JP4721738B2 - Double transmission discrimination method, double transmission discrimination device, and double transmission discrimination program - Google Patents

Description

  The present invention relates to a technique for discriminating double transmission.

In recent years, electronic commerce using a network has been performed. In electronic commerce, it is necessary to prevent double transmission of transaction data (product orders, settlement, etc.). For example, Patent Document 1 describes a double transmission check system that checks double transmission using a value determined by a one-way function of transmission data and a session start time.
JP 2003-256298 A

  By the way, in Patent Document 1, the client and the server cooperate to check double transmission. However, when various products are sold to a large number of unspecified clients connected to the Internet, it is difficult to add a function to each client for checking double transmission.

  Further, there are cases where one process (such as ordering products) is performed using a plurality of screens (Web pages), or a plurality of operation instructions can be performed on one screen. In such a case, the user may mistakenly transmit product order data twice while transitioning between a plurality of screens or while performing a plurality of operations.

  The present invention has been made in view of the above circumstances, and an object of the present invention is to detect duplex transmission from a client more easily and efficiently on the server side.

  In order to solve the above-described problem, the present invention is, for example, a double transmission determination method performed by an information processing apparatus, and the information processing apparatus includes a random number storage unit that stores a random number and a processing unit. The processing unit receives the first request from the terminal and generates a random number, a setting step for setting the generated random number in the random number storage unit, and a random number transmission step for transmitting the generated random number to the terminal The first reception step for receiving the first transmission data including the random number transmitted in the random number transmission step from the terminal, and the random number included in the first transmission data matches the random number set in the random number storage unit If the first transmission data is determined to be the first transmission and the random number in the random number storage unit is deleted, and the random number included in the first transmission data and the random number set in the random number storage unit do not match, A determination step of determining the first transmission data as double transmission.

  In the present invention, the double transmission from the client can be detected on the server side more easily and more efficiently.

  Embodiments of the present invention will be described below.

  In the present embodiment, an example of online trade will be described below. Online trading is stock trading through a network such as the Internet. A user such as an individual investor uses a client such as a PC (Personal Computer) to access a securities company website and buy and sell stocks online.

  FIG. 1 is an overall configuration diagram of an order receiving system to which an embodiment of the present invention is applied. The order reception system according to the present embodiment includes at least one client 1 and a server 2 as illustrated. Each client 1 and server 2 are connected by a network 3 such as the Internet.

  The client 1 is a device that accesses the server 2 via the network 3 and accepts user instructions to buy and sell stocks. The client 1 includes a display unit 11 and an instruction receiving unit 12 as illustrated. The display unit 11 has the same function as a general Web browser, analyzes the screen information received from the server 2, and displays it on an output device (not shown). The instruction receiving unit 12 receives an instruction from a user who operates the client 1.

  The server 2 is a device that accepts stock orders from each client 1. As illustrated, the server 2 includes a control unit 21, a random number generation unit 22, a table management unit 23, a screen information generation unit 24, a determination unit 25, and a storage unit 27. The control unit 21 controls the other units 22 to 25 and receives stock order data from the client 1. The random number generation unit 22 generates a random number that is a random value according to an instruction from the control unit 21. The table management unit 23 manages an ordering table 28 described later. The screen information generation unit 24 dynamically generates screen information to be transmitted to the client 1 based on each screen information 29 stored in the storage unit 27. The determination unit 25 determines whether or not the transmission data transmitted from the client is double transmission.

  The storage unit 27 stores at least one ordering table 28 and at least one screen information 29. The order table 28 is a table in which order contents received from the client 1 and random numbers are set, and is created for each client 1. The screen information 29 is a template (template) of screen information (Web page) provided by the server 2 to the client 1. Each screen information 29 is described in a markup language such as HTML (HyperText Markup Language) or XML (eXtensible Markup Language).

  Each of the client 1 and server 2 described above includes, for example, a CPU 901, a memory 902, an external storage device 903 such as an HDD, an input device 904 such as a keyboard and a mouse, a display and a printer as shown in FIG. A general-purpose computer system including an output device 905 such as a communication control device 906 for connecting to a network can be used. In this computer system, the CPU 901 executes a predetermined program loaded on the memory 902, thereby realizing each function of each device.

  For example, the functions of the client 1 and the server 2 are realized by the CPU 901 of the client 1 executing the program for the client 1, and the CPU 901 of the server 2 executing the program for the server 2, respectively. . It is assumed that the memory 902 of the server 2 or the external storage device 903 is used for the storage unit 27 of the server 2. In addition, regarding the input device 904 and the output device 905, each device is provided as necessary.

  Next, the order table 28 stored in the storage unit 27 of the server 2 will be described.

  FIG. 3 is a diagram showing an example of the ordering table 28. The ordering table 28 shown in the figure has a random number key 31, a brand 32, a stock number 33, and a price 34. The random number generated by the random number generation unit 22 is set in the random number key 31. The stock 32, the number of shares 33, and the price 34 are set with the stock ordering content received from the client 1, respectively. When the session between the client 1 and the server 2 is established, the table management unit 23 creates an ordering table 28 for the client 1 in the storage unit 27.

  Next, the screen displayed on the output device of the client 1 will be described. In the present embodiment, an order input screen, an order confirmation screen, an order acceptance completion screen, and an order acceptance error screen are used.

  FIG. 4A is a diagram illustrating an example of an order input screen.

  The order input screen shown in the figure includes a brand input column 41 for inputting the brand of the stock to be ordered (purchased), a stock number input column 42 for inputting the number of shares, a price input column 43 for inputting the purchase price (limit price) of the stock, A stock price display button 44 and an order confirmation button 45 are provided. The stock price display button 44 is a button for accepting an instruction to display the current stock price of the brand entered in the brand input field 41. When the stock price display button 44 is clicked, a pop-up window in which the stock price is set is displayed on the order input screen. The pop-up window is a new window displayed using a script. The order confirmation button 45 is a button for accepting an instruction to display an order confirmation screen for confirming the contents input in the input fields 41 to 43. When the order confirmation button 45 is clicked, an order confirmation screen shown in FIG. 4B is displayed.

  FIG. 4B is a diagram illustrating an example of an order confirmation screen. The order confirmation screen shown in the figure has an order detail display field 46, a return button 47, a stock price display button 48, and an order button 49. In the order detail display column 46, the brand, the number of shares, and the price entered on the order entry screen (FIG. 4A) are displayed. The return button 47 is a button for accepting an instruction to return to the previous screen (that is, the order input screen) of the order confirmation screen. The stock price display button 48 is the same as the stock price display button 44 on the order input screen.

  The order button 49 is a button for receiving a stock order instruction displayed in the order detail display field 46. In the case of the first ordering instruction, an order acceptance completion screen shown in FIG. 5A is displayed. When the ordering instruction is performed twice, an order acceptance error screen shown in FIG. 5B is displayed.

  It is assumed that hidden data 50 that is not displayed on the screen is set in the screen information of the order confirmation screen shown in the figure. That is, a random number generated by the random number generation unit 22 of the server 2 in the order reception process described later is set as hidden data 50 in the screen information of the order reception screen. The hidden data will be described later.

  FIG. 5A is a diagram illustrating an example of an order reception completion screen. The order reception completion screen shown in the figure includes a message 51 indicating that the order has been normally received, and a return button 52. The return button 52 is a button for accepting an instruction to return to the screen immediately before the order acceptance completion screen (that is, the order confirmation screen (FIG. 4B)). Similarly to the order confirmation screen, it is assumed that hidden data 53 that is not displayed on the screen is set.

  FIG. 5B is a diagram showing an example of an order acceptance error screen. The order reception error screen shown in the figure has an error message 56 indicating that an order has been received twice, and a return button 57. The return button 57 is a button for accepting an instruction to return to the previous screen of the order acceptance error screen (that is, the order confirmation screen (FIG. 4B)). Similarly to the order confirmation screen, it is assumed that hidden data 58 that is not displayed on the screen is set.

  Next, the order reception process of this system will be described focusing on the process of the server 2.

  FIG. 6 is a flowchart of the order reception process of the server 2.

  The instruction receiving unit 12 of the client 1 receives an instruction from the user and requests the server 2 for an order input screen. The control unit 21 of the server 2 receives the request from the client 1 and transmits the screen information of the order entry screen to the requesting client 1 (S11). That is, the control unit 21 reads the screen information 29 of the order entry screen from the storage unit 27 and transmits it to the client 1. Then, the control unit 21 waits for an instruction (request) from the client 1.

  Then, the display unit 11 of the client 1 analyzes the screen information of the order input screen received from the server 2 and displays the order input screen (FIG. 4A) on the output device. Then, the user uses the input device to input the brand, the number of shares, and the price in each input column of the order input screen, and clicks any instruction button. The instruction receiving unit 12 receives the input information input by the user and the clicked instruction and transmits them to the server 2.

  And the control part 21 of the server 2 receives input information and an instruction | indication from a client. Then, the control unit 21 determines whether or not the received instruction is an order confirmation instruction (S12). If it is not an order confirmation instruction, that is, if it is a stock price display instruction (S12: NO), the control unit 21 acquires the stock price of the brand of the received input information from a stock price database (not shown) and displays screen information for displaying the acquired stock price Is generated and transmitted to the client 1 (S13). The control unit 21 activates a predetermined program using CGI (Common Gateway Interface) or the like, and searches for a stock price or generates screen information indicating the stock price.

  The display unit 11 of the client 1 receives the stock price screen information, and displays a pop-up window in which the stock price is set on the currently displayed order input screen. Thereby, the user can change whether the number of shares or the purchase price is determined in consideration of the current stock price.

  On the other hand, in the case of an order confirmation instruction (S12: YES), the control unit 21 performs a predetermined check (for example, the presence / absence of a brand) for each received input information, and then generates a random number in the random number generation unit 22. Instruct. Then, the random number generation unit 22 generates a random number (S14). That is, the random number generation unit 22 generates a random number (or pseudo random number) using a predetermined algorithm or dedicated hardware. Examples of random number generation methods include a mixed congruential method, a Mersenne twister, and a hash function. As for the hash function, it is conceivable to generate a fixed-length pseudorandom number from the input information.

  Then, the table management unit 23 sets the random number generated by the random number generation unit 22 and the input information received in S12 in the ordering table 28 (see FIG. 3) of the requesting client 1 (S15). The table management unit 23 creates an ordering table 28 for each client 1 in the storage unit 27 at the timing when a session with each client 1 is established.

  Then, the screen information generation unit 24 generates screen information of the order confirmation screen (S16). That is, the screen information generation unit 24 acquires screen information 29 (template) of the order confirmation screen from the storage unit 27. Then, the screen information generation unit 24 sets the received input information and the generated random number in a predetermined part of the acquired screen information 29, and dynamically generates the screen information of the order confirmation screen.

  The screen information generation unit 24 embeds the generated random number in the screen information as hidden data. That is, in the case of screen information described using HTML, the screen information generation unit 24 uses the “INPUT” tag to add the following description to the screen information.

<INPUT TYPE = hidden NAME = Key VALUE = “random number”>
With “TYPE = hidden”, hidden data (random number set in VALUE, item name set in NEME) that is not displayed on the output device of client 1 can be transmitted to client 1.

  And the control part 21 transmits the screen information of the order confirmation screen which the screen information generation part 24 produced | generated to the client 1, and waits for the request from the client 1 (S17).

  And the display part 11 of the client 1 analyzes the screen information of the received order confirmation screen, and outputs an order confirmation screen (FIG.4 (b)) to an output device. Note that the random number of the hidden data is not displayed on the order confirmation screen displayed on the output device of the client 1 as described above. Then, the user confirms the brand, the number of shares, and the price displayed on the order confirmation screen, and clicks any instruction button. The instruction receiving unit 12 receives any instruction and transmits hidden data (random number and key) together with the instruction to the server 2 as input information of the client 1.

  Then, the control unit 21 of the server 2 receives hidden data and instructions from the client 1. Then, the control unit 21 determines whether or not the received instruction is an ordering instruction (S18). When it is not an ordering instruction (S18: NO), the control unit 21 further determines whether or not it is an instruction to return to the previous screen (S19). In the case of an instruction to return to the previous screen (S19: YES), the control unit 21 returns to S11 and transmits the screen information of the order input screen to the client 1.

In the case of a stock price display instruction (S19: NO), the control unit 21 transmits screen information for displaying the searched stock price to the client 1 as in S13 (S20). Then, the control unit 21 proceeds to S18 and waits for a request from the client 1.

  On the other hand, in the case of an ordering instruction (S18: YES), the determination unit 25 determines whether or not the random number of the hidden data received from the client 1 matches the random number key of the ordering table 28 of the client 1 ( S21). When both match (S21: YES), the determination unit 25 determines that the ordering instruction received in S18 is the first ordering instruction. Therefore, the control unit 21 performs a predetermined process for receiving an order for stocks having the brand, the number of shares, and the price set in the ordering table 28. And the table management part 23 initializes the value of each item set to the ordering table 28 (S22). That is, the table management unit 23 deletes the value of each item set in S15 and sets null (space).

  Then, the screen information generation unit 24 generates screen information of the order acceptance completion screen (S23). That is, the screen information generation unit 24 acquires the screen information 29 (template) of the order reception completion screen from the storage unit 27. Then, the screen information generation unit 24 generates screen information of an order reception completion screen in which the random number received in S18 (that is, the random number generated in S14) is set in a predetermined portion of the acquired screen information 29. Note that the screen information generation unit 24 sets a random number as the hidden data in the screen information as in S16. And the control part 21 transmits the screen information of the produced | generated order reception completion screen to the client 1 (S24).

  Then, the display unit 11 of the client 1 analyzes the screen information of the received order reception completion screen, and outputs the order reception completion screen (FIG. 5A) to the output device. Note that, as described above, random numbers that are hidden data are not displayed on the order acceptance completion screen displayed on the output device. Then, the user confirms that the stock order has been successfully received, and clicks the return button on the order acceptance completion screen. The instruction receiving unit 12 receives an instruction to return to the previous screen (order confirmation screen), and transmits hidden data (random number and key) together with the return instruction to the server 2 as input information of the client 1.

  Then, the control unit 21 of the server 2 receives the return instruction and the hidden data from the client 1, and returns to S16 (S25). That is, the screen information generation unit 24 sets the random number received in S25 (the random number generated in S14) in the screen information on the order confirmation screen (S16). And the control part 21 transmits the order confirmation screen produced | generated by S16 to the client 1 (S17), and receives the instruction | indication from the client 1 (S18).

  In the order confirmation screen displayed by the return instruction, when the return instruction is further received (S19: YES), the control unit 21 transmits the screen information of the order input screen to the client 1 (S11). Thereby, the user can input an order for a new stock. However, when the user erroneously inputs an ordering instruction again on the order confirmation screen displayed with the return instruction (S18: YES), the determination unit 25 and the random number of the hidden data received from the client 1 and the client 1 It is determined whether or not the random number key of the ordering table 28 matches (S21). In this case, in S22 of the first ordering instruction, each item of the ordering table 28 has already been initialized. Accordingly, since the random number received from the client 1 does not match the random number key of the ordering table (S21: NO), the determination unit 25 determines that it is a double ordering instruction.

  In this case, the screen information generation unit 24 generates screen information of the order reception error screen (S26). That is, the screen information generation unit 24 acquires the screen information 29 (template) of the order acceptance error screen from the storage unit 27. Then, the screen information generation unit 24 generates screen information of an order reception error confirmation screen in which the random number received in S18 (the random number generated in S14) is set in a predetermined portion of the acquired screen information 29. Note that the screen information generation unit 24 sets a random number as the hidden data in the screen information as in S16. And the control part 21 transmits the screen information of the produced | generated order reception error screen to the client 1 (S27). Then, the control unit 21 receives the return instruction and the hidden data from the client 1, and returns to S16 (S25).

  In the order receiving process described above, the ordering table is initialized after receiving the first ordering instruction (S22). On the other hand, screen information in which a random number of hidden data is set is transmitted to the client 1 (S24, S27). Thus, in the second and subsequent ordering instructions, since the ordering table is set to NULL, the random number keys do not match (S21: NO). Therefore, the server 2 can easily discriminate duplicate ordering instructions.

  Note that when the order confirmation screen that allows the ordering instruction is exited, that is, when the order input screen is returned (S19: YES), the control unit 21 does not set hidden data in the order input screen (S11). Therefore, the user can input the order data of a new stock in each input field of the order input screen, and can repeatedly perform the processes after S12.

  The embodiment of the present invention has been described above.

  In the present embodiment, whether or not the transmission data is the first transmission data or the double transmission is determined based on whether or not the random number key of the ordering table 28 matches the random number set as the hidden data in the screen information. Thereby, the double transmission of the client can be detected more easily and more efficiently on the server side.

  In the present embodiment, the order confirmation screen is displayed in response to the return instruction, and the double transmission can be determined even when the order button is clicked again. In this embodiment, a new order confirmation screen is displayed on the order confirmation screen due to a user's operation error (for example, “Ctrl key” and “N key” are input), and the order button is clicked on each screen. Even in this case, double transmission can be determined.

  Further, the order confirmation screen of this embodiment has a plurality of instruction (operation) buttons on one screen. As described above, even when a plurality of instructions are given on a screen having a plurality of instruction buttons, it is possible to appropriately determine whether or not the double transmission is performed. For example, after returning to the order confirmation screen by an instruction to return from the order acceptance completion screen, the stock price display button is clicked once, a stock price pop-up window is displayed, and then the order button is clicked again. Even in such a case, it is possible to appropriately determine the double transmission of the ordering instruction. That is, even when the order confirmation screen is changed and a new instruction button is added (a new function is added), the double transmission can be determined.

  In the present embodiment, all the determinations of the double transmission are performed on the server 2 side. Thereby, even transmission data from an unspecified number of clients 1 connected to the network can determine whether or not the transmission is double transmission.

  In the present embodiment, the screen information generation unit 24 of the server 2 sets a random number generated as hidden data in the screen information. That is, the random number is not displayed on the output device of the client 1. Therefore, the user can order stocks without being aware of the random number set in the screen information.

  In addition, this invention is not limited to said embodiment, Many deformation | transformation are possible within the range of the summary. For example, in the above embodiment, the order table 28 is created for each client 1. However, the present invention is not limited to this. For example, the data of all the clients 1 with established sessions may be set in one ordering table.

  Further, the server 2 of the present embodiment transmits an order acceptance error screen (see FIG. 5B) to the client 1 as error processing at the time of double transmission. However, the present invention is not limited to this, and when it is determined that double transmission is performed, the server 2 may perform error processing such as recording log information of double transmission in the storage unit 27.

It is a figure showing the whole order reception system composition to which one embodiment of the present invention is applied. It is a figure which shows the hardware structural example of each apparatus. It is a figure which shows an example of an order table. It is a figure which shows an example of an order reception screen and an order confirmation screen. It is a figure which shows an example of an order reception completion screen and an order reception error screen. It is a flowchart of an order reception process.

Explanation of symbols

  1: client, 11: display unit, 12: instruction receiving unit, 2: server, 21: control unit, 22: random number generation unit, 23: table management unit, 24: screen information generation unit, 25: determination unit, 27: Storage unit, 28: order table, 29: screen information, 3: network

Claims (6)

A double transmission determination method performed by an information processing apparatus,
The information processing apparatus includes a random number storage unit that stores random numbers, and a processing unit.
The processor is
Receiving a first request from the terminal and generating the random number;
A setting step of setting the generated random number in the random number storage unit;
A random number transmission step of transmitting the generated random number to the terminal;
A first reception step of receiving, from the terminal, first transmission data including the random number transmitted in the random number transmission step;
When the random number included in the first transmission data matches the random number set in the random number storage unit, the first transmission data is determined as the first transmission, and the random number in the random number storage unit is deleted. ,
When the random number included in the first transmission data does not match the random number set in the random number storage unit, a determination step of determining the first transmission data as double transmission is performed. Double transmission discrimination method. The method of determining double transmission according to claim 1,
The random number transmission step sets the generated random number as hidden data in response information to the first request, and transmits the response information in which the random number is set to the terminal. How to determine. The method of determining double transmission according to claim 1,
The second request to return to the previous screen from the terminal is accepted, the generated random number is set as hidden data in the screen information of the previous screen corresponding to the second request, and the random number is set to the previous screen. A previous screen transmission step of transmitting screen information to the terminal;
A second reception step of receiving, from the terminal, second transmission data including the random number transmitted in the previous screen transmission step;
The double transmission determination method, wherein the determination step determines whether or not a random number included in the second transmission data matches a random number set in the random number storage unit. The method of determining double transmission according to claim 1,
The information processing apparatus has the random number storage unit for each terminal,
The double transmission discrimination method, wherein the first transmission data is stock ordering data. A double transmission discriminating device for discriminating double transmission,
Random number storage means for storing random numbers;
Random number generating means for receiving a request from a terminal and generating the random number;
Setting means for setting the generated random number in the random number storage means;
Random number transmitting means for transmitting the generated random number to the terminal;
Receiving means for receiving, from the terminal, transmission data including a random number transmitted by the random number transmitting means;
When the random number included in the transmission data matches the random number set in the random number storage means, the transmission data is determined as the first transmission, and the random number included in the transmission data and the random number storage means are set. A discriminating means for discriminating that the transmission data is double transmission when the random number does not match;
When determining that the transmission data is the first transmission, the setting unit deletes the random number stored in the random number storage unit. A double transmission determination program executed by the information processing apparatus,
The information processing apparatus includes a random number storage unit that stores a random number, and a processing unit.
In the processing unit,
Receiving a first request from the terminal and generating the random number;
A setting step of setting the generated random number in the random number storage unit;
A random number transmission step of transmitting the generated random number to the terminal;
Receiving a first transmission data including the random number transmitted in the random number transmission step from the terminal;
When the random number included in the first transmission data matches the random number set in the random number storage unit, the first transmission data is determined as the first transmission, and the random number in the random number storage unit is deleted. ,
When the random number included in the first transmission data and the random number set in the random number storage unit do not match, a determination step of determining the first transmission data as double transmission is performed. A double transmission discrimination program.

Images