KR102185555B1 - Method of secure access and query execution of database and server implementing thereof - Google Patents

Abstract

The present invention relates to a security access and query execution method of a database and to a server implementing the same. According to one embodiment of the present invention, a central control server comprises: a communication unit which communicates with a first agent, a second agent and a database of a POS system; a control unit which verifies DML generation information transmitted from the first agent, and then converts the DML generation information into DML query information to generate the same; and a storage unit which stores the DML query information, execution result information thereof, rollback information, or the DML generation before or after transmission, wherein the communication unit transmits the DML query information to the database of the POS system.

Description

Security access and query execution method of database and server implementing it {METHOD OF SECURE ACCESS AND QUERY EXECUTION OF DATABASE AND SERVER IMPLEMENTING THEREOF}

The present invention relates to a security access method for a database and a query execution method and a server implementing the same.

Retailers, for example chained supermarkets, convenience stores, and large shopping malls, are building a POS (Point of sale system) for product payment and product management. POS systems have to store various product information, customer information, or transaction information, and system maintenance and maintenance are becoming an important issue in that they are used in real time within the store.

However, it takes time for a system person to visit a store for maintenance and repair of such a system, and increases the cost of system management. Therefore, it is necessary to remotely manage the POS system.

However, remote management of POS systems should be provided with the security of POS systems. If the POS system's security is not guaranteed, the database stored by the POS system may lose its reliability.

Accordingly, there is a need to implement a remote management method of POS system and a system that implements the POS system that guarantees security.

In this specification, a method for safely performing database operations on information stored in databases of multiple POS systems is proposed.

In this specification, a method for ensuring the stability of database data by preventing external access by inducing unification of the work of multiple POS systems' databases through a central control server is proposed.

In this specification, a method for a database accessor to perform a database operation appropriately to the authority is proposed by verifying the authority of the agent together with personnel information in the process of connecting to the databases of a plurality of POS systems.

The problem to be solved by the present invention is not limited to the problems mentioned above, and other problems not mentioned herein will be clearly understood by those skilled in the art from the following description.

The central control server according to an embodiment of the present invention verifies the communication unit that communicates with the database of the first agent, the second agent, and the POS system, and the DML generation information transmitted by the first agent, and then converts the DML generation information into DML query information. A control unit generated by conversion and a communication unit transmits DML query information to the POS system database, and includes a storage unit for storing DML query information or execution result information or rollback information or DML generation information before or after transmission.

The authorization server according to an embodiment of the present invention receives the communication unit that communicates with the central control server, the personnel information storage unit that stores the personnel information, and the communication unit from the central control server when the information provided by the first agent during the login process is received. And a control unit that compares the information and information stored in the personnel information storage unit to generate a verification result.

In the method of performing a query by the central control server according to an embodiment of the present invention, after the communication unit of the central control server receives DML generation information from the first agent, and after verifying the DML generation information received by the control unit of the central control server, Converting DML generated information to DML query information and generating it, the communication unit transmitting DML query information to the POS system database, and the storage unit of the central control server before or after the DML query information is transmitted. And storing information or execution result information or rollback information or DML generation information.

When implementing the embodiment of the present invention, it is possible to safely perform database operations on information stored in databases of multiple POS systems.

When implementing the embodiment of the present invention, since the database operation is performed only through a communication connection between the databases of a plurality of POS systems and the central control server, it is possible to ensure the stability of the database data by preventing external access.

In the case of implementing an embodiment of the present invention, the database accessor can perform the database operation appropriately for the authority by verifying the authority of the agent together with the personnel information during the connection process with the databases of a plurality of POS systems.

The effects provided by the present invention are not limited to the above-mentioned effects, and other effects not mentioned herein will be clearly understood by those skilled in the art from the following description.

1 is a diagram showing an interaction between a central control server and other devices according to an embodiment of the present invention.
2 is a diagram showing the configuration of a central control server according to an embodiment of the present invention.
3 is a diagram showing the configuration of an authorization server according to an embodiment of the present invention.
4 is a diagram illustrating a process of checking the authority of a corresponding agent when an agent logs in according to an embodiment of the present invention.
5 is a diagram showing a work flow between an agent and a central control server according to an embodiment of the present invention.
6 is a diagram showing a configuration of a screen interface for a person in charge logging in to an agent according to an embodiment of the present invention.
7 is a diagram illustrating a configuration of a screen interface for generating DML generation information by a person in charge who logs in to an agent according to an embodiment of the present invention.
FIG. 8 is a diagram illustrating a process in which a central control server verifies and processes a query and authority of a person in charge according to an embodiment of the present invention.
9 is a diagram showing the interaction between the central control server and the database of the POS system according to an embodiment of the present invention.
10 is a view illustrating a process of performing a rollback after executing DML query information according to an embodiment of the present invention.

Advantages and features of the present invention, and a method of achieving them will become apparent with reference to the embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but will be implemented in a variety of different forms, only these embodiments make the disclosure of the present invention complete, and common knowledge in the technical field to which the present invention pertains. It is provided to completely inform the scope of the invention to those who have, and the invention is only defined by the scope of the claims. The same reference numerals refer to the same elements throughout the specification.

In order to clearly describe the present invention, parts irrelevant to the description have been omitted, and the same reference numerals are assigned to the same or similar components throughout the specification. Further, some embodiments of the present invention will be described in detail with reference to exemplary drawings. In adding reference numerals to elements of each drawing, the same elements may have the same numerals as possible even if they are indicated on different drawings. In addition, in describing the present invention, when it is determined that a detailed description of a related known configuration or function may obscure the subject matter of the present invention, a detailed description thereof may be omitted.

In addition, in describing the constituent elements of the present invention, terms such as first, second, A, B, (a) and (b) may be used. These terms are only for distinguishing the component from other components, and the nature, order, order, or number of the component is not limited by the term. When a component is described as being "connected", "coupled" or "connected" to another component, the component may be directly connected or connected to that other component, but other components between each component It is to be understood that is "interposed", or that each component may be "connected", "coupled" or "connected" through other components.

Hereinafter, in the present specification, the POS terminals installed in the store and the database to which these terminals are connected are grouped together and referred to as POS systems. According to an embodiment of the present invention, the POS system may include one POS terminal and a database within the terminal. In addition, according to another embodiment of the present invention, the POS system may include two or more POS terminals and a separately constructed database. In addition, according to another embodiment of the present invention, the POS system may include a database built in one or two of two or more POS terminals and POS terminals.

In this specification, a device that remotely connects to the POS system and manages the POS system remotely, and in particular, a device that changes the contents of the database by sending a query to the database is referred to as a central control server. In addition, the central control server can access the POS system or POS system database.

1 is a diagram showing an interaction between a central control server and other devices according to an embodiment of the present invention.

The central control server 100 is connected to a plurality of agents (Agent, 300a ~ 300k). In this case, an embodiment of the connection method includes socket communication. The agent is a PC including a notebook, or a tablet or a smartphone as an embodiment. Alternatively, the agent uses a program installed in the above-described devices as an embodiment. Hereinafter, a PC agent will be described as an embodiment of the agent, but the present invention is not limited thereto. PC agents are mainly used to perform business tasks in enterprises.

In addition, the central control server 100 is connected to a database (POS Database, 500a ~ 500m) in a plurality of POS systems. The POS system and the database can be integrated. In this case, a database can be deployed within the POS system.

At this time, an embodiment of the connection method between the central control server 100 and the database in the POS system includes a DB (Database) connection. A device referred to as a POS system or a POS terminal provides the function of an electronic cash register, and provides a function of informing the seller of various data accompanying the sale of the goods at the goods seller that sells the goods.

In addition, the POS system provides information necessary to facilitate management of information on sales, and each POS terminal or POS system may store credit information or sales information, etc., read in the process of payment for goods, as a database.

Therefore, since important information such as personal information and product information is stored in the POS system, it is necessary to control the access to the POS system databases according to the authority of the person in charge in order to meet the DB stability and security of POS systems. . The configuration of FIG. 1 is a configuration in which an individual agent cannot directly access the POS system and can request a necessary database operation from the central control server.

The central control server 100 converts data manipulation words received from respective PC agents, that is, network packets (eg, byte information) related to DML (Data Manipulation Language) into DML query information. The DML generation information provided by the PC agent is information necessary to generate and verify DML queries.

And the central control server 100 transmits the changed DML query information to the database in each POS system, and receives the query result. And it provides the received result to the agent.

DML is referred to as a data manipulation word, and information in the database can be searched for information in the database using commands such as SELECT/COUNT, or information in the database can be input/modified/delete using commands such as INSERT/UPDATE/DELETE. It may also be referred to as a data manipulation word or query statement. DML processing should be secured in that it changes the contents of the database or retrieves information. Accordingly, in the present specification, the DML processing is limited so that only the central control server 100 can process it under connection with the POS database, thereby increasing the security of the DML processing.

In addition, based on the connection between the central control server 100 and the PC agent to increase security and the configuration of the central control server 100 to verify the DML generation information transmitted by the PC agent, unnecessary or external computer network intrusion or internal personnel Illegal DB access can be blocked.

As shown in FIG. 1, the central control server 100 controls DML execution for the database by connecting with databases in the POS system. However, the central control server 100 verifies the DML generation information provided by the agents and executes the DML accordingly. Therefore, when the agent provides the wrong DML generation information, the central control server 100 DML execution in the database can be blocked.

Meanwhile, the central control server 100 may directly verify the authority of the agent, or may verify the authority of the agent through a separate authority server 400.

The authorization server 400 may include a personnel database, and may include an IT portal in which payment is made between personnel in charge and information on affiliate stores is stored. That is, the authority server 400 may include both the personnel DB and the IT portal described above, and the central control server 100 may use the information referenced by the authority server 400.

At this time, the verification of the agent's authority is to check the personnel information of the user logged in to the agent, or to check the DB authority for accessing the database and performing work of the user. In addition, the authority server 400 and the central control server 100 may be implemented in one device.

2 is a diagram showing the configuration of a central control server according to an embodiment of the present invention. The communication unit 110 communicates with a plurality of agents, for example, the first agent 300a, the second agent 300b, and the database 500a to 500m of the POS system. After verifying the DML generation information transmitted by the first agent 300a, the control unit 150 converts the DML generation information into DML query information and generates it.

Further, the communication unit 110 transmits the DML query information to the POS system database, and the storage unit 120 transmits DML query information or execution result information or rollback information or DML generation information before or after transmission of the DML query information. Save it.

3 is a diagram showing the configuration of an authorization server according to an embodiment of the present invention. The communication unit 410 of the authority server 400 communicates with the central control server 100. The personnel information storage unit 420 stores personnel information.

When the communication unit 410 of the authorization server 400 receives the information provided in the process of logging in by the first agent from the central control server 100, the control unit 450 of the authorization server 400 receives the received information and personnel information. The information stored in the storage unit 420 is compared to generate a verification result.

In addition, when an error occurs frequently in the work of a specific person in charge/specific agent in the central control server 100, the authority server 400 stores a history of this in the personnel information storage unit 420, and the corresponding person in charge logs in in the future. If so, you can generate verification results so that only tasks that do not require rollback are performed.

4 is a diagram illustrating a process of checking the authority of a corresponding agent when an agent logs in according to an embodiment of the present invention.

The first agent (Agent 1) (300a) displays a window for inputting identification information of the person in charge, such as an ID and a password necessary to verify it, and when the person in charge enters an ID (ID)/password (pwd), It transmits this to the central control server 100 (S1). In addition, the first agent 300a may transmit the IP address of the first agent 300a to the central control server 100 together with an ID/password.

The central control server 100 verifies the person in charge who has logged in using the transmitted ID and password, and optionally the IP address of the first agent 300a (S2). In this process, a result may be received by requesting the authority server 400 to check the authority or personnel information of the person in charge who is the ID owner (S4).

In addition, according to the received result, the corresponding person in charge is allowed to access the first agent 300a (S5), and the first agent 300a may create DML generation information and provide it to the central control server 100.

In addition, the first agent 300a may additionally provide personnel information of the person in charge to the central control server 100 in step S1.

In summary, the first agent 300a can log in, and the communication unit 110 of the central control server 100 transmits the information provided in the process S1 in which the first agent 300a logs in. 400), and the communication unit 110 receives the verification result for the first agent 300a from the authorization server 400 (S4). Thereafter, the control unit 150 of the central control server 100 may verify the DML generation information according to the authority of the logged-in first agent 300a.

The DML generation information according to the authority means that a database or table that can be accessed according to the authority of the logged-in first agent 300a is set differently. Alternatively, according to the authority of the logged-in first agent 300a, the authority to access a specific POS system is set differently.

In FIG. 4, the authority server 400 and the central control server 100 may be implemented in one device or may be implemented in separate devices. These two servers 100 and 400 may verify the authority of the person in charge through mutual operation, or extract information of a higher person in charge who will pay for the DML generation information created by the person in charge.

In FIG. 4, the authority server 400 and the central control server 100 may apply the following criteria in the process of verifying the person who logs in. For example, the central control server 100 may control such that a person in charge cannot log in from agents other than the assigned agent by imposing a DB access ID one by one corresponding to an IP for each agent.

In addition, in order to verify the person in charge information (IP, DBID, internal email address) separately managed by the authority server 400, in connection with the personnel information (name, company number, department), the person in charge is due to reasons such as retirement or suspension. If the proper authority for DB access is lost, the authority for DB access and operation of the person in charge can be automatically withdrawn.

For example, when the authority server 400 and the central control server 100 confirm that a reason such as suspension or retirement or a department move has occurred, the person in charge who logs in is first blocked all access from the agent. In addition, when the agent attempts to access the central control server 100, it is possible to request a separate procedure or information necessary for the connection by displaying on the display of the agent that there is no authority.

On the other hand, the authority server 400 or the central control server 100 stores information on the last access time for each agent or person in charge, and has not accessed for a certain period (for example, a period of 1 month or 3 months) or more. / You can block the access of the person in charge.

5 is a diagram showing a work flow between an agent and a central control server according to an embodiment of the present invention. In FIG. 4, the first agent 300a creates DML generation information and provides it to the central control server 100. The second agent 300b may verify the DML generation information generated by the first agent 300a.

Here, both agents 300a and 300b have been verified as authorized personnel in the process of FIG. 4.

The first agent 300a transmits DML generation information to the central control server 100 (S11). The central control server 100 verifies the received DML generation information (S12). As a result of the verification, if verification of another person in charge, for example, a higher position, is required, DML generation information and information of the first agent (Agent 1) are transmitted to the second agent 300b to log in or log in by the corresponding position (S13). .

Thereafter, the second agent 300b generates a result of verifying the DML generation information (S14) and transmits the generated result to the central control server 100 (S15). The central control server 100 generates DML query information according to the received result, transmits it to the POS system database, and receives the result (S16). DML query information is information written to search for data of a specific table in POS System's database, or to update/delete/enter data.

When receiving the execution result of the DML query information from the POS system, the central control server 100 transmits the result to the first agent 300a (S17). In this process, the central control server 100 may also transmit result information to the second agent 300b.

In S16, the central control server 100 may access the POS through the DB information input and DML information transmission of the target POS system after inquiring the approval document related to the DB DML operation (S15). Accordingly, the central control server 100 may generate DML query information by using the information paid by the second agent 300b.

In summary, the control unit 150 of the central control server 100 selects the second agent 300b to verify the DML generation information transmitted by the first agent 300a. For selection, identification information of the second agent 300b may be checked from the authorization server 400.

The communication unit 110 of the central control server 100 transmits the DML generation information to the second agent 300b (S13), and then receives the verification result for the DML generation information from the second agent 300b (S15). do.

In the flows of FIGS. 4 and 5, an interface of a program executed in each agent or an interface when the agent is a program will be described.

6 is a diagram showing a configuration of a screen interface for a person in charge logging in to an agent according to an embodiment of the present invention. The person in charge can enter his/her identification information (DB ID) and password. The IP address of PC information can be automatically loaded by the agent. Likewise, once the personnel information is input to the agent, it can be maintained until the personnel information is changed.

Or, if more than one person in charge uses a PC, personnel information may change according to the DB ID entered by the person in charge. In this case, personnel information corresponding to each DB ID may be previously stored in the agent.

When the person in charge logs in to the agent in the process S1 to S3 of FIG. 4, the central control server 100 transmits the IP address of the PC, the ID to which the person in charge logs in, or the personnel information associated therewith, the authority server 400 of FIG. You can send it to check whether it is a valid user and complete the login.

That is, according to the collaboration between the central control server 100, the authorization server 400, and the agents, the central control server 100 or the authorization server by bringing the DB ID and personnel information linked to the user PC IP as a key value at the first login. After confirming whether 400 is a valid user, the agent can output a screen necessary to generate DML generation information.

7 is a diagram illustrating a configuration of a screen interface for generating DML generation information by a person in charge who logs in to an agent according to an embodiment of the present invention. The login screen of FIG. 6 is a screen in which the person in charge who logs in to the agent inputs DML generation information.

In the configuration of FIG. 7, a person in charge may perform an operation (insert) of inputting product order details into the database of the POS system of a specific affiliate store (for example, the CSR ID is “SEOUL_KANGNAM_23”). Basic information about the job can be directly entered by the person in charge in the part marked "CSR information". Alternatively, the agent can load from another file or a received packet and output it to the portion marked with "CSR information".

And the person in charge can select a database, select a table, and enter a query in the area marked "DB input control".

In the screen of FIG. 7, CSR information and DB input control information (DB, table, target server IP, query type and content) constitute DML generation information, and the DML generation information is transmitted to the central control server 100. The central control server 100 may additionally perform verification of an upper person in charge according to the type of query, the type of database or table, and the like.

The central control server 100 may store the type of database for each affiliate store, information on tables constituting the database, and authority level information for each table. The authority level information is information on the authority to execute SEARCH/INSERT/UPDATE/DELETE, etc. in each table.

For example, when checking table search results through "SEARCH", the importance may vary depending on the table. In one embodiment, when a query including a "SEARCH" command is input for a table in which personal information or payment information of a purchaser is stored, the central control server 100 performs verification through confirmation of a high-level person in charge.

On the other hand, when a query including the "SEARCH" command is input for a table storing product inventory information or sales quantity, the central control server 100 determines that such a search is a search of a table that does not correspond to personal information. Allows the query to be executed without confirmation.

On the other hand, query statements such as UPDATE/INSERT/DELETE may also be verified through the verification of the upper-level person in charge according to the characteristics of the table, or the query may be performed without verification.

In addition, the central control server 100 may store a query statement for a certain period of time for a query statement that changes table information such as UPDATE/INSERT/DELETE, or store information necessary to roll-back the query result. . At this time, the central control server 100 may determine the degree of risk differently according to the degree to which the DB is affected when executing the corresponding DML query statement, or may change the information storage period for rollback.

For example, if a DB or table in which information of low importance is stored, or if the DB or table is reset every day, the central control server 100 determines that the importance of the corresponding DML query statement is low. In this case, the central control server 100 may shorten the storage period of information required for rollback, or exclude a rollback function for a corresponding DML query statement.

Alternatively, in the process of verifying the DML generation information, if another agent sets the importance of the corresponding DML generation information, the storage period of information required for rollback may be increased by reflecting this.

When applying the above-described embodiment, the DB of the POS system is connected to the central control server 100. For example, a VPN (Virtual Private Network) is installed in the POS system to perform port control, and the central control server 100 uses the POS system's DBs 500a, 500b, ..., through a port allowed through the VPN. 500n) can be connected.

On the other hand, agents are only connected to the central control server 100, and are not connected to the POS system DB. Therefore, hacking of POS system through agent or access to POS system DB through agent is blocked.

In addition, the central control server 100 reviews the DML generation information that each agent intends to perform, according to the query statement, or the authority information of the person in charge logged in to each agent, or the past work history of the person in charge logged in to each agent. Depending on whether or not to execute DML generation information can be determined.

The embodiment of FIG. 7 is summarized as follows. In order to access the POS system's database, the central control server 100 may receive DML generation information including the POS DB IP, the account ID/PW of the person in charge, the DB name, and the table name from the agent. The central control server 100 may check the approval document corresponding to the DML generation information according to the importance of DB DML. The approval document transmits DML generation information to the second agent to verify the DML generation information, and includes the verification result. Or, the approval document includes the result of partially modifying the DML generation information. In addition, the central control server 100 may store log information and rollback information about the DML query operation based on the approval document.

In FIG. 7, other information other than the contents of the query input may be defined as meta information. Meta information can be used to verify the content of the query input.

FIG. 8 is a diagram illustrating a process in which a central control server verifies and processes a query and authority of a person in charge according to an embodiment of the present invention.

The central control server 100, that is, the communication unit 110 of the central control server 100 receives DML generation information from the first agent (S21). Information previously discussed in FIGS. 5 and 7 may be received.

The central control server 100 verifies the DML generation information (S22). The verification process includes a procedure to verify the authority of the agent that sent the DML generation information, a procedure to verify the query in the DML generation information, and a procedure to verify whether the DML generation information is valid access to the POS system to be accessed. Can be configured.

First, the central control server 100 may check the authority of a person in charge of logging in to the agent as shown in FIGS. 4 and 5. It is possible to check whether the authorized person in charge has logged in through the authorization server 400.

In this process, the central control server 100 performs an additional verification process other than the authorization server 400 when a person in charge who has not been connected for a certain period (eg, 1 month or 3 months) logs in. For example, after receiving confirmation from a person in charge at a higher level in the approval line of the person in charge, login or verification of DML generation information can be performed.

In addition, the central control server 100 may perform a procedure for verifying a query in the DML generation information. This includes changing the risk level or the information storage period for rollback according to the degree to which the DB is affected when the query statement is executed for the query statement included in the DML generated information.

In addition, the central control server 100 may perform syntax analysis of a query statement in the DML generation information. The central control server 100 may verify typos in the query statement, and may also compare the query statement with a description thereof. For example, if the description of "input" is included in the detailed information 1 in FIG. 7, but "delete" instead of "insert" is included in the actual query input part, the central control server 100 may use this query statement as a typo or It can be judged by an incorrectly written query statement.

The central control server 100 may verify the query statement by using the information included in the detailed information 1 and the content of the query input using the meta information-query response information of Table 1. The table of Table 1 may be stored by the storage unit 120 of the central control server 100.

[Table 1] Meta information-query response information Words in detail 1 Correspondence query Enter, add, create Insert Delete, remove Delete Fix, update Update Search, check search

In addition, when a word that is not in the meta-information is repeatedly written for a specific correspondence query later, the control unit 150 of the central control server 100 may store it as a corresponding query.

For example, when the word "excluded" is included in meta information such as "detailed information 1", and the corresponding query is "Delete", the controller 150 of the central control server 100 The frequency of occurrence of information can be accumulated and stored. In addition, the control unit 150 of the central control server 100 may determine the frequency of occurrence of the corresponding word for each person in charge (per agent). As a result, when the occurrence frequency is high, or when a corresponding word and a corresponding query are created from a plurality of agents, the corresponding word (for example, "excluded") and a corresponding query can be generated with the information shown in Table 1.

As a result, the control unit 150 of the central control server 100 may update the meta-information-query response information as shown in Table 1 to "delete, remove, exclude" instead of "delete, remove".

The DML generation information may include a query statement, database information and table information to execute the query statement, meta information including a description of the query statement, and the like. In addition, the control unit 150 of the central control server 100 may verify the DML generation information by comparing the query statement with the word included in the meta information, the database information, and the table information.

In addition to Table 1, even though there is meta information for entering card information, if the database/table in the actual query statement is related to an order, it is determined that the meta information and the query statement are inconsistent and the corresponding DML generated information can be rejected or canceled.

To this end, the storage unit 120 of the central control server 100 may separately store information on data stored in each database or table. For example, information on whether a specific database/table stores payment-related data or order-related data may be stored in the storage unit 120.

In addition, the central control server 100 may check whether the corresponding DML generation information is a valid access to the POS system to be accessed. You can check it using the permission information above. In addition, the central control server 100 may perform validity verification on the IP, PORT access or not, and accessible tables of the DBMS (DB management system) of each corresponding POS system.

For example, the central control server 100 may determine whether the corresponding agent is accessible for the IP information and PORT information, DB name and table name of the DB input as meta information in the DML generation information. In addition, the central control server 100 may check whether the access is valid by comparing the table name or DB name in the query statement entered in the query input field with the corresponding information in the meta information.

According to the above-described verification result, if there is no abnormality in the content of the input query or other meta-information, the central control server 100 may determine whether verification by another agent is required for these. If necessary, the central control server 100 may perform steps S13 to S15 of FIG. 4 above. That is, the central control server 100 inquires the authority of the first agent that transmitted the DML generation information from the authority server or verifies the DML generation information through the second agent according to the verification result (S23). This includes a process of receiving a verification result for DML generation information from another agent as shown in S15 of FIG. 5.

Then, the central control server 100 generates DML query information by reflecting the authority and verification result (S24). At this time, when the second agent partially modifies the query statement in S23, the central control server 100 reflects this and generates DML query information. Thereafter, the central control server 100 transmits the DML query information to the DB of the target POS system and receives the execution result from the DB of the POS system (S25).

Summarizing the processes of S22 to S24, the control unit 150 of the central control server 100 verifies the DML generation information received at S21, and then converts the DML generation information into DML query information to generate it.

At this time, when transmitting the DML query information to the POS system (ie, POS system database), the central control server 100 may select one of an immediate transmission method and a delay transmission method. In the immediate transmission method, when DML query information is generated, it is transmitted to POS system and DML query statements are executed against the DB. The delayed transmission method is a method in which the central control server 100 stores DML query information in a temporary query table and transmits the DML query information to the POS system after a certain period of time (a time interval such as 30 seconds or 10 minutes) has passed.

In the delayed transmission method, when the first agent or the second agent urgently requests an undo, the central control server 100 deletes the DML query information without transmitting it. This can improve DB accuracy by giving a time interval that can be canceled in case of a mistake or misjudgment by the person in charge.

Thereafter, the central control server 100 stores the execution result of the DML query information or rollback information required for rollback (S26). That is, the storage unit 120 of the central control server 100 may selectively or entirely store the following items before or after transmission of the DML query information.

For example, the storage unit 120 may store one or more of DML query information, execution result information of DML query information, rollback information, and DML generation information. In this case, even if DML information is reflected on the DB of a specific POS system, when a rollback is required for various circumstances, the central control server 100 may perform rollback by sending a rollback related command to the DB of the corresponding POS system.

When a rollback is required, it responds to the request of a specific person (merchant store owner or high-level person in charge, or person in charge) related to the POS system's DB, or to cancel/return the approval document to step S23.

On the other hand, when DML query information is executed in S26, the central control server 100 may generate a reporting document through which the owner of the POS system can check the changes and transmit it to the POS system or the email address of the owner of the POS system. . This is an optional process.

Thereafter, when the POS system requests a rollback, the central control server 100 performs a task of rolling back the execution of the corresponding DML query information.

To summarize the process of FIG. 8, the central control server 100 verifies the DML generation information, generates DML query information based on this, and generates rollbackable information after executing the query statement according to the DML query information and stores it for a certain period of time. The process can be carried out.

The central control server 100 may control the authority by dividing the access to the POS system's DB into regions, affiliated stores, or all. In addition, the scope of accessible POS systems can be limited according to the agent's authority.

For example, the central control server 100 allows only the DML generation information for the database of one POS system to the agent with the lowest authority, and can also limit the number of transmissions of DML generation information within a certain time range. have. Of course, for agents with higher authority, the above restrictions can be released in stages. In an embodiment, the central control server 100 may maintain the following authority-access permission information.

[Table 2] Authority-Access Permitted Information (System-DML) Authority level Number of simultaneous force systems DML type 1 time range Low One Select 1 day Low-middle One Select/Insert/Delete/Update 6 hours Middle Affiliate group Select/Insert/Delete/Update 1 hours High-middle Affiliate group Select/Insert/Delete/Update none High Whole system Select/Insert/Delete/Update none

Referring to the authority-access permission information in Table 2, the central control server 100 can perform "Select/Insert/Delete/Update" for one POS system by an agent with "Low-middle" authority, Once the DML generation information is transmitted and query execution is completed, it is restricted so that the system cannot be accessed 6 hours before or the DML generation information cannot be generated. Alternatively, it can be limited to perform only "SELECT" within 6 hours.

Likewise, "High-middle" can perform "Select/Insert/Delete/Update" for POS systems of a specific affiliated store group. In this case, an embodiment of a specific affiliate store group includes an embodiment in which two or more POS systems of affiliate stores operated by the same affiliate store owner are grouped together.

Alternatively, an embodiment of a specific affiliated store group includes an embodiment in which POS systems arranged in a specific area or a specific type of affiliated store (eg, mini-super, convenience store, and hypermarket) are grouped.

In addition, an embodiment of a specific affiliate store group includes an embodiment in which POS systems of the same version are grouped when POS systems are divided into specific versions.

In addition, the central control server 100 may control the POS systems in groups according to various characteristics of the POS system.

The above-described authority level may be set according to the personnel information of each person in charge or the region/affiliated store in charge. Also, identification information of the POS system through which the agent can generate DML generation information may be separately added to the authority level. For example, in the case of “Low”, the person in charge may be added with a range of identification information of the POS system “MART001 to MART100”. In this case, the person in charge may generate DML generation information only for the POS systems of "MART001" to "MART100".

The authority-access permission information in Table 2 is applied in advance in the process of the central control server 100 verifying the DML generation information, or another agent verifying the DML generation information, so that the verification procedure is automatically performed if unnecessary operations are unnecessary. Make it happen.

Applying the embodiment of Table 2 and Table 3 and FIG. 8 below, the control unit 150 of the central control server 100 uses the query statement that can be executed according to the authority of the agent, the database to execute the query statement, and table information. DML generated information can be verified.

An embodiment of verifying DML generation information using an executable query statement means verifying whether the query statement is executable by the authority of the agent such as Select/Update/Delete/Insert. It corresponds to the DML type by authority level in Table 2.

An embodiment of verifying DML generation information using database and table information to execute a query statement means verifying whether access to a specific database and table in Table 3 below is possible with the authority of the agent. In Table 3, the accessible DB and table are set differently for each privilege level. Accordingly, the control unit 150 may check the authority level of the agent and verify whether the agent has transmitted DML generation information to the accessible DB/table. Of course, queries that can be executed such as Select/Update/Delete/Insert may be additionally configured for each permission level in Table 3.

[Table 3] Authority-Access permission information (DB/Table) Authority level DB name Table name Low Payment Information_DB Payment Card_Table Low-middle Payment Information_DB, Inventory Information_DB Payment Card_Table, Inventory Quantity_Table Middle Payment Information_DB, Inventory Information_DB, Order Information_DB Payment Card_Table,
Inventory Quantity_Table,
Order Information_Table High-middleHigh Payment Information_DB, Inventory Information_DB,
Ordering Information_DB, Security Information_DB Payment Card_Table,
Inventory Quantity_Table,
Order information_Table,
Login Record_Table

9 is a diagram showing the interaction between the central control server and the database of the POS system according to an embodiment of the present invention.

The central control server 100 transmits DML query information to the POS system database 500 (S31). The POS system database 500 generates a result after performing the query (S32). The result of executing Insert/Delete/Update, etc. or the result of executing Search may vary according to each query statement.

The POS system database 500 transmits the result to the central control server 100. The central control server 100 transmits the result to the notification target person (S34).

Here, the notification target may be an agent that requested DML execution, another agent that verified it, and an affiliate store owner who manages the POS system database that performed DML query information. The central control server 100 may notify via e-mail, or provide a result in a pop-up manner to corresponding agents when the central control server 100 logs in.

Or, in the case of the affiliated store owner, when using the POS system, the POS system performed a DML query, and the result of the execution may be displayed as a pop-up or the like. This is to notify the franchisees of what work has been done in the POS system, and during the notification process, meta information among DML-generated information may be displayed on the POS system. For example, content such as "Detailed Information 1" of FIG. 7 may be displayed on the POS system.

In this case, when the affiliate store owner requests a rollback for the execution of the corresponding DML query, the central control server 100 may process this.

In addition, the central control server 100 may delete the rollback information corresponding to the DML query information upon receiving a response indicating that the POS system that performed the DML query information has confirmed the result of executing the query statement.

9, according to the importance of the DML query information, the information work content may be transmitted to the top administrator who manages the POS system by e-mail. As an example, the top manager is a person in charge who checks the database access to multiple POS systems across the enterprise. It corresponds to the person in charge with the authority of the "High" level in Table 2 above.

And until the DML query information is generated, it interacts with the central control server 100, interacts with the authorization server 400, or makes payment of the company's electronic payment system (or IT portal) integrally configured with the aforementioned server. It is possible to increase the stability of DB control by allowing verification based on the document. The POS system DB supervisor can check the DB DML work of the person in charge who logs in as an agent every certain period. To this end, the central control server 100 may store the execution result of DML query information as a history.

Meanwhile, the control unit 150 of the central control server 100 may accumulate and store the DML generation information transmitted by the agent or the corresponding DML query information in the storage unit 120 of the central control server 100. Further, the control unit 150 of the central control server 100 may change the authority of the agent by verifying a plurality of DML generation information or DML query information stored in the storage unit 120.

For example, although the privilege level of the first agent (or the person who logged in to the first agent) is "Low", the first agent continuously transmits DML generation information, and all processes for this were successful. If no rollback request has occurred, the control unit 150 of the central control server 100 may upgrade the authority level of the corresponding agent. In an embodiment, the control unit 150 of the central control server 100 may upgrade the authority level of the first agent from “LOW” to “Low-middle” (see Table 2).

Conversely, if the authority level of the first agent (or the person who logged in to the first agent) is "Middle", but the execution result of the DML generation information generated by the first agent has failed or a separate rollback request has occurred from the POS system. , The control unit 150 of the central control server 100 may downgrade the authority level of the corresponding agent. In an embodiment, the control unit 150 of the central control server 100 may downgrade the authority level of the first agent from “Middle” to “Low-middle” (see Table 2).

10 is a view illustrating a process of performing a rollback after executing DML query information according to an embodiment of the present invention.

The communication unit 110 of the central control server 100 transmits the execution result information and DML generation information of the DML query information to the POS system 500 (S36). The POS system 500 displays the received information on the interface, and after the administrator of the POS system (for example, the affiliate store owner or business manager) checks it, inputs information requesting a rollback (S37). At this time, the reason for the rollback may be input. And the POS system 500 requests a rollback to the central control server 100 (S38).

When the communication unit 110 of the central control server 100 receives a rollback request from the POS system 500, the control unit 150 of the central control server 100 rolls back the execution of DML query information using the stored rollback information. Performs (S39). In this case, when the rollback occurs due to an error or an error of the agent, the authority level of the agent may be downgraded or a message notifying that the rollback has occurred may be transmitted to the authority server or the second agent.

When the above-described embodiments are applied, a search or record control for a database of a POS system built in mass at a distribution company composed of a plurality of affiliated stores can be stably performed. In particular, the central control server 100 restricts the interaction with the authority server 400 and the database access range for each authority of the person in charge so that DML query information can be performed appropriately to the authority of the person in charge.

That is, since the database operation is performed by the central control server 100 without the agent directly accessing the POS system's database, the POS system's DB information in which important information such as customer credit information, merchant product information, and sales information is stored. Can protect. In particular, the central control server 100 and the POS system database are connected through a VPN or firewall through a communication protocol that maintains security, so that hacking of the POS system can be prevented. This allows the POS system to block external communication access other than the central control server 100 to prevent unspecified devices from accessing the POS system.

In addition, the central control server 100 may periodically change the communication connection state with the POS system. Security can be improved by changing the port number.

In addition, the authority of the agent is verified in the process of the agent transmitting DML generation information to the central control server 100, and the central control server 100 verifies the DML generation information, and generates the corresponding DML to the agent of the upper level person in charge. Information verification can be requested, and system security can be improved based on this. In addition, by preventing erroneous database manipulation, it is possible to solve problems in which important information is deleted or lost or changed.

Methods according to an embodiment of the present invention may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the present invention, or may be known and usable to those skilled in computer software.

As described above, although the present invention has been described by the limited embodiments and drawings, the present invention is not limited to the above embodiments, and various modifications and variations from these descriptions are those of ordinary skill in the field to which the present invention belongs. This is possible. It should be understood that the above-described embodiments are illustrative and non-limiting in all respects, and the scope of the present invention will be indicated by the claims to be described later rather than the detailed description described above. And it should be construed that the meaning and scope of the claims, as well as all changes and deformable forms derived from the equivalent concept, are included in the scope of the present invention.

Accordingly, the scope of the present invention is limited to the described embodiments and should not be defined, but should be defined by the claims to be described later and equivalents to the claims.

100: central control server 300a~300k: agent
400: authorization server 500: POS system database

Claims (15)

In the central control server that remotely manages by remotely connecting to multiple POS systems,
A communication unit for communicating with a first agent, a second agent, and databases of the plurality of force systems;
A controller configured to convert the DML generation information into DML query information after verifying the DML generation information transmitted by the first agent according to the authority of the first agent; And
The communication unit transmits the DML query information to the database of the POS system, and includes a storage unit for storing the DML query information or execution result information or rollback information or the DML generation information at a time before or after the transmission,
In the DML generation information, a database or table that can be accessed according to the authority of the first agent is set differently, or the authority to access a specific POS system is set differently according to the authority of the first agent,
The central control server determines whether to execute the DML generation information according to the authority information of the person in charge logged in the first agent or the second agent or a past work history,
The operation of the database of the plurality of POS systems is performed only through a communication connection with the central control server.
The method of claim 1,
When the first agent logs in, the communication unit transmits the information provided in the process of logging in by the first agent to the authorization server, and receives a verification result for the first agent from the authorization server,
The control unit verifies the DML generation information according to the authority of the logged-in first agent,
The authority server generates the verification result so that the first agent performs only a task that does not require rollback when it is confirmed that a previous error has occurred in the past work history of the logged-in first agent.
The method of claim 2,
The control unit verifies the DML generation information by using a query statement executable according to the authority of the first agent, a database to execute the query statement, and table information.
The method of claim 2,
The control unit accumulates and stores DML generation information transmitted from the first agent or DML query information corresponding thereto in the storage unit,
The central control server for changing the authority of the first agent by verifying a plurality of DML generation information or DML query information stored in the storage unit.
The method of claim 1,
The control unit selects the second agent to verify the DML generation information transmitted by the first agent,
The communication unit, after transmitting the DML generation information to the second agent, receives a verification result of the DML generation information from the second agent, the central control server.
The method of claim 1,
The communication unit transmits execution result information and the DML generation information of the DML query information to the POS system,
When the communication unit receives a rollback request from the POS system, the control unit performs a rollback process of rolling back the execution of the DML query information using the rollback information.
The method of claim 1,
The DML generation information includes a query statement, database information and table information to execute the query statement, and meta information including a description of the query statement,
The control unit compares the query sentence with the word included in the meta information, the database information, and the table information.
The method of claim 1,
The central control server communicates with the authorization server,
The authorization server
Further comprising a personnel information storage unit for storing personnel information,
When the authorization server receives the information provided in the process of logging in by the first agent from the central control server, it compares the received information with the information stored in the personnel information storage unit to generate a verification result,
The central control server stores information on the last access time for each agent or each person in charge, and blocks access of the agent or the person in charge who has not accessed for a predetermined period of time or more.

In the central control server that remotely manages by remotely connecting to multiple POS systems,
Receiving, by a communication unit of the central control server, DML generation information from the first agent;
Generating the DML generation information by converting the DML generation information into DML query information after verifying the received DML generation information by the control unit of the central control server according to the authority of the first agent;
Transmitting, by the communication unit, the DML query information to a database of the POS system; And
And storing the DML query information or execution result information or rollback information or the DML generation information at a time point before or after transmission of the DML query information, by a storage unit of the central control server,
In the DML generation information, a database or table that can be accessed according to the authority of the first agent is set differently, or the authority to access a specific POS system is set differently according to the authority of the first agent,
The central control server determines whether to execute the DML generation information according to authority information or past work history of the person in charge logged in to the first agent or the second agent,
The operation of the database of the plurality of POS systems is performed only through a communication connection with the central control server.
The method of claim 9,
Transmitting, by the communication unit, information provided in the process of logging in by the first agent to an authorization server in order to log in with the first agent;
Receiving, by the communication unit, a verification result for the first agent from the authorization server; And
And verifying, by the control unit, the DML generation information according to the authority of the logged-in first agent,
The authorization server performs a query of the central control server to generate the verification result so that the first agent only performs a task that does not require rollback when a previous error has occurred in the past work history of the logged-in first agent. Way.
The method of claim 10,
And verifying, by the control unit, the DML generation information using a query statement executable according to the authority of the first agent, a database to execute the query statement, and table information.
The method of claim 10,
The control unit accumulating and storing DML generation information transmitted from the first agent or DML query information corresponding thereto in the storage unit; And
And changing the authority of the first agent by verifying, by the control unit, a plurality of DML generation information or DML query information stored in the storage unit.
The method of claim 9,
Selecting, by the control unit, the second agent to verify the DML generation information transmitted by the first agent;
Transmitting the DML generation information to the second agent by the communication unit;
And receiving, by the communication unit, a verification result of the DML generation information from the second agent.
The method of claim 9,
Transmitting, by the communication unit, execution result information of the DML query information and the DML generation information to the POS system;
Receiving a rollback request from the force system by the communication unit; And
And performing, by the control unit, a rollback process of rolling back execution of the DML query information using the rollback information.
The method of claim 9,
The DML generation information includes a query statement, database information and table information to execute the query statement, and meta information including a description of the query statement,
And comparing, by the control unit, the query statement between the word included in the meta information, the database information, and the table information.

Images