JP2015115039A - Session management system, session management apparatus, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable a session that was performed in conjunction with a certain service provision device by a user who logged onto a service to be performed again in conjunction with the same service provision device when the user re-logs in at a later time.SOLUTION: When identification information of a user is contained in a request received by a reception unit, a response transmission unit transmits a response attached with specific information specific to the user authenticated based on the identification information to a session management server 4. If a transfer unit receives a response attached with the specific information, the transfer unit transfers the response attached with an identification ID of a service provision server 6 as the transmission source, to a client device. A request transmission unit transmits, in principle, a request received by a request reception unit to a service provision server corresponding to the identification ID contained in the request. However, when receiving a request attached with the same specific information as specific information already stored in a session management DB, it transmits the request to a service provision server corresponding to the identification ID associated with the specific information.

Description

  The present invention relates to a session management system, a session management device, and a program.

  Patent Document 1 below discloses a load balancer that always sends a request from a client to the same server by providing information about the server selected first as a cookie to the client.

US Pat. No. 6,473,802

  It is an object of the present invention to provide a service provision that is selected when a user logs in to a service later after a session that the user who has logged into the service proceeds with one of the plurality of service providing apparatuses. It is to be able to proceed with the device again.

  The invention according to claim 1 for solving the above-described problem includes a session management device and a plurality of service providing devices that provide the same type of service, wherein the session management device transmits a request transmitted from a client device. A request receiving means for receiving data, a request transmitting means for transmitting the request data received by the request receiving means to a service providing apparatus specified by the session information in the request data, and a request data by the request transmitting means After the transmission, response data returned from the service providing apparatus that is the transmission destination of the request data is received, and the received response data is sent together with the session information that identifies the service providing apparatus that is the transmission destination, Transfer means for transferring to the client device; The service providing apparatus includes: a receiving unit that receives request data transmitted from the session management apparatus; and a user identification information that identifies the user in the request data received by the receiving unit. Authentication means for authenticating a user identified by the user identification information based on the identification information; and response transmission means for transmitting response data corresponding to the request data received by the receiving means to the session management device. When the request data received by the receiving means includes user identification information for identifying a user, the response transmission means displays the response data corresponding to the request data as the user identification information. User information specific to the user authenticated by the authentication means based on Both are further provided with storage means for transmitting to the session management apparatus, and storing the user information in association with the session information in the session management apparatus, and the transfer means is configured to transmit the request data by the request transmission means. When the user information is received together with the response data from the service providing apparatus that is the transmission destination of the request data, the received response data is sent to the request together with the session information that identifies the service providing apparatus that is the transmission destination and the received user information. When the user information is included in the request data received by the request receiving unit, the request transmitting unit transmits the user information that is the same as the user information included in the request data. If it is not stored in the storage means Storing the user information and session information included in the request data in association with each other in the storage means, and transmitting the request data to the service providing apparatus specified by the session information included in the request data, When user information is included in the request data received by the receiving means, and the same user information as the user information included in the request data is stored in the storage means, the request data is It transmits to the service provision apparatus specified by the session information memorize | stored in the said memory | storage means in relation with user information, It is characterized by the above-mentioned.

  Further, the invention according to claim 2 is the session management system according to claim 1, wherein the session management device, after transmitting the request data by the request transmission means, from the service providing device to which the request data is transmitted When the transfer means receives user information that is not stored in the storage means together with response data, the storage means associates the user information received by the transfer means with session information that identifies the destination service providing apparatus. It is further characterized by further including a means for storing.

  The invention according to claim 3 for solving the above-mentioned problem is that a request receiving means for receiving request data transmitted from a client device, and a plurality of request data received by the request receiving means for providing the same kind of service. Request transmitting means for transmitting to the service providing apparatus specified by the session information in the request data, and after the request data is transmitted by the request transmitting means, the service providing apparatus to which the request data is transmitted The response data received from the client is received, and the received response data is transferred to the client device that is the transmission source of the request data together with the session information that identifies the transmission destination service providing device, and the information is stored Storage means, and including the transfer means After the request data is transmitted by the request transmission means, when the user data specific to the user authenticated by the service provider of the transmission destination is received together with the response data from the service provider of the request data transmission destination, The received response data is transferred together with the session information specifying the destination service providing apparatus and the received user information to the client apparatus that is the transmission source of the request data. When user information is included in the received request data, and the same user information as the user information included in the request data is stored in the storage means, the request data is stored in the user information. The session information stored in the storage means in association with the session information It is sent to the service providing apparatus which is a session management apparatus according to claim.

  According to a fourth aspect of the present invention for solving the above-described problem, a computer having a storage unit for storing information is received by a request receiving unit and a request receiving unit for receiving request data transmitted from a client device. Among a plurality of service providing devices that provide the same type of service, a request transmitting unit that transmits request data to a service providing device specified by session information in the request data, after transmission of request data by the request transmitting unit, Response data sent back from the service providing apparatus that is the transmission destination of the request data is received, and the received response data is sent to the client apparatus that is the transmission source of the request data together with session information that identifies the service providing apparatus that is the transmission destination. Functions as a transfer means, to transfer The transfer means is authenticated by the transmission destination service providing apparatus together with response data from the transmission destination service providing apparatus after the request data is transmitted by the request transmission means. When the user information unique to the user is received, the received response data is transferred to the client device that is the transmission source of the request data together with the session information that specifies the service providing device of the transmission destination and the received user information. The request transmission means, when user information is included in the request data received by the request reception means, and the same user information as the user information included in the request data is not stored in the storage means, User information and session information included in the request data The request data is transmitted to the service providing apparatus specified by the session information included in the request data, and the same user information as the user information included in the request data is stored in the storage. When stored in the means, the request data is transmitted to the service providing apparatus specified by the session information stored in the storage means in association with the user information.

  According to the first, third, and fourth aspects of the present invention, a user logs in to the service after a session that the user who logged in to the service proceeds with one of the service providing apparatuses among the plurality of service providing apparatuses. When corrected, it is possible to allow the session to proceed again with the selected service providing apparatus.

  According to the second aspect of the present invention, a user who logs in to a service proceeds with a session provided with one of the plurality of service providing apparatuses, and the user later logs in to the service again. Sometimes, it is possible to more reliably realize a session with the selected service providing apparatus again.

It is a figure which shows the structure of the session management system which concerns on embodiment of this invention. It is a sequence diagram which shows the process performed with a session management system. It is a figure which shows the transfer process performed in a session management server. It is a figure which shows a login screen. It is a figure which shows a setting screen. It is a figure which shows a guidance screen. It is a figure which shows an instruction | indication waiting screen. It is a sequence diagram which shows the process performed with a session management system. It is a figure which shows the authentication process performed with a service provision server. It is a figure which shows the reply process performed in a service provision server. It is a sequence diagram which shows the process performed with a session management system. It is a sequence diagram which shows the process performed with a session management system. It is a functional block diagram which shows the function group implement | achieved by a session management system.

  Hereinafter, examples of embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram showing a configuration of a session management system 1 according to the embodiment of the present invention. As shown in the figure, the session management system 1 includes a plurality of client devices 2, a session management server 4, and a plurality of service providing servers 6 for providing information processing services. Each of these devices is connected to a network.

  A browser application is installed in the client device 2, and the user logs in to the information processing service via the browser application and advances an HTTP session for using the information processing service. In the case of the present embodiment, the client device 2a is assumed to be a personal computer including a microprocessor, a storage device such as a memory and a hard disk, an input device such as a mouse and a keyboard, a network interface, and a display. The client device 2b is an image processing device including a microprocessor, a storage device such as a memory and a hard disk, a network interface, a touch screen, and a scanner.

  The session management server 4 and the service providing server 6 are server computers including a microprocessor, a storage device such as a memory and a hard disk, a network interface, and the like. Each of the session management server 4 and the service providing server 6 executes information processing according to a program stored in the storage device. This program may be stored in the storage device by being received from the network, or may be stored in the storage device by being read from a computer-readable information storage medium. The session management server 4 is also called a load balancer. Each service providing server 6 provides a common information processing service to the user on the cloud. In this embodiment, the service providing server 6 provides the user with an image processing service for translating a document image sent from the client device 2. . Each service providing server 6 is connected to a user database 8. The user database 8 stores user authentication information (user name (user identification information) and password) registered as a service user. The service providing server 6 uses the user database 8 to perform user authentication. I do.

  The usage scene of the image processing service will be described. In the present embodiment, the user starts a browser application in the client device 2 and inputs a URL (Uniformed Resource Locator) of a login screen at a predetermined location. FIG. 2 is a sequence diagram showing processing executed in the session management system 1 when the URL of the login screen is input. Hereinafter, the client device 2 in which the URL of the login screen is input is referred to as a client device X. When the user inputs the URL of the login screen, the client device X transmits an HTTP request (request data) to the session management server 4 via the browser application (S101). The HTTP request includes various data such as cookie information held in the storage device by the client device X. Here, since the client device X does not hold the cookie information, the HTTP request does not include the cookie information.

  The session management server 4 receives the HTTP request transmitted from the client device X. Then, the received HTTP request is transferred to the service providing server 6 selected according to a predetermined algorithm (for example, round robin algorithm) (S102). Specifically, when receiving an HTTP request, the session management server 4 executes the transfer process shown in FIG. That is, the session management server 4 determines whether or not the session ID is included in the cookie information in the HTTP request (S201). Here, the session ID is identification information of the service management server 6.

  As described above, at this stage, there is no cookie information in the HTTP request. Therefore, the session management server 4 selects the transfer destination service providing server 6 according to the above algorithm, and transfers the HTTP request to the selected service providing server 6 (S202). Here, it is assumed that the service providing server X is selected.

  The service providing server X that has received the HTTP request returns an HTTP response corresponding to the received HTTP request to the session management server 4 (S103). At this stage, the web page of the login screen is returned as an HTTP response. Then, the session management server 4 that has received the HTTP response transfers the received HTTP response to the client device X together with the session ID that identifies the service providing server X that is the transmission source of the HTTP response (S104). The session ID is included in the HTTP response as cookie information.

  In the client device X that has received the HTTP response, a login screen is displayed. In addition, cookie information in the HTTP response is stored in the storage device. FIG. 4A is a diagram illustrating an example of a login screen. Using this login screen, the user logs in to the image processing service. That is, the user inputs his / her authentication information (user name and password) on the login screen. Then, a predetermined button is pressed.

  FIG. 5 is a sequence diagram illustrating processing executed in the session management system 1 when the user presses the predetermined button on the login screen. The client device X transmits an HTTP request including the cookie information stored in the storage device and the input authentication information to the session management server 4 (S301). When the session management server 4 (request receiving means, request transmitting means) receives the HTTP request transmitted from the client device X, it transfers the received HTTP request to the service providing server X (S302). Specifically, in S302, the transfer process shown in FIG. 3 is executed. At this stage, the session ID of the service providing server X is included in the cookie information. Therefore, the step of S203 is executed, and the session management server 4 determines whether or not the cookie information further includes context information to be described later (S203). At this stage, the context information is not included in the cookie information. Therefore, the session management server 4 transfers the HTTP request to the service providing server X identified by the session ID in the cookie information (S204).

  The service providing server X (receiving means) receives the HTTP request transferred from the session management server 4. Then, the redirect instruction is returned as an HTTP response to the session management server 4 (S303). At this stage, authentication information is included in the HTTP request. Therefore, the service providing server X that has received the HTTP request executes the authentication process shown in FIG. 6 in step S303. That is, the service providing server X (authentication unit) authenticates the user based on the authentication information in the HTTP request and the stored contents of the user database 8 (S401). Specifically, the service providing server X determines whether or not the authentication information in the HTTP request is stored in the user database 8. When the user is authenticated, context information unique to the authenticated user is generated according to a predetermined context generation algorithm based on the authentication information in the HTTP request (S402). For example, the service providing server X generates the context information by encrypting the user name of the authenticated user. Note that the context generation algorithm used for generating the context information is common to all the service providing servers 6. Then, the service providing server X returns a redirect instruction as an HTTP response to the session management server 4 together with the context information (S403). The context information is included in the HTTP response as cookie information.

  Upon receiving the HTTP response in step S304, the session management server 4 (transfer means) transfers the received HTTP response to the client device X together with the session ID of the service providing server X that is the transmission source of the HTTP response ( S304). The session ID is included in the HTTP response as cookie information.

  The client device X that has received the HTTP response stores the cookie information in the HTTP response in the storage device. Then, an HTTP request including cookie information is transmitted to the session management server 4 (S305).

  When the session management server 4 (request receiving means, request transmitting means) receives the HTTP request transmitted from the client device X, the session management server 4 transfers the received HTTP request to the service providing server X (S306). Specifically, in S306, the session management server 4 (request transmission means) executes the transfer process shown in FIG. At this stage, both the session ID of the service providing server X and the context information are included in the cookie information. Therefore, the steps after S205 are executed. In the present embodiment, a session management database (hereinafter referred to as a session management DB) that stores context information in association with a session ID is provided in the storage device of the session management server 4. In S205, the session management server 4 It is determined whether the same context information as the context information in the information is stored in the session management DB (S205). At this stage, the same context information as the context information in the cookie information is not stored. Therefore, the session management server 4 transfers the HTTP request to the service providing server 6 (that is, the service providing server X) identified by the session ID in the cookie information (S206). Further, the context information in the cookie information and the session ID are associated and stored in the session management DB (S207).

  The service providing server X (receiving means) receives the HTTP request transferred from the session management server 4. Then, the HTTP response is returned to the session management server 4 together with the context information in the HTTP request (S307). At this stage, since the context information is included in the HTTP request, the service providing server X executes the reply process shown in FIG. 7 in step S307. That is, in the present embodiment, the storage device of each service providing server 6 is provided with a context management database (hereinafter referred to as a context management DB) in which context information and session progress indicating session progress are associated with each other. . The service providing server X determines whether the same context information as the context information in the cookie information is stored in the context management DB (S501). At this stage, the same context information as the context information in the cookie information is not stored in the context management DB. Therefore, the context information in the cookie information is stored in the context management DB in association with the session progress indicating the progress of the session at the current stage (S502). In addition, a predetermined HTTP response is transmitted to the session management server 4 together with the context information in the cookie information (S503). Specifically, the web page of the setting screen shown in FIG. 4B is transmitted as an HTTP response. The context information is included in the HTTP response as cookie information.

  In step S308, the session management server 4 that has received the HTTP response transmits the received HTTP response together with the session ID of the service providing server X to the client device X in the same manner as in step S304 (S308). The session ID is included in the HTTP response as cookie information. As a result, the client device X that has received the HTTP response displays a screen corresponding to the HTTP response. At this stage, the setting screen shown in FIG. 4B is displayed. In addition, cookie information in the HTTP response is stored in the storage device.

  Thereafter, the user performs an operation of advancing a session with the service providing server X in the client device X until the guidance screen illustrated in FIG. 4C is displayed. In the session management system 1, every time an operation for advancing a session is performed, the process shown in the sequence diagram of FIG. 8 is executed.

  That is, the client device X transmits an HTTP request including cookie information held in the storage device to the session management server 4 (S601). The cookie information includes the session ID of the service providing server X and context information unique to the user.

  When the session management server 4 (request receiving unit, request transmitting unit) receives the HTTP request transmitted from the client device X, the session management server 4 transfers the received HTTP request to the service providing server X (S602). Specifically, in S602, the session management server 4 (request transmission unit) executes the transfer process shown in FIG. 3 as in S302 and S308. At this stage, both the session ID of the service providing server X and the context information are included in the cookie information. Moreover, since the same context information as the context information in the cookie information has already been stored in the session management DB (Y in S205), the session management server 4 executes step S208. That is, the session management server 4 transfers the HTTP request to the service providing server 6 (that is, the service providing server X) identified by the session ID associated with the same context information as the context information in the cookie information (S208). .

  The service providing server X (receiving means) receives the HTTP request transferred from the session management server 4. Then, an HTTP response is returned to the session management server 4 (S603). At this stage, since the context information is included in the HTTP request, the service providing server X executes the reply process shown in FIG. 7 in the step of S603, similarly to the step of S307. In addition, since the same context information as the context information in the cookie information has already been stored in the context management DB (Y in S501), the service providing server X is associated with the same context information as the context information in the cookie information. The HTTP response corresponding to the degree of session progress is transmitted to the session management server 4 together with the context information (S504). Moreover, the session progress degree linked | related with the same context information as the context information in cookie information is updated. Note that the context information is included in the HTTP response as cookie information.

  In step S604, the session management server 4 that has received the HTTP response transmits the received HTTP response together with the session ID of the service providing server X to the client device X in the same manner as in step S304. The session ID is included in the HTTP response as cookie information. As a result, the client device X that has received the HTTP response displays a screen corresponding to the HTTP response.

  Here, after the user first logs in to the image processing service on the client device 2a and proceeds with the session until the guidance screen shown in FIG. 4C is displayed with the service providing server X, the image is then displayed on the client device 2b. Assume that you log in to the processing service again. In this case, the HTTP request first transmitted from the client device 2b may be transferred to the service providing server Y different from the service providing server X in S102 of FIG. However, for the following reasons, even in such a case, the session that has been proceeding with the service providing server X can be proceeded with the service providing server X again.

  FIG. 9 is a sequence diagram showing processing executed by the session management system 1 when the HTTP request first transmitted from the client device 2b as the client device X is transferred to the service providing server Y. 9 will be described in comparison with FIG. In this case, first, the cookie information of the HTTP request transmitted in S301 includes the session ID of the service providing server Y. Therefore, unlike FIG. 5, the HTTP request is transferred to the service providing server Y in S302.

  However, in S303, context information unique to the user is generated and transmitted to the client device X. Therefore, thereafter, the HTTP request transmitted from the client apparatus X includes context information (see S305 and S601 in FIG. 8). In addition, when the same context information as the context information in the HTTP request is stored in the session management DB, the transfer destination of the HTTP request is identified by the session ID stored in the session management DB in association with the context information. It becomes the service providing server 6 (see S208 in FIG. 3). Accordingly, since the user's context information is stored in the session management DB in association with the session ID of the service providing server X at the time of the session with the service providing server X, the HTTP request is always transmitted in S306 or S602 in FIG. It is transferred to the providing server X. Therefore, the user who logs in to the service again on the client device 2b can proceed with the session that has been proceeding with the service providing server X using the client device 2a again with the service providing server X. Therefore, for example, when the user logs in again, not the setting screen shown in FIG. 4B but the instruction waiting screen shown in FIG. 4D that should be displayed next to the guidance screen shown in FIG. 4C is displayed. Each time an operation for advancing a session is performed, the session with the service providing server X is advanced as shown in the sequence diagram of FIG.

  FIG. 10 is a functional block diagram showing a function group realized by the session management server 1. As shown in the figure, in the session management server 1, a request reception unit 10, a request transmission unit 12, a transfer unit 14, a reception unit 16, an authentication unit 18, and a response transmission unit 20 are realized. The request reception unit 10, the request transmission unit 12, and the transfer unit 14 are realized by causing the microprocessor to execute a program stored in a storage device in the session management server 4. The reception unit 16, the authentication unit 18, and the response transmission unit 20 are realized by causing the microprocessor to execute a program stored in the storage device in the service providing server 6.

  The request receiving unit 10 receives an HTTP request transmitted from the client device 2. The request transmitting unit 12 transmits the HTTP request received by the request receiving unit 10 to the service providing server 6 identified by the session ID in the HTTP request in principle (see S302 and S306 in FIG. 5).

  The receiving unit 16 receives the HTTP request transmitted from the session management server 4. When the identification information (here, the user name) identifying the user is included in the HTTP request received by the reception unit 16, the authentication unit 18 selects the user identified by the identification information based on the identification information. Authentication is performed (see S303 in FIG. 5 and FIG. 6).

  The response transmission unit 20 returns an HTTP response corresponding to the HTTP request data received by the reception unit 18 to the session management server 4. In addition, after the transmission of the HTTP request by the request transmission unit 12, the transfer unit 14 receives an HTTP response returned from the service providing server 6 that is the transmission destination of the HTTP request, and the received HTTP response is transmitted to the service of the transmission destination. Along with the session ID for identifying the providing server 6, it is transferred to the client apparatus 2 that is the transmission source of the HTTP request (see S304 and S308 in FIG. 5).

  However, when the HTTP request received by the receiving unit 16 includes identification information for identifying the user, the response transmission unit 20 sends the HTTP response to the context information unique to the user authenticated by the authentication unit 18 based on the identification information. At the same time, it is transmitted to the session management server 4 (see S303 in FIG. 5). In addition, after the HTTP request is transmitted by the request transmitting unit 12, the transfer unit 14 receives the HTTP response together with the HTTP response from the service providing server 6 that is the transmission destination of the HTTP request. Not only the session ID for identifying the server 6 but also the context information received therewith, it is transferred to the client device 2 that is the source of the HTTP request (see S304 and S308 in FIG. 5). In this way, after the user authentication is completed, an HTTP request is sent from the client device 2 with context information.

  In addition to this, when the HTTP request including the context information is received by the request reception unit 10, the request transmission unit 12 distributes the transmission destination as follows. That is, when the same context information as the context information included in the HTTP request is not stored in the session management DB, the context information included in the HTTP request is associated with the session ID and stored in the session management DB, and the HTTP request is stored. Is transmitted to the service providing server 6 identified by the session ID included in the HTTP request in principle (see FIG. 3). On the other hand, when the same context information as the context information included in the HTTP request is stored in the session management DB, the HTTP request is stored in the service providing server 6 identified by the session ID stored in association with the context information. Transmit (see FIG. 3).

  In addition, embodiment of this invention is not restricted only to the said embodiment.

  For example, the session management server 4 may additionally perform the following processing in S304. That is, the session management server 4 may determine whether or not the same context information as the context information included in the received cookie information in the HTTP response is stored in the session management DB. When the same context information as the context information included in the received cookie information is not stored in the session management DB, the context information included in the cookie information is associated with the session ID of the service providing server X. You may preserve | save in session management DB.

  For example, the session management system 1 may include a plurality of session management servers 4. In this case, the client device 2 may transmit an HTTP request to any one of the session management servers 4.

  1 session management system, 2, 2a, 2b client device, 4 session management server, 6 service providing server, 8 user database, 10 request reception unit, 12 request transmission unit, 14 transfer unit, 16 reception unit, 20 authentication unit, 22 Response transmitter.

Claims (4)

Including a session management device and a plurality of service providing devices for providing the same type of service,
The session management device includes:
Request receiving means for receiving the request data transmitted from the client device;
Request transmitting means for transmitting the request data received by the request receiving means to the service providing apparatus specified by the session information in the request data;
After the request data is transmitted by the request transmitting means, response data returned from the service providing apparatus that is the transmission destination of the request data is received, and the received response data is sent together with session information that identifies the service providing apparatus that is the transmission destination Transfer means for transferring the request data to the client device of the transmission source;
Including
The service providing apparatus includes:
Receiving means for receiving request data transmitted from the session management device;
An authentication unit that authenticates a user identified by the user identification information based on the user identification information when the user identification information for identifying the user is included in the request data received by the reception unit;
Response sending means for sending response data corresponding to the request data received by the receiving means to the session management device;
A session management system including:
The response transmission means includes
When user identification information for identifying a user is included in the request data received by the receiving means, a response data corresponding to the request data is displayed as a user specific to the user authenticated by the authentication means based on the user identification information. Along with the information sent to the session management device,
In the session management device,
Storage means for storing user information in association with the session information;
The transfer means includes
After the request data is transmitted by the request transmission means, when user information is received together with response data from the service providing apparatus that is the request data transmission destination, session information that identifies the service providing apparatus that is the transmission destination when the user information is received. Together with the received user information, the request data is transmitted to the client device,
The request transmission means includes
When user information is included in the request data received by the request receiving means, if the same user information as the user information included in the request data is not stored in the storage means, the user included in the request data Information associated with session information is stored in the storage means, and the request data is transmitted to the service providing apparatus specified by the session information included in the request data and received by the request receiving means. If the user information is the same as the user information included in the request data, and the storage means stores the request data in association with the user information. Specified by the session information stored in Be sent to the service providing apparatus,
Session management system characterized by The session management device includes:
After the request data is transmitted by the request transmission means, when the transfer means receives user information that is not stored in the storage means together with response data from the service providing apparatus to which the request data is transmitted, the transfer means receives Further comprising means for storing user information in the storage means in association with session information for specifying the transmission destination service providing apparatus;
The session management system according to claim 1. Request receiving means for receiving the request data transmitted from the client device;
Request transmitting means for transmitting the request data received by the request receiving means to a service providing apparatus specified by the session information in the request data among a plurality of service providing apparatuses providing the same type of service;
After the request data is transmitted by the request transmitting means, response data returned from the service providing apparatus that is the transmission destination of the request data is received, and the received response data is sent together with session information that identifies the service providing apparatus that is the transmission destination Transfer means for transferring the request data to the client device of the transmission source;
Storage means for storing information;
Including
The transfer means includes
After the request data is transmitted by the request transmission means, when the user data specific to the user authenticated by the service provider of the transmission destination is received together with the response data from the service provider of the transmission destination of the request data, the request data is received. The response data is transferred to the client device that is the transmission source of the request data together with the session information that identifies the service providing device of the transmission destination and the received user information,
The request transmission means includes
If user information is included in the request data received by the request receiving means, and the same user information as the user information included in the request data is stored in the storage means, the request data is Sending to the service providing apparatus specified by the session information stored in the storage means in association with the user information,
A session management device. A computer having storage means for storing information;
Request receiving means for receiving request data transmitted from the client device,
Request transmission means for transmitting the request data received by the request receiving means to a service providing apparatus identified by the session information in the request data among a plurality of service providing apparatuses that provide the same type of service;
After the request data is transmitted by the request transmitting means, response data returned from the service providing apparatus that is the transmission destination of the request data is received, and the received response data is sent together with session information that identifies the service providing apparatus that is the transmission destination , Transfer means for transferring the request data to the client device of the transmission source,
Is a program for functioning as
The transfer means includes
After transmitting request data by the request transmitting means, when receiving user information specific to the user authenticated by the service providing apparatus of the transmission destination together with response data from the service providing apparatus of the transmission destination of the request data The response data is transferred to the client device that is the transmission source of the request data together with the session information that identifies the service providing device of the transmission destination and the received user information,
The request transmission means includes
When user information is included in the request data received by the request receiving means, if the same user information as the user information included in the request data is not stored in the storage means, the user included in the request data Information and session information are associated and stored in the storage means, and the request data is transmitted to the service providing apparatus specified by the session information included in the request data, and is the same as the user information included in the request data When the user information is stored in the storage means, the request data is transmitted to the service providing apparatus specified by the session information stored in the storage means in association with the user information.
The program.

Images