WO2002042933A2

WO2002042933A2 - Method and arrangement for remote-controlled access to data and for data transmission

Info

Publication number: WO2002042933A2
Application number: PCT/EP2001/013673
Authority: WO
Inventors: Daniel Höpfner; Robert Glass; Jens Gützkow; Steffen Brünn
Original assignee: Robert Glass
Priority date: 2000-11-23
Filing date: 2001-11-23
Publication date: 2002-05-30
Also published as: DE10059931A1; DE10059931B4; AU2002224883A1; WO2002042933A3

Abstract

The invention relates to a method and an arrangement for remote-controlled access to data and for data transmission and to a corresponding computer programme product and a corresponding computer-readable storage medium, which can be used in particular to enable users to view and process application-specific file formats independently of the application by means of server-based applications, by web browser. The invention saves the user having to install application-specific software. The material can be displayed more rapidly, since the communication of the display data requires less bandwidth than the communication of the actual application data. A file will be sent to a central server and an application launched therein. The server is capable of recognising and displaying all current file types.

Description

Method and arrangement for remote access to

Data and for data transmission as well as a corresponding

Computer program product and a corresponding computer-readable storage medium

description

The invention relates to a method and an arrangement for remote-controlled access to data and for data transmission, as well as a corresponding computer program product and a corresponding computer-readable storage medium, which can be used in particular to transparently allow users to view and edit application-specific file formats without downloading via a web browser to enable.

When working in networks (internet, intranet, etc.), it is often possible to download files from a web page (web storage, email provider, etc.). There are several problems with this: firstly, it can involve a very large amount of data, and downloading takes a lot of time and money; on the other hand, the file leaves the previously defined space or workflow (special problem with document or content management systems) and is then saved locally (without the effective server-side security). Or it is a file in a special format, the execution program of which is not available on the client computer, which means that the file can neither be edited nor viewed. So far, the user clicks on the file that he wants to edit. If the browser knows the file format on the client computer, the file is then downloaded and displayed in the browser. That is, only the files for which the browser has a corresponding recognition or for which such is installed are displayed. The browser inherently recognizes the most common Internet file formats. After a user-initiated plug-in installation for special formats e.g. B. pdf files, these can also be displayed after a corresponding download. For all other file types, the user is asked to choose whether to "Run the file from this location" or "Save the file".

If the user clicks that he wants to save the file, he must select a directory of his NetDevice and then the file will be saved there.

If the user clicked "... execute from this location", the file will also be downloaded, temporarily stored in a temporary directory and as soon as this has been done, the associated program will be started. For example, if he clicks on a * .zip file and clicks on "... execute from this location", the file is downloaded, buffered in Te p and then z. B. started in WinZip. For graphic files that the browser does not recognize, the file is downloaded and the correspondingly installed graphic program is started. This means that every file, if it is to be edited or even viewed, must always be downloaded to the user, which means that various costs (e.g. traffic costs) and security problems (e.g. viruses) can occur. The order of magnitude of the downloads should be briefly clarified: with a modem at 33.6 Kbit / s, it takes between two and three minutes to download a file with a size of 500 KB; with an ISDN connection (64 Kbit / s) the process takes about a minute. However, if the file has a size of 10 MB, then it will take 40-45 minutes to download using a modem, and about 25 minutes using ISDN.

The magnitudes show that it sometimes takes a lot of patience and money to transfer a 7 MB file in order to determine that the content is of no interest to the user.

Another not insignificant problem is that the user has to have at least 10 different viewers, plugins and additional programs installed next to the basic system in order to work comfortably on his NetDevice. (E.g. Winzip, Adobe pdf-Viewer, ps-Viewer, Winrar, fg3-Viewer, gs-View, ...)

For the user, this means that he has to buy, maintain and update these additional programs, viewers and plugins just like a "normal" program.

The disadvantages with the previous procedure with

Files are therefore heavily dependent on the transmission rate of the available internet connection, time and costs for the download, the necessary availability of numerous additional programs, plugins and viewers, which are necessary due to the existence of the various formats, the necessity and the effort to regularly update and administer these additional programs, the costs incurred for the licensed use of these additional programs, a lack of effective protection against viruses, Trojan horses, hackers etc., in the fact that the file leaves the server and then locally is present.

Application Service Provider (ASP) e.g. B. try to overcome these disadvantages - at least in part. The main disadvantages of the previous approach, which has been followed, with service providers who offer applications via terminal service (e.g. based on Windows Terminal Server or Citrix, etc.) are illustrated by the following points:

User can only rent a specific, mostly very specialized portfolio of applications; You can only use these applications through cumbersome, costly, traffic-causing downloads of the files to be viewed or edited from the service provider to the client and a further upload to the ASP, and you still have no certainty that the ASP can work with this file format and has the right application in its portfolio; if you want to save the files back to their original location or service provider (email, web storage or workflow provider), you have to download the file from the ASP (if possible) and then again at your service provider after logging in again upload; the user is "obliged to bring" the files (user "brings" the file to the application), ie the user downloads the file, then an upload to his applications (to the ASP) is necessary; he has no guarantee that these applications react to all files with which the user works, and that these applications are automatically selected and started, with most ASPs you can only edit files that are also stored there the ASP only processes files that are stored with it, it enforces its services to a certain extent, since a file transfer or file management, especially of larger amounts of data, is associated with considerable effort to other service providers or to the client itself. The object of the invention is therefore to develop a method which overcomes the disadvantages mentioned and in particular enables the application-independent viewing and editing of application-specific file formats. At the same time, the invention is intended to achieve transmission times for documents, an increase in security and, at the same time, a reduction in transmission costs. Furthermore, the management and maintenance of data or files that are outsourced to an external server are to be improved. B. Files can be remotely created, copied or moved.

This object is achieved by the features in the characterizing part of claims 1, 11, 18 and 19 in cooperation with the features in the preamble. Appropriate embodiments of the invention are contained in the subclaims.

A particular advantage of the invention is that in the method for remote-controlled access to data and for data transmission from a user via a data processing device 1 requested on a first data transmission path 2 and stored on a first computer system 3, data stored on a second data transmission path 4 to a second Transfer computer system 5, there determine and start the applications associated with the transmitted data, the transmitted data are read in and evaluated by these applications, then the results of this evaluation are transmitted via a third data transmission path 6 to the data processing device 1 of the user and are made available there , An arrangement for remote-controlled access to data and for data transmission is advantageously equipped with a processor which is set up in such a way that remote-controlled access to data and data transmission can be carried out such that a user can use a data processing device 1 connected to a first data transmission path 2 Transfer requested data stored on a first computer system 3 to a second computer system 5 via a second data transmission link 4, there determine and start the applications associated with the transmitted data, read in and evaluate the transmitted data from these applications, and then the results of this evaluation via a third Data transmission link 6 is transmitted to the data processing device 1 of the user and made available there.

A computer program product for remote access to data and for data transmission comprises a computer-readable storage medium on which a program is stored which enables a computer, after it has been loaded into the memory of the computer, to carry out remote controlled access to data and data transmission In such a way that data requested by a user via a data processing device 1 connected to a first data transmission path 2 and stored on a first computer system 3 is transmitted to a second computer system 5 via a second data transmission path 4, where the applications associated with the transmitted data are determined and started , the transmitted data read in and evaluated by these applications, then the results of this evaluation via a third data transmission link 6 is transmitted to the data processing device 1 of the user and made available there.

A computer is advantageously stored on a computer-readable storage medium for remote access to data and for data transmission, which program enables a computer, after it has been loaded into the memory of the computer, to carry out remote controlled access to data and data transmission in such a way that one Via a data processing device 1 connected to a first data transmission path 2 and stored on a first computer system 3, users transfer data via a second data transmission path 4 to a second computer system 5, where the applications associated with the transmitted data are determined and started, and the transmitted data is read in by these applications and evaluated, then the results of this evaluation are transmitted via a third data transmission link 6 to the data processing device 1 of the user and made available there.

Another advantage is that

Use of standard software and standard

Procedures a high maintainability of the data or files is guaranteed.

It is also to be regarded as advantageous that when the invention is used on the part of the service provider, there is an easy-to-integrate solution. An algorithm can be provided on the server side to simplify and / or accelerate the integration of this method on the part of the service provider. After viewing or processing the data on an application server (the second computer system 5)

The (inventive) stored file by the user enables the user to return the (changed) documents to their place of origin

(to save the first computer system 3) or to save it as a new file, which is particularly advantageous for file management when using web space.

Compared to conventional solutions, the method offers a significant reduction in transmission rates and times due to a direct connection to the backbone and the transmission of only graphic information to the user / client. By using the invention, a user is no longer forced to install the appropriate application software for each data format. This in turn leads to a reduction in the memory requirement and to a simplification of the update processes. Since the process no longer transfers the individual files, but only the graphic information, it makes the transmission of viruses almost impossible.

Another advantage of the invention is that, through its use, devices can also be used for displaying documents that could not previously be used, such as. B. entertainment consoles.

An advantage of the method according to the invention lies in the simple, intuitive usability. Training is not necessary. Likewise, the user does not need to read any further documents on using the system. The work and the work steps will not change for the user through the inventive method. The invention will be explained in more detail below on the basis of an exemplary embodiment shown at least partially in the figures.

Show it:

1 shows the schematic sequence of the method, FIG. 2 shows a schematic system structure of the online file service, FIG. 3 tests the file type.

The sequence in which the steps of the method according to the invention follow one another in the exemplary embodiment described can be structured as follows (cf. FIG. 1):

1. the client activates a link to an application-specific document on a web page, possibly a link to its own file stored at a web space provider;

2. the link leads to a server of a first service provider with an embedded URL of the document, for. B. http://www.mydomain.de/bild.pdf;

3. a server-side program causes the image.pdf file to be transferred to the application server of a second service provider (of the method according to the invention);

4. The document is temporarily loaded on the application server of the second service provider and, after various tests for precisely determining the document type, a corresponding application is started for the document to be displayed and / or edited; 5. the display data of the application are sent to the client using a special protocol (terminal protocol);

6. The terminal client is initialized on the client and makes the data of the application server requested by the client available.

The server-side program, which ensures that the requested document is not downloaded to the client's NetDevice and displayed there, but is instead transferred to the application server, can be local to the client (generally applicable - applicable to all files on the network) as well implemented at the service provider (applicable to files stored with this provider).

Due to the fact that the complexity of the application programs is shifted from the user to the service provider, the system that is implemented on the application server now uses the corresponding application in the method, which can display a wide range of document formats. Formats that the application server should advantageously always provide are, for example: Text formats: pdf, ps, eps, ps.z, gs, dvi;

Microsoft Office: doc, dot, rtf, xls, xlt, ppt;

Help files: hlp;

Program sources: bas, c, cc, ...

Fax files: fax, fg3, fg4, ... other: txt, inf, bak, fon, tex, ... image formats: bmp, dib, rle, jpg, jpeg, jpe, gif, pcd, pcx, tif, tiff, img, png, ... Graphics: cdr, cch, cmx, cpt, ... Compression formats: zip, arj, are, gz, tar, ...

The programs required to display and edit the various formats are executed on an application server of the provider. The output generation takes place on this application server. The output data generated in this way is only displayed to the user by a terminal client, so that complete applications do not have to be started on the user computer.

Standard terminal software is used to transfer the data to be displayed to the client.

The heart of the online file service is the preprocessor 7 (cf. FIG. 2) with the associated database 18 and the memory logic 19 used. All configurations for service providers and users are kept in the database (Config DB 18). These are firstly the identification information of the service provider, secondly the assignment of file type to application and thirdly further information about the user. The preprocessor is used to analyze the parameters passed by the client (client parameter 8) and to generate the document to be displayed and to select a suitable application. The preprocessor 7 prepares the data contained in the client parameter 8 in such a way that a special application with defined data can be started. Three subcomponents are used for this: the Validator 9, the Loader 10 and the Analyzer 11. The meaning and purpose of the preprocessor 7 result from the fact that the client parameters 8 passed on and the documents resulting therefrom do not necessarily contain valid data and preparation for the subsequent program steps is therefore necessary. The application to be loaded and the document to be displayed must be defined in these.

The preprocessor first passes the transfer parameters to the validator 9. The validator 9 checks the transferred client parameters 8 for syntactic and semantic correctness. The loader 10 loads the document to be displayed and the analyzer 11 checks the document type.

The validator 9 checks the transferred client parameter 8 for syntactic and semantic correctness. The validator 9 takes the transfer string 8 and checks it for validity: it is a string that can be validated according to the transferred identification string. All parameters that were passed with the

Service providers have been negotiated to the

Identification string belongs - One of the parameters is a URL, this is:

■ a valid, RFC-compliant URL,

The URL describes a resource that can be reached by the application server,

■ The URL points to a host that has been configured as authorized for the service provider. The data transferred from the preprocessor 7 to the validator 9 consist of all parameters that were transferred from the client. Information is returned from the validator 9 to the preprocessor 7, the information about the URL syntax, the protocol used, the storage location of the document and possibly. made mistakes.

The loader 10 has the task of loading the document with the transferred URL. To do this, the preprocessor passes the URL that it should load. After 4kB, the loader provides the preprocessor with the information that it has loaded sufficient data for the validation.

The preprocessor transfers the location of the loaded document to the analyzer 11. The analyzer 11 then uses various tests to check the unique file type <DType>: (FIG. 3)

1. "Magic Number Test" The data are checked according to the industry standard. The first bytes of the document are compared against a table with assignments. The "Magic Number" is used to determine the file type <DType>.

2. Transfer type - MIME type - which was transferred from the server of the service provider (only if the protocol provides for such transfer). The file type <DType> is determined using the MIME type.

3. Document suffix - The file is tested for its file extension. The file type <DType> is determined using the document suffix. The tests are compared and evaluated according to a configurable weighting.

When the loader 10 has completely loaded the file, it saves the data in its own distinct directory. He then passes the message to the preprocessor 7 that the data is complete and the application can be started.

An acceptance test is performed during these steps. The test conditions result from the "Acceptance Test Information" of the subcomponents Validator 9, Loader 10, Analyzer 11. Each error condition there must return an error status to the client.

The session manager 16 initializes the session via the data transmission software. The application with the document to be displayed is mapped onto the display generated in this way. Closing the client application ends the session. The session manager 16 then deletes the document file.

The application called by Session Manager 16 must run under an unprivileged UID. The entire application also runs in a chroot environment in the directory of the file to be displayed.

The loader editor 14 is used to create and manage the loader configuration data. This configuration data is kept in a database 18 and can be managed via a standard DB interface or a GUI 20. The analyzer editor 15 is used to create and manage the analyzer configuration data. This configuration data is kept in a database 18 and can be managed via a standard DB interface or a GUI 20.

Every step that does not lead to success returns a return parameter that sends an error status to the client with an error display application and ends the session.

If all subcomponents were successful, the

Preprocessor 7 a loading string for the session manager

16 together:

First, the preprocessor 7 determines and transfers from the config DB 18 which application for the

Display of the document type comes into question. The

The application can be configured differently depending on the service provider.

In addition, it transfers the location of the file.

The user has the option of saving the file modified by him again and transferring it back to the original system (the first computer system 3). The memory logic 19 is used for this. This picks up the storage process at the operating system level of the application server and transmits the data transparently for the user - in a way configured with the service provider to the origin server. The storage path can be any method that can be used in a network. Currently, http (PUT / POST), ftp or SMTP are available. Other transmission options can also be considered later. As a hardware platform for the process (with the online file service provider / application provider), depending on the expected number of accesses, a server farm of small to medium configuration is required. The actual requirements can be determined through extensive benchmarking.

The individual sessions should take place in a secure environment consisting of a special UID and chroot environment. More precise specifications will emerge from the benchmarking and depend on the software environment used.

An explicit expandability initially refers to additional applications that can be used in the backend. By using simple and logical interfaces and configuration data, an optimal expandability is achieved here. This is also ensured through the use of standard software. Compatibility with future product versions is also ensured. This results in a high level of investment protection and the security of being able to participate in new developments.

One advantage of the online file service is its simple, intuitive usability. Training is not necessary. Likewise, the customer does not need to read any further documents on using the system. The online file service does not provide the user with any further PC experience. After loading the browser plug-in (when the service is used for the first time, the plug-in is automatically installed and initialized), the application must be operated like any PC application. The session can be done at any time can be scheduled without disadvantages. An unwanted session termination is offset by the possibility of not terminating (closing) the session on the server side, but keeping it open for a possible reconnect.

The process and the work steps will not change for the user through the procedure. As before, he will click on a file he wants to edit. The file is then not downloaded to his NetDevice and displayed there, but the file is sent to a central server and an appropriate application is started from there. This is able to recognize and display all common file types (initially approx. 100). The server then transmits the pure image information to the requesting client.

This interprets the image information and shows it on its display.

This gives the user the following advantages:

1. the user does not have to have installed all viewers, plugins and additional programs;

2. the user no longer has to strive for new versions, updates and patches;

3. The user no longer has to download the file or its content (in the case of packed files) that he wants to edit and thereby achieves an enormous speed advantage; , In addition to the previously used internet-compatible display devices, the user can now also use devices for displaying documents that could not previously be used for this, such as. B. entertainment consoles; 5. There is no security risk for the user from viruses, worms, etc .;

6. High level of investment protection for the user, since he is not subject to the hardware update cycles that are used to date.

The server takes the load off the client through the server-based approach.

The invention is not restricted to the exemplary embodiments shown here. Rather, it is possible to implement and implement further embodiment variants by combining and modifying the means and features mentioned, without leaving the scope of the invention.

LIST OF REFERENCE NUMBERS

1. Data processing device (NetDevice [user])

2. First data transmission path (click on file; request a document that requires a special application on the user computer)

3. First computer system (e.g. a service provider that contains web pages with a file link)

4. second data transmission link (backbone for transferring the file to the application server

[Provider server])

5. second computer system (on which the application belonging to the transferred file is started, the document is loaded and displayed)

6. third data transmission path (transmission of the view of the document and the application to the user computer; data transfer of the terminal program)

7. Preprocessor

8. Client parameters

9. Validator

10. Loader

11. Analyzer

12. Loader configuration file

13. Analyzer configuration file

14. Loader editor

15. Analyzer editor

16. Session Manager

17. Customer rights DB 18. Config DB

19. Memory logic

20. Configurations GUI

Claims

claims

1. A method for remote-controlled access to data and for data transmission, characterized in that data requested by a user via a data processing device (1) connected to a first data transmission path (2) and stored on a first computer system (3) via a second data transmission path (4 ) transferred to a second computer system (5), there the applications associated with the transferred data are determined and started, the transferred data are read in and evaluated by these applications, then the results of this evaluation via a third data transmission link (6) to the data processing device (1) of the Transferred to users and made available there.

2. The method according to claim 1, characterized in that the data are checked for viruses and / or data corruption before being read into an application.

3. The method according to any one of claims 1 or 2, characterized in that the changes made to the results made available on the data processing device (1) are transmitted to the second computer system (5) and stored there if necessary.

4. The method according to any one of claims 1 to 3, characterized in that the transmission of the results is carried out by a terminal program.

5. The method according to any one of claims 1 to 4, characterized in that the second computer system (5) on the first computer system (3) - if necessary restricted - has read and / or write rights.

6. The method according to any one of claims 1 or 2, characterized in that the data processing device (1) is a non-editable reproduction of the transmitted results.

7. The method according to any one of claims 1 to 6, characterized in that the reproduction on the data processing device (1) of the user takes place visually and / or audibly.

8. The method according to any one of claims 1 to 7, characterized in that a magic number test and / or a file system test and / or a test of the file extension is carried out to determine the associated application.

9. The method according to claim 8, characterized in that an evaluation and / or a comparison of the tests takes place according to a configurable weighting.

10. The method according to any one of claims 1 to 9, characterized in that the user requests the data via a link of an Internet page and / or from an ftp server.

11. Arrangement with a processor, which is set up in such a way that remote-controlled access to data and data transmission can be carried out, in such a way that on a first computer system requested by a user via a data processing device (1) connected to a first data transmission path (2) (3) transfer stored data over a second data transmission link (4) to a second computer system (5), there determine and start the applications belonging to the transferred data, read in and evaluate the transferred data from these applications, then the results of this evaluation via a third Data transmission path (6) is transmitted to the data processing device (1) of the user and made available there.

12. The arrangement according to claim 11, characterized in that the data transmission links (2, 4, 6) are designed as cable networks and / or as radio networks or partly as a cable network and partly as a radio network.

13. Arrangement according to one of claims 11 or 12, characterized in that the second data transmission path between the first computer system (3) and the second computer system (5) is designed as a backbone with a high transmission rate.

14. Arrangement according to one of claims 11 to 13, characterized in that the data processing device (1) is a stationary and / or mobile means of communication.

15. Arrangement according to one of claims 11 to 14, characterized in that the stationary communication means is a computer and / or a telephone and / or a set top box and / or an entertainment console and / or a multimedia console.

16. Arrangement according to one of claims 11 to 14, characterized in that the mobile communication means is a computer and / or a radio telephone and / or a palm top and / or a handheld.

17. Arrangement according to one of claims 11 to 16, characterized in that the first computer system (3) and / or the second computer system (5) consist of one and / or more computers.

18. A computer program product comprising a computer readable storage medium on which a program is stored which, after it has been loaded into the memory of the computer, enables a computer to carry out remote access to data and data transmission in such a way that by a user Via a data processing device (1) connected to a first data transmission path (2), data stored on a first computer system (3) and transmitted via a second data transmission path (4) to a second computer system (5), where the applications associated with the transmitted data are determined and started, the transmitted data read in and evaluated by these applications, then the results of this evaluation are transmitted via a third data transmission path (6) to the data processing device (1) of the user and made available there.

9. Computer-readable storage medium on which a program is stored which, after it has been loaded into the memory of the computer, enables a computer to carry out remote-controlled access to data and data transmission in such a way that from one user to the first Data transmission path (2) connected data processing device (1) requested data stored on a first computer system (3) via a second data transmission path

(4) transferred to a second computer system (5), there the applications associated with the transferred data are determined and started, the transferred data are read in and evaluated by these applications, then the results of this evaluation via a third data transmission path (6) to the data processing device

(1) transmitted by the user and made available there.