JPH09307582A - Network resources management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To allow a client terminal equipment nor under the management of the system to access network resources at sufficient security even when a person in charge of management is not present with respect to the access request of the client. SOLUTION: A plurality of independent networks managing a network resources and lots of client terminal equipments 14, 24 uniquely are interconnected by a communication line network 50. Each independent network is provided with a resources management table 18 (28) and an access frequency management table 19 (29). A temporary access right for a client terminal equipment not under its management is defined in the resource management table 18 (28). The access frequency management table 19 (29) stores an access frequency to network resources by the temporary access right. On the occurrence of an access request, when no registration is made on the access frequency management table 19 (29), the request is collated with other independent network to accept application via the communication line network and the formal registration is confirmed and the result is registered in the access frequency management table 19 (29) in addition. The corresponding temporary access right in the resource management table 18 (28) is given to the client terminal equipment making the access request.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network resource management system, and more particularly to a network resource management system suitable for a mobile computing environment in which mobile terminal devices are frequently used.

[0002]

2. Description of the Related Art In recent years, a network OS has been introduced to allow employees to utilize a LAN provided in a company or a group of affiliated companies, and various networks such as a printer for printing and a file server in which a database is constructed. A network resource management system has become popular in which resources can be shared from any client terminal device installed in a workplace. Most of the operation modes of such a network resource management system are the centralized management type operation modes suitable for the security management of confidential information. When using, it is necessary to determine whether each client terminal device has access rights to various network resources. It is necessary to register in the system in advance.

On the other hand, at the same time as the spread of the above-mentioned network resource management system, the personal computer for personal use is rapidly becoming higher in function, smaller in size and lower in price, and the function and distribution amount of application software for personal computer are both increased. It has been fulfilling much faster than application software for general-purpose computers. Along with this, it has become not uncommon for the above-mentioned client terminal device to be configured as a portable terminal device that can also be used as a personal computer, and one employee be provided with one. As a result, a mobile computing environment is rapidly increasing in which employees with portable terminals can freely select the optimal work mode (work time, work place, whether to use network resources, etc.) according to their own situation. Is being maintained at.

[0004] With the development of the above-mentioned mobile computing environment, the client terminal device which has been used only on the desk of one's own work is used as a portable terminal device at a place other than one's own work. It is like this. As a typical application example of a mobile computing environment, a design engineer uses his or her own terminal device (as a client terminal device) to retrieve design specification information from an in-house database (network resource) and Used as a portable terminal device) to create and store a detailed design drawing based on the above design specification information, and then visit a partner company or other business office and use the terminal device (as a portable terminal device) for its design engineer. For example, the detailed design specifications are examined while presenting the detailed design drawing.

[0005]

By the way, when using the terminal device for oneself at the workplace visited as described above,
It may be necessary to utilize the network resources of the workplace. For example, if the entire detailed design drawing is to be printed on one sheet of paper and checked, it will be necessary to use a printer for printing, and the details will be selected from various design specification information created at the workplace visited. In order to search for something related to the blueprint, it becomes necessary to use the file server in which the database is built.

In the above-mentioned conventional network resource management system, the registration management of the client terminal device is independently performed in each network. Therefore, if the workplace visited is another company or another business office with a different network, contact each other in advance between the companies or business offices, and install their own portable terminal device in the network resource management system. After being registered, the network resources will be available. Therefore, when the person in charge of the network that should request the registration of the terminal device is absent, the network resources of the visited system cannot be used immediately, and the utilization range of the mobile computing environment manages the network of one's workplace. There was a problem that it was limited to the range of the network.

On the other hand, the above-mentioned problems can be avoided by registering "guest users" accessible from any client terminal device in all networks in advance. However, there is a problem in that it is difficult to perform security management of confidential information for a "guest user" who is unknown to whom it will be used, which causes a new problem of ensuring security.

Therefore, a first object of the present invention is to provide a portable terminal device (client) for oneself at any time regardless of whether or not a person in charge of each network provided in the company or the affiliated company group is absent. It is to provide a network resource management system capable of accessing any network resource from a terminal device) and making more effective use of the mobile computing environment.

A second object of the present invention is to provide a network resource capable of sufficiently ensuring the security necessary for managing each network even under the above-mentioned mobile computing environment. To provide a management system.

[0010]

In order to achieve the above first object, the invention according to claim 1 of the network resource management system of the present invention is provided with various network resources and access rights to the network resources. In a network resource management system in a complex network in which a plurality of independent networks, each of which has a large number of client terminal devices under its own management, are connected to each other through a communication network, each of the independent networks is under its control. A resource management table that defines in advance a temporary access right to be given to the client terminal device, and is specified in the resource management table when an access request is made from the client terminal device that is not under the control of its own independent network. Appropriate applicable temporary access rights It is. This allows you to access all network resources from your own portable terminal device (client terminal device) at any time, regardless of whether or not there is a person in charge of each network provided within the company or affiliated company group. Therefore, the mobile computing environment can be used more effectively than ever before.

Further, in order to achieve the second object, the invention according to claim 2 is such that, in addition to the configuration of claim 1, each of the independent networks is provided with the temporary access right. An access frequency management table for recording frequency information of access made to the network resource from the client terminal device under the control of the independent network is provided, and the access frequency management is performed when the access request is made. It is determined whether or not the corresponding client terminal device is registered by referring to the table, and if it is not registered, the other independent network declared by the client terminal device is inquired via the communication line network, After the formal registration of the client terminal device is confirmed, additional registration to the access frequency management table is performed. . As a result, even under the mobile computing environment obtained by the invention of claim 1,
It is possible to sufficiently secure the security that is essential for managing each network.

[0012]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of a network resource management system of the present invention will be described in detail below with reference to the drawings.

FIG. 1 is a block diagram showing an example of the overall configuration of an embodiment of a network resource management system of the present invention. Reference numerals 10 and 20 respectively denote a local area network (LAN) corresponding to an independent network,
11 and 21 are file servers, 12 and 22 are printer servers, 13 and 23 are printers, 14 and 24 are client terminal devices (= portable terminal devices), 1
5 and 25 are user management mechanisms, 16 and 26 are resource management mechanisms, 17 and 27 are access frequency management mechanisms, 1
8 and 28 are resource management tables, 19 and 29 are access frequency management tables, 30 and 40 are routers that accommodate the corresponding LANs 10 and 20, respectively, and 50 includes the LANs 10 and 20 by connecting the routers 30 and 40 to each other. It is a communication network such as a private network or a public network that constitutes a complex network. In addition, in FIG.
Although only one LAN is accommodated in one router, a plurality of LANs are actually accommodated in many cases.

In FIG. 1, the LAN 10 is composed of a file server 11, a printer server 12, a printer 13, and a client terminal device 14, and network resources such as the file server 11 and the printer server 12 can be easily supplied from the client terminal device 14. A network OS that can be used is installed. LA as above
N20 is a file server 21, a printer server 22,
A network OS, which is composed of a printer 23 and a client terminal device 24 and which allows network resources such as the file server 21 and the printer server 22 to be easily used from the client terminal device 24, is introduced. FIG. 1 shows that each LAN has one client terminal device.
Although it is drawn that only one is connected, many client terminal devices are actually connected.

A file server 11 in the LAN 10
Includes a user management mechanism 15 and a resource management mechanism 16, and the printer server 12 includes an access frequency management mechanism 19. Similarly, in the LAN 20, the file server 21 has a user management mechanism 25 and a resource management mechanism 26, and the printer server 22 has an access frequency management mechanism 29. The user management mechanisms 15 and 25 are respectively associated with the corresponding file server 1.
It manages the user information officially registered in 1 and 21. The resource management mechanisms 16 and 26 have their own LANs.
Has the resource management tables 18 and 28 in which the network resource allocation is set in advance in several levels. This resource management table 1
8 and 28 are referred to when a client terminal device under the management of a different LAN accesses within the management area, and the resource management mechanisms 16 and 26 are based on the corresponding setting information obtained from the resource management tables 18 and 28. ,
The client terminal device is given a temporary access right to network resources. The access frequency management mechanisms 17 and 27 respectively have access frequency management tables 19 and 29 for recording the frequency of access to network resources from client terminal devices under the control of different LANs. When the access frequency from the client terminal device exceeds a certain set value, the fact is presented to the person in charge of management to urge the management transfer of the client terminal device.

FIG. 2 is a diagram showing a specific example of the configuration of the resource management tables 18 and 28 shown in FIG. In the figure, the resource management tables 18 and 28 have LANs to which they belong.
A person in charge of managing the LAN registers the temporary access right to some network resource in 10 and 20 in advance. The content of the temporary access right specifies whether or not to permit access to the corresponding network resource for each file server or client terminal device for which user registration is performed. The file server in each LAN refers to its own resource management table when a client terminal device under the management of a different LAN accesses within the management area. And
If the client terminal device is registered as a terminal device that is permitted to access some network resource, the client terminal device is given a temporary access right to the corresponding network resource.

FIG. 3 is a diagram showing a specific example of the configuration of the access frequency management tables 19 and 29 in FIG. In the figure, the access frequency management tables 19 and 29 include
For each client terminal device that has been accessed in the management area under the control of a different LAN, the identification name of the client terminal device, the number of times of access to the LAN, and the start of the first access The date, the last access date that has been recently accessed, the access frequency obtained from these record data, and the like are registered, and these contents are updated every time the corresponding client terminal device accesses.

That is, the network resources such as the printer server in each LAN are stored in the access frequency management table after the client terminals under the management of different LANs are given the temporary access right to the network resources. If the access frequency exceeds a certain set value (when the access frequency information satisfies a predetermined management transfer condition), it is determined to be long-term use and the LAN of the LAN is updated. Notify the administrator that the user should be officially registered. In response to this, when the management person officially registers the corresponding client terminal device, by notifying the file server of the different LAN, the file server of the different LAN can notify the client terminal device that has received the notification. Remove the device from authorized users. If the access frequency does not exceed the above setting value (when the access frequency information does not satisfy the predetermined management transfer condition), it is judged as temporary use and the temporary access right to the corresponding network resource is granted. Give and release the network resource at the end of access.

4 and 5 show one of the LANs in FIG.
LAN of the other side to the client terminal device under the control of
It is a figure which shows the specific example of the procedure of giving the temporary access right with respect to the inside network resource. Hereinafter, a case where the network resources in the LAN 20 are made available when the client terminal device 14 under the control of the LAN 10 is moved into the management area of the LAN 20 and used will be described with reference to FIGS. 4 and 5. .

First, the client terminal device 14 under the control of the LAN 10 issues a login request as a "guest user" to the file server 21 from within the management area of the LAN 20 (step 101). The file server 21 that has received this login request is the client terminal device 14
Is inquired about information on the officially registered network, that is, information on the LAN 10 (step 102). In response to this inquiry, the client terminal device 14 reports information such as the identification name of the file server 11 of the registration source, the terminal identification name, and the password to the file server 21 (step 103). The file server 21 refers to the resource management table 28 based on the information declared by the client terminal device 14, and the client terminal device 14 itself or the file server 11 that manages the client terminal device 14 is
It is checked whether the resource management table 28 is registered as having the temporary access right to the network resource such as the printer 23 (step 104), and the process is branched according to the result (step 105). If neither the file server 11 nor the client terminal device 14 is registered in the resource management table 28 (step 105 = No), the file server 2
1 notifies the client terminal device 14 that the network resource in the LAN 20 is unavailable, and terminates the process for the login request made from the client terminal device 14 (step 106).

On the other hand, when either the file server 11 or the client terminal device 14 is registered in the resource management table 28 (step 105 = Yes), the file server 21 refers to the access frequency management table 29 to refer to the client. It is checked whether the terminal device 14 is registered (step 107), and the processing is branched according to the result (step 108). When the client terminal device 14 is not registered in the access frequency management table 29 (step 108 = Yes), the file server 21 determines the file in the LAN 10 of the management source based on the report from the client terminal device 14 in step 103 described above. The server 11 is connected to the routers 30 and 40 via the communication network 50, and the registered identification name of the registered source,
An inquiry is made as to whether or not information unique to the client terminal device 14, such as a terminal identification name and a password, is officially registered in the file server 11 (step 109). The file server 11 that receives this inquiry is the user management mechanism 1
5 is checked to see if the client terminal device 14 is officially registered, and the result is returned to the file server 21 (step 110).

The file server 21 branches the processing according to the answer result obtained in step 110 (step 111). That is, when the client terminal device 14 is not officially registered in the file server 11 (step 111 = No), the file server 21 notifies that the network resource in the LAN 20 is unavailable, as in step 106. 14 is notified, and the process for the login request made from the client terminal device 14 is terminated (step 112). Also,
When the client terminal device 14 is officially registered in the file server 11 (step 111 = Yes), the file server 21 accepts the login request made from the client terminal device 14 and based on the registered contents of the resource management table 28. , And the temporary access right to the printer 23 alone or to the printer 23 and the file server 21 is given to the client terminal device 14 (step 113). In addition, when the client terminal device 14 is registered in the access frequency management table 29 (step 108 = No), the above-described steps 109 to 109 are executed.
The process of 112 is skipped and the process branches to step 113 to give the client terminal device 14 a temporary access right to only the printer 23 or the printer 23 and the file server 21.

At step 113, the client terminal device 1
4 is given a temporary access right, the print server 2
2 updates each item related to the client terminal device 14 in the access frequency management table 29 (newly registers if not registered), increases the value of the access count by 1, and sets the value of the access frequency to, for example, the access frequency ← The number of accesses / access period is obtained and recorded (step 114). And
When the value of the access frequency exceeds the predetermined setting value (step 115 = Yes), the file server 21
Notifies the person in charge of managing the LAN 20 that the value of the access frequency by the client terminal device 14 has exceeded a predetermined set value (step 116). The printer 23 and the file server 21 by the client terminal device 14
When the user logs out after using the network resources such as, the temporary access right given from the file server 21 is abandoned and all the network resources are released (step 117).

FIG. 6 is a diagram showing a specific example of a procedure for transferring a client terminal device under the control of one LAN in FIG. 1 to the management of the other LAN. Hereinafter, based on FIG. 6, in the LAN 20, the client terminal device 14 in which the value of the access frequency in the LAN 20 exceeds a predetermined set value.
From now on, the processing for making the network resources of the LAN 20 available by the normal access right will be described.

First, the person in charge of managing the LAN 20 is shown in FIG.
The notification by step 116 in the inside (the notification that the value of the access frequency to the network resource by the client terminal device 14 exceeds the predetermined setting value) is received (step 201). Upon receipt of this notification, the manager in charge determines whether or not the client terminal device 14 is officially registered in the LAN 20 (step 202). Then, when it is determined that the registration is not officially registered (step 203 = No), the printer server 22 accesses the client terminal device 14 registered in the access frequency management table 29 to access the value of the access count to the initial value 0, and The start date is set to the current date and the process ends (step 20).
4). When it is determined that the client terminal device 14 is officially registered in the LAN 20 (step 203 = Y).
es), the file server 21 performs formal registration as a user who puts the client terminal device 14 under the control of the LAN 20 in the user management mechanism 25 (step 205), and the access frequency management table 2 in the printer server 22.
The registration related to the client terminal device 14 is deleted from 9 (step 206). And the file server 21
Is connected to the file server 11 via the routers 30 and 40 and the communication network 50, and the client terminal device 14
Notification of management transfer to the LAN 20 (step 20)
7). Finally, the file server 11 that has received the management transfer notification deletes the registration of the client terminal device 14 in the user management mechanism 15 (step 208), and manages the client terminal device 14 from the LAN 10 to the LAN 2
The process of transferring to 0 ends.

[0026]

As described above, according to the first aspect of the present invention.
According to the invention of claim 1, regardless of whether or not the person in charge of each network provided in the company or the group of affiliated companies is absent, any network from the portable terminal device (client terminal device) for oneself to any network is always available. Resources can be accessed, and mobile computing environments can be used more effectively than ever before.

According to the invention of claim 2, in particular,
Even under the mobile computing environment obtained by the invention of claim 1, it is possible to sufficiently secure the security which is indispensable for managing each network.

Furthermore, every time the portable terminal device (client terminal device) moves, the collection of information about the client terminal device, which was individually handled by the person in charge of management of each network, is automated and registered in the access frequency management table. When the access frequency information exceeds the specified setting conditions, the administrator is notified that the access frequency information exceeds the specified setting conditions. There is an effect that it is possible to achieve cost reduction and cost reduction.

[Brief description of drawings]

FIG. 1 is a block diagram showing an example of the overall configuration of an embodiment of a network resource management system of the present invention.

FIG. 2 is a diagram showing a specific example of a configuration of a resource management table in FIG.

FIG. 3 is a diagram showing a specific example of a configuration of an access frequency management table in FIG.

FIG. 4 is a diagram showing a specific example of a procedure for giving a client terminal device under the control of one LAN in FIG. 1 a temporary access right to a network resource in the other LAN.

5 is a diagram showing a specific example of a procedure for giving a client terminal device under the control of one LAN in FIG. 1 a temporary access right to a network resource in the other LAN.

FIG. 6 is a diagram showing a specific example of a procedure of transferring a client terminal device under the control of one LAN in FIG. 1 to the management of the other LAN.

[Explanation of symbols]

10, 20 Local area network (LAN) 11, 21 File server 12, 22 Printer server 13, 23 Printer 14, 24 Client terminal device (= portable terminal device) 15, 25 User management mechanism 16, 26 Resource management mechanism 17, 27 access frequency management mechanism 18, 28 resource management table 19, 29 access frequency management table 30, 40 router 50 communication line network

Claims (3)

[Claims] 1. A plurality of independent networks, each of which has various network resources and a large number of client terminal devices to which access right to the network resources is given, under independent management, are connected to each other through a communication network. In the network resource management system in a complex network, each of the independent networks includes a resource management table that defines in advance a temporary access right to be given to the client terminal device that is not under its control, and the independent network is not under the control of its own independent network. A network resource management system, characterized in that, when an access request is issued from a client terminal device, the corresponding temporary access right designated in the resource management table is given. 2. Each of the independent networks records frequency information of an access made to the network resource from the client terminal device under the control of the other independent network to which the temporary access right is given. When there is an access request, it is determined whether or not the corresponding client terminal device is registered, and when it is not registered, the client The other independent network declared by the terminal device is inquired via the communication line network, and additional registration to the access frequency management table is performed after the official registration of the client terminal device is confirmed. Item 1. A network resource management system according to item 1. 3. In each of the independent networks, regarding the client terminal device for which the access frequency information registered in the access frequency management table exceeds a predetermined setting condition, the access frequency information is predetermined to an administrator. 3. The network resource management system according to claim 2, wherein a notification that the setting condition of is exceeded is issued.