JP2009042829A - Information function providing system, information function providing apparatus, information function providing method, and information function providing program - Google Patents

Abstract

Session information in a communication network is easily used by a Web service in the information network.
A communication network and an information network are connected via an information function providing device, and an API interface is provided for exchanging information between the communication network and the information network using an API function. The information function providing apparatus 3 acquires a request for session data from the Web service providing system 21 via the API interface 6 and acquires a response corresponding to the request for the session data from the communication node 11 to obtain the Web service providing system. 21.
[Selection] Figure 1

Description

  The present invention relates to an information function providing system, an information function providing apparatus, an information function providing method, and an information function providing program, and in particular, by using a standard API (Application Program Interface), session information in a communication network is stored in the information network. The present invention is suitable for application to a method for making it available on other web services.

Conventionally, the communication related data in the communication network is not held by each communication carrier in the communication network and provided to the outside, and moreover, it is not provided as an API. In order to access the database, it was necessary to provide a connection interface for each communication-related database.
FIG. 10 is a block diagram showing a method for accessing a communication relation database from a conventional application server.
In FIG. 10, applications 41 and 51 are installed in application servers 4 and 5, respectively, and communication relation databases 12 and 13 storing communication relation data are provided for each communication node. In order for the application 41 to access the communication relation databases 12 and 13, a connection interface is provided in the application server 4 for each of the communication relation databases 12 and 13, and for the application 51 to access the communication relation databases 12 and 13. The application server 5 is provided with a connection interface for each of the communication relation databases 12 and 13.

In addition, regarding API technology, a standard called “Parlay X 2.0” has been established by “The Parlay Group”, an industry group, in order to provide telecom information and telecom functions within a communication network to the outside by providing them on the Web. (Non-Patent Document 1).
In this “Parlay X 2.0” standard, API definition is provided in which a third party call control (3rd Party Call Control) function and a function related to terminal location information are converted to Web and provided as an API.
Parlay X Web Services Specification, Version 2.0

However, in the conventional method for accessing the communication relational databases 12 and 13, it is necessary to provide a connection interface for each of the communication relational databases 12 and 13, and the communication relation data in the communication network is provided by each telecommunications carrier. Since it is not stored and provided outside, there is a problem that the network cooperation service of the telecommunications carrier using the Internet is not convenient.
In addition, Non-Patent Document 1 does not define the details of devices that provide and execute API functions and their technologies. By using APIs, communication related data in a communication network can be transferred to Web services in the Internet. The method of making it available in is not disclosed.
SUMMARY OF THE INVENTION An object of the present invention is to provide an information function providing system, an information function providing apparatus, an information function providing method, and an information function providing program capable of easily using session information in a communication network with a Web service in an information network. Is to provide.

  In order to solve the above-described problem, according to the information function providing system according to claim 1, a web service providing system that provides a web service on an information network, a communication node provided in a communication network, and the web service An API interface for exchanging a request for session data from a providing system with an API function, a request for session data from the Web service providing system via the API interface, and the requested session data from the communication node And an information function providing device that provides the Web service providing system.

  According to the information function providing system according to claim 2, the information function providing apparatus includes a template element database for registering a chart format and a text format of information provided to the Web service providing system, and the Web service. A service element database for registering components of a service provided to a providing system, an ontology database for registering an ontology in which semantic information of information provided to the web service providing system is described, and the web service providing system A service management control function unit for authenticating access, and a session data request transmitted from the Web service providing system by an API function, and session data acquired from a communication node of a communication network A Web-compatible function unit that can be used in the Web service providing system and transmitted to the Web service providing system, a scenario server that instructs execution of a scenario specified by an API function transmitted from the Web service providing system, and the communication A node cache file for storing session data obtained from a node, and a communication control instruction according to the scenario, transferred to the communication node, and read from the session data obtained from the communication node or the node cache file An IMS-compatible function unit that transmits session data of a communication node to the Web service providing system via the Web-compatible function unit.

  According to the information function providing device according to claim 3, the session data request acquisition unit that acquires the request for the session data from the Web service providing system using the API function and the session data request acquisition unit acquire the request. Session data providing means for obtaining session data from a communication node provided in a communication network and providing the session data to the Web service providing system as a return value of the API function.

According to the information function providing apparatus of claim 4, the communication node is directly connected to the user management server of the accessor who has requested the session data, and the user management server via a transport layer or lower layer network. One or more communication servers, or the communication node is directly connected to the communication node including the user management server of the accessor who has requested the session data, and the user management server via a transport layer or lower layer network. And a communication node having one or more communication servers.
According to the information function providing device according to claim 5, the session data includes subscriber data, terminal data, communication network performance data, data associated with a change in the state of the communication network, and changes in the communication network. Notification data is included.

  According to the information function providing method of claim 6, the step of accepting a request for session data from a Web service providing system provided on an information network by an API function, and a scenario specified by the API function Acquiring from a scenario server; transferring a communication control instruction according to the scenario to a communication node provided in a communication network; and a user management server of an accessor who requested the session data via the communication node; Transferring a request for session data to one or more communication servers directly connected to the user management server via a transport layer or lower layer network, and providing the Web service providing system with the session data acquired from the communication server Providing a step to And features.

  According to the information function providing method according to claim 7, the step of receiving a request for session data from the Web service providing system provided on the information network by the API function, and the scenario specified by the API function Acquiring from the scenario server; transferring a communication control instruction according to the scenario to a first communication node provided in a communication network; and accessing the session data through the first communication node. A session data request to a second communication node including a user management server of the user and a third communication node having one or more communication servers directly connected to the user management server in a transport layer or lower layer network And the session data acquired from the third communication node Serial, characterized in that it comprises the steps of: providing a Web service providing system.

  According to the information function providing method of claim 8, the API function included in the session data request includes a function for instructing acquisition of a session record of a specific user and acquisition of wide area specific session data. A Web service providing system that includes at least one of the functions to be performed and that acquires a session record of the specific user, or a user of the Web service providing system communicates the session record based on a usage purpose criterion of the session The Web service providing system that acquires the wide area specific session data or the user of the Web service providing system determines whether the use of the network is appropriate or not according to the session traffic standard or the session traffic pattern standard for the wide area specific session data. Characterized by determining the malicious call Zui.

According to the information function providing method according to claim 9, the inheritance relationship or the equivalence relationship of the request for the session data is checked based on the ontology in which the semantic information of the information provided to the Web service providing system is described. And providing session data based on the affinity between the requests for session data.
The information function providing program according to claim 10 causes the computer to execute the information function providing method according to any one of claims 6 to 9.

As described above, according to the present invention, a user using a Web service can acquire session information in a communication network by using an API on an information network that is open to the public. Even if knowledge of communication-related data in the communication network is scarce, it is possible to use the communication network more comfortably, and it is possible to judge unauthorized use of communication from session records and traffic data as user data It becomes possible, and it is possible to detect and prevent a session recording of a specific user and a Dos attack against the specific user in a plurality of communication servers.
It becomes possible to do.

Hereinafter, an information function providing system according to an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a schematic configuration of a network to which an information function providing apparatus according to an embodiment of the present invention is applied.
In FIG. 1, a communication node 11 is provided in the communication network 1, and the communication network utilization data 11a is held in the communication node 11. The information network 2 is provided with a web service providing system 21 that provides a web service. The communication network 1 and the information network 2 are connected via the information function providing device 3, and an API interface 6 for exchanging information between the communication network 1 and the information network 2 using an API function is provided. Yes.

  The communication network 1 can be a telephone network, for example, and can be an information network 2 such as the Internet. The communication node 11 is, for example, a relay point on the communication network 1 or a computer installed there. The communication node 11 can include a user management server of the accessor who has requested the session data, and one or more communication servers directly connected to the user management server via a transport layer or lower layer network. Alternatively, the communication node 11 includes a communication node including a user management server of an accessor who has requested session data, and one or more communication servers directly connected to the user management server via a transport layer or lower layer network. Can be included.

  Here, the information function providing apparatus 3 can provide information and functions of the communication node 11 to the information network 2 by using the API interface 6. For example, the information function providing apparatus 3 acquires a request for session data from the Web service providing system 21 via the API interface 6, acquires the requested session data from the communication node 11, and sends it to the Web service providing system 21. Can be provided. Further, the information function providing apparatus 3 is provided with a node cache file 36 for storing session data obtained from the communication node 11, and stored in the node cache file 36 in response to a request for session data from the Web service providing system 21. The session data can be provided to the Web service providing system 21.

The session data can include subscriber data, terminal data, communication network performance data, data associated with a change in the state of the communication network, and communication network change notification data.
In this case, when providing the session data to the Web service providing system 21, the information function providing apparatus 3 can include a description sentence using a corresponding WSDL (Web Service Description Language). WSDL is a language specification based on XLM (Extensible Markup Language) for description in a Web service. The WSDL defines a method for describing what functions each Web service has and what requests are required to use the functions. Since the part that defines data and operation is separated from the part related to the communication protocol, the format can be reused regardless of the communication protocol and the encoding form.

The API interface 6 can exchange information and functions of the communication node 11 with the information network 2 using a WSDL description sentence including an API function, and an information function providing apparatus from the Web service providing system 21. The session data request to 3 can be made by exchanging API functions described in WSDL in the API interface 6.
Here, the API function included in the request for session data can include at least one of a function for instructing acquisition of a session record of a specific user and a function for instructing acquisition of wide area specific session data. .

Then, the information function providing apparatus 3 receives the API function included in the session data request via the API interface 6 and executes the session data request, thereby including the session data including the user's incoming record and outgoing record. Traffic data can be acquired from the communication node 11 and provided to the Web service providing system 21.
Then, the Web service providing system 21 or the user of the Web service providing system 21 that has acquired the session record of a specific user determines whether or not the communication network 1 is appropriate for the session record based on the intended use criteria of the session. Can do.

Alternatively, the Web service providing system 21 or the user of the Web service providing system 21 that has acquired the wide area specific session data can determine a malicious call for the wide area specific session data based on the session traffic standard or the session traffic pattern standard.
As a result, a user using the Web service can acquire session information in the communication network 1 by using an API on the information network 2 that is open to the public. Even when the knowledge of data is poor, it is possible to use the communication network 1 more comfortably, and it is possible to determine unauthorized use of communication from session records and traffic data as user data. It is possible to detect and prevent session recording of a specific user in a communication server and a DoS (Denial of Service) attack on the specific user.

FIG. 2 is a table showing an example of a communication relation inquiry type data API function used in the information function providing apparatus of FIG.
In FIG. 2, when acquiring the subscriber information data, the Web service providing system 21 can make a service request to the information function providing apparatus 3 using an API function “getSubscriberInformation”. When notifying the state change data of the terminal, the Web service providing system 21 can make a service request to the information function providing apparatus 3 using an API function “startNotification”. When the Web service providing system 21 notifies the data generated by the state change, it can make a service request to the information function providing apparatus 3 using an API function “StatusNotification”. When acquiring the bandwidth information data of the session, the Web service providing system 21 can make a service request to the information function providing apparatus 3 using an API function “getBandwidth”. When acquiring the packet loss status data, the Web service providing system 21 can make a service request to the information function providing apparatus 3 using an API function “getPacktLoss”. When acquiring the priority control information applied to the session, the Web service providing system 21 can make a service request to the information function providing apparatus 3 using an API function “getPriorityInformation”. When acquiring the congestion control information applied to the session, the Web service providing system 21 can make a service request to the information function providing apparatus 3 using an API function “getAppliedCongestionControl”. When acquiring the congestion information generated in the communication network, the Web service providing system 21 can make a service request to the information function providing apparatus 3 using an API function “getCongestionInformation”.

FIG. 3 is a block diagram showing a schematic configuration of the information function providing apparatus of FIG.
3, the information function providing apparatus 3 includes a template element database 37 for registering a chart format and a text format of information provided to the Web service providing system 21, and components of services provided to the Web service providing system 21. Service element database 38 for registering, ontology database 39 for registering ontology in which semantic information of information provided to Web service providing system 21 is described, and service management control function unit 33 for authenticating access from Web service providing system 21 The session data request received from the Web service providing system 21 is received by the API function, and the session data in the communication network 1 can be used by the Web service in the information network 2 to be used. Web-compatible function unit 32 that is transmitted to the service providing system 21, a scenario server 30 that instructs execution of the scenario specified by the API function transmitted from the Web service providing system 21, and a communication control instruction according to the scenario to the communication network 1. Transfer to the provided communication node 11, acquire the execution result of the communication control executed in the communication node 11, and transmit the execution result of the communication control to the Web service providing system 21 via the Web support function unit 32. Based on the affinity between the function unit 31, the session authentication function unit 34 that authenticates the session data acquired from the communication network 1, the node cache file 36 that stores the session data obtained from the communication node 11, and the request for the session data Affinity request generator that provides session data 0, Web service providing system 21 and the service bus 35 for relaying information exchanged between the Web-enabled function unit 32 is provided.

  Here, the scenario server 30 includes a scenario storage unit 301 that stores a scenario execution procedure, and a scenario execution unit 302 that instructs the execution of the scenario according to the execution procedure stored in the scenario storage unit 301. The unit 32 is provided with an API function storage unit 321 that stores an API function handled by the API interface 6, and the Web corresponding function unit 32 can function as the API interface 6 of FIG. 1.

  When a request for session data for the communication network 1 is made from the Web service providing system 21, Web data indicating the request for the session data is sent to the information function providing device 3 via the information network 2. Then, the Web data sent to the information function providing device 3 is sent to the Web corresponding function unit 32 via the service bus 35, and if the access is authenticated by the service management control function unit 33, the Web data is included in the Web data. The scenario specification specified by the API function is read from the API function storage unit 321 and transferred to the scenario server 30. Upon receiving the scenario designation, the scenario server 30 reads the scenario execution procedure from the scenario storage unit 301, and the scenario execution unit 302 instructs the IMS corresponding function unit 31 to execute the scenario according to the execution procedure. When the execution of the scenario is instructed, the IMS corresponding function unit 31 converts and relays the communication control instruction included in the execution procedure, and forwards it to the communication node 11.

  When the communication node 11 receives the communication control instruction from the IMS corresponding function unit 31, the communication node 11 executes the communication control and transfers the execution result of the communication control to the IMS corresponding function unit 31. When the IMS corresponding function unit 31 receives the execution result of the communication control, the IMS conversion function unit 31 performs protocol conversion and relay on the execution result and transfers the result to the Web corresponding function unit 32. When the session data acquired from the communication network 1 is authenticated by the session authentication function unit 34, the Web-compatible function unit 32 performs data conversion and protocol conversion on the execution result of the communication control by the communication node 11, and the API function Session data is provided as a return value to the Web service providing system 21 via the service bus 35.

  In addition, among the session data acquired from the communication network 1, the target session data when the access from the Web service providing system 21 is particularly large is stored in the node cache file 36, and the data is updated or held at a fixed time. Or updating or holding data indicating a state change of a certain level or more. Then, the Web-compatible function unit 32 uses the session data read from the node cache file 36 via the service bus 35 as the target session data when the access from the Web service providing system 21 is particularly large. 21. By providing the node cache file 36 in the information function providing device 3, the amount of communication between the communication network 1 and the information function providing device 3 can be reduced.

  Further, upon receiving the session data request, the affinity request creation unit 60 refers to the ontology database 39 to check the inheritance relationship or the equivalence relationship of the session data request, and the affinity between the session data request and the affinity request creation unit 60 Extract affinity requests greater than a predetermined value. Then, the affinity request creation unit 60 creates a scenario for the affinity request by referring to the template element database 37 and the service element database 38 and transfers the scenario to the scenario server 30. When the scenario created by the sum request creation unit 60 is transferred to the scenario server 30, the scenario execution unit 302 instructs the IMS corresponding function unit 31 to execute the scenario, and a session corresponding to the scenario. Data can be acquired from the communication node 11 and provided to the Web service providing system 21.

Note that the service management control function unit 33, the scenario server 30, the Web support function unit 32, the IMS support function unit 31, the session authentication function unit 34, and the affinity request creation unit 60 have instructions to execute the processes performed by these means. This can be realized by causing a computer to execute the described program.
If this program is stored in a storage medium such as a CD-ROM, the service management control function unit 33, by installing the storage medium in the computer of the information function providing device 3 and installing the program in the computer. The processing performed by the scenario server 30, the Web corresponding function unit 32, the IMS corresponding function unit 31, the session authentication function unit 34, and the affinity request creation unit 60 can be realized.

  In addition, a program in which a command for executing the processing performed by the service management control function unit 33, the scenario server 30, the Web support function unit 32, the IMS support function unit 31, the session authentication function unit 34, and the affinity request creation unit 60 is described. When executed by a computer, it may be executed by a stand-alone computer, or may be distributed to a plurality of computers connected to a network.

FIG. 4 is a block diagram showing a first example of a communication network to which the information function providing apparatus of FIG. 1 is applied.
In FIG. 4, a communication node 15 is provided in the communication network 1 of FIG. 1, and a user management server 151 and communication servers 152 to 156 of an accessor who has requested session data are provided in the communication node 15. The user management server 151 and the communication servers 152 to 154 are directly connected by a transport layer or a lower layer network.

In the communication node 15, the user management server 151 receives the wide area specific session data request from the information function providing device 3 and searches the session data record handled by the user management server 151 held in the communication node 15. Thus, a response to the wide area specific session data request can be created and transferred to the information function providing apparatus 3.
Further, when the user management server 151 receives the wide area specific session data request from the information function providing device 3, the user management server 151 can transfer the wide area specific session data request to the communication servers 152 to 154. Then, the communication servers 152 to 154 search the session data records respectively handled by the communication servers 152 to 154 held in the communication node 15, thereby creating responses for the wide area specific session data requests, respectively, and the user management server 151 can be transferred to the information function providing apparatus 3 via the terminal 151.

FIG. 5 is a diagram showing a first example of a function sequence of the information function providing apparatus of FIG.
In FIG. 5, when the Web service providing system 21 accesses the information function providing apparatus 3 with a wide area specific session data request described in WSDL including an API function (step S <b> 1), the service bus 35 makes a wide area specific session data request. Is relayed to the Web corresponding function unit 32 (step S2). When the Web corresponding function unit 32 receives the wide area specific session data request (step S3), the service management control function unit 33 performs user authentication (step S4). When the user is authenticated by the service management control function unit 33, the Web corresponding function unit 32 searches the API function storage unit 321 with the API function included in the wide area specific session data request, and corresponds to the API function. The scenario designation is read, and the scenario designation is transferred to the scenario server 30 (step S5).

  Then, the scenario server 30 reads the execution procedure of the API function included in the wide area specific session data request from the scenario storage unit 301, and the scenario execution unit 302 executes the function of the API function according to the execution procedure. The corresponding function unit 31 is instructed (step S6). Then, the IMS corresponding function unit 31 converts and relays the communication control instruction included in the execution procedure of the API function instructed from the scenario execution unit 302, and transfers it to the communication node 15 (step S7).

  Then, the communication node 15 executes the communication control instructed from the IMS compatible function unit 31 to transfer the session data handled by the user management server 151 held in the communication node 15 to the IMS compatible function unit 31. (Step S8). When the IMS compatible function unit 31 receives the session data handled by the user management server 151, the IMS compatible function unit 31 converts and relays the session data to the Web compatible function unit 32 (step S9). Then, the Web-compatible function unit 32 performs data conversion and protocol conversion on the session data handled by the user management server 151, and transfers the data to the service bus 35 as a return value of the API function included in the wide area specific session data request (step S10). The service bus 35 provides the session data handled by the user management server 151 to the Web service providing system 21 (Step S11), and the Web service providing system 21 acquires the session data handled by the user management server 151 (Step S11). S12).

In addition, when the communication node 15 receives the communication control instruction from the IMS compatible function unit 31, the user management server 151 transfers the communication control instruction from the IMS compatible function unit 31 to the communication servers 152 to 154 (step S13).
Then, the communication servers 152 to 154 execute the communication control sent from the user management server 151 (step S14), thereby communicating the session data handled by the communication servers 152 to 154 held in the communication node 15, respectively. The data is transferred to the IMS corresponding function unit 31 via the node 15 (step S15). Then, upon receiving the session data handled by the communication servers 152 to 154, the IMS corresponding function unit 31 performs protocol conversion and relaying of the session data, and transfers the session data to the Web corresponding function unit 32 (step S16). Then, the Web-compatible function unit 32 performs data conversion and protocol conversion on the session data handled by the communication servers 152 to 154, and transfers the data to the service bus 35 as a return value of the API function included in the wide area specific session data request (step S17), the service bus 35 provides the session data handled by the communication servers 152 to 154 to the web service providing system 21 (step S18), and the web service providing system 21 handles the sessions handled by the communication servers 152 to 154, respectively. Data is acquired (step S19).

FIG. 6 is a block diagram showing a second example of a communication network to which the information function providing apparatus of FIG. 1 is applied.
6, the communication network 1 of FIG. 1 is provided with a plurality of communication nodes 16 to 18 and communication servers 191 to 193, and the communication node 16 is provided with a user management server 151 of an accessor who has requested session data. The communication nodes 17 and 18 are provided with communication servers 161 and 171, respectively. The user management server 161 and the communication servers 171 and 181 are directly connected by a transport layer or lower layer network.

In the communication node 16, the user management server 161 receives the wide area specific session data request from the information function providing device 3, and searches the session data record handled by the user management server 161 held in the communication node 16. Thus, a response to the wide area specific session data request can be created and transferred to the information function providing apparatus 3.
When the user management server 161 receives a wide area specific session data request from the information function providing device 3, the user management server 161 can transfer the wide area specific session data request to the communication servers 171 and 181. Then, the communication servers 171 and 181 search the session data records handled by the communication servers 171 and 181 respectively held in the communication nodes 17 and 18, respectively, thereby creating a response of the wide area specific session data request, The information can be transferred to the information function providing apparatus 3 via the user management server 161.

FIG. 7 is a diagram showing a second example of a function sequence of the information function providing apparatus of FIG.
In FIG. 7, the information function providing apparatus 3 in FIG. 1 performs processing similar to steps S <b> 1 to S <b> 12 in FIG. 5, whereby the Web service providing system 21 acquires session data handled by the user management server 161. When the communication node 16 receives the communication control instruction from the IMS corresponding function unit 31, the user management server 161 transfers the communication control instruction from the IMS corresponding function unit 31 to the communication nodes 17 and 18 (step S20).

  The communication nodes 17 and 18 execute the communication control sent from the user management server 161 (step S21), and the sessions handled by the communication servers 171 and 181 respectively held by the communication nodes 17 and 18 respectively. The data is transferred to the IMS corresponding function unit 31 via the communication node 16 (step S22). When the IMS compatible function unit 31 receives the session data handled by the communication servers 171 and 181, the IMS compatible function unit 31 converts and relays the session data to the Web compatible function unit 32 (step S 23). Then, the Web corresponding function unit 32 performs data conversion and protocol conversion on the session data handled by the communication servers 171 and 181 respectively, and transfers them to the service bus 35 as a return value of the API function included in the wide area specific session data request (step S24), the service bus 35 provides session data handled by the communication servers 171 and 181 to the web service providing system 21 (step S25), and the web service providing system 21 handles the sessions handled by the communication servers 171 and 181 respectively. Data is acquired (step S26).

  When the Web service providing system 21 acquires the wide area specific session data, the malicious service is determined based on the session traffic standard or the session traffic pattern standard for the wide area specific session data, and the propagation path of the specific session is determined. Can do. For example, by using wide-area specific session data, it is possible to take measures by estimating that the amount of traffic unknown to the user is abnormally large, the time zone is midnight, and the physical direction seems to be a well-known jamming source. It becomes possible.

  FIG. 8 is a diagram showing a third example of a function sequence of the information function providing apparatus of FIG. In this third example, the information function providing apparatus 3 is accessed using an API function that instructs acquisition of a session record of a specific user. In this API function, transmission / reception of a session for each session user ID is performed. All or part of acquisition of records, acquisition of packet loss status data of this session, acquisition of priority control information applied to this session, and acquisition of congestion control information applied to this session can be performed. The data can be provided by specifying the recording period or time.

  In FIG. 8, when the Web service providing system 21 accesses the information function providing apparatus 3 by a session data request described in WSDL including an API function that instructs acquisition of a session record of a specific user (step S30), The service bus 35 relays the session data request to the Web function unit 32 (step S31). When the Web function unit 32 receives an API function instructing acquisition of a session record of a specific user (step S32), the service management control function unit 33 performs user authentication (step S33). When the service management control function unit 33 authenticates the user, the Web-compatible function unit 32 searches the API function storage unit 321 with an API function that instructs acquisition of a session record of a specific user, and the API function storage unit 321 searches for the API function storage unit 321. The scenario designation corresponding to the function is read, and the scenario designation is transferred to the scenario server 30 (step S34).

  Then, the scenario server 30 reads the execution procedure of the API function that instructs acquisition of the session record of a specific user from the scenario storage unit 301, and the scenario execution unit 302 executes the function of the API function according to the execution procedure. The IMS corresponding function unit 31 is instructed to do so (step S35). Then, the IMS corresponding function unit 31 converts and relays the communication control instruction included in the execution procedure of the API function instructed from the scenario execution unit 302, and forwards it to the communication node 15 (step S36).

  And the communication node 11 transfers the session data of the specific user hold | maintained in the communication node 11 to the IMS corresponding | compatible function part 31 by performing the communication control instruct | indicated from the IMS corresponding | compatible function part 31 (step). S37). When the IMS corresponding function unit 31 receives session data of a specific user held in the communication node 11, the IMS corresponding function unit 31 converts and relays the session data to the Web corresponding function unit 32 (step S38). . Then, the Web-compatible function unit 32 performs data conversion and protocol conversion on the session data of a specific user held in the communication node 11 and transfers the data to the service bus 35 as a return value of the API function included in the session data request. (Step S39), the service bus 35 provides session data of a specific user held in the communication node 11 to the Web service providing system 21 (Step S40), and the Web service providing system 21 provides the communication node 11 with the session data. Session data of a specific user held in step S41 is acquired.

Then, when the Web service providing system 21 acquires the session data of a specific user, for example, in the company, by determining whether the communication network 1 is appropriate for the session record based on the purpose standard of the session. It is possible to grasp the substance of employees' unauthorized communication and nuisance calls.
In the example of FIG. 8, the method in which the communication node 11 provides the session data of a specific user has been described. However, the communication server provided with the user management server provides the session data of a specific user. Also good.

  FIG. 9 is a diagram illustrating a fourth example of a function sequence of the information function providing apparatus in FIG. 1. In this fourth example, when a session data request is received from the Web service providing system 21, the category of the descriptive sentence of the session data request is determined and the ontology database 39 is referred to, thereby The inheritance relationship or equivalence relationship of the request is checked, and an affinity request having an affinity equal to or higher than a predetermined value is extracted with the session data request by the affinity request creating unit 60, and the template element database 37 and the service element database 38 are referred to. As a result, the affinity request scenario is created by the affinity request creation unit 60 and transferred to the scenario server 30. The user can obtain session data having a session ID having a high affinity with the designated session ID, and can obtain a session similar to a dubious session received in the past.

  In FIG. 9, when the Web service providing system 21 accesses the information function providing device 3 with the affinity specifying session data request described in WSDL including the API function (step S50), the service bus 35 receives the affinity specifying session data request. Is relayed to the Web corresponding function unit 32 (step S51). Then, when the Web corresponding function unit 32 receives the affinity specific session data request (Step S52), the service management control function unit 33 performs user authentication (Step S53). When the user is authenticated by the service management control function unit 33, the Web corresponding function unit 32 searches the API function storage unit 321 with the API function included in the affinity specification session data request, and corresponds to the API function. The scenario designation is read, and the scenario designation is transferred to the affinity request creation unit 60 (step S54).

  When the affinity request creation unit 60 receives the scenario designation from the Web-compatible function unit 32, the affinity request creation unit 60 determines the category of the descriptive sentence of the affinity specification session data request and refers to the ontology database 39 to thereby specify the affinity specification session data request. By examining the inheritance relationship or the equivalence relationship, extracting an affinity request having an affinity greater than or equal to a predetermined value between the affinity specific session data request and using the parts registered in the template element database 37 and the service element database 38, A scenario for the affinity request is created and transferred to the scenario server 30 (step S55).

  When the scenario server 30 receives the scenario created by the affinity request creation unit 60, the scenario execution unit 302 executes the function of the API function in accordance with the scenario execution procedure. (Step S56). Then, the IMS corresponding function unit 31 converts and relays the communication control instruction included in the execution procedure of the API function instructed from the scenario execution unit 302, and forwards it to the communication node 11 (step S57).

  And the communication node 11 transfers the session data hold | maintained in the communication node 11 to the IMS corresponding | compatible function part 31 by performing the communication control instruct | indicated from the IMS corresponding | compatible function part 31 (step S58). When the IMS corresponding function unit 31 receives the session data held in the communication node 11, the IMS corresponding function unit 31 converts and relays the session data to the Web corresponding function unit 32 (step S59). Then, the Web-compatible function unit 32 performs data conversion and protocol conversion on the session data held in the communication node 11, and transfers the data to the service bus 35 as a return value of the API function included in the affinity specification session data request (Step S60). The service bus 35 provides the session data held in the communication node 11 to the Web service providing system 21 (step S61), and the Web service providing system 21 acquires the session data held in the communication node 11. (Step S62).

  By using the API interface 6 in a standardized open function system, the present invention can obtain session data regarding a malicious call, unauthorized use, or a suspicious session on a communication network and the Web. Since it is possible to take measures against unauthorized use or suspicious sessions, it is possible to improve the sense of security for communication networks and Web usage, and contribute to the development of the communication industry and Web industry.

It is a block diagram which shows schematic structure of the network with which the information function provision apparatus which concerns on one Embodiment of this invention is applied. It is a list which shows an example of the communication related inquiry type | mold data API function used with the information function provision apparatus of FIG. It is a block diagram which shows schematic structure of the information function provision apparatus of FIG. It is a block diagram which shows the 1st example of the communication network to which the information function provision apparatus of FIG. 1 is applied. It is a figure which shows the 1st example of the function sequence of the information function provision apparatus of FIG. It is a block diagram which shows the 2nd example of the communication network with which the information function provision apparatus of FIG. 1 is applied. It is a figure which shows the 2nd example of the function sequence of the information function provision apparatus of FIG. It is a figure which shows the 3rd example of the function sequence of the information function provision apparatus of FIG. It is a figure which shows the 4th example of the function sequence of the information function provision apparatus of FIG. It is a block diagram which shows the access method to the communication relational database from the conventional application server.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Communication network 2 Information network 3 Information function provision apparatus 6 API interface 11, 15-18 Communication node 11a Communication network utilization data 21 Web service provision system 30 Scenario server 301 Scenario memory | storage part 302 Scenario execution part 31 IMS corresponding | compatible function part 32 Web corresponding | compatible Function unit 321 API function storage unit 33 Service management control function unit 34 Session authentication function unit 35 Service bus 36 Node cache file 37 Template element database 38 Service element database 39 Ontology database 60 Affinity request creation unit 161 User management server 152 to 156, 171 , 181, 191 to 193 Communication server

Claims (10)

A web service providing system for providing a web service on an information network;
A communication node provided in the communication network;
An API interface for exchanging a request for session data from the Web service providing system with an API function;
An information function providing apparatus that obtains a request for session data from the web service providing system via the API interface, obtains the requested session data from the communication node, and provides the requested session data to the web service providing system. An information function providing system characterized by The information function providing device includes:
A template element database for registering a chart format and a sentence format of information provided to the Web service providing system;
A service element database for registering service components provided in the Web service providing system;
An ontology database for registering an ontology in which semantic information of information provided to the Web service providing system is described;
A service management control function unit for authenticating access from the Web service providing system;
The Web service providing system receives a request for session data transmitted from the Web service providing system using an API function, and makes session data acquired from a communication node of a communication network available to a Web service in an information network. A web-compatible function unit that transmits to
A scenario server that instructs execution of a scenario specified by an API function transmitted from the Web service providing system;
A node cache file for storing session data obtained from the communication node;
The communication control instruction according to the scenario is transferred to the communication node, and the session data obtained from the communication node or the session data of the communication node read from the node cache file is transmitted via the Web-compatible function unit. The information function providing system according to claim 1, further comprising an IMS-compatible function unit that causes the Web service providing system to transmit. Session data request acquisition means for acquiring a request for session data from the Web service providing system using an API function;
Session data providing means for obtaining the session data obtained by the session data request obtaining means from a communication node provided in a communication network, and providing the Web service providing system as a return value of the API function. A characteristic information function providing apparatus. The communication node includes a user management server of an accessor who has requested the session data, and one or more communication servers directly connected to the user management server in a transport layer or a lower layer network,
Alternatively, the communication node includes a communication node including a user management server of an accessor who has requested the session data, and one or more communication servers directly connected to the user management server in a transport layer or lower layer network. The information function providing apparatus according to claim 3, further comprising:   5. The information according to claim 4, wherein the session data includes subscriber data, terminal data, communication network performance data, data associated with a change in communication network status, and communication network change notification data held by the communication node. Function providing device. Receiving a session data request from a Web service providing system provided on an information network by an API function;
Obtaining a scenario specified by the API function from a scenario server;
Transferring a communication control instruction according to the scenario to a communication node provided in a communication network;
The session data request is transferred to the user management server of the accessor who has requested the session data, and to one or more communication servers directly connected to the user management server via a transport layer or lower layer network via the communication node. Steps,
Providing the session data acquired from the communication server to the Web service providing system. Receiving a session data request from a Web service providing system provided on an information network by an API function;
Obtaining a scenario specified by the API function from a scenario server;
Transferring a communication control instruction according to the scenario to a first communication node provided in a communication network;
A second communication node including a user management server of an accessor who has requested the session data via the first communication node, and one or more directly connected to the user management server in a transport layer or lower layer network Transferring a request for session data to a third communication node having a communication server;
Providing the session data acquired from the third communication node to the Web service providing system. The API function included in the request for session data includes at least one of a function for instructing acquisition of a session record of a specific user and a function for instructing acquisition of wide area specific session data,
The Web service providing system or the user of the Web service providing system that has acquired the session record of the specific user determines whether the use of a communication network is appropriate for the session record based on the purpose of use of the session, or
The Web service providing system that acquired the wide area specific session data or the user of the Web service providing system determines a malicious call based on a session traffic standard or a session traffic pattern standard for the wide area specific session data. Item 6. The information function providing method according to Item 6 or 7. Examining a succession relationship or an equivalence relationship of the request for the session data based on an ontology in which semantic information of information provided to the Web service providing system is described;
The method for providing information function according to claim 6, further comprising: providing session data based on an affinity between requests for the session data.   10. An information function providing program that causes a computer to execute the information function providing method according to claim 6.

Images