TWI220621B - Processing method and system for user's session of web services - Google Patents

Abstract

A processing system for user session of web services comprises a client end capable of generating a user's session in web services, which consists of a user ID, a transaction ID and a semaphore and a server end comprising a web page buffer, which consists of a web page ID. When client end issues a transaction execution request, if the client is legal user according to user ID and if server end already exists a session of client end, then continue the existing user session. After acquiring semaphore, if user session exists transaction ID, then follow web page ID to forward the resulting web page of previous transaction execution request back and release semaphore.

Description

1220621

Maintenance of network services, when in use, can be connected to the user's network, description of the invention (1) [Technical field to which the invention belongs] The present invention relates to the interruption of network service services in the normal state of the Internet to complete transaction. [Prior technology] In a mobile service or Web service system based on the Web (Web), a server usually uses a user's call object (Sessión) to maintain; fixed = the state of the client. · When the user logs in to the (Login) system and executes: 2] After the Transaction, if the browser window is accidentally closed or the communication is interrupted and the connection is lost, this is usually considered as an abnormal logout ^ Logout) System, at this time, if the user logs in again immediately, it does not arrive, and the parent easily executes the result. In addition, if the task of the user = execute several transactions, the previous transaction may not be executed when re-login: ^ At this time, if you ignore the previous transaction and let the user log in directly, you may miss it. If the execution result of one of the transactions is dropped, the execution of the entire task will fail or fail. For the server, the client's user call objects will also become difficult to maintain. ^ In a web-based system that provides mobile services and web services, it is very important to maintain the status of the client. For example, after a user turns in an account and password to log in to the system, if the server can record the client ’s User account. When a user performs a transaction in the future, the user does not need to enter the user account again, and the server can still know which user is performing the transaction. Because the World Wide Web (www) uses Hyper File Transfer Protocol (HTTP) ’, HTTP is a

1220621 V. Description of the invention (2) Suspect — * ---- Stateless communication protocol. In order to record the state of the client, the server usually uses the user's call object. Figure 1 is a schematic diagram showing the relationship between the client and the user's call object. The server 20 creates a first user call object 21 for the first client 11, the server 20 creates a second user call object 22 for the second client 12, and the server 20 creates a third client 13 The third user call object 23, among which the first user call object 21, the second user call object 22, and the third user call object 23 record the first client 11, the second client 12, and the third client, respectively Information about the end 13. The user call object is an object used to describe the client on the server side. 'Each client will have a corresponding user call object, which is stored in the server's memory or other storage media for maintenance and recording. The status of the client, such as user authentication code (User I d), Internet transmission protocol (IP) address, executed transaction authentication code (Transaction ID), and login time. The server can create a user call object for the client by creating a user call object for the client and a client, or a user call object for each client computer. For security considerations, users must log in before using the system. ‘Using the user account and password to determine whether the user is a legitimate user’ After the user logs in successfully, the user ’s call objects are also generated. In a web-based system, the User Interface is usually a Browser, and there are usually two buttons (Butt〇n) for logging in and logging out on the web page. User login and logout (Logout) system. Since WWW is not recording previous status 翕

1220621 V. Description of the invention (3) (Stateless) environment, the server cannot know when the user logs out of the system 'unless the user presses the "Logout" button. After the user presses the "Logout" button to submit a logout request, the server knows at this time that the user wants to log out of the system, so the user's call objects and related system resources occupied by the user are released. This is the purpose of the "Logout" button, which is usually considered the normal way to log out of the system. However, for example, in Wind〇ws system, the user may press "X" in the upper right corner of the browser window, thinking that closing the browser window is equivalent to logging out of the system, or the browser dies for unknown reasons, or The communication with the server is interrupted. These are usually regarded as abnormal ways to log out of the system. At this time, the following results will be caused: 〇) The server cannot know that the user has logged out of the system, and the user who belongs to the user calls Objects and the system resources they occupy will not be released, resulting in a waste of server system resources. (2) If the user executes a transaction before closing the browser window, and the user has not completed the next time the user logs in, then the user should be notified that the transaction performed by the previous login has not ended, and should not Ignore this event and let the user log in directly, otherwise it may cause subsequent transaction execution errors. At present, the common user call object management method is that the server periodically checks the idle time of each client (Idle Time). If the client is idle for too long, such as 1 hour, it means that the client may be offline or logged out abnormally. At this time, the server will remove the user call objects it occupied, but this method still cannot completely solve the problem caused by the user's abnormal logout. Figure 2 shows the user disconnected abnormally in the server

〇213-9240TWF (Nl); STLC-02-A9132; ALEXCHEN.pt (i page 7 1220621

Illustration. Taking a Windows system browser as an example, after the user logs in to the server 40 system, the 'feeder 40 responds to the browser 30 — a hypertext markup language (HTML) formatted web page, which includes an HTML form (F〇rm), Includes several data blocks 31, allowing users to enter relevant information needed to run the transaction. After the user types in the data of each field, the webpage usually provides a submit button 32 for the user to submit a transaction execution request. The form of the submit button 32 includes (i) Form Button, that is, a general button, or a form. Form image button (form image button), which is a graphic button. (i i) Text link (Link) or graphic link.

In the environment of www, the HTTP communication protocol is usually used, and the mechanism of seeking / responding is adopted by H. τρ. As shown in Figure 2, after the user types the relevant information in the browser 30, 2f, and 1st 31, Press the submit button "to send the transaction request. This transaction request establishes a connection with the server 40 via the Internet 35. The browser 30 will keep the connection ^, because this connection allows The server 40 returns the transaction execution result.

When U receives a request, it will generate a trip (pr_ss) of 41 lines and a transaction. After the transaction is completed, the server 4 will return the cross result. At this time, if the user presses the "X" in the upper right corner of the browser 30 window, the window 33 will be closed and the browser 30 window will be closed. The line will be disconnected, and when the server finds that it cannot return the result through the requested connection, Y will give up manually. This will cause the following results. (A) The user can say =, the browser window, However, I can't see the transaction execution immediately after I log in; If the task of the person is to execute several transactions, and carelessly close the browser, the browser will ignore the execution result of one of the transactions. Maybe ^

1220621 V. Description of Invention (5) Causes inconvenience in task execution 'or even fails. [Summary of the Invention]

The processing system of the call object, let; clerk :: use of the network service interrupted network service. Continuing by the above-mentioned system Another object of the present invention is to provide a method for processing a network service object, which interrupts the network service when the user calls the user. The user call object created on the server side is a client service. Only the month of interruption of the network service is issued based on the above-mentioned object processing method interface to execute the transaction user; if the client code, the server object is judged; if the server side, an existing client is created in the server side End-user call object; when 'include the following request, it is for the user whether there is a client in the law to obtain a letter to provide a network service user issue steps: when the client judges by using ^ server Whether the client is a unified user, according to a user authentication, the user call object of the client passed by the user of the client, the user call object; if the server is the call object, the connection already exists After Semaphore, check

Does the user's call object have a transaction authentication code, and if the user's call object has a transaction authentication code, according to a web page identification code, the result webpage of the execution of the transaction request is returned from the webpage temporary storage area, and then the aforementioned signal machine is released.

The invention solves the problem that the user logs out of the mobile service or Web service system abnormally, for example, the browser window is accidentally closed, or the browser crashes, or the communication

1220621 V. Description of the invention (6) Disadvantages that make it difficult for the user to manage call objects, and the present invention is applicable regardless of whether the user is logged out of the system normally or abnormally. [Embodiment] The present invention provides a method and system for processing a call object of a user of a network service. FIG. 3 shows a system architecture diagram of the present invention, including a client 5] and a server 5 3, wherein the server 5 3 includes a user call object 5 5, and the user call object 5 5 includes a user A call object authentication code, a user authentication code, a transaction authentication code, and a signaler. When client 5 j

When a transaction execution request is issued, the server 53 first determines whether the client 51 is a legitimate user. If so, it checks whether there is a user call of the client 51 according to the user authentication code in the user call object 55. If there is no object, create a new user call object on the server 5 3 for the client 5 1 and give a user call object authentication code; if there is, continue the use of the client 51 that already exists Then the server 53 judges whether the client 51 previously has an unfinished parent account based on the transaction authentication code, and if so, returns the transaction result to the client 5 丨 and then releases the signal. ) The user of the client uses the browser to submit the transaction request through the network. After the server completes the transaction and sends a response, the browser displays the results that are easy to execute. In the present invention, the Pan browser is not limited to security; the device or platform in Special 1 'can be a Liu browser installed on a personal electrical rpc), or it can be installed on a mobile phone or a personal digital Assi Stant, (Abbreviated as PDA)

丄 220621 V. Description of the invention (7), handheld, micro-browser used on the device (Micr〇Browser χ Ⅰ: P ΐ ΐ Ladies' browser in other networked devices. In addition, the invention τ: : The browser and server are connected to the network < therefore, the way of networking can be wired or wireless. The invention uses the synchronization mechanism of the traffic signal to solve the problem of the user's abnormal login to the user's call object management. The problem is that the server = is the mother client signal machine. The concept of the signal machine mechanism is that when there are two processes waiting for the signal machine, there will be only one trip to take the signal machine t to get the signal machine. The itinerary can continue to be executed, & the one that has obtained the semaphore will wait until the semaphore is obtained. Therefore, the semaphore that has obtained the semaphore must be released after the execution of the semaphore, so that the others are waiting for the # Only when there is a chance to get a signal. It is necessary to build a user call object to maintain and record the status of the client. Each user call object must build a signal and record the following. Bits: 1. User authentication code: The user authentication code can be an account number, email address, or other identifiable number or text entered by the user. Since the user authentication code is unique in the system, The user authentication code is recorded in the call object of the user, which can be used to distinguish whether a user call object belongs to a certain client. 2. Transaction tolerance certificate. Record the authentication code of the transaction performed by the client last time. Shows a flowchart of the client transaction execution steps of the present invention. Assuming the user has logged in to the system, the server has built a user call object for it: ~

1220621

V. Description of the invention (8) In step S11, a transaction execution request is sent for execution, and an easy request is established with the server. First the user submits a trip. One line is generated on the servo side. In step S12, it is determined whether the stroke on ~ i is executed in the servo side, and then the part number machine is used. If there is a request to wait for the execution of the previous itinerary, the execution transaction signal currently sent by the German client. Release the ^ number machine before you can get it. In step S1 21, wait for the letter to go to the line ^, then wait until you get the message, if it still has its dagger stroke in the Q watch machine. In step S13, a transaction is performed. #

easy. § Hand over when the traffic signal is obtained. In step S14, the user utters the code. Because it is impossible to know the transaction authentication browser window set in the object itself, the user may inadvertently close the transaction result and return the transaction result. Because the browser is interrupted, the returned result will be automatically and + closed, so the connection will be closed. The browser is trying to stage the result. Ignore Servo1 and Serve f. The solution is a web page. Therefore, the execution of the transaction = $ ’response to the browser is made into a webpage, and the execution is performed in parallel. The user who executes the transaction must call the object. Father's father easy authentication

In step S15, the result webpage is stored in ^ in addition to being returned to Liu Lanji, it is also in the Ergonomics area. In addition, Jiguo's webpage needs to be added: the webpage is temporarily stored t the transaction result belonging to that client, the identification code is made by :: difference, such as the user call object authentication code, the method can be

. Father Easy ID, Client IP

1220621 V. Description of the invention (9) A " '--- address or user authentication code. The result web page temporary storage area is set on the server side and can be built on storage media such as memory, file system or database. In step S16, the transaction result is returned. The results page is stored in the results page buffer and then returned to the browser. In step S17, the semaphore is released. After sending the result webpage back to the client ’s side, release the signal machine to complete the transaction execution process. Fig. 5 is a flowchart showing the steps of the user login system of the present invention. Request a login flow for the user. In step S21, the user logs in to the system. First, the user sends a transaction execution request to establish a connection with the server.

> In step S22, it is checked whether the user is a legitimate user. Through a testimony process, determine whether the user is a legitimate user. In step S221, a login error message is returned. If the user is not a legitimate user, a login error page is returned in the browser. In step S23, it is checked whether the user's call object exists. When it is determined that the user is a legitimate user, the server checks whether there is a user call object of the client. The checking method can search all user call objects for the user authentication code. In step S231, a client user call object is created. If the customer

The end user's call object does not exist. The reason may be that the user's call piece has been idle for too long and has been removed by the feeder, or the user has previously logged on to the system normally. At this time, the feeder needs to be built—new use. The caller to the client. In step S232, a successful login page is returned. The server returns

1220621 V. Description of the Invention (ίο) '' ~~~ 'The webpage successfully logged in to the customer, and completed the login request. In step S24, the existing call objects of the user are connected. If the user call code in the user call object indicates that the user call object of the client exists, the user call object must be continued to be used. The user call object may exist because the user closed the browser window before Logging out of the system abnormally, or the browser crashed, or the communication was interrupted ^. In step S25, it is checked whether a signal is acquired. The passenger then obtains a signal to execute the trip. In step S251, the signal is waited for. If there are still other trips, wait-until the signal is obtained. Requests to execute transactions ^ must first obtain a signaler, the purpose is that if the user accidentally closes the browser window after executing =, and then immediately logs in again, but the parent of the easy-to-light lamp has not ended, and the signaler should also be ^ Result obtained from the execution of the transaction, so it is not possible to obtain credit for the itinerary to process the login request =, you must wait until the transaction ends to release the signaler, and in other words, the user must wait until the previous transaction is completed before logging in again ^ ^ In step S26, it is checked whether a transaction authentication code exists. On the second machine, check whether there is a transaction authentication field in the user's call object. In step S271, the result returned in the temporary storage area of the web page. The user's call object has a transaction authentication code, which indicates that the user was previously =. If the transaction is executed before the system is launched, the server must always find the result webpage of the transaction on the results webpage and return it to the client. Winning zone In step S272, the login success webpage is returned. If • π Ye talks

Η

0213-924〇TW (Nl); STLC-02 -A9132; / Page 14 1220621 V. Description of the invention (11) If the transaction authentication code is not stored in the file, it means that the user did not execute before the previous abnormal logout of the system Transaction, at this time the server returns the webpage that was successfully logged in to the client. In step S28, the semaphore is released. Release the semaphore to complete the login request, and then the server returns a successful login page to the client to complete the login request. The invention solves the disadvantages of improper management of the user's call objects if the user logs out of the system abnormally, such as accidentally closing the browser window, or the browser crashes, or the communication is interrupted. 1. If the user executes a transaction before abnormally logging out, and the user has not completed the next time when they log in, the user will be notified at this time, and the user must wait for the transaction to complete before the user can log in and continue to use User call objects occupied by the previous login, and switch to the result page of the previous transaction after login. 2. If the user does not execute the transaction before abnormally logging out, and if the user's call object occupied by the previous login still exists, the user's call object will continue to be used. 3. The present invention is applicable regardless of whether the user is logged out of the system normally or abnormally. 4. The present invention is built on the server, and the client is not limited to a specific device or browser on the platform. 5. This also applies if the user is logging into the system for the first time. Although the present invention has been disclosed as above with preferred embodiments, it is not intended to limit the present invention. Any person skilled in the art will not depart from the spirit of the present invention.

0213-9240TW (Nl); STLC-02-A9132; ALEXCHEN.pt (i p. 15 1220621

0213-9240TW (Nl); STlX-02-A9132; AIJEXCHEN.ptd Page 16 1220621 Schematic illustration to make the above and other objects, features, and advantages of the present invention clearer and easier to understand, the following are particularly preferred The embodiment is described in detail with the accompanying drawings as follows: FIG. 1 is a schematic diagram showing a relationship between a client and a user's call object. Figure 2 is a schematic diagram showing the user disconnected abnormally in the server. FIG. 3 is a system architecture diagram of the present invention. FIG. 4 is a flowchart showing the steps of implementing the present invention. Fig. 5 is a flowchart showing the steps of the user login system of the present invention. [Symbol description] 11 to the first client 9 12 to the second client 13 to the second client, 20, 53 " server service end; 21 to the first user call object 22 to the second user call object 23 ～ second user call object 30 ～ Liu Lanqi 31 ～ data field 9 32 ～ submit button 33 ～ close window 9 35 ～ Internet 9

0213-9240TWF (Nl); STLC-02-A9132; ALEXCHEN.ptd Page 17 1220621 Simple illustration of the diagram 4 0 ~ server; 4 1 ~ stroke; 5 1 ~ client; 5 5 ~ user call object.

0213-9240TWF (N1); 5ΤΊΧ: -02-Α9132; ΑΙΕΧ € ΗΕΝ. Ptd page 18

Claims (1)

1220621 ThrowCase No. 91136302 Yue Shao (Amendment > VI) Patent Application Scope 1. A method of network service user call object (sessio n) management method, including the following steps: Provide a client (Client) and the client to log in to the server Establish a first user call object; the client executes a first itinerary on the server (the first itinerary is a transaction request to the server); λ • privately check whether the first stroke is obtained A semaphore (Semaphore's server); the above-mentioned server is the above-mentioned customer if the first itinerary is requested and used in the first (Transaction ID); a webpage temporary storage area of the above transaction request; And the above result web page is transmitted to the number machine. 2. The call object is described in the servo 3. The call object is stored in the above guest 4. If the application method of the patent scope is processed, its end. If the application method of the patent scope is used, its result page is temporarily Depositors, such as the scope of patent application 0213-9240TWFl (Nl); STLC-02-A9132; ALEXCHEN.ptc get the above signal, then execute the above transaction key call object set a transaction authentication code execution result to make a result webpage, and save it back to the client And then release the user service of the web service described in item 1 of the above letter, and the temporary web page storage area of the result page is set in the web service described in item 2 above. And return the result page to the user of the web service mentioned in item 1. Page 19 VI_Amendment-^ IJ113630? Name, scope of patent application-mouthpiece processing method, i-side, more packages 2 the following steps: Medium '' The above client logs in to the above feeding schedule :::: 3: Execution of the server-second itinerary, the above second is if the above-mentioned Xuan Yue 2 malformation terminal is a legitimate user; the code (User 丨! ^ 碥 is 4 of the above legitimate users, according to a user's recognition of the above The first user's rain breaks whether there is an existing user call object in the above-mentioned server; the right side of the above-mentioned server side Zhongyi has been in Rp Ding, the above-mentioned first user's talking object, & quot蜢 Create a second user call object for the client, with: ^ has the above-mentioned first user call object ^, the above-mentioned one user call object; $ + * take the above signal machine, Check whether the transaction authentication code of the first user call object exists; and if the transaction authentication code of the user call object exists the transaction authentication code, then return the result from the temporary storage area of the result webpage according to the webpage identification code. Fruit page ’then releases the above traffic signal. 5. The method for processing a user's call object of the network service according to item 4 of the scope of patent application, wherein the client sends the login system request through a user interface. 6. The method for processing a call object of a web service as described in item 5 of the scope of patent application, wherein the above user interface refers to a browser. Remuneration 0213-9240TWFl (Nl); STLC-02-A9132; ALEXCHEN.ptc Page 20 I2a〇621 丨 Case No. 9113630 ?. 6. Scope of Patent Application Amendment ^ • The method for processing user-passing objects of network services as described in item 6 of the scope of patent application, wherein the above-mentioned server / user-calling object already exists in the above-mentioned client when the client logs in abnormally Out of the feeder, the user interface has an error, or the client is disconnected from the server. Χ 8 · The method for processing I call objects as described in item 4 of the scope of patent application, wherein in the step of determining whether the client is the legitimate user, if the client is not the legitimate user Returns a login error page. 9 · The method for processing a user call object of a network service according to item 4 of the scope of patent application, wherein after the above steps of establishing the user call object of the client in the server, a login success webpage is returned . 10 · The method for processing a call object of a user of a network service according to item 4 of the scope of patent application, wherein, in the step of obtaining the traffic signal, if the client has the first trip and the second Itinerary, the client may execute the second itinerary only after the private execution of the first line is completed and the traffic signal is released. 11 · The method for processing a user's call object of a network service according to item 4 of the scope of application for a patent, wherein the server side knows whether the first use I call object has performed a transaction by using the transaction authentication code. I Lie guess% for IT I owe -π 丄 ..... 6. Application for patents ^ The feeding server is coupled to the above-mentioned client, the above-mentioned server includes ~ result webpage, storage area, and the above-mentioned temporary webpage storage area includes _ webpage identification, since the client receives the above transaction request, The client logs in to the server. The server establishes a first / user call object for the client. The first user call object includes a user authentication code, a transaction authentication code, and a signal device. A user calling object obtains the above-mentioned 仏 number machine ', then executes the above-mentioned transaction request, and sets the above-mentioned transaction authentication code in the above-mentioned first user communication object, and makes a result webpage of the execution result of the above-mentioned transaction request into a result webpage and stores The webpage temporary storage area returns the result webpage to the client, and then releases the signal machine. 1 3 · The processing system for a user's call object of a network service as described in item 12 of the scope of patent application, wherein when the client wants to log in to the server, a request to log in to the server is issued. The terminal is a legal user. According to the user authentication code, it is determined whether the first user call object already exists in the server end. If the first user call object does not exist in the server end, , The server establishes a second user call object for the client, and if the server has the first user call object already existing, then the first user call object is continued, and when the signal is obtained, If the transaction authentication code of the user call object exists, the result webpage is returned from the result webpage temporary storage area according to the webpage identification code, and then the signal machine is released. 1 4 · The user of the network service described in item 13 of the scope of patent application, a processing system for a call object, wherein the above-mentioned client uses a user interface 1220621.? F Λ r '\ 1' 9 Case No. 91136302_Year_Month__ VI. Scope of patent application The above request for login system was issued. 1 5. The system for processing a call object of a user of a network service according to item 14 of the scope of patent application, wherein the above-mentioned user interface refers to a browser. 16. The system for processing a call object of a user of a network service according to item 13 of the scope of patent application, wherein the client is determined as the legitimate user according to the user authentication code. 1 7. The system for processing a call object of a user of a network service according to item 16 of the scope of patent application, wherein if the client is not the legitimate user, a login error webpage is returned. 1 8. The system for processing a call object of a user of a network service according to item 13 of the scope of patent application, wherein after the above-mentioned second user call object is established on the server side, a login success webpage is returned. 1 9. The processing system for user call objects of the network service according to item 13 of the scope of patent application, wherein the server side knows whether the first user call object has performed a transaction by using the transaction authentication code. . 0213-9240TWFl (Nl); STLC-02-A9132; ALEXCHEN.ptc Page 23