JPH11175387A - Data base access management device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a data base access management device capable of preventing double accessing by a user and providing a data base service. SOLUTION: This data base access management device 1 is provided with a DB server 10 for managing a data base and a CTI server 20 and a WEB server 30 for managing access to the data base. The DB server 10 is provided with a user table for recording information of the ID or the like or a user capable of accessing the data base and with an access user monitoring table for recording the information of the ID or the like or the user during access. The respective servers 10 and 20 confirm the user by checking whether or not the ID of the accessing user is recorded in the user table and prevent double accessing by checking whether or not the ID of the user is recorded in the access user monitoring table.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a database access management device for managing access to a database storing various data.

[0002]

2. Description of the Related Art Conventionally, various information providing services such as online banking, train and airplane reservations have been provided by telephone or fax.
It is done to receive using. By the way, in recent years, with the spread of the Internet,
It is desired that various data services provided only by the user be received from the user's personal computer via the Internet.

For this reason, in addition to a CTI (Computer Telephony Integration) server for controlling access to a DB (Database) server for a user connected via a public line from a telephone or a facsimile, a personal computer (World Wide Web) server that controls access to the DB server for users connecting from the Internet via the Internet network, and uses each of these servers as a gateway to the database. The service had to be made available.

[0004]

However, when such different types of access means are provided, a single user can connect to the database by using two types of access means, a telephone and a personal computer. Access will be possible, and it will be necessary to provide services that require strict access control, such as bank balance inquiries, reservations for airplanes, etc., and database services that charge users with time charges etc. There is a problem that can not be.

[0005] In addition, since the WEB server employs a packet exchange method as a data communication method, it knows the address of a database service page displayed after the access page provided on the WEB server. Thus, there is also a problem that the database service can be received without passing through the access page, and transaction processing in the database service, in particular, start and end of the service cannot be managed.

A first object of the present invention is to provide a database access management device capable of providing a database service while preventing double access by a user.

A second object of the present invention is to provide a database access management device that can reliably perform transaction processing when a web server is used.

[0008]

According to the present invention, there is provided a database access management device comprising: a database management unit for managing a database; and an access management unit for managing access to the database. A user table in which user information including an ID of a user who can access the database is recorded; and an access user monitoring table in which access information including an ID of a user accessing the database is provided. Detecting whether the ID of the user who has accessed the database is recorded in the user table and confirming the user; and detecting whether the ID of the user is recorded in the access user monitoring table. 2
It has a function of preventing double access.

The database management means is provided with a user table and an access user monitoring table. The access management means confirms whether or not the user who has accessed the database is registered in the user table, and checks the access user monitoring table. Since double access is checked to determine whether or not the access is recorded, the double access can be reliably prevented even when a plurality of access units are provided.

At this time, the access management means includes a world wide web server (WE) used when a user accesses a database using the Internet.
B server), an ID for access from the WEB server is registered for each user in the user table, and the access user monitoring table includes
It is preferable that a field for recording the ID is provided, and that the access management unit performs user confirmation and double access check based on the ID of the user who has accessed from the WEB server.

[0011] Even when a WEB server is provided in the access management means, confirmation of a user and prevention of double access can be realized, and a database service using the Internet network can be provided.

[0012] The access management means may include a World Wide Web server (WEB) used when a user accesses a database using the Internet.
Server) and a computer / telephony integration server (CTI server) used when the user accesses the database using a telephone or a facsimile. The user table includes, for each user, an access from the WEB server. ID and CT
An ID for access from the I server is registered, and the access user monitoring table is provided with a field for individually recording each ID, and the access management means is provided for a user who has accessed from the one server. After the user is confirmed and the double access is checked based on the ID, when the access is permitted, the ID for the other server may be written in the access user monitoring table.

Since the CTI server and the WEB server are provided, the database service can be received not only by telephone or FAX but also by using a personal computer. Therefore, the number of users who can receive the service increases, and various database services can be easily received. Also,
The IDs recorded in the user table and the access user monitoring table are set for each access from each server.
A different ID can be set for the EB server.
D can be strictly managed.

Further, when the access management means accesses from the world wide web server (WEB server), the access management means newly creates transaction management data at the time of access and writes the transaction management data in the access user monitoring table, and The transaction management data is sent to the user's computer via the server, and when there is access from the WEB server, the transaction management data sent to the accessing user's computer is stored in the access user monitoring table. It is preferable that the access is permitted only when the written transaction management data matches.

[0015] At this time, the access management means includes, not only the transaction management data, but also the I / O information of a user who has accessed via a world wide web server.
The P address is written in the access user monitoring table, and when there is access from the world wide web server, the transaction management data and the IP sent to the computer of the accessing user are written.
Preferably, the access is permitted only when the address matches the transaction management data and the IP address written in the access user monitoring table.

According to the present invention, the transaction processing at the time of access can be surely performed even for the user who accesses via the WEB server.

Preferably, the transaction management data is rewritten each time a user moves to a different page on the world wide web server. With this configuration, each time a page is moved, the content of the transaction management data sent to the user's computer and written in the access user monitoring table is rewritten. The progress can be recorded as information. For this reason, when performing an information service by sequentially moving a plurality of pages on the world wide web server, it is possible to realize an advanced transaction process that does not return to a page that has passed once.

Further, each time the user moves to a different page on the world wide web server, the access management means may write progress information on the page movement of the user in the access user monitoring table. Also in this case, the progress of the service such as the page to which the user has moved can be recorded in the access user monitoring table, so even if cookies are not used or not rewritten, the progress of the user can be managed, Advanced transaction processing can be realized.

[0019]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows a database access management device 1 of the present embodiment. The database access management device 1 includes a database server (DB server) 10 as a database management means, a computer / telephony integration server (CTI server) 20 as an access management means, and a world wide web server (WEB server) 30. It has. These servers 10, 20, 30 are connected to one another via a LAN (local area network) 2. In this embodiment, each of the servers 10, 20,.
Reference numeral 30 denotes a separate personal computer (personal computer).

As shown in FIG. 2, the DB server 10
A network card 11 for connecting to the LAN 2,
A driver 12 for controlling various devices (peripheral devices) such as the network card 11, an OS (operating system) 13 for controlling and managing a personal computer, a database table (DB table) 14 in which various data are recorded, A DB engine 15 for managing the DB table 14;

The CTI server 20 includes a network card 21, a CTI board 22 for controlling connection between the telephone 4 and the FAX 5 via the public line network 3, and various devices such as the network card 21 and the CTI board 22. Driver 23, OS 24, telephone 4 and FA
X5 and the like, and a CTI application 25 for controlling a connection service, and an input from the telephone 4 or FAX 5
A CTI-DB middleware 26 for passing the B server 10 to realize a database service by the telephone 4 or the like.

The CTI board 22 has a D
SP (microprocessor dedicated to digital signal processing),
It is configured by mounting a CPU, a RAM, a FlashROM, a modem IC, and the like. By rewriting the FlashROM, it can be connected to a digital public line network (INS64 to INS1500) or an analog public line network using ISDN. Have been.

The WEB server 30 includes a network card 31, a driver 32 for controlling various devices,
S33, WE for processing access from the web browser software of the personal computer 40 connected to the LAN 2 via the router 6, the Internet network 7, the provider 8 for providing a connection service to the Internet network 7, and the like.
B application 34 and WEB application 3
4 and HTML (Hype)
r HTML document 3 written in Text Markup Language)
5, an access user monitoring application 36 for managing access users, and a WEB-DB middleware 37 for realizing a database service using the Internet by passing an input from the personal computer 40 to the DB server 10.

The DB table 14 of the DB server 10 includes a user table 50, an access user monitoring table 60, and a data table 71 storing various data for a database service, as shown in FIG. .

The user table 50 stores various data of users registered in advance to receive the database service. Specifically, an ID for recognizing the user and various data 53 such as a user name, an address, and a telephone number are recorded.

The ID includes a CTI-ID 51 used when using the CTI server 20 and a WEB-ID 52 used when using the WEB server 30. These IDs may be the same, but since only numbers can be normally input by telephone or the like, CTI
-While ID51 is composed of only numbers, WEB-
The ID 52 can use English characters in addition to numbers because the personal computer 40 is used, and is an ID that is easily understood by users and the like.
There is an advantage that can be set.

The access user monitoring table 60 manages information on users who are actually accessing the DB server 10, and prevents double access by users and manages transactions. In particular,
CTI-ID61 of the accessing user, WEB
-ID 62, access type 63, user's personal computer 4
0, the random number 65 of the cookie used as transaction management data, C
CTI-DB middleware last use LOG6 in which the last use time of the TI-DB middleware 26 is recorded.
6. WEB-DB middleware last use L in which the last use time of WEB-DB middleware 37 is recorded
OG67, CTI-ID validity time 68, WEB-ID
And a field in which various other data 70 are recorded.

Note that each effective time 68, 69 is determined by CTI-
DB middleware 26 and WEB-DB middleware 37
If the time set in the effective time 68 or 69 has elapsed since the last use of the user, it is determined that the access from the user has been completed, and the data of each user is deleted from the access user monitoring table 60. Used to do.

Next, a database access management method according to this embodiment will be described.

[Database Access of CTI Server (Double Access Prevention Processing)]
When the CTI server 20 is accessed via the public network 3 connected to the CTI board 22 using X5, the CTI
The application 25 performs an automatic incoming call and an automatic answer,
An access service to the DB server 10 by the TI service is provided.

Specifically, the CTI application 25
Requests the user to input an access ID through a response message or the like. In response to this request, the user adds DTMF (Dual Tone Multi Frequency, push signal), dial pulse, FAX (OCR with ID written on FAX original added to CTI application 25).
Function), voice (CTI application 25
, Etc.), the CTI application 25 converts this ID into C
This is passed to the TI-DB middleware 26.

The CTI-DB middleware 26 automatically logs in to the DB engine 15 on the DB server 10,
Creates an SQL statement based on the ID entered by the user and creates a DB
Request a search to the engine 15.

The DB engine 15 uses the SQL statement
The user table 50 in the B table 14 is examined to check whether the input ID exists. At this time, since the user is accessing via the CTI server 20, it is checked whether the input ID exists in the CTI-ID 51. If the user table 50 has valid / invalid flags of the CTI-ID 51 and other condition fields, these are also checked.

The DB engine 15 stores the user table 5
0 is returned to the CTI-DB middleware 26 as an SQL statement. The CTI-DB middleware 26
It interprets the QL statement and passes the result to the CTI application 25.

The investigation result in the user table 50 is invalid,
That is, when the corresponding ID does not exist, when the invalid flag is set, or when other conditions are not cleared, the user cannot receive the database service via the CTI server 20. In addition, the result of this survey is based on the function of the CTI application 25.
It can be returned to the user's telephone 4 or FAX 5.

On the other hand, when the examination result in the user table 50 is valid, the CTI application 25
Request the DB middleware 26 to check whether the same ID exists in the access user monitoring table 60. CTI
-The DB middleware 26 issues an SQL statement and passes it to the DB engine 15, and checks whether the input ID is in the CTI-ID 61 of the access user monitoring table 60.

Here, if the same ID exists in the monitoring table 60, the CTI application 25 judges that the same user is already accessing and does not permit the access. On the other hand, if the same ID does not exist in the monitoring table 60, the input ID is stored in the CTI-
Write to the ID 61 and permit access to the data table 71.

In this embodiment, two types of IDs, CTI-ID 51 and WEB-ID 52, are set for each user.
Examines the user table 50 via the CTI-DB middleware 26, and when the access condition is determined to be valid, also acquires the information of the WEB-ID 52 from the user table 50. Then, the CTI application 25
When writing the CTI-ID to the access user monitoring table 60 through the TI-DB middleware 26, the WE
The B-ID 52 is also written into the WEB-ID 62 of the monitoring table 60 at the same time, and a flag indicating that the access is through the CTI server 20 is set in the access type 63.

Thereafter, the user can receive the CTI service according to the voice guidance of the CTI application 25, and can also receive the database service using the CTI server 20 as a gateway. The output of the database is CTI application 2
5 can be output by voice or facsimile.
That is, input and output to the database can be operated by the function of the CTI application 25.

The termination of the user service on the CTI server 20 utilizes the characteristic that the line disconnection signal always rises when the user disconnects the line. That is, when receiving the line disconnection signal, the CTI application 25 deletes the ID written in the access user monitoring table 60 through the CTI-DB middleware 26, and logs out from the DB engine 15.

However, there is a possibility that the disconnection signal does not come up from the telephone line for some reason. In this case, since the ID is still written in the access user monitoring table 60, the user is
Access from any of the EB servers 30 becomes impossible.
For this reason, in this embodiment, every time the CTI-DB middleware 26 issues a request to the DB engine 15, the time is written in the CTI-DB middleware last use LOG 66 of the access user monitoring table 60.

Then, the CTI application 25
In the access user monitoring table 60 through the CTI-DB middleware 26, the access type 63
And CTI-DB middleware final use LOG6
The data that has passed the time set in the effective time 68 of the CTI-ID from the last use time written in 6 is erased. Since the CTI application 25 can operate regardless of the connection from the telephone 4 or the FAX 5,
The process of erasing data after the expiration time may be performed at regular time intervals.

[Transaction Processing of CTI Server 20] The CTI server 20
Since the circuit switching service responds to the I application 25, the process from the response of the CTI application 25 to the end of the service can be easily managed as one transaction.

[Database Access of Web Server (Double Access Prevention Processing)] A Web browser software operating on a client PC such as the personal computer 40, a workstation, or a mobile terminal, creates a database.
When accessing the server 10, the user connects to the WEB server 30 via the Internet network 7 or another WAN (Wide Area Network). Note that the user's client PC is connected to the Internet by a dial-up or dedicated line connection via a company that provides a connection service to the Internet called a provider 8.
It is connected to the Internet network 7 using the CP / IP protocol.

The user uses the web browser software to input the ID in the input form of the ID for accessing the DB server 10 on the HTML document 35. The ID input in this form is passed to the WEB-DB middleware 37 via the access user monitoring application 36.

The WEB-DB middleware 37 automatically logs in to the DB engine 15 on the DB server 10,
Creates an SQL statement based on the ID entered by the user and creates a DB
ID entered in user table 50 of table 14
Check if exists. At this time, the user
Since the access is performed via the B server 30, it is checked whether the input ID exists in the WEB-ID 52. If the user table 50 has valid / invalid flags of the WEB-ID 52 and other condition fields, these are also checked.

The DB engine 15 stores the user table 5
0 is returned to the WEB-DB middleware 37 as an SQL statement. WEB-DB middleware 37
The QL sentence is interpreted and the result is passed to the access user monitoring application 36.

The investigation result in the user table 50 is invalid,
That is, when the corresponding ID does not exist, when the invalid flag is set, or when other conditions are not cleared, the user cannot receive the database service via the WEB server 30.

On the other hand, if the check result of the user table 50 is valid, the access user monitoring application 36 requests the WEB-DB middleware 37 to check whether the same ID exists in the access user monitor table 60. The WEB-DB middleware 37 issues an SQL statement and passes it to the DB engine 15, and the entered ID is stored in the WEB-ID 62 of the access user monitoring table 60.
Check to see if it is.

Here, if the same ID exists in the monitoring table 60, the access user monitoring application 36 judges that the same user is already accessing and does not permit the access. On the other hand, the same ID
If not, the ID and user table 5
The CTI-ID 51 of the user read from 0 is stored in the WEB-ID 52 and the CTI-ID of the monitoring table 60.
51, and a flag indicating that the access is through the WEB server 30 is set in the access type 63. Further, the access user monitoring application 36 obtains the IP address of the user's personal computer 40 and writes it in the IP address 64 of the monitoring table 60.
Access to the data table 71 is permitted.

The access user monitoring application 36 issues a random number composed of alphanumeric characters and the like, and a cookie is a text data exchanged between the WEB server 30 and the WEB browser software.
The data content such as the number of digits and alphanumeric characters can be set freely.) Then, the cookie is sent to the client (the personal computer 40) and stored in the random number field 65 of the cookie of the monitoring table 60 through the WEB-DB middleware 37.

The success or failure of access to the DB server 10 is determined by the access user monitoring application 3.
6 and HTML through WEB application 34
Document 35 can communicate to the user.

Thereafter, the user can receive the WEB service according to the HTML document 35. Also, W
The EB server 30 can receive a database service using the gateway. At this time, the output of the database is made H using the function of the web application 34.
It can be output by the TML document 35. That is, input and output to the database are performed by the web application 3
4 can be operated.

Logout from the database is performed using the HTM
This is performed when the user clicks a logout button displayed on the screen of the L document 35.

[Transaction Processing of WEB Server 30] The WEB server 30 differs from the CTI server 20 in that
Since the service is based on the CP / IP packet, it is necessary to manage the movement between pages even after the access using the input form for accessing the HTML document 35. That is,
If the movement between pages is not managed, the service page is normally displayed when the user directly inputs the address of the service page displayed after the access is permitted in the input form to the browser.
For this reason, the WEB service can be received without logging in, and the transaction cannot be accurately managed. In order to provide advanced DB services such as bank online, transaction processing is necessary. However, when the WEB server 30 is used, since packet exchange is performed, management of service start and end is not performed on the WEB server 30. There is a problem that is very difficult.

Therefore, in the present embodiment, transaction processing is realized using the IP address 64 and the cookie. That is, the start of the transaction of the WEB server 30 can be clearly managed by the above-described access service (ID input processing) for preventing double access.

The access-permitted user who has access has the IP address 64 recorded in the access user monitoring table 60 and the random number 65 of the cookie. The IP address 64 is the IP address currently used in the user's TCP / IP communication, and the cookie is issued each time the user logs in (each time the ID input process is performed), so that the user moves the page. At this time, the IP address and the cookie data of the user accessing the access user monitoring application 36,
I recorded in the access user monitoring table 60
A transaction can be realized by checking whether the P address 64 and the random number 65 of the cookie match.

That is, when the user enters the login page (I
Even if the address of the service page is directly specified by skipping the (D input page), the access user monitoring application 36 checks the user's cookie every time the page moves and compares it with the cookie in the access user monitoring table 60. Therefore, a user who has skipped the login page and has not been given the latest cookie cannot receive the service, thereby performing a reliable transaction process.

In the transaction service,
In the case of performing advanced control, the access user monitoring application 36 may be configured to rewrite the random number of the cookie every time the page is moved. In this case, the progress of the service can be recorded in a cookie. When performing a service that requires advanced transaction processing, for example, a service that permits data rewriting only once with one login, or a service that uses a game participation ID whose ID itself can be used only once Is I
If only the P address and the cookie issued by one login are used, if the browser back button is pressed, the user can return to the original page to input data again or play the game again.

On the other hand, if the cookie is rewritten each time the page is moved, the progress status of the page to which the user has progressed can be managed by, for example, incorporating information corresponding to each page in addition to random number data. And advanced transaction services can be realized. The progress information of the service may be managed by recording the progress information of the service in the access user monitoring table 60 by the access user monitoring application 36 every time the page is moved.
Further, it may be recorded in both the cookie and the access user monitoring table 60.

As described above, the user normally ends the transaction by clicking the logout button displayed on the screen. For example, the user can use dial-up PPP (Point to Point Protocol).
col) In the case of abnormal termination such as when the line is suddenly disconnected while logging in with connection, etc., or the logged-in user moves to another site without logging out after receiving the DB service, If left as it is, logout cannot be performed normally, and data in the access user monitoring table 60 cannot be deleted. For this reason, even if the user attempts to access again in response to abnormal termination or the like, the access user monitoring table 6
Since the ID remains at 0, access through the CTI server 20 and the WEB server 30 is not possible.

Therefore, in the case where the logout button cannot be pressed, the access user monitoring application 3
Reference numeral 6 denotes a WEB-ID 62 being accessed and an IP address 64 stored in the access user monitoring table 60.
In response to a PING at a set interval (whether or not an IP packet has reached the communication destination in the TCP / IP network,
Command to check if it is reachable via IP). If there is no PING response continuously for the set number, it is determined that the user has been disconnected, and the access user monitoring application 36 deletes the user ID from the access user monitoring table 60.

However, in the case of a user accessing from a leased line environment or a user who is moving to another WEB server even in the case of PPP connection, monitoring by PING of the access user monitoring application 36 is also required. Respond. In this case, the access user monitoring application 36 transmits the WEB-DB middleware last use LOG 67 on the access user monitoring table 60.
And the valid time 69 are checked, and the user ID whose ID valid time has passed since the last access LOG is deleted from the access user monitoring table 60.

In recent years, dial-up routers and firewalls have assigned a plurality of private addresses to one global IP address,
The Internet can be used from a plurality of terminals connected by such as. In this case, if a user different from the accessing user uses another WEB server, the user also responds to PING. For this reason, when performing a database service for general users, the transaction end processing using the valid time may be performed without fail.

A user who assigns and uses a plurality of private addresses to the same global IP address copies a cookie during access and sends the cookie to another user's client PC using the same global IP address. When copying and accessing, since the access user monitoring application 36 checks only the IP address and the cookie, both users can access. Even in this case, as described above, if progress management is performed by rewriting a cookie every time a page is moved between pages, even if both users have the same IP address and cookie, one user can move between pages. Then, since the content of the cookie is rewritten or the progress information is recorded in the access user monitoring table 60, only one user can receive the service. By managing the progress in this way, only one of the important services can be received, so even if there is a user who tries to access by copying the cookie, double login prevention and transaction management can be realized. .

According to this embodiment, the following effects can be obtained. Since the DB server 10 can be accessed through two types of access means of the CTI server 20 and the WEB server 30 to receive the database service, the database service can be provided not only by the telephone 4 or the FAX 5 but also by the personal computer 40. You can also receive. Therefore, the number of users who can receive the service increases, and various database services can be easily received.

The IDs recorded in the user table 50 and the access user monitoring table 60 are stored in each server 2.
Since the IDs are set corresponding to 0 and 30, different IDs can be set for the CTI server 20 and the WEB server 30 for the same user. For this reason, apart from the CTI-ID 51 which is usually composed only of numerals, WEB-ID
English characters and the like can be used as the ID 52, and an ID that is easy for the user or the like to understand can be set.

The user table 5 is stored in the DB server 10.
0 and an access user monitoring table 60 are provided.
A user who has accessed the DB server 10 via the TI server 20 or the WEB server 30 is double-checked whether the user is registered in the user table 50 or not and whether the user is recorded in the access user monitoring table 60. Since access is checked, even when a plurality of access servers 20 and 30 are provided,
Double access can be reliably prevented.

At the time of the database service via the WEB server 30, a cookie is sent to the user's personal computer 40 and the IP address of the user is obtained. Transaction processing can be realized.

Therefore, the database access management device 1 of this embodiment can reliably prevent double access,
In addition, since transaction processing can be realized, advanced database services such as bank balance inquiry can be realized by the WEB service and the CTI service. In particular, since the WEB service has a low operation cost for the user, the database service can be realized at low cost.

It should be noted that the present invention is not limited to the above-described embodiment, and modifications and the like within a range that can achieve the object of the present invention are included in the present invention.

For example, in the above embodiment, the CTI server 20 and the WEB server 30 are provided on the same LAN 2 as the DB server 10, but as shown in FIG.
On another LAN 80 connected to the LAN 2 via the provider 8 and the Internet network 7 or another WAN network (frame relay, ATM network, etc.), ie, DB
The server 10 may be provided on another LAN 80.

The personal computer 40 that receives the database service via the web server 30 may be provided on the LAN 2. In this case, an environment called an intranet is provided. In particular, a personal computer 40 connected to the LAN 2 in a company or the like is used to provide a database provided in the company.
The server 10 can be accessed. In this case, only the web browser software needs to be prepared for the client, so that the cost can be reduced.

In the above embodiment, two types of IDs, CTI-ID 51 and WEB-ID 52, are set.
These have the same ID, and the user table 50 and the access user monitoring table 60 also have the CTI-ID 51,
The WEB-ID 52 is put together into one ID, and the CTI-
The ID 61 and the WEB-ID 62 may be combined into one ID.

In this case, the user table 50 may be checked after checking whether there is an ID entered in the access user monitoring table 60 first. That is, a double access check is performed, and the user can be confirmed by the user table 50 only when the same ID does not exist.
All users do not need to access the user table 50, and data traffic can be reduced. In this case, if there is no corresponding ID in the access user monitoring table 60 and the access conditions in the user table 50 match, the access is permitted. Access user monitoring table 6
Writing the ID to 0 is usually performed after the confirmation in the user table 50 is completed. For example, while a user of a certain ID is confirming in the user table 50, another user accesses with the same ID. Considering the possibility, if there is no ID in the access user monitoring table 60, the ID is written on the spot, and then the user table 50
The ID written in the monitoring table 60 may be deleted only when the conditions in the above are not satisfied and the access is not permitted.

The number of digits of the CTI-ID 51 and the WEB-ID 52 and the types of characters and numbers used can be set arbitrarily. In addition, a similar method may be used when the system is designed to require input of a password in addition to the ID.

The validity time 68 of the CTI-ID and WEB
-The logout process using the ID validity time 69 is C
Other applications than the TI application 25 and the access user monitoring application 36, for example, another application on the DB server 10, or a client PC (personal computer 40) connected to the LAN 2 or the Internet network 7 may be used.

As the database access management device 1, only the CTI server 20 may be provided,
Only the B server 30 may be provided, and these may be set as appropriate according to the user of the provided database service.

Further, in the above-described embodiment, the IP address and the cookie are used to realize the transaction processing in the database service using the WEB server 30. For example, the personal computer 40 to receive the service is arranged on the intranet. In the case where the IP addresses of all the personal computers 40 are uniquely set as in the case described above, the transaction processing is realized by confirming the ID and the IP address when moving between pages without using a cookie. You may.

If the user is configured to rewrite the cookie every time the user moves between pages, transaction processing can be realized without checking the IP address.

Further, in the above embodiment, each server 1
Although each of 0, 20, and 30 is constituted by a separate computer, the CTI board 22, the DB engine 15, the CTI application 25, the WEB application 34, and other applications are incorporated in one or two computers. Alternatively, the function of each server may be realized by one or two computers.

[0082]

As described above, according to the database access management apparatus of the present invention, since the access user monitoring table is provided, it is possible to provide a database service in which double access by the user is prevented.

Further, in the case where a web server is used, transaction management data is written into a client's personal computer, and when the management data is confirmed when moving between pages, transaction processing can be reliably performed even in a database service using the web server. It can be carried out.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a database access management device according to an embodiment of the present invention.

FIG. 2 is a diagram showing a system configuration in the embodiment.

FIG. 3 is a diagram showing a configuration of a database table in the embodiment.

FIG. 4 is a diagram showing a configuration of a database access management device according to a modification of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Database access management apparatus 2, 80 LAN 3 Public line network 4 Telephone 5 FAX 6 Router 7 Internet network 8 Provider 10 DB server 14 DB table 15 DB engine 20 CTI server 22 CTI board 25 CTI application 26 CTI-DB middleware 30 WEB server 34 WEB application 35 HTML document 36 Access user monitoring application 37 WEB-DB middleware 40 Personal computer 50 User table 51, 61 CTI-ID 52, 62 WEB-ID 60 Access user monitoring table 63 Access type 64 IP address 65 Cookie random number 66 CTI -DB Middleware Last Use LOG 67 WEB-DB Middleware Last Use LOG 68 CTI-I Effective time of D 69 Effective time of WEB-DB 71 Data table

Claims (7)

[Claims] 1. A database management means for managing a database, and an access management means for managing access to the database, wherein the database management means stores user information including an ID of a user who can access the database. A recorded user table, and an access user monitoring table in which access information including an ID of a user who is accessing the database is provided; the access management means stores the ID of the user who has accessed the database in the user table. And has a function of detecting whether or not the user ID is recorded in the access user monitoring table and preventing double access by detecting whether or not the user ID is recorded in the access user monitoring table. Database access pipe Apparatus. 2. The database access management device according to claim 1, wherein the access management means includes a world wide web server used when a user accesses a database using the Internet, and the user table includes An ID for access from the World Wide Web server is registered for each user, and a field for recording the ID is provided in the access user monitoring table. The access management means accesses the World Wide Web server. A database access management device for performing user confirmation and double access check based on the user ID of the user. 3. The database access management device according to claim 1, wherein the access management means includes: a world wide web server used when a user accesses a database using the Internet; A computer telephony integration server used when accessing the database by utilizing the user table. An access ID is registered, and the access user monitoring table is provided with a field for individually recording the ID, and the access management means is configured to access the user from the one server. After the user is confirmed and the double access is checked based on the ID of the server, when the access is permitted, the ID for the other server is also written in the access user monitoring table. Database access management device. 4. The database access management device according to claim 2, wherein said access management means comprises:
When accessed from the World Wide Web server, transaction management data is newly created at the time of access and written to the access user monitoring table, and the transaction management data is transmitted to the user's computer via the World Wide Web server. When there is access from the World Wide Web server, the transaction management data sent to the computer of the accessing user matches the transaction management data written in the access user monitoring table. A database access management device, wherein only the access is permitted. 5. The database access management device according to claim 4, wherein the access management means, when accessed from the world wide web server, receives a user IP address in addition to the transaction management data.
The address is written in the access user monitoring table, and when there is access from the world wide web server, the transaction management data and the IP address sent to the computer of the accessing user are written in the access user monitoring table. A database access management device that permits the access only when the transaction management data and the IP address match. 6. The database access management device according to claim 4, wherein the transaction management data is rewritten each time a user moves to a different page on the world wide web server. Management device. 7. The database access management device according to claim 2, wherein the access management unit is configured to execute the access user monitoring table every time a user moves to a different page on the world wide web server. A progress information related to the page movement of the user.