JP2001092782A - Information network - Google Patents

Abstract

PROBLEM TO BE SOLVED: To access plural systems by performing personal identification once without necessitating management of usable WWW information systems by a user oneself. SOLUTION: This information network is provided with a function to check whether the personal identification is performed or not and an information system extracting function to extract the usable WWW information system by the user, extracts all usable WWW systems after the personal identification is completed and enables the access to a desired WWW information system. When the user makes access to plural WWW information systems, all usable WWW information systems by the user is extracted by enabling access to the systems simply by performing the personal identification once. In addition, a managing work such as setting of use permission by every user and summing up of use record is performed by adding a managing function to unitary managing the access.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to a WWW (World Wi-Fi).
de Web) The present invention relates to an information network for accessing an information system (WWW information system) using a homepage.

[0002]

2. Description of the Related Art FIG. 11 is a diagram showing the configuration of a conventional WWW information system. In the case of an information system using a WWW homepage, WWW servers 2 to 4 storing the homepage
Then, the personal computer 1 of the user who displays the homepage is connected to the same LAN (Local Area Network) 5 for operation. Usually, each information system is distributed and stored in a plurality of WWW servers 2 to 4 in order to reduce the load on the WWW server. That is, the WWW server 2 stores the information system A, the WWW server 3 stores the information system B, and the WWW server 4 stores the information system C.

FIG. 12 is a diagram showing an operation form of a conventional WWW information system. In FIG. 12, when a user uses a homepage of any information system, a URL (Universal Resource Locator) is displayed on a screen of a WWW browser 11 mounted on the personal computer 1 of the user.
er), or directly access a home page address stored in a URL bookmark 12 provided in each browser 11.

[0004] For example, when a user wants to access the homepage 22 of the information system A, the user starts the WWW browser 11 and selects the URL of the information system A stored in advance from the URL bookmark 12, and Access the WWW server 2 storing the homepage of A. When the WWW server 2 accesses the homepage 22 of the information system A, the personal authentication unit 21 first checks whether the user is a proper user. When it is confirmed that the user is a proper user, the homepage 22 of the information system A is displayed on the screen of the user's WWW browser 11 as shown in the figure.

[0005] Thereafter, the user enters the homepage 32 of the information system B or the homepage 42 of the information system C.
Is accessed in the same manner as described above. That is, after confirming that the user is a proper user in each of the personal authentication units 31 and 41, the homepage 3 of the information systems B and C is used.
2 and 42 are displayed on the screen of the WWW browser 11 of the user.

Means for confirming that the user is the proper person when accessing the home page may be provided in each WWW server as described above, or may be provided independently in the home page of the information system. In some cases, it is provided.

[0007]

However, the conventional access method of the WWW information system has the following problems. That is, first, the user needs to manage the WWW information system that can be used by himself. WW
Some W information systems cannot be used by some users, and users must always know which WWW information system they can use. Second, when a user accesses a plurality of WWW information systems,
It is necessary to perform personal authentication every time the WW information system is accessed, and the user must input necessary items to the system each time. Thirdly, management work such as setting of use permission for each user and totaling of use results is performed for each WWW information system, which requires a large number of management steps.

[0008]

SUMMARY OF THE INVENTION In order to solve the above problems, the present invention provides a function for checking whether or not personal authentication has been performed in an information network for performing personal authentication and accessing a plurality of WWW information systems; An information system extracting function for extracting a WWW information system usable by a user registered in the information network, and after personal authentication is completed, extracting all WWW information systems available to the user, Is accessible to the WWW information system. When a user accesses a plurality of WWW information systems, the user can access only by performing personal authentication once, and all the WWW information systems available to the user are extracted.
The management of the W information system becomes easy. Also, in the above configuration,
By adding a management function for centrally managing access to the WWW information system, management operations such as setting of use permission for each user and totaling of use results are facilitated.

[0009]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a configuration diagram illustrating an information network according to an embodiment of the present invention, and FIG. 2 is a block diagram illustrating an information network according to the embodiment. In FIG. 1, the information network according to the embodiment includes WWW servers 2 to 4 storing a home page of an information system, and a personal computer 1 of a user who displays the home page.
Are connected on the same LAN 5, and the management server 101
Is connected. In order to reduce the load on the WWW server, the WWW server 2 stores the information system A, and
The server 3 stores the information system B, and the WWW server 4 stores the information system C.

In FIG. 2, a personal computer 1 of a user is provided with a WWW client function 60 for accessing a homepage when the user uses the WWW information system. Also, in the management server 101,
A WWW server function 61 for providing a homepage of the WWW information system, a homepage storage location 62 for storing the homepage of the WWW information system, an access control function 63 for performing access control when accessing the homepage, A personal authentication function 64 for authentication, a usable URL extraction function 65 for checking whether the accessed user has the right to use the WWW information system, and a WW available for each accessed user
A user-specific homepage generation function 66 for displaying a list of W information systems, a log recording function 67 for recording the usage status of each used WWW information system, an affiliation database 68 for collectively managing affiliation information of users, A user database 69 for collectively managing information for each, a URL database 70 for managing URLs of available WWW information systems, and a log database 71 for managing usage logs
And a database management function 72 for maintaining and managing each database.

An access operation according to the embodiment will be described.
FIG. 3 is a flowchart showing the operation of the present embodiment, and FIG.
7 are explanatory diagrams showing the operation of the embodiment. Description will be made with reference to these drawings as appropriate.

First, when a user accesses the homepage of the WWW information system using the WWW client function 60 in order to use the WWW information system, the homepage access control function 63 operates before the WWW server function 61 provides the service. . The operation of the homepage access control function 63 will be described with reference to FIG.

In FIG. 4, a description 76 of the start of access control and a description 77 of the end of access control are embedded in advance in the source book 75 of the home page of the WWW information system, and when the WWW server function 61 retrieves the home page. The access control library 78 provided at the homepage storage location 62 is always called. First, based on the description 76 of the start of access control, it is checked whether the user has already been authenticated using the WWW client function 60 (step 1). This is because, in the present embodiment, when trying to access a plurality of WWW information systems, if the personal authentication is performed when accessing the first WWW information system, the next WWW
This is because access to the information system is possible without performing personal authentication.

If personal authentication has already been completed, it is next checked whether or not the home page is available (step 2). The detailed method of checking whether the homepage is available will be described later. If the homepage is available, the homepage is displayed (step 3) and can be used. If not available, an error screen indicating that fact is displayed (step 4).

If the personal authentication has not been completed in step 1, another access control library is called, and the personal authentication function 64 and the usable URL extraction function 65 are used.
Then, the process proceeds to the user-specific homepage generation function 66. First, the operation of the personal authentication function 64 will be described with reference to FIG.

When the personal authentication function 64 is called from the homepage access control function 63, a personal authentication screen 80 shown in FIG. 5 is displayed. When the user inputs a user ID and password set in advance on the personal authentication screen 80 and presses an OK button, the personal authentication function 64 causes the user database 6
A search is made for a code whose user ID and password match in the table 87 (shown in FIG. 6) of the user database No. 9. A different ID is assigned to each user as the user ID, and the user can set a free character string for the password. Therefore, if a record in which the user ID and the password completely match can be retrieved, the user is searched. Prove that the person is operating. That is, personal authentication can be performed. Also, on the personal authentication screen 80, the password change button 8
When 2 is pressed, a password change screen 84 is displayed, so that the user can periodically change the password.

Next, the operation of the available URL extracting function 65 will be described with reference to FIG. First, the URL database 7
The URL of the WWW information system that can be used for each user is defined in a table 88 of the URL database of 0. URL
In the table 88 of the database, user ID, affiliation code,
Title and URL of WWW information system
Is prepared, and it is defined that only the user who matches the AND condition of the user ID, the affiliation code, and the position can use the WWW information system. Here user ID
By setting special codes (such as 999999) that correspond to all the affiliation codes and special characters (such as “all”) that correspond to all the positions, flexible condition settings can be made. .

Next, a URL database table 88 is searched from the user ID, affiliation code, and post data in the user database table 87 authenticated by the personal authentication function 64 to extract the URL of the available WWW information system. In the example of FIG. 7, the user ID is 210002 and the belonging code is 510002
The user 90 whose post is the section manager has all user IDs.
The information system B (91) that can be used by a user whose job title of all affiliation codes is a section manager and the information system D (92) that can be used by users of all affiliation codes whose user ID is 210002 ) Are extracted as available WWW information systems.

Next, the operation of the user-specific homepage generation function 66 will be described with reference to FIG. On the user-specific homepage screen 93, the name of the user authenticated by the personal authentication function 64 and the title of the WWW information system extracted by the available URL extraction function 65 are displayed. When the title of the WWW information system is clicked on the screen, the user can access the URL of the homepage of the WWW information system.

Next, the log recording function 67 will be described with reference to FIG. When an available information system is clicked on the user-specific homepage screen 73, a mechanism for adding one record of the user's user ID, the date and time of use, and the URL of the used WWW information system to the table 94 of the log database 71. Is provided. As a result, the operation manager can periodically count the use status of the WWW information system.

In each of the functions described above, each of the required tables (affiliation database 68, user database 69, URL database 70, log database 71) (table 89 of the belonging database, table 87 of the user database, By providing a database management function 72 that enables the addition, deletion, change, and aggregation of records in the URL database table 88 and the log database table 94), various WWW information distributed and arranged on a plurality of WWW servers is provided. Access control to the system home page can be centrally and integrally managed by one management function.

Here, as an example of the operation of the database management function 72, a case where a record in a table of a URL database is deleted will be described with reference to FIG. In FIG. 10, first, the URL database management screen 110 displays the URL.
Key input area 1 corresponding to the items in Table 88 of the database
11 to 115 are prepared in advance. Here, for example,
When deleting a URL whose title provided for “section manager” starts with “information system”, “section manager” is displayed in the title column 113 and “information system *” is displayed in the title field 114 as key items for specifying a record. Enter each. Here, the * character is a special character indicating an ambiguous character string following the information system.

Next, when a delete button 117 is pressed, the input contents are replaced with a command character string 118 that can be interpreted by the database and sent to the database 70. The database 70 searches for a record 119 corresponding to the command character string 118, and deletes this record 119.

The above is an example of deleting a record. All the data is entered in the key input areas 111 to 115 and the add button 11
Press 6 to add a record. Further URL
By providing a change button and a tally button on the database management screen 110, it is possible to change and tally records.

In the above embodiment, an example in which the present invention is applied to an in-company information system using a WWW homepage has been described. However, academic institutions that can identify users by user IDs and members who need to change services for each user It can be applied to the operation of a system homepage.

[0026]

As described above in detail, according to the present invention, by inserting an access control description into the source text of a WWW information system, one access to a plurality of WWW information systems can be performed. All WWs with personal authentication
Since the W information system can be used and the list of available WWW information systems for the user after the personal authentication is displayed, it is not necessary to store the URL of each WWW information system. Also, by providing necessary databases, that is, a belonging database, a user database, a URL database, and a log database, and providing a database management function for managing these, the usage status of the homepage of each WWW information system can be centrally controlled. It can be managed and the number of man-hours can be reduced.

[Brief description of the drawings]

FIG. 1 is a configuration diagram illustrating an information network according to an embodiment.

FIG. 2 is a block diagram illustrating an information network according to an embodiment.

FIG. 3 is a flowchart showing the operation of the present embodiment.

FIG. 4 is an explanatory diagram showing an operation of the embodiment.

FIG. 5 is an explanatory diagram showing the operation of the embodiment.

FIG. 6 is an explanatory diagram showing the operation of the embodiment.

FIG. 7 is an explanatory diagram showing an operation of the embodiment.

FIG. 8 is an explanatory diagram showing the operation of the embodiment.

FIG. 9 is an explanatory diagram showing the operation of the embodiment.

FIG. 10 is an explanatory diagram showing deletion of a record in a table of a URL database.

FIG. 11 is a diagram showing a configuration of a conventional WWW information system.

FIG. 12 is a diagram showing an operation mode of a conventional WWW information system.

[Explanation of symbols]

 1 User personal computer 2, 3, 4 WWW server 63 Homepage access control function 65 Available URL extraction function 66 User-specific homepage generation function 67 Log recording function 72 Database management function 101 Management server

Claims (2)

[Claims] 1. A function for checking whether or not personal authentication has been performed in an information network that accesses a plurality of WWW information systems by performing personal authentication, and a function of a WW available to a user registered in the information network.
It has an information system extraction function for extracting the W information system, and after the personal authentication is completed, all available WWWs of the user
An information network characterized by extracting an information system and enabling access to a desired WWW information system. 2. The information network according to claim 1, further comprising a management function for centrally managing access to the WWW information system.