Information relay device, information relay method and information relay program

Abstract

To provide an information relay device for relaying user information provided from an information providing device and delivering it to an information receiving device at a lower financial cost and time cost by linking the information providing device and the information receiving device.SOLUTION: An information relay device 10 includes a relay storage unit 12, a user information acquisition unit P2, a transmission information generation unit P3 and a transmission unit P4. The relay storage unit 12 stores authentication information Cr for accessing an information providing device 20 that provides provider user information Up. The user information acquisition unit P2 is authenticated by the authentication information Cr, accesses the information providing device 20, acquires the provider user information Up from the information providing device 20, and causes the relay storage unit 12 to store the relay user information Ur on the basis of the provider user information Up. The transmission information generation unit P3 generates transmission information S having a prescribed format based on the relay user information Ur. The transmission unit P4 transmits the transmission information S to the information receiving device 30.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present invention relates to an information relay device, an information relay method, and an information relay program. [Background technology]

[0002] 2. Description of the Related Art Conventionally, there are business systems that provide various services by utilizing user information such as personnel information stored in a storage device in order to improve the efficiency of business operations of organizations such as companies.

[0003] For example, JP 2021-5310 A discloses a personnel evaluation support device in which information is input into a spreadsheet held on a device of a first user or a second user, the input information is sent to the personnel evaluation support device by a script executed by the spreadsheet software in response to user operation, an output control unit outputs a summary list displaying information regarding the evaluations of multiple first users to the device of the second user, and maps and displays the information regarding the evaluations of the first user in a predetermined display position on the spreadsheet software, and a data registration unit collectively acquires information representing the evaluations of multiple first users input by the second user via the spreadsheet software and registers it in a storage device.

[0004] In recent years, business systems have begun to be provided as SaaS (Software as a Service) from servers located on the cloud, making it easier for organizations to introduce multiple business systems tailored to their operations, departments, etc. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Patent Publication No. 2021-5310 Summary of the Invention [Problem to be solved by the invention]

[0006] However, when an organization introduces multiple business systems that use user information such as employee information, if the user information is not kept up to date, for example, if the user information is changed in one business system while not changed in the other, correct processing results cannot be expected from the business systems. In order to keep the user information in each business system up to date, in addition to manual management, methods such as using an API (application programming interface) for external connection to connect business systems and share user information can be considered, but APIs often have unique specifications developed to suit the business system, and in order to actually use an API, functions for accessing user information must be developed individually, which incurs significant financial and time costs.

[0007] Therefore, an embodiment of the present invention aims to provide an information relay device, an information relay method, and an information relay program that can be linked to relay user information provided by an information providing device and pass it on to an information receiving device with less financial and time costs. [Means for solving the problem]

[0008] An information relay device according to an embodiment includes a relay storage unit, a user information acquisition unit, a transmission information generation unit, and a transmission unit. The relay storage unit stores authentication information for accessing an information providing device that provides source user information. The user information acquisition unit receives authentication using the authentication information to access the information providing device, acquires the source user information from the information providing device, and stores relay user information based on the source user information in the relay storage unit. The transmission information generation unit generates transmission information having a predetermined format based on the relay user information. The transmission unit transmits the transmission information to an information receiving device.

[0009] In the information relay method according to the embodiment, a user information acquisition unit accesses an information providing device that provides source user information by receiving authentication using authentication information stored in a relay memory unit for accessing the information providing device, acquires the source user information from the information providing device, stores relay user information based on the source user information in the relay memory unit, generates transmission information having a predetermined format based on the relay user information by a transmission information generation unit, and transmits the transmission information to an information receiving device by a transmission unit.

[0010] An information relay program according to an embodiment includes code for a user information acquisition unit, code for a transmission information generation unit, and code for a transmission unit. The code for the user information acquisition unit receives authentication using authentication information stored in a relay storage unit for accessing an information providing device that provides source user information, accesses the information providing device, acquires the source user information from the information providing device, and stores relay user information based on the source user information in the relay storage unit. The code for the transmission information generation unit generates transmission information having a predetermined format based on the relay user information. The code for the transmission unit transmits the transmission information to an information receiving device. [Effects of the Invention]

[0011] According to an embodiment of the present invention, it is possible to provide an information relay device, an information relay method, and an information relay program that can link together user information provided by an information providing device and pass it on to an information receiving device at lower financial and time costs. [Brief explanation of the drawings]

[0012] [Figure 1] 1 is a block diagram illustrating an example of an overall configuration of an information processing system according to an embodiment. [Figure 2] 1 is a block diagram illustrating an example of an internal configuration of an information processing system according to an embodiment. [Figure 3] FIG. 2 is a block diagram illustrating an example of functional blocks of the information processing system according to the embodiment. [Figure 4] FIG. 2 is a table configuration diagram showing an example of relay user information stored in an information relay device in the information processing system according to the embodiment. [Figure 5] FIG. 2 is an explanatory diagram illustrating an example of transmission information generated by a transmission information generation unit in the information processing system according to the embodiment. [Figure 6] 10 is a flowchart showing an example of the flow of information relay processing in the information processing system according to the embodiment. [Figure 7] FIG. 10 is an explanatory diagram illustrating an example in which an information relaying device relays first source user information acquired from a first information providing device and second source user information acquired from a second information providing device in an information processing system related to variant example 1 of an embodiment, and transmits the transmission information to an information receiving device. [Figure 8] FIG. 10 is an explanatory diagram illustrating an example of use of an information processing system according to a second modified example of the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0013] (Configuration of the embodiment) Hereinafter, an embodiment will be described with reference to the drawings. FIG. 1 is a block diagram showing an example of the overall configuration of an information processing system 1. As shown in FIG.

[0014] 1, the information processing system 1 includes an information relay device 10, an information providing device 20, and an information receiving device 30. The information relay device 10 is connected to each of the information providing device 20 and the information receiving device 30 via a network such as a LAN, the Internet, or mobile communications, relays user information acquired from the information providing device 20, generates transmission information S having a predetermined format, and transmits it to the information receiving device 30. The user information is, for example, information related to personnel in an organization.

[0015] The information relay device 10 allows an administrative user to input instructions via an administrative terminal Ta such as a PC. Each of the information providing device 20 and the information receiving device 30 is a business system that provides business services to users, and performs predetermined business processing using user information by a business processing unit B in response to user instructions input via a business terminal T such as a PC. The predetermined business processing is not particularly limited, and may be, for example, a business related to accounting or human resources or labor, business chat, groupware, or IDaaS (Identity as a Service) that provides services such as SSO (Single Sign On), or other business.

[0016] Fig. 2 is a block diagram showing an example of the internal configuration of the information processing system 1. Fig. 3 is a block diagram showing an example of functional blocks. Fig. 4 is a table configuration diagram showing an example of relay user information Ur stored in the information relay device 10.

[0017] As shown in FIGS. 2 and 3, the information relay device 10 includes a relay control unit 11 and a relay storage unit 12.

[0018] The relay control unit 11 has a processing device such as a CPU, and executes a program read from the relay storage unit 12 to realize its functions.

[0019] The relay storage unit 12 has storage elements such as a ROM, RAM, HDD, and SSD, and stores various information for controlling the information relay device 10 and various programs constituting the processing unit. For example, the relay storage unit 12 stores various information including relay user information Ur, item correspondence information Cm, connection destination information Cn, authentication type Ct, and authentication information Cr, as well as various programs including a connection setting unit St, a request receiving unit P1, a user information obtaining unit P2, a transmission information generating unit P3, and a transmitting unit P4.

[0020] The relay user information Ur is user information stored based on the source user information Up acquired from the information providing device 20. The relay user information Ur has a table structure and includes items corresponding to attributes defined in SCIM (Systems for Cross-domain Identity Management) and some or all of the definitions extended from SCIM. For example, as shown in the table configuration illustrated in FIG. 4, the relay user information Ur includes, but is not limited to, items such as "email" that stores an email address, "displayName" that stores a display name, "familyName" that stores a family name, "givenName" that stores a given name, "active" that stores valid or invalid, "id" that stores identification information, "department" that stores an affiliation, and "userName" that stores a user name. Email addresses are convenient for uniquely identifying individuals, and in business systems, email addresses are sometimes used as login IDs or user names, and the email address is sometimes stored in the user name "userName."

[0021] The item correspondence information Cm associates items provided in the relay user information Ur stored in the relay memory unit 12 in the information relay device 10 with items provided in the source user information Up stored in the provider memory unit 22 in the information providing device 20.

[0022] The connection destination information Cn is the address of the information providing device 20 .

[0023] The authentication type Ct is information for identifying the type of HTTP authentication for accessing the information providing device 20. Although not particularly limited, as an example, the authentication type Ct makes it possible to identify the type of HTTP authentication such as Basic authentication, Digest authentication, Bearer token authentication such as OAuth2.0, and API key authentication.

[0024] The authentication information Cr is information used for HTTP authentication to access the information providing device 20 that provides the source user information Up. Although not particularly limited, examples of the authentication information Cr include a username and password used for Basic authentication or Digest authentication, an access token used for Bearer token authentication such as OAuth2.0, and an API key used for API key authentication.

[0025] The connection setting unit St accepts instruction input by the management user via the management terminal Ta regarding item correspondence information Cm, connection destination information Cn, authentication type Ct, and authentication information Cr associated with the information providing device 20, and stores the same in the relay memory unit 12.

[0026] The request receiving unit P1 receives an information provision request R from the information receiving device 30.

[0027] When the request receiving unit P1 receives an information provision request R, the user information acquisition unit P2 is authenticated using the authentication information Cr, accesses the information providing device 20, acquires source user information Up from the information providing device 20, and stores relay user information Ur based on the source user information Up in the relay memory unit 12 memory unit.

[0028] Specifically, the user information acquisition unit P2 reads the connection destination information Cn, authentication type Ct, and authentication information Cr corresponding to the information providing device 20 from the relay storage unit 12, and includes the connection destination information Cn in an HTTP request or an HTTPS request (hereinafter, an HTTP request will also include an HTTPS request), and also includes the access token, which is the authentication information Cr, in the HTTP header when the authentication type Ct indicates Bearer token authentication. Here, as an example, a case has been described in which the authentication type Ct indicates Bearer token authentication, but even in the case of well-known authentication methods such as Basic authentication, Digest authentication, and API key authentication, the user information acquisition unit P2 makes an HTTP request adapted to each authentication method.

[0029] When the user information acquisition unit P2 makes an HTTP request, it acquires the source user information Up returned from the information providing device 20. Based on the item correspondence information Cm read from the relay storage unit 12, the user information acquisition unit P2 associates the items in the source user information Up with the items in the relay user information Ur, and stores the associated items in the relay storage unit 12. For example, when the item correspondence information Cm associates the item "LoginID" in the information providing device 20 with the item "userName" in the information relay device 10, the user information acquisition unit P2 acquires the item "LoginID" and its value "ichiro@example.com" from the information providing device 20, and stores the value "ichiro@example.com" in the item "userName" in the relay user information Ur associated with the item "LoginID" based on the item correspondence information Cm.

[0030] FIG. 5 is an explanatory diagram illustrating an example of the transmission information S generated by the transmission information generating unit P3.

[0031] The transmission information generation unit P3 generates transmission information S having a predetermined format based on the relay user information Ur that the user information acquisition unit P2 has stored in the relay storage unit 12. More specifically, the predetermined format is a structured format in which keys and values ​​are paired, and even more specifically, a JSON format conforming to SCIM, which may include, as an extended attribute for a company, a "department" indicating a department or affiliation. The transmission information generation unit P3 reads the relay user information Ur from the relay storage unit 12, pairs keys corresponding to items included in the relay user information Ur with values ​​stored in the items, and performs mapping to generate transmission information S having a JSON format conforming to SCIM as shown in FIG. 5. For example, in FIG. 5, the transmission information generation unit P3 reads the item "userName" and value "ichiro@example.com" included in the relay user information Ur, and maps the key-value pair corresponding to the item "userName" "userName": "ichiro@example.com" into the JSON format. In the example of FIG. 5, the transmission information S includes one piece of relay user information Ur, but it is also possible to include multiple pieces of relay user information Ur by following other pieces of relay user information Ur in a predetermined format.

[0032] The transmitting unit P4 transmits (returns) the transmission information S generated by the transmission information generating unit P3 to the information receiving device 30.

[0033] Returning to FIGS. 2 and 3, the information providing device 20 includes a providing-side control unit 21 and a providing-side storage unit 22.

[0034] The provider control unit 21 has a processing device such as a CPU, and executes a program read from the provider storage unit 22 to realize its functions.

[0035] The provider-side storage unit 22 has storage elements such as a ROM, a RAM, an HDD, and an SSD, and stores various information for controlling the information providing device 20 and various programs constituting the processing unit. For example, the provider-side storage unit 22 stores various information such as provider user information Up, a program for the business processing unit B, and a program for the provider-side connection unit Ap.

[0036] The provider user information Up includes user information such as the user name and full name.

[0037] The provider-side connection unit Ap is, for example, an API that provides an external connection function. More specifically, the provider-side connection unit Ap performs, for example, Bearer token authentication on the information relay device 10 accessed from the outside, acquires an access token that is authentication information Cr included in the header of the HTTP request received from the information relay device 10, queries an authentication server (not shown) about the validity of the access token, and upon receiving a response that the access token is valid, extracts the provider user information Up and returns it to the information relay device 10. Here, as an example, an example in which the provider-side connection unit Ap performs Bearer token authentication has been described, but it may also be configured to perform well-known authentication such as Basic authentication, Digest authentication, and API key authentication.

[0038] The information receiving device 30 can receive the relay user information Ur from the information relaying device 10. The information receiving device 30 has a reception control unit 31 and a reception storage unit 32.

[0039] The reception control unit 31 has a processing unit such as a CPU, and executes a program read from the reception storage unit 32 to realize its functions.

[0040] The receiving storage unit 32 has storage elements such as ROM, RAM, HDD, SSD, etc., and stores various information for controlling the information receiving device 30 and various programs constituting the processing unit. For example, the receiving storage unit 32 stores various information such as receiving user information Uv, a program for the business processing unit B, and a program for the receiving side connection unit Av.

[0041] The recipient user information Uv includes user information such as the user name and full name.

[0042] The receiving side connection unit Av is capable of receiving the transmission information S that conforms to SCIM. When the receiving side connection unit Av receives the transmission information S, it stores it in the reception storage unit 32 as the recipient user information Uv. (operation) Next, the operation of the information relay device 10 will be explained.

[0043] FIG. 6 is a flowchart showing an example of the flow of the information relay process.

[0044] When the request receiving unit P1 receives an information provision request R from the information receiving device 30 (S1), the user information acquiring unit P2 reads the connection destination information Cn, authentication type Ct, authentication information Cr, and item correspondence information Cm corresponding to the information providing device 20 from the relay storage unit 12 (S2). Subsequently, the user information acquiring unit P2 transmits an HTTP request based on the connection destination information Cn, authentication type Ct, and authentication information Cr to the providing-side connection unit Ap of the information providing device 20 (S3). When the providing-side connection unit Ap replies with the providing source user information Up in response to the HTTP request, the user information acquiring unit P2 associates the items in the providing source user information Up with the items in the relay user information Ur based on the item correspondence information Cm, and stores the relay user information Ur in the relay storage unit 12 (S4).

[0045] The transmission information generation unit P3 acquires the relay user information Ur from the relay storage unit 12 (S5), and generates transmission information S having a JSON format that conforms to SCIM by mapping the relay user information Ur (S6).

[0046] In response to the information provision request R, the transmitting unit P4 returns the transmission information S generated by the transmission information generating unit P3 to the information receiving device 30 (S7).

[0047] That is, the request receiving unit P1 receives an information provision request R from the information receiving device 30. In response to receiving the information provision request R, the user information acquiring unit P2 acquires source user information Up from the information providing device 20 and stores relay user information Ur based on the source user information Up in the relay storage unit 12. The transmission information generating unit P3 generates transmission information S in a predetermined format based on the relay user information Ur. The transmitting unit P4 returns the transmission information S to the information receiving device 30.

[0048] According to the embodiment, the information providing device 20 can be easily linked by accepting instruction input from the management user via the management terminal Ta regarding the item correspondence information Cm, connection destination information Cn, authentication type Ct, and authentication information Cr associated with each information providing device 20, and storing the received instruction in the relay memory unit 12.

[0049] In addition, the information relay device 10 can transmit transmission information S in a JSON format that complies with the general-purpose SCIM based on the relay user information Ur stored in the relay memory unit 12, and if the information receiving device 30 already has a function for receiving information in a JSON format that complies with SCIM, there is no need to develop new information to receive the transmission information S.On the other hand, even if it does not have a receiving function, the SCIM specifications are made public, so the time and financial costs involved in developing a receiving function can be reduced.

[0050] According to the embodiment, the information relaying device 10 can cooperate with the information providing device 20 to relay user information provided by the information providing device 20 and pass it on to the information receiving device 30 with less financial and time costs.

[0051] (Variation 1) 7 is an explanatory diagram illustrating an example in which the information relaying device 10 in the information processing system 1 according to the first modification relays first source user information up1 acquired from the first information providing device 20 and second source user information up2 acquired from the second information providing device 20a, and transmits the transmission information S to the information receiving device 30. In the description of this modification, the same configuration as in the embodiment and other modifications will not be described.

[0052] In the embodiment, an example in which one information providing device 20 is provided has been described, but a plurality of information providing devices 20 may be provided.

[0053] The information processing system 1 in the first modification includes a first information providing device 20 and a second information providing device 20a.

[0054] When the request receiving unit P1 receives the information provision request R, the user information acquisition unit P2 in the information relay device 10 stores in the memory unit the first relay user information Ur1 based on the first source user information up1 acquired from the first information providing device 20 and the second relay user information Ur2 based on the second source user information up2 acquired from the second information providing device 20a.

[0055] When there is a missing item in the first relay user information Ur1, the transmission information generation unit P3 acquires the missing item from the second relay user information Ur2 and generates the transmission information S.

[0056] As a result, the information relay device 10 can generate transmission information S with more fulfilled items based on both the first source user information up1 held by the first information providing device 20 and the second source user information up2 held by the second information providing device 20a, and transmit it to the information receiving device 30.

[0057] (Variation 2) 8 is an explanatory diagram illustrating an example of use of the information processing system 1 according to Modification 2. In the description of this modification, the same configuration as in the embodiment and other modifications will not be described.

[0058] In the embodiments and , an example has been described in which the information providing device 20 transmits source user information Up to the information relaying device 10, the information relaying device 10 stores relay user information Ur based on the source user information Up in the relay memory unit 12, and transmits transmission information S based on the relay user information Ur to the information receiving device 30. However, this does not exclude the information receiving device 30 having the functions of the information providing device 20 and the information providing device 20 having the functions of the information receiving device 30. As shown in FIG. 8, the information providing device 20 which is also the information receiving device 30 may provide the source user information Up to the information relaying device 10, and the information relaying device 10 may generate transmission information S from the relay user information Ur based on the provided source user information Up and transmit it to the information receiving device 30 which is also the information providing device 20.

[0059] This allows the information relay device 10 to link the user information of the business systems with each other.

[0060] (Variation 3) In the information relay processing of the embodiment, in response to an information provision request R from the information receiving device 30, the information relay device 10 can relay all of the provider user information Up stored in the information providing device 20 and transmit it to the information receiving device 30, but it is also possible to include extraction key information in the information provision request R so that the provider user information Up corresponding to the extraction key information can be transmitted to the information receiving device 30. In the description of this modification, the same configuration as that of the other modifications of the embodiment will not be described.

[0061] When the information provision request R received by the request receiving unit P1 includes extracted key information corresponding to one or more items in the relay user information Ur, the user information acquisition unit P2 reads the item correspondence information Cm from the relay memory unit 12, matches the items included in the extracted key information corresponding to the relay user information Ur with the items in the source user information Up, includes it in a specified location such as a query parameter, path parameter, or HTTP header, and makes an HTTP request.

[0062] For example, if the item “userName” in the relay user information Ur is associated with the item “LoginID” in the source user information Up, when the request receiving unit P1 receives an information provision request R with “userName”: “ichiro@example.com” as the extracted key information, the user information acquiring unit P2 associates the item “userName” with the item “LoginID” in the source user information Up based on the item correspondence information Cm read from the relay memory unit 12, includes the extracted key information “LoginID”: “ichiro@example.com” in the HTTP request, and sends it to the information providing device 20. The information providing device 20 extracts the value “ichiro@example.com” in the item “LoginID” from the provider-side memory unit 22 and returns it to the information relay device 10 as the source user information Up.

[0063] This allows the information relay device 10 to relay only the user information specified in the extracted key information included in the information provision request R.

[0064] In the embodiment and variant examples, the information relay device 10 connects to the provider side connection unit Ap in the information providing device 20 and acquires the source user information Up, but this is not limited to this, and the information relay device 10 may acquire the source user information Up by scraping.

[0065] In addition, in the embodiment and the modified example, an example has been described in which the source user information Up is associated with the relay user information Ur using the item correspondence information Cm and stored in the relay memory unit 12. However, if the provider side connection unit Ap in the information providing device 20 transmits the source user information Up in a format that complies with SCIM, the user information acquisition unit P2 can store the relay user information Ur based on the source user information Up in the relay memory unit 12 without using the item correspondence information Cm.

[0066] Furthermore, in the embodiment and the modified example, in response to the information provision request R received from the information receiving device 30, the information relay device 10 acquires the source user information Up from the information providing device 20 and returns the relay user information Ur based on the source user information Up to the information receiving device 30. However, after receiving the information provision request R from the information receiving device 30, the information relay device 10 may return the relay user information Ur stored in the relay storage unit 12 to the information receiving device 30 without acquiring the source user information Up from the information providing device 20. Furthermore, after receiving the information provision request R from the information receiving device 30, the information relay device 10 may combine the relay user information Ur already stored in the relay storage unit 12 with the relay user information Ur based on the source user information Up acquired from the information providing device 20 and return it to the information receiving device 30.

[0067] Furthermore, in the embodiment and the modified example, an example has been described in which the information relay device 10 returns the transmission information S in response to the information provision request R received from the information receiving device 30, but this configuration is not essential, and the configuration may be such that, even if the information provision request R is not received, when the source user information Up is acquired from the information providing device 20, the transmission information S is generated and transmitted to the information receiving device 30, and the user information Uv is newly created or updated, or the configuration may be such that, after the source user information Up is acquired from the information providing device 20 at a predetermined timing, the transmission information S is generated and transmitted to the information receiving device 30, or even if the source user information Up is not acquired from the information providing device 20, the transmission information S is generated based on the relay user information Ur at a predetermined timing and transmitted to the information receiving device 30.

[0068] In addition, in the embodiment and variant examples, examples have been described in which authentication information Cr for accessing the information providing device 20 and the information receiving device 30 is stored in the relay memory unit 12, but when the information providing device 20 and / or the information receiving device 30 do not perform HTTP authentication, the authentication information Cr may not be necessary.

[0069] That is, the information relay device 10 has a relay memory unit 12 that stores authentication information Cr for accessing the information providing device 20 that provides the source user information Up, a user information acquisition unit P2 that is authenticated by the authentication information Cr to access the information providing device 20, acquires the source user information Up from the information providing device 20, and stores relay user information Ur based on the source user information Up in the relay memory unit 12, a transmission information generation unit P3 that generates transmission information S having a predetermined format based on the relay user information Ur, and a transmission unit P4 that transmits the transmission information S to the information receiving device 30.

[0070] The specified format is JSON format that complies with SCIM.

[0071] The relay storage unit 12 stores the relay user information Ur, and the transmission information generation unit P3 generates the transmission information S based on the relay user information Ur stored in the relay storage unit 12.

[0072] When the user information acquisition unit P2 acquires the source user information Up from the information providing device 20 and acquires the relay user information Ur based on the source user information Up, the transmission information generation unit P3 generates transmission information S in a predetermined format based on the relay user information Ur, and the transmission unit P4 transmits the transmission information S to the information receiving device 30.

[0073] The request receiving unit P1 receives an information provision request R from the information receiving device 30, the user information acquisition unit P2 acquires source user information Up from the information providing device 20 in response to receiving the information provision request R, and stores relay user information Ur based on the source user information Up in the relay memory unit 12, the transmission information generation unit P3 generates transmission information S in a predetermined format based on the relay user information Ur, and the transmission unit P4 transmits the transmission information S to the information receiving device 30.

[0074] The authentication information Cr is information used for HTTP authentication.

[0075] The information providing device 20 has a first information providing device 20 and a second information providing device 20a, and the user information acquisition unit P2 stores first relay user information Ur1 based on first source user information up1 acquired from the first information providing device 20 and second relay user information Ur2 based on second source user information up2 acquired from the second information providing device 20a in the relay memory unit 12, and the transmission information generation unit P3, when there are missing items in the first relay user information Ur, acquires the missing items from the second relay user information Ur2 and generates transmission information S.

[0076] The relay user information Ur is information relating to personnel in an organization.

[0077] The information relay method provides a relay memory unit (12) that stores authentication information (Cr) for accessing an information providing device (20) that provides source user information (Up), and the information relay method includes a user information acquisition unit (P2) that receives authentication using the authentication information (Cr) and accesses the information providing device (20), acquires the source user information (Up) from the information providing device (20), stores relay user information (Ur) based on the source user information (Up) in the relay memory unit (12), generates transmission information (S) having a predetermined format based on the relay user information (Ur) by a transmission information generation unit (P3), and transmits the transmission information (S) to the information receiving device (30) by a transmission unit (P4).

[0078] The information relay program causes a computer to execute the following code: a user information acquisition unit P2 that receives authentication using authentication information Cr stored in a relay memory unit 12 to access the information providing device 20 that provides the source user information Up, accesses the information providing device 20, acquires the source user information Up from the information providing device 20, and stores relay user information Ur based on the source user information Up in the relay memory unit 12; a transmission information generation unit P3 that generates transmission information S having a predetermined format based on the relay user information Ur; and a transmission unit P4 that transmits the transmission information S to the information receiving device 30.

[0079] As described above, the embodiments of the present invention have been described, but the embodiments are not limited to these, and various changes, modifications, etc. are possible within the scope that does not change the gist of the present invention.

[0080] Furthermore, the order of execution of each step of each procedure in the embodiments may be changed, multiple steps may be executed simultaneously, or the steps may be executed in a different order each time, as long as this does not contradict the nature of the steps. Furthermore, all or part of the steps of each procedure in the present embodiment may be realized by hardware or by a program. [Explanation of symbols]

[0081] 1. Information Processing System 10. Information relay device 11. Relay control section 12. Relay storage unit 20... Information provision device 20a... Second information providing device 21. Provider control unit 22...Provider side storage unit 30 Information receiving device 31 Receiving control section 32 Receiving memory unit B. Business Department Ap...Provider connection part Av··· receiving side connection Cm···Item compatibility information Cn...Connection information Cr... Certification Information Ct...Certification type ID···Login P1: Request receiver P2: User information acquisition section P3: Transmission information generation unit P4: Transmitter R···Information Request S Transmission information T···Business terminal St...Connection setting section Ta···Management terminal Up···Provided user information Ur···Relay user information Ur1: First relay user information Ur2: Second relay user information Uv Recipient information up1: User information from the first provider up2... Second provider user information

Claims

1. an intermediate storage unit that stores authentication information for accessing an information providing device that provides source user information; a user information acquisition unit that is authenticated by the authentication information, accesses the information providing device, acquires the source user information from the information providing device, and stores relay user information based on the source user information in the relay storage unit; a transmission information generating unit that generates transmission information having a predetermined format based on the relay user information; a transmitting unit that transmits the transmission information to an information receiving device; An information relay device having the above.

2. 2. The information relay device according to claim 1, wherein the predetermined format is a JSON format that complies with SCIM.

3. the relay storage unit stores the relay user information; the transmission information generation unit generates the transmission information based on the relay user information stored in the relay storage unit.

2. The information relay device according to claim 1.

4. The information relay device according to claim 1, wherein when the user information acquisition unit acquires the source user information from the information providing device and acquires the relay user information based on the source user information, the transmission information generation unit generates the transmission information in the specified format based on the relay user information, and the transmission unit transmits the transmission information to the information receiving device.

5. A request receiving unit is included, the request receiving unit receives an information provision request from the information receiving device, the user information acquisition unit acquires the source user information from the information providing device in response to receiving the information provision request, and stores the relay user information based on the source user information in the relay storage unit; the transmission information generation unit generates the transmission information in the predetermined format based on the relay user information; The transmitting unit transmits the transmission information to the information receiving device.

2. The information relay device according to claim 1.

6. 2. The information relay device according to claim 1, wherein the authentication information is information used for HTTP authentication.

7. the information providing device includes a first information providing device and a second information providing device, the user information acquisition unit stores, in the relay storage unit, first relay user information based on first source user information acquired from the first information providing device and second relay user information based on second source user information acquired from the second information providing device; when there is a missing item in the first relay user information, the transmission information generation unit acquires the missing item from the second relay user information and generates the transmission information.

2. The information relay device according to claim 1.

8. 2. The information relay device according to claim 1, wherein the relay user information is information relating to personnel in an organization.

9. a user information acquiring unit accessing an information providing device that provides source user information by receiving authentication using authentication information stored in an intermediate storage unit for accessing the information providing device, acquiring the source user information from the information providing device, and storing relay user information based on the source user information in the intermediate storage unit; A transmission information generating unit generates transmission information having a predetermined format based on the relay user information; a transmitting unit transmitting the transmission information to an information receiving device; An information relay method comprising:

10. a user information acquisition unit code for accessing an information providing device that provides source user information by receiving authentication using authentication information stored in a relay storage unit for accessing the information providing device, acquiring the source user information from the information providing device, and storing relay user information based on the source user information in the relay storage unit; a code for a transmission information generating unit that generates transmission information having a predetermined format based on the relay user information; a code for a transmitting unit that transmits the transmission information to an information receiving device; An information relay program that causes a computer to execute the above.

Images