WO2003043297A2

WO2003043297A2 - Method of interconnecting sites for the exchange of data

Info

Publication number: WO2003043297A2
Application number: PCT/ES2001/000439
Authority: WO
Inventors: Luis Ignacio Cortes Serra
Original assignee: Luis Ignacio Cortes Serra
Priority date: 2000-10-31
Filing date: 2001-11-16
Publication date: 2003-05-22
Also published as: ES2178937A1; WO2003043297A3; ES2178937B1; AU2002223694A1

Abstract

The invention relates to a method of interconnecting sites for the exchange of data, each site comprising a catalogue of data. The inventive method comprises the following steps: a step involving the connection (1) of at lest one site to a management system which comprises at least one data structure with data for each of the sites; a first search step (2) which makes use of an inquiry carried out by said at least one site in relation to said at least one data structure stored in the management system; and a request step (4). The invention is characterised in that at each pre-determined time interval, the connected sites communicate their connection status and access point to the management system. Moreover, said inventive method is characterised in that it comprises a second search step (3), between the first search step and the request step, in which a communication is established between different sites for the exchange of data.

Description

INTERCONNECTION PROCEDURE BETWEEN SITES FOR THE

DATA EXCHANGE

The present invention relates to a method of interconnection between sites for the exchange of data in a secure and fluid way, making said remote access sites between them, sharing and consulting data catalogs and transactions between said sites.

BACKGROUND OF THE INVENTION

Interconnection procedures between sites for data exchange are known, each site presenting a data catalog, the procedure of which comprises a step of connecting at least one site to a central management system, which has at least one structure of data with data from each of the sites; a first stage of searching from a query made by said at least one site, on said at least one data structure stored in the central management system; and an order stage.

These procedures have a number of important drawbacks that are described below. First, the central management system does not receive real-time information on the connection status of each of the sites that have validated its connection on the central management system. In this way, the central management system knows that they have connected, but do not know their possible subsequent disconnection, which can lead to erroneous information delivery to the sites when sending the data. This is because, when a site wishes to connect to another site, it must do so through the central management system, which is the one that establishes the connection between these sites, or the system performs it. Central management system in its own name, said central management system sends an error message to the site making the query, due to lack of connection, which causes a significant loss of time, as well as high costs.

On the other hand, in the procedures described it is essential that all transactions and actions between sites go through the central management system, which opens a door through which the security and "privacy" of the users can be violated. data exchanges between different sites.

Following the same point, the known procedures described above also have the disadvantage that they have a very weak security barriers since they are based on symmetric keys.

DESCRIPTION OF THE INVENTION

With the process of the invention, the aforementioned drawbacks are resolved, presenting other advantages that will be described.

The interconnection procedure between sites for data exchange is characterized by the fact that every certain predetermined interval of time the connected sites communicate to the management system their connection status and their access point, and by the fact that it comprises a Second search stage between the first search stage and the order stage, in which communication between different sites is established, for the exchange of data.

In this way, it is achieved that, on the one hand, the management system knows the sites connected in real time and that the information transferred to the sites they consult is true to reality - and, on the other hand, allows maintaining a high level of security and "intimacy" in the data exchanges between sites, since communication takes place from site to site without the intervention of third parties.

Thus, the procedure intends that the sites can connect to each other without going through the management system, said management system being primarily for their mutual location, security and secure connection.

Advantageously, the step of connecting said at least one site to the management system comprises a call sub-stage in which the at least one site makes a call to the management system and sends a certificate for validation; a registration sub-stage in which the management system verifies if the site has been previously registered, inserting it, if so, in a data field of connected sites of said at least one data structure, or registering it, in the negative case , in a record data field of said at least one data structure; and a sub-stage of identification of the type of connection in which the management system detects the type of connection desired by the site, either to perform searches or to make its data available to the remaining sites.

This stage allows the identification of the sites that are connected, registering them in the case that they have not been registered before being the first time they connect. The use of certificates favors the establishment of a secure connection between the sites and the management system and between the sites themselves. Also advantageously, the first search stage comprises a sub-stage of search generation from a new search or from a previous search retrieved, towards the management system; a detection sub-stage in the site management system - that meets the parameters established in the search with respect to to the data stored for each site in said at least one data structure; and a sub-stage of delivery by the access point management system of the selected connected sites, to the site performing the search.

As stated above, the information regarding the access points of the sites that meet the parameters of the search performed by a given site is completely consistent with reality. The second search stage comprises an automatic search sub-stage in the data catalogs of the connected sites selected in the first search stage, from the search site; and a sub-stage of delivery of the data from the data catalog of the detected sites, to the site that performs the search.

This second search is carried out directly between sites, without the intervention of the management system, with the corresponding advantages that this supposes and that have already been commented previously. Preferably, the order stage comprises a sub-stage for receiving and selecting the data from the data catalogs of the connected sites selected in the first search stage, based on their display; a sub-stage of order submission to each of the connected sites selected in the first search stage, so that they accept or reject said order.

As is evident, in each transaction carried out a certificate of acceptance of the action is issued, as well as a confirmation record of the action. Preferably, in the registration data field, in the registration sub-stage, an identifier of the site to be registered is entered, and the access point of the site to be registered.

In this way - it is possible - to identify - in everything. moment the site, as well as establish a communication with the same.

In addition, in the registration data field, in the registration sub-stage, at least one keyword identifying the site to register is entered. With this, when a site performs a search, the management system accesses the data structure in which the keywords are stored, returning the access points of those sites whose keywords meet the parameters to the search site established in the search, in order that later said site performs the search of the data that it requires in the data catalog of said sites, directly addressing them through its access point without intervention of the management system. Also preferably, the access point of a site is its IP address, said IP address being normally dynamic.

The use of the TCP-IP protocol (Internet Protocol) allows connections between sites and between sites and the management system to be made through standards-based Telecommunications Networks, which allows the interconnection of sites from anywhere in the world.

Mainly, the registration sub-stage is done manually although it is also possible to perform it automatically.

Manual registration is based on that from each site all data (identifier, access point and keywords) are introduced, while ^'in the automatic registration, the management system is responsible for entering the keywords after a thorough evaluation from the site data catalog.

. According to a feature of the invention, the data stored in said at least one data structure may be encrypted. - - - -. -. . . In this way, the procedure increases its level of security regarding the intervention of third parties with intentions contrary to what is sought with the process of the invention.

In addition, in the delivery sub-stage by the access point management system of the selected connected sites, to the site that performs the search, such delivery can be made with the site identifier and the site access point encrypted with the public key of the certificate of the site that performs the search and signed with the private key of the management system certificate.

With this, it is possible to increase the level of security to prevent third parties outside the procedure from having access to confidential information. It is important to note that, at the order stage, the management system performs a "time stamping" to validate the order.

In this way, the management system acts at the level of virtual notary or virtual certifier. It is about giving the order of the company that makes the order a standard date and time worldwide, as well as a control number for subsequent validation.

On the other hand, it is important to note that the site that performs the search periodically issues to the management system a record in which the identifier and its access point are stored with the data signed with the private key of the site.

In this way, the management system constantly updates the data structure in which it stores the access points of the connected sites. The fact of doing it encrypted avoids the impersonation of the sites. BRIEF DESCRIPTION OF THE DRAWINGS

To better understand how much has been exposed, some drawings are attached in which, schematically and only by way of non-limiting example, a practical case of realization is represented.

Figure 1 is a flow chart of the interconnection procedure between sites for data exchange, object of the invention; Figure 2 is a flow chart of the connection stage of the procedure of Figure 1;

Figure 3 is a flow chart of the first step of searching the procedure of Figure 1;

Figure 4 is a flow chart of the second stage of searching the procedure of Figure 1;

Y

Figure 5 is a flow chart of the order step of the procedure of Figure 1.

DESCRIPTION OF A PREFERRED EMBODIMENT OF THE INVENTION

Next, the description of a possible implementation of the interconnection procedure between sites for the exchange of data will be carried out, in which the sites are the computers of a plurality of companies arranged in different locations worldwide. Each computer stores a catalog of data on the company's products. The management system is a management computer that stores all the data of the companies registered in a database.

As can be seen in Figure 1, the interconnection procedure comprises a step 1 of connecting the computer of a company (hereinafter referred to as -E) to the management computer through the Standard-based Telecommunications Networks , a first stage of search 2 of the computer of company E in the database of the management computer, a second stage of search 3 of the computer of company E in the data catalogs of the products of the companies stored in the selected computers in the first stage of search, and an order stage 4 in which the company's computer requests the desired products from the companies in question.

As can be seen in Figure 2, in connection stage 1, the company computer E makes a call 5 to the management computer, which answers 6 and waits for the company certificate E to validate it 7. If it does not receive the certificate, the management computer cuts the communication and returns to 5. If it receives the certificate then it verifies if the company E is registered 8. If it is not registered, it communicates to the computer of the company E that it must register and asks for an identifier and a series of keywords, and stores all the information in its database 9. If it has already been previously registered, it is stored in the database that the company is connected 10. At this point, the management computer must verify whether Company E's computer has been connected as a customer or as a provider. To do this, check if the company computer E activates its data catalog. You must make a "login" of user 11, and the company computer must periodically issue to the management computer a record in which the identifier and dynamic IP address of the company E is stored, so that the computer of management modifies in the database the IP address received 13. This issuance of the identifier and the IP address is made with the data signed with the private key, with the intention of avoiding personality impersonations. From this moment on, the management computer must verify - if it receives the registration of company E in the time intervals that it must receive it 14. If receives, is waiting to receive it again. If it is not received after a predetermined time has elapsed, the management computer terminates the company E as a registered and connected company 15, assuming that company E has cut off the communication.

As can be seen in figure 3, in the first search stage 2 (based on the fact that company E has connected as a client), the management computer must know if company E wants to establish a new search or if what it wants it really is to recover a previous search previously saved 16. If you want to recover a previous search, company E must know what search you want to retrieve and then search locally 17. Whatever option you choose, once the search is prepared, company E sends it to the management computer 18, which compares the search parameters with the keywords associated with each of the companies, connected at the time of the search and with its active catalog, and generates a record of the selected companies in which the identifier of each company and the current address P ^~ 19 are recorded. This record is sent to company E for further processing 20.

Figure 4 shows the flow chart of the second search stage 3. In it, once the registration with the identifier and the IP address of the selected companies 21 has been received, a business-to-business connection is made, without the intervention of the management computer 22. For this purpose, the search is sent to the selected companies, together with the identifier and the IP address of the company E, with the intention that each of them validates said information of the company E with the computer management 23. If the company is not validated correctly, the communication is automatically cut 24. Otherwise, - the products that match the product are searched for in the catalog of each previously selected company the search parameters and a new record is generated that includes the data of the products found, of the company and the number of Items that compose them 25. This record is sent to company E for processing and visualization 26.

As can be seen in figure 5, in order stage 4, company E is receiving the records of each of the companies consulted 27 and in parallel issues a record to verify if the companies consulted are still online and can continue to expect results 28 In the event that there is a company that does not continue online, it discards it for the reception of results 29 and enters a "batch" search process postponed 30. After a predetermined period of time, the connection is suspended. If companies are still online, still waiting for the results 27.

When all the results have been received, a composition is made to be visualized by company E 31. Once displayed, company E selects the desired products 32 and asks the management computer for a "time stamping" (stamp electronic with date and time and control number) of the register in which the order 33 is stored, that is, the management computer performs a notarized or virtual certification action. The registration is then sent (products, order number, date and time and control number) to each of the companies from which their products 34 have been selected, which receive it 35 and communicate to company E if they accept the order 36, previously checking the company that receives the order the certificate received, on the central computer. If accepted, company E issues a confirmation record of transaction 37 and sends it to the companies in question 38, which process it and generate a new record of ac-ep.ta-ci.on_.for the. company E 39. If 36 transactions between the company are not accepted E and the company or companies that receive the order end 40.

Although reference has been made to a specific embodiment of the invention, it is apparent to one skilled in the art that the described process is susceptible of numerous variations and modifications, and that all the mentioned details can be replaced by other technically equivalent ones, without depart from the scope of protection defined by the appended claims.

For example, it is possible to generate in the management computer for each action a "log" file to be able to perform statistics later.

Claims

1. Interconnection procedure between sites for the exchange of data, each site presenting a catalog of data, the procedure of which includes a stage of connection (1) of at least one site to a management system, which presents at least one data structure with data from each of the sites; a first search stage (2) from a query made by said at least one site, on said at least one data structure stored in the management system; and an order stage (4), characterized by the fact that every certain predetermined interval of time the connected sites communicate to the management system their connection status and their access point (13, 14, 15), and by the fact that it comprises a second search stage (3) between the first search stage and the order stage, in which communication between different sites is established, for the exchange of data.

2. The method according to claim 1, characterized in that the connection stage (1) of said at least one site to the management system comprises a call sub-stage (5, 6) in which the at least one site makes a call to the management system and sends you a certificate for validation; a registration sub-stage (9) in which the management system verifies if the site has been previously registered (8), inserting it, if so, in a data field of connected sites of said at least one data structure, or by registering it, if not, in a field of registration data of said at least one data structure; and a sub-stage of identification of the type of connection (11) in which the management system detects the type of connection desired by the site, either to make searches (12) or to make your data available to the remaining sites (13, 14, 15).

3. Method according to claim 1, characterized in that the first search stage (2) comprises a generation sub-stage and sent a search (18) from a new search (16) or from a retrieved previous search ( 17), towards the management system; a detection sub-stage (19) in the site management system that meets the parameters established in the search with respect to the data stored for each site in said at least one data structure; and a delivery sub-stage (20) by the access point management system of the selected connected sites, to the site that performs the search.

Method according to claim 3, characterized in that the second search stage (3) comprises an automatic search sub-stage (25) in the data catalogs of the connected sites selected in the first search stage (2) , from the search site; and a sub-stage of delivery of the data from the data catalog of the detected sites, to the site performing the search (26).

5. Method according to claim 4, characterized in that the order stage (4) comprises a reception sub-stage (27) and selection (32) of the data from the data catalogs of the connected sites selected in the first 'search stage

(2), from its visualization; a sub-stage of order submission (34) to each of the connected sites selected in the first search stage - (2), - -.to accept them. or reject said order.

Method according to claim 2, characterized in that in the registration data field, in the registration sub-stage (9), an identifier of the site to be registered is entered, and the access point of the site to be registered.

7. Method according to claim 6, characterized in that in the registration data field, in the registration sub-stage (9), at least one keyword identifying the site to be registered is entered.

Method according to any of the preceding claims, characterized in that the access point of a site is its IP address.

9. Method according to claim 8, characterized in that the IP address is a dynamic IP address.

Method according to any one of claims 2 to 9, characterized in that the registration sub-stage (9) is carried out manually.

Method according to any one of claims 2 to 9, characterized in that the registration sub-stage (9) is performed automatically.

12. Method according to any of the preceding claims, characterized in that the data stored in said at least one data structure is encrypted.

13. Procedure according to any of the claims 3 to 12, characterized in that, in the delivery sub-stage by the access point management system of the selected connected sites (20), to the site performing the search, said delivery is made with the identifier of the site and the site access point encrypted with the public key of the certificate of the site performing the search and signed with the private key of the management system certificate.

14. Method according to any of the preceding claims, characterized in that, at the order stage (4), the management system performs a "time stamping" to validate the order.

15. A method according to any of the preceding claims, characterized in that the site performing the search periodically issues to the management system a record in which the identifier and its access point with the data signed with the data are stored. site private key.