user who is using the search tool that is the user of the server 2 that is the original server. Register the account information of 2 in the user information management table on the memory where the search tool in the workstation is expanded (Fig. 6-6 Fig. 6-1 User information management table of storage unit 25) (S9-2-3) ).

After automatic logout (S9-2-4) from server 2 which is the original server, the figure from server 1 which is the server selected in S9-2-1 based on the normal user user account using the search tool. 4-4 Automatically log in to server 1 using the account information in server 1 of a normal user who is using the search tool registered in the user information management table of server 1 (S9-2-5).

Furthermore, it is the server selected after acquiring the access right of the data with the company of the normal user who is using the search tool from the company information management table of the logged-in FIG. 4-4 server 1 (S9-2-6). Carry out normal work on server 1 (S9-2-7).

In normal business, acquire the registration destination folder of the company information staff registration folder of the normal user who uses the search tool from the company information management table of server 1, refer to the company and data you want to access, and if necessary. Register the company and data that have been added or modified.
In this case, the information is stored in the company information staff registration folder and the company information manager registration folder, divided by company and data, but in this case, the information is stored by company and data. Although it is classified by each, it may be managed by another classification such as each business application to be used or each group, but the classification method is not limited to them.

After the normal business is completed, it is necessary to automatically log out from the server that was the search target (S9-3-1) and switch to the connection to the original server that the normal user used. Therefore, since the information that the original server is server 2 was registered before switching to the reference server server 1, it was used in the original server server 2 that was originally used by the normal user. The account information is acquired from the user information management table of the storage unit 25 (S9-3-2), which is deployed in the search tool in the workstation. The information on the server 2 is obtained from the server information management table of the storage unit 25 in Fig. 6-5, where the search tool in the workstation is expanded (S9-3-3), and is originally used. Automatically log in to server 2 which was the original server (S9-3-4), the server switching is completed (S9-3-5), and the business is continued on server 2 which is the original server (S9-3-6). ).

As described above, in the search tool in the present invention, when a user or the like normally uses the search tool, the user information management table and FIG. 4-3 are managed by each server set by the management tool of a plurality of servers. 4 Based on the company information management table, the operation of checking whether the user has the authority to access the server, company, data, etc. is performed.

In a general directory server, the directory server centrally manages the access authority to accounts, data, etc., so it seems easy at first glance, but if this directory server becomes unusable due to a failure etc., it is desirable. Data cannot be searched, but in the present invention, even if a specific server fails, user information, company information, etc. are managed by each of the other servers, so that the search process can proceed without problems. ..
In addition, each server verifies whether the user to be searched has an account or title to access the server, which leads to an increase in the security level.
Furthermore, while ensuring the security level set for each department or group such as tax accountant corporations and head offices, it is possible to perform processing that crosses servers, so it has a function that matches the operation form of such a company. It can be said that it is.

According to this embodiment, it is not possible to search and refer to data outside the settings while searching and referencing necessary data as in the case of using a conventional directory server, and the administrator of each server. Settings can be changed and unique security enhancements can be enabled. In this case, the explanation is developed as if the administrator is operating the management tool, but the word "administrator" is used as a definition for convenience, and even if there is no administrator, this management tool or company Needless to say, you can use the functions of the data aggregation tool for multiple servers.

-Regarding the procedure for using the multi-server aggregation tool for the company and data by a normal user after implementing the multi-server management tool


An administrator who uses a management tool for multiple servers wants to use it for a former server user. By selecting the company and data of the destination server, and making it possible for the management tool of multiple servers to perform the access authority to the required company and data and the registration requirements of the required user information, how to do after implementing the management tool of multiple servers. Specific examples of a case where a user can normally collect desired companies and data from each server connected to the network and display / print the data will be described with reference to FIGS. 10-1 to 10-4.

In this case as well, as in the case of the search tool, for example, an individual accounting office was run, but when an accounting firm corporation is established with multiple accountants, or when an individual accounting office is a single server. The office was operated and aggregated for each individual accounting office, but as the number of advisors increased and the amount of information to be managed increased, a separate server was introduced and connected. In the environment, it is conceivable to use a tool that displays and prints the information aggregated based on the company and data compiled by each individual accounting firm as the information aggregated by the entire accounting firm corporation. Not limited to.
Also, in this flow, the information of the corresponding company and data is further aggregated from the information registered in multiple servers connected to the network, and then displayed and printed, but this information is limited to the company and data. For example, as for data, various data such as accounting data, filing data, and salary data can be extracted, and not limited to company information, but personal information such as inheritance tax filing and salary can be used, and the data is not limited to these.

In the specific example flow, a normal user who uses server 2 which is the original server and whose user account is set so that the management tool of multiple servers can access multiple servers connects to server 2 which is the original server. Log in from the workstation that has been set up (S10-1-1). At that time, the user ID, password, etc. are referred from the user information management table of the server 2, which is the original server in which the user information is registered (Fig. 4-3 user information management table). The aggregation tool for a plurality of servers may be used in an environment in which only one server is configured. In this case, the companies and data registered in that one server are aggregated, displayed and printed.

After logging in to the server 2 which is the original server, the normal user starts the aggregation tool of multiple servers installed on the workstation connected to the server 2 which is the original server (S10-1-2). At that time, the information for starting the aggregation tool of a plurality of servers is acquired from the application information management table of the server 2 which is the original server (Fig. 4-1. Application information management table). In this specific example, the application installed on the workstation is started, but the application registered on the cloud or on the server may be started.

The user who has started the multi-server totaling tool inputs search conditions from the multi-server totaling tool (S10-1-3). The entered search condition is registered in the search condition management table on the memory where the aggregation tool of multiple servers in the workstation normally used by the user is expanded (Fig. 4-17-1 Fig. 6-1 Storage). Search condition management table of unit 25).

Based on the information entered on the display screen of the Aggregate Display / Print Tool, the Aggregate Tool for multiple servers first refers to the user information management table registered on each server to find out which valid servers are normally accessible to the user. , Create a server list that can be accessed by normal users, and register it in the server information management table on the memory where the aggregation tool for multiple servers is deployed on the workstation used by normal users (S10-1-4). (Fig. 4-17-2, Fig. 6-1 Server information management table of storage unit 25).

Next, in the previous process, the following process is performed while referring to the server list that can be accessed by normal users, which is registered in the server information management table on the memory where the aggregation tool for multiple servers is deployed on the workstation. The processing of 6 to S10-1-8 is looped for the number of servers registered in the list (S10-1-5).

First, register the information in the company information management table of the search target server listed in the server list (Fig. 4-4 company information management table) and the memory that has been entered earlier and deploys the aggregation tool for multiple servers in the workstation. Registration of completed search condition management table Acquires the search condition and checks whether the company and data in the company information management table correspond to the company and data in the search condition management table (S10-1-6). ..

Then, if there is a company and data that match the search conditions for the company and data in the search target server, register it in the company information management table on the memory where the aggregation tool for multiple servers in the workstation is deployed (Figure). 4-17-3 Fig. 6-1 Company information management table of storage unit 25) (S10-1-7), Check if all the search target servers have been searched, and if all have been searched, information from each server The process of collecting is terminated (S10-1-8).

The company information management table of the searched and matched company registered in the storage unit in the workstation by the processing of S10-1-6 to S10-1-8 (Fig. 4-17-3 Fig. 6-1 storage unit 25). After acquiring the information of the company information management table), searching and displaying the company information of the matching company in a list, accepting the input from the display screen, total display from multiple servers, the company and data you want to print, And select the server, and register the company information management table of the selected server in the memory where the search tool in the workstation is deployed with the selected company and data information (Fig. 11-2 Fig. 6-1 Storage unit). 25 company information management tables) (S10-2-1), register the server information management table of the selected server in the memory where the search tool in the workstation is deployed (Fig. 11-). 1 FIG. 6-1 Server information management table of the storage unit 25) (S10-2-1).

In this case, the number of steps for each advisor is totaled for each server managed by each accounting office, and the data is stored in the total result table for managing the number of steps for each company data prepared for each server. This table has a structure similar to the aggregation result table (Aggregation result table of the storage unit 25 in Fig. 11-3, Fig. 6-1). By further aggregating the registered aggregation result table, it is possible to aggregate the desired company data for the entire tax accountant corporation.

In S10-2-1, I selected that there are one or more companies and data that I want to access, so I am currently logged in to switch to the server where the data is registered with multiple companies based on the search results. As the original server information, the information of the server 2 that is the original server is searched for in the workstation. The server information management table on the memory (Fig. 6-5, Fig. 6-1) The server information management table in the storage unit 25. ) (S10-2-2), and the account of the server 2 that is the original server currently used by the normal user who is using the search tool that is the user of the server 2 that is the original server. Register the information in the user information management table on the memory where the search tool in the workstation is expanded (Fig. 6-6. Fig. 6-1 User information management table in the storage unit 25) (S10-2-3).

After automatically logging out (S10-2-4) from the server 2 that is the original server, the information in the server information management table (Fig. 11-1. Fig. 6-1 Server information management table in the storage unit 25) selected in the search results Loop processing is performed so as to refer to all the servers selected based on (S10-3-1).

In the user account of server 2 which is the original server, from the server which is the aggregation target server selected in S10-2-1 to the user information management table of the aggregation target server (Fig. 4-3 user information management table of the aggregation target server) Automatically log in to the aggregation target server using the account information on the aggregation target server of a normal user who is using the aggregation tool registered in (S10-3-2), and manage the company information of the logged-in aggregation target server. After acquiring the access rights of the company and data on the aggregation server of the normal user who is using the aggregation tool from the table (Fig. 4-4 company information management table of the aggregation target server) (S10-3-2), it was selected. Acquire the company information to be aggregated from the company information management table of the company (Fig. 11-2, Fig. 6-1, company information management table of storage unit 25) (S10-3-3).

Of the servers to be aggregated, the server information management table of the selected server (Fig. 11-1 Fig. 6-1 Server information management table of storage unit 25) is acquired, and the aggregation target is from the company information table of the company selected from that server. After acquiring company information (Fig. 4-4 company information management table of the server to be aggregated), aggregate the information and register the result in the aggregate result table on the memory where the search tool in the workstation is deployed (Fig. 4-4). 11-3 Fig. 6-1 Aggregation result table of storage unit 25) (S10-3-4).
In this case, the aggregated data at this time is the advisory fee of the advisors compiled by each accounting firm group within the tax accountant corporation, but it may be salary information in the office or the expenses incurred by each advisor. Good, but not limited to them.

When the aggregation from the aggregation target server is completed, automatically log out from the aggregation target server (S10-3-5), check whether the aggregation of all the aggregation target servers is completed, and then the other aggregation target servers. If there is, find the next server from the selected server list to be aggregated (S10-3-1) and continue the process (S10-3-2 to S10-3-5), and loop if the aggregation is completed. The process is terminated (S10-3-6).

When the aggregation from the aggregation target server is completed (S10-3-1 to S10-3-6),
In order to acquire the user account information of the server 2 which is the original server from the storage unit 25 in FIG. 6-1 in order to aggregate in the server 2 used by the user, the user information management table in the storage unit 25 in FIG. (FIG. 6-6) (S10-4-1). Further, the information that the original server is the server 2 is acquired from the server information management table (FIG. 6-5) of the storage unit 25 in FIG. 6-1 (S10-4-2).

Since the information that the former server is the account of the server 2 is acquired, the user information management table of the server 2 (Fig. 4-3) is referred to, and based on the information, the account of the server 2 is the server 2 which is the former server. Automatically log in to (S10-4-3).

Finally, the total result is read from the total result table already saved in the total result table (FIG. 11-3) of the terminal in FIG. 6-1 storage unit 25, and the total result is displayed and printed on the screen (S10). -4-4), end the processing of the aggregation tool of multiple servers. As an example of printing the total result, Fig. 11-4 shows the print format of the total result (man-hour total table by advisor), but the print format is not limited to this.

As described above, in the aggregate display / print tool of the present invention, when a user or the like normally uses the aggregate display / print tool, the user information management table or company managed by each server set by the management tool of a plurality of servers. Based on the information management table, the operation of checking whether the user has the authority to access the server, company, data, etc. is performed.

In a general directory server, the directory server centrally manages the access authority to accounts, data, etc., so it seems easy at first glance, but if this directory server becomes unusable due to a failure etc., it is desirable. You will not be able to access the server where company data etc. are registered, but in the present invention, even if a specific server fails, user information, company information, etc. are managed by each of the other servers, so there is no problem. You can access servers, companies, data, etc. and proceed with aggregate display / printing processing.

Generally, by publishing a disk shared area or database to a server, it is possible to realize aggregate display and printing of multiple servers. In a tax accountant corporation, if each tax accountant manages the data of the adviser who is in charge of each server, depending on the confidentiality agreement with the adviser, it may be with the server managed by another tax accountant in the tax accountant corporation. Since it is necessary to ensure sufficient security when sharing data and deploying data, it may not be allowed to lower the security level for disk sharing and data sharing.

Next, by applying security to each server, security can be strengthened, but when totaling, it is necessary for the person in charge of totaling to log in to each server individually and collect information, which is very complicated. Is.
For example, if data sharing or disclosure is not permitted, log in to each independent server with an account that allows access to the data, download the necessary data to the WS you are using, and perform spreadsheets. Is reaggregated in, or such operations are scripted. More recently, it can be said that it can be realized by using business process automation tools such as RPA (Robotic Process Automation), but in order to realize it, complicated settings are required in the actual environment and it has specialized knowledge. It requires a lot of people, and it takes time to introduce it.
According to the means of the present invention, a tax accountant or a staff member who holds an account capable of logging in to each server without disclosing or sharing data is already permitted without specialized knowledge or laborious operations. It is possible to perform an aggregation operation using the access right to the data.

According to the multi-server tabulation display / printing tool that utilizes this example, the display / printing can be displayed / printed by the multi-server tabulation tool while searching and referring to the necessary data as in the case of using the conventional directory server. While doing so, not only can you not search or refer to data outside the settings, but you can also change the settings of the administrator of each server and enhance your own security.

In addition, each server verifies whether the user to be searched has an account or title to access the server, which leads to an increase in the security level.
Furthermore, while ensuring the security level set for each department or group such as tax accountant corporations and head offices, it is possible to perform processing that crosses servers, so it has a function that matches the operation form of such a company. It can be said that it is.

In the explanation of this embodiment, the explanation is developed as if the administrator is operating the management tool, but the word "administrator" is used as a definition for convenience, and even if there is no administrator. Needless to say, functions such as this management tool can be used.

In addition to applications for the purpose of managing personal information and accounting information due to the addition of servers when the office scale is expanded in accounting offices, applications for maintaining the security of personal information and accounting information, and servers. It can also be used for simplification of various settings due to addition and recovery in the event of a server failure.

Claims (3)

In a tax accountant corporation, a network consisting of a tax / accounting processing server and a client workstation that manages user information and company information independently for each server is managed independently of user information and company information that is set separately from the server. In a network consisting of multiple tax / accounting servers and client workstations that additionally install tax / accounting servers and client workstations, or manage individual user information and company information independently.
The plurality of tax / accounting servers and the client workstation each have a storage unit, which stores user information independent of each server, company information independent of each server, and a server on the network. At least register the information and
The client workstation
It is configured to output server information to the screen in a selectable format.
Among the plurality of tax / accounting servers, the user information related to the first group of tax / accounting servers selected in response to the first selection operation is configured to be output to the screen in a selectable format. ,
A format in which the company information related to the tax / accounting server of the second group different from the first group selected in response to the second selection operation among the plurality of tax / accounting servers can be selected on the screen. It is configured to output with
Based on the selected user information and company information, it is configured to register and / or update the user information and / or the company information in the storage unit of the plurality of tax / accounting servers.
A network system characterized by that. The network system according to claim 1.
The client workstation is further configured to launch a search tool in response to user interaction.
It is configured to acquire and display company information that matches the search conditions entered through the search tool and is accessible to the user.
A network system characterized by that. The network system according to claim 1.
The client workstation is further configured to launch the aggregation tool in response to user interaction.
It is configured to acquire company information that matches the search conditions entered through the aggregation tool and is accessible to the user, and to display it on the screen in a selectable format.
It is configured to display the aggregated results of company data in response to the operation of selecting the company to be aggregated.
Configured to print the aggregated results,
Network system.

Images