JP7295793B2 - Logon management method and logon management device - Google Patents

Description

TECHNICAL FIELD The present invention relates to a logon management method and a logon management device, and more particularly to a technology that enables accurate logon management while maintaining good overall usability and business efficiency.

In a business system of a reasonable scale, it is common to adopt an operation mode that allows simultaneous use by multiple users. In such a case, logon management is performed such that only a certain number of users are permitted to log on based on criteria regarding the number of simultaneous user connections.
As a technique for managing system usage by a plurality of users, for example, a server that manages documents, storage means for storing offline files to be browsed offline, and an information processing device for displaying the documents online. and when the number of accesses received by the access reception means exceeds a preset limit, the offline file to be viewed offline is sent to the user corresponding to the access. A server (see Patent Document 1) or the like is proposed, which is characterized by including transmission means for performing transmission control according to a predetermined transmission method.

Further, in a login authentication method for a user who uses a business system and a commercial service system, when a user who has logged in to the business system uses the commercial service system, the client used by the user accesses the business system. The business system that transmits a request for use of the commercial service system, receives the request for use, checks the user's right to use the commercial service, selects one password from a password list created prior to authentication, and returns it to the client; The client sends the returned password to the commercial service system, and the commercial service system compares it with the account information created prior to authentication. A login authentication method characterized by invalidation (see Patent Document 2) has also been proposed.

JP 2015-127943 A Japanese Patent Application Laid-Open No. 2003-178027

However, when logon management is performed based on the number of simultaneous connections, a new user attempting to log on cannot log in as long as the number of connected users at that timing reaches the standard.
On the other hand, there is also a conventional technique for efficiently using a business system by forcibly logging off a logged-on user who has not used system resources for a certain period of time. However, simply applying such a measure may cause some one-sided inconvenience for logged-on users, and there remains a concern that overall usability and satisfaction will decrease.

SUMMARY OF THE INVENTION Accordingly, it is an object of the present invention to provide a technique that enables accurate logon management while maintaining good overall usability and business efficiency.

According to the logon management method of the present invention for solving the above problems, an information processing apparatus holds information about logged-on users in a system to be managed, monitors the status of the processing load in the system, and detects whether the processing load exceeds a threshold. When a new logon request is received in a situation where the level has reached a predetermined range, the logoff priority of each of the logged on users is determined based on the attributes of the logged on users, In order to log off a specific logged-on user, the terminal of the user is notified of a logoff execution notice message or a message prompting logoff, and an interface that accepts user instructions to refuse logoff or postpone logoff for a predetermined time is delivered, When receiving an instruction from the user to refuse logoff or to postpone the logoff for a predetermined period of time, another logged-on user other than the user is selected based on the logoff priority, and the selected logged-on user is asked to log off. It is characterized by executing a predetermined process .
Further, the logon management apparatus of the present invention includes a storage device that holds information about logged-on users in a system to be managed, and monitors the status of the processing load in the system, and monitors the processing load to a level within a predetermined range above a threshold. When a new logon request is received in the reached state, the logoff priority of each of the logged-on users is determined based on the attributes of the logged-on users, and a specific logged-on user is assigned according to the priority. In order to log off, the terminal of the user is notified of a log-off execution notice message or a message prompting log-off, and an interface for accepting user instructions to refuse log-off or postpone log-off for a predetermined time is delivered to the user's terminal. Alternatively, when an instruction to postpone for a predetermined period of time is received, another logged-on user other than the current user is selected based on the logoff priority, and a calculation for executing a predetermined process for logging off the selected logged-on user and an apparatus.

According to the present invention, accurate logon management becomes possible while maintaining good overall usability and business efficiency.

1 is a network configuration diagram including a logon management device of this embodiment; FIG. 3 is a diagram illustrating an example hardware configuration of a logon management apparatus according to the embodiment; FIG. It is a figure which shows the hardware structural example of the user terminal of this embodiment. It is a figure which shows the data structural example of the processing load information of this embodiment. It is a figure which shows the data structural example of user information DB of this embodiment. It is a figure which shows the data structural example of the threshold value information of this embodiment. It is a figure which shows the data structural example of the user information of this embodiment. FIG. 4 is a diagram showing a flow example of a logon management method according to this embodiment; FIG. 4 is a diagram showing a flow example of a logon management method according to this embodiment; It is a figure which shows the conceptual example of a processing load and a threshold value in this embodiment. It is a figure which shows the example of the determination table of the importance in this embodiment. It is a figure which shows the output example in this embodiment. FIG. 4 is a diagram showing a flow example of a logon management method according to this embodiment; It is a figure which shows the output example in this embodiment. It is a figure which shows the output example in this embodiment. It is a figure which shows the output example in this embodiment. It is a figure which shows the output example in this embodiment.

<Network configuration>
Embodiments of the present invention will be described in detail below with reference to the drawings. FIG. 1 is a network configuration diagram including a logon management device 100 of this embodiment. The logon management apparatus 100 shown in FIG. 1 is a computer that enables accurate logon management while maintaining good overall usability and business efficiency.

The logon management device 100 of this embodiment is connected to each of a plurality of user terminals 200 so as to be capable of data communication via an appropriate network 1 such as the Internet or a LAN (Local Area Network). The logon management system 10 may be configured from the logon management device 100 and the user terminal 200 . In other words, the logon management device 100 may cooperate with the user terminal 200 to execute the logon management method.

The logon management device 100 of this embodiment can be assumed to be, for example, a business system operated by a business operator or a server device responsible for logon management in the business system. Therefore, the above-described user terminal 200 is a business terminal that logs on to the above-described business system and executes predetermined business processing.

Usually, such business systems are connected to user terminals 200 of many employees at the same time, and provide functions necessary for business processing. However, in many cases, the maximum number of simultaneous connections by such user terminals 200 is managed. On the other hand, the logon management apparatus 100 of the present embodiment does not exclude the management of the upper limit of the number of simultaneous connections.

If logon management is based only on the number of simultaneous connections as in the past, new users attempting to log on will not be able to log in as long as the number of connected users at that timing reaches the standard. . On the other hand, even if a logged-on user who has not used the resources of the business system for a certain period of time is forcibly logged off to achieve efficient use of the business system, simply applying such a measure would result in a situation where the logged-on user cannot There is also the possibility that there will be significant inconveniences, and there are concerns that overall usability and satisfaction will decline.

Therefore, the logon management apparatus 100 of the present embodiment enables accurate logon management while maintaining good usability and business efficiency in the entire business system.
<Hardware configuration>
Further, the hardware configuration of the logon management device 100 of this embodiment is as shown in FIG. That is, the logon management device 100 comprises a storage device 101 , a memory 103 , an arithmetic device 104 , an input device 105 , an output device 106 and a communication device 107 .

Among them, the storage device 101 is composed of an appropriate non-volatile storage element such as an SSD (Solid State Drive) or a hard disk drive.

Also, the memory 103 is composed of a volatile memory element such as a RAM.

Arithmetic device 104 is a CPU that reads program 102 stored in storage device 101 into memory 103 and executes it, performs overall control of the device itself, and performs various determinations, calculations, and control processes.

Also, the communication device 105 is a network interface card that connects to the network 1 and handles communication processing with other devices such as the user terminal 200 .

Note that the logon management 100 of this embodiment may further include an input device and an output device in addition to the above configuration.

The storage device 101 stores at least processing load information 125, user information DB 126, and threshold information 127 in addition to the program 102 for implementing the functions necessary for the logon management apparatus of this embodiment. . Details of these will be described later.

Also, the hardware configuration of the user terminal 200 of this embodiment is as shown in FIG. That is, the user terminal 200 comprises a storage device 201 , a memory 203 , an arithmetic device 204 , an input device 205 , an output device 206 and a communication device 207 .

Among these, the storage device 201 is composed of an appropriate non-volatile storage element such as an SSD (Solid State Drive) or a hard disk drive.

Also, the memory 203 is composed of a volatile memory element such as a RAM.

Arithmetic device 204 is a CPU that reads program 202 stored in storage device 201 into memory 203 and executes it, performs overall control of the device itself, and performs various determinations, calculations, and control processes.

Also, the input device 205 is an appropriate device such as a keyboard, mouse, and microphone that receives key input and voice input from the user.

Also, the output device 206 is an appropriate device such as a display or speaker for displaying data processed by the arithmetic device 204 .

The communication device 207 is a network interface card that connects to the network 1 and performs communication processing with other devices such as the logon management device 100 .

Note that the storage device 201 stores at least user information 225 in addition to the program 202 for implementing the functions necessary for the user terminal 200 of this embodiment. This user information 225 is information constituting a record of the user information DB 126 held by the logon management apparatus 100 described above. The details will be described later.
<Data structure example>
Next, tables used by the logon management apparatus 100 of this embodiment will be described. FIG. 4 shows an example of the processing load information 125 in this embodiment. The processing load information 125 is a table storing information on the processing load in the logon management apparatus 100, which is the business system.

The data structure is a set of records consisting of data such as the CPU usage rate and the number of terminal connections, with the observation date and time of the processing load as a key. It should be noted that the above-described observation of the CPU usage rate is performed by a load monitoring function provided in the logon management apparatus 100 (existing functions provided in the OS or the like may be appropriately adopted). On the other hand, with respect to the number of terminal connections, the logon management apparatus 100 increments the number of logged-on users each time a user logs on, and decrements the number of logged-on users each time a user logs off. and managed value.

Also, FIG. 5 shows an example of the user information DB 126 in this embodiment. The user information DB 126 of this embodiment is a database storing attribute information of each user, that is, employees who use the business system described above.

The data structure is a set of records consisting of data such as job title, task in charge, current task, logon/logoff status, and operation log, with a user ID that uniquely identifies each user as a key.

Among these, the position is the position that the user has at the company to which the user belongs. In addition, the task in charge is a task that the user performs under the responsibility of the above-described position. The current task is a task to be performed at present or in the near future in the above-mentioned task in charge (a task that needs to be performed in order to constitute or achieve the task).

The operation log is a file that records the contents of the user's operation of the user terminal 200 after logging on to the business system. This file stores information on the details of operations performed at regular time intervals. By analyzing the information shown in this file, it is possible to determine how often such operations are performed by the user after logging on to the business system. It shall be identifiable whether or not it was performed.

Also, FIG. 6 shows an example of the threshold information 127 in this embodiment. The threshold information 127 of this embodiment is a threshold used in logon management by the logon management apparatus 100 of this embodiment. be.

Of the two levels of thresholds, the first threshold is a CPU usage rate of "80%" and the second threshold is a CPU usage rate of "95%". The range between the first threshold CPU usage rate of "80%" and the second threshold value of CPU usage rate of "95%" is the range in which each logged-on user can use the business system without problems. predetermined range).

However, when a new logon request is received, a specific person among those logged-on users will be processed as a logoff target. When this logoff is executed, naturally, the CPU usage rate in the business system drops once.

On the other hand, if the CPU usage rate of the business system reaches this area between the CPU usage rate of 95%, which is the second threshold, and the CPU usage rate of 100%, which can cause a system failure, the business system Respond to situations in which there is an imminent risk of system failure and prompt logoff is required. If the CPU usage rate is within this range, the logon management device 100 forcibly logs off a specific user among the logged-on users. However, such specific users are those who have been carefully examined based on their attributes, and are unlikely to be users who will lead to measures that merely lower usability and satisfaction.

Next, FIG. 7 shows an example of the user information 225 in this embodiment. The user information 225 of this embodiment is user attribute information held in the user terminal 200 . The data structure is a record consisting of data such as job title, task in charge, current task, and operation log for the user, with a user ID that uniquely identifies the user as a key. This user information 225 is distributed and provided from the user terminal 200 to the logon management apparatus 100 every time a certain period of time elapses or every time it is updated.
<Logon management method: Generation of processing load information>
The actual procedure of the logon management method according to this embodiment will be described below with reference to the drawings. Various operations corresponding to the logon management method described below are realized by a program that the logon management apparatus 100 reads out to a memory or the like and executes. This program is composed of codes for performing various operations described below.

FIG. 8 is a diagram showing a flow example of a logon management method according to this embodiment. First, the process of generating the processing load information 125 will be described.

In this case, the logon management apparatus 100 requests, for example, the load monitoring function provided in the OS (Operation System) at regular time intervals regarding the observed value of the CPU usage rate in the business system itself, and obtains the value (s1). .

Further, the logon management device 100 associates the value of the CPU usage rate obtained in s1 with the observation date and time and stores it in the processing load information 125 (s2).

It is assumed that the logon management apparatus 100 repeats the above-described processes s1 and s2, for example, at regular intervals during the operating time of the business system, and generates the processing load information 125. FIG. Note that the observation of the number of terminal connections is not essential, so the explanation is omitted.
<Logon Management Method: Logon Management Processing>
Next, specific processing of logon management will be described based on the flowchart of FIG. In this case, the logon management apparatus 100 refers to the processing load information 125, for example, at regular time intervals, and compares the processing load, that is, the value of the CPU usage rate, with the first and first thresholds of the threshold information 127 (s10). .

As a result of the collation, if the CPU usage rate exceeds the second threshold (s11:y), the logon management device 100 determines that the CPU usage rate in the business system is in the (see FIG. 10), and then the logoff priority of each logged-on user is determined based on the attributes of each logged-on user indicated by the user information DB 126 (s12).

To determine the logoff priority, for example, the value of at least one of the position, work in charge, and current task of the logged-on user (that is, the user whose value in the "state" column is "logon") in the user information DB 126 is referred to. , to determine the logoff priority of each logged-on user by applying each of these values to a predetermined priority determination logic.

For example, this logic compares the above-mentioned values with a table 1000 (see FIG. 11) that defines the importance of each position, job in charge, and current task. One could envision something like specifying the highest as the priority value.

Note that the logon management apparatus 100 may extract the operation log of each logged-on user from the user information DB 126 and analyze it to estimate the appearance pattern of the non-operation time in the above-described priority determination. .

In this case, the logon management apparatus 100 gives higher priority to logoff when the frequency (eg, the number of occurrences per hour) of the appearance pattern in which the non-operation time is concentrated (eg, 20 minutes or longer) is higher. (Of course, it may be combined with the determination results based on the above-mentioned attributes such as position and work in charge. In that case, it is possible to assume that the one with the higher priority is adopted).

When the logon management device 100 receives a new logon request from the user terminal 200 (s13: y) in the above-described state (state where there is concern about system failure), that is, when the CPU usage rate is in the area where there is concern about system failure ( When a new logon request is received in a situation where the upper limit area) is reached (see FIG. 10), the user whose logoff priority determined in the above s12 is the highest among the users who are logged on is specified, and this user who is logged on The user is forcibly logged off (s14), and the process ends.

However, prior to this forced logoff, the logon management apparatus 100 may notify the user terminal 200 of the user of a message 1200 (see FIG. 12) of forced logoff execution notice.

Instead of the above-described forced logoff process, the logon management apparatus 100 shifts to a standby state in which no request from the user terminal 200 is accepted although logoff is not performed. A transition to a restricted state that limits local operation may also be performed.

In that case, the logon management device 100 sets a flag corresponding to such a shifted state in the record of the corresponding user in the user information DB 126, for example. Then, when a processing request is received from the user terminal 200 of the user, the flag is referred to, it is determined whether the processing corresponds to a permissible operation, and whether or not the processing can be executed may be controlled.

On the other hand, as a result of the collation described above, if the CPU usage rate is in the range between the first threshold and the second threshold (s11:n, s15:y), the logon management device 100 determines the CPU usage rate in the business system. Although there is little concern about system failure at present, if there is a new logon request, the concern may increase. Based on the attributes of each logon user indicated by the user information DB 126, The logoff priority of each medium user is determined (s16). This logoff priority determination may be performed by the same process as the method already described with respect to s12.

When the logon management device 100 receives a new logon request from the user terminal 200 in this state (s17: y), the logon management device 100 identifies the user with the highest logoff priority determined in s15 above among the logged-on users. , a predetermined process toward logoff is executed for this logged-on user (s18).

The logon management device 100, as a predetermined process in s18 for the above-described logoff, sends a message 1400 (see FIG. 14) of execution of logoff or a message 1400 (see FIG. 14) or a logoff is sent (s181).

In response to the notification of the above message, the logon management apparatus 100 also distributes to the user terminal 200 an interface 1600 (see FIG. 16) for accepting a user instruction to refuse logoff or postpone logoff for a predetermined period of time (s182). An instruction to refuse logoff or to postpone logoff for a predetermined period of time may be accepted.

Here, when the above-described logoff refusal or logoff postponement instruction 1700 (see FIG. 17) is received from the user terminal 200 (s183: y), the logon management apparatus 100 receives the logon user other than the current user. The user with the second highest priority is selected on the basis of the logoff priority determined in s15, and the logged-on user selected here either executes each process in s18 or is forced to log off (s184). .

On the other hand, if the logoff refusal or logoff postponement instruction is not received from the user terminal 200 (s183: n), the logon management apparatus 100 executes logoff processing for the user (s19), and ends the processing.

In place of s18 described above, that is, the logoff process, the logon management apparatus 100 shifts to a standby state in which no request from the user terminal 200 is accepted although the logoff is not performed, or the user terminal 200 refers to information about the operation content or executes the logoff process. A transition to a restricted state that limits local operation may also be performed. This point is the same as that described regarding the forced logoff of s14.

Further, in the present embodiment, the priority of users who are currently logged on is determined, and a person to be logged off is specified based on the priority. good too.

In this case, the logon management apparatus 100 searches the user information DB 126 using the attribute of the user who issued the logon request, for example, the user ID specified by the user during the logon operation as a key, and identifies the logoff target. The priority may be determined by the same logic as the priority determination.

In addition, the logon management apparatus 100 specifies logoff targets including users who are currently logged on and users who have made logon requests. Of course, since the user who requested the logon is not a "logged-on user", it cannot be said to be a "logoff target", and can be defined as a logon refusal target.

Although the best mode for carrying out the present invention has been specifically described above, the present invention is not limited to this, and can be variously modified without departing from the scope of the invention.

According to this embodiment, it is possible to perform appropriate logon management while maintaining good overall usability and business efficiency.

At least the following will be clarified by the description of this specification. That is, in the logon management method of the present embodiment, the information processing device notifies the user's terminal of a logoff execution notice message or a message prompting logoff as a predetermined process for logging off the specific logged-on user. may be

According to this, it is possible to give an appropriate time grace period to the specific logged-on user who is the target of logoff, instead of forcibly executing the logoff immediately. It will be possible to minimize the deterioration of usability and satisfaction that accompanies it. As a result, accurate logon management becomes possible while maintaining overall usability and business efficiency even better.

Further, in the logon management method of the present embodiment, the information processing device distributes to the terminal an interface for accepting a user instruction to refuse logoff or postpone logoff for a predetermined period of time in response to the notification of the message. When an instruction to refuse or postpone for a predetermined period of time is received, a logged-on user other than the user may be selected based on the logoff priority, and the predetermined process may be executed for the selected logged-on user. .

According to this, it is possible to give the specific logged-on user who is the target of logoff an appropriate grace period or an opportunity to confirm the intention, instead of forcibly executing the logoff immediately. It is possible to efficiently perform logoff processing while minimizing the deterioration of usability and satisfaction that accompanies this. As a result, more accurate logon management becomes possible while maintaining overall usability and business efficiency even better.

Further, in the logon management method of the present embodiment, when the information processing apparatus receives a new logon request in a situation where the processing load has reached the upper limit region in the predetermined range, the specific logged-on user is It is also possible to forcibly log off.

According to this, when the processing load reaches a situation where the processing load may lead to a system failure while guiding (prompting) the logged-on user to log off within a predetermined range above the above-described threshold value, the system can be reliably and quickly It is possible to perform logoff processing at As a result, more accurate logon management becomes possible while maintaining overall usability and business efficiency even better.

Further, in the logon management method of the present embodiment, the information processing device determines the logoff priority based on the importance of at least one of the user's position and work, which are attributes of the logged-on user, The logoff priority of each logged-on user may be determined.

According to this system, highly important tasks and the person in charge of the tasks handled by the system are temporarily exempted from being logged off. Management can be efficient. As a result, accurate logon management becomes possible while maintaining overall usability and business efficiency even better.

Further, in the logon management method of the present embodiment, the information processing device executes at least one of transition to a standby state or restriction of processing content for the specific logged-on user prior to the predetermined process. may be

According to this, it is possible to give the specific logged-on user who is the target of logoff an opportunity such as an appropriate grace period or limited process execution, instead of forcibly executing logoff immediately. , it is possible to efficiently perform the logoff process while minimizing the decrease in usability and satisfaction caused by being logged off. As a result, more accurate logon management becomes possible while maintaining overall usability and business efficiency even better. Further, in the logon management method of the present embodiment, the information processing apparatus analyzes the operation log of each of the logged-on users, estimates an appearance pattern of non-operation time, and determines the occurrence pattern of the no-operation time when determining the log-off priority. It is also possible to determine that the logoff priority is higher as the frequency of no-operation times appearing together in the pattern increases, and to execute the predetermined process for the specific logged-on user according to the logoff priority.

According to this, it is possible to select a user or a time period for which no operation time is likely to continue for a certain period of time as a logoff target, rather than a user or time period for which no operation time appears in pieces. As a result, accurate logon management becomes possible while maintaining overall usability and business efficiency even better.

1 network 10 logon management system 100 logon management device 101 storage device 102 program 103 memory 104 arithmetic device 105 communication device 125 processing load information 126 user information DB
127 threshold information 200 user terminal 201 storage device 202 program 203 memory 204 arithmetic device 205 input device 206 output device 207 communication device 225 user information

Claims (6)

The information processing device
Holds information about logged-on users in managed systems,
monitoring the status of the processing load in the system, and when a new logon request is received in a situation where the processing load reaches a level within a predetermined range equal to or greater than a threshold, based on the attributes of the logged-on user, during the logon Determining the logoff priority of each user, and in order to log off a specific logged-on user according to the priority , notify the user's terminal of a logoff execution advance notice message or a message prompting logoff, and logoff refusal Alternatively, when an interface for accepting a user instruction to postpone for a predetermined period of time is delivered, and an instruction to refuse logoff by the user or to postpone for a predetermined period of time is received, other logged-on users other than the user are given the above logoff priority. and executing a predetermined process for logging off the selected logged-on user ;
A logon management method characterized by: The information processing device
When a new logon request is received in a situation where the processing load has reached the upper limit of the predetermined range, forcing the specific logged-on user to log off;
2. The logon management method according to claim 1, wherein: The information processing device
When determining the logoff priority, the logoff priority of each logged-on user is determined based on the importance of at least one of the user's position and work, which is an attribute of the logged-on user,
2. The logon management method according to claim 1, wherein: The information processing device
Prior to the predetermined processing, at least one of shifting to a standby state or limiting processing content is executed with respect to the specific logged-on user;
2. The logon management method according to claim 1, wherein: The information processing device
When determining the logoff priority, the operation log of each logged-on user is analyzed to estimate an occurrence pattern of non-operation time. determining that the logoff priority is high, and executing the predetermined process for the specific logged-on user according to the logoff priority;
2. The logon management method according to claim 1, wherein: a storage device that holds information of logged-on users in a system to be managed;
monitoring the status of the processing load in the system, and when a new logon request is received in a situation where the processing load reaches a level within a predetermined range equal to or greater than a threshold, based on the attributes of the logged-on user, during the logon Determining the logoff priority of each user, and in order to log off a specific logged-on user according to the priority , notify the user's terminal of a logoff execution advance notice message or a message prompting logoff, and logoff refusal Alternatively, when an interface for accepting a user instruction to postpone for a predetermined period of time is delivered, and an instruction to refuse logoff by the user or to postpone for a predetermined period of time is received, other logged-on users other than the user are given the above logoff priority. and a computing device that executes a predetermined process for logging off the selected logged-on user ;
A logon management device comprising:

Images