Trading system

[0002] 1. Field of the Invention

[0003] The present invention relates to a trading system and in particular to a trading system which supports dynamic communications between software units called objects in a distributed object oriented environment based on the CORBA method.

[0004] The CORBA (Common Object Request Broker Architecture) method is a standard architecture of the distributed object oriented environment which is provided by OMG (Object Management Group) for realizing the distributed object oriented environment. Equipments of the distributed object oriented environment are to be presented by each vendor according to this standard.

[0005] In the distributed object oriented environment in conformity to the CORBA method, processing requests can be transferred between objects and the processings can be realized by the cooperation of the objects without worrying about the differences of architectures and operating systems of computers or of programming languages.

[0006] Requests/responses between clients and servers in the CORBA method are mediated by an object request broker (ORB). In the CORBA method, functions such as naming service or trader service which are generally required in a distributed object environment are defined besides the broker. Efficiency in construction of the distributed system can be further improved by using such services as common facilities.

[0007] In the CORBA method, a concept corresponding to an object in the object oriented method is called an interface and a concept corresponding to a method is called an operation, so that a client is required to obtain an interface reference (a reference type for object in C++) in order to call a server.

[0008] When an operation in an interface reference is called, a corresponding method in a remote server is called automatically. Namely, for the processing of the CORBA method, the interface reference of a desirable server to be called should be obtained in the first place. In the CORBA method, for clients to obtain interface references, several common facilities are supposed as mentioned above. The naming service is a service in which the server name and the server entity correspond to each other, e.g. a service corresponding to searching a telephone number of a person to be called in white pages. On the other hand, the trader service corresponds to a service for searching a telephone number of a person to be called in yellow pages, which is expected as a trading system where the server name and the server entity need not correspond to each other.

[0009] 2. Description of the Related Art

[0010] Such a trading system corresponds to a broker ORB shown in FIGS. 31A and 31B, comprises a plurality of clients 4 and 5 and a trader 1 as shown in FIG. 31B, and performs (1) service type registration processing and (2) service import/export processing as described below:

[0011] a) A client 3, which may be any client, requesting the registration of a service type gives a service type name and its super type name, a property definition which defines a property name, type, and mode, and an interface name to the trader 1, thereby requesting the registration of a new service type.

[0012] a) The server client 4 which is called an exporter gives the service type name, a property value, and its own interface reference to the trader 1, thereby requesting the registration of the service. In response, the trader 1 maintains the correspondence between the service type and the interface reference of the server.

[0013] b) The client 5 which is called an importer gives a necessary service type name, a constraint, and the like to the trader 1, thereby requesting the offer of service information. The trader 1 selects services which conform to the service type, conditions of the constraint, and the like.

[0014] c) The trader 1 returns the information of a service group selected in the procedure b) to the client 5.

[0015] d) The client 5 uses the interface reference received from the trader 1 to call an object of the server 4.

[0016] Processings between the trader 1 and its clients (hereinafter collectively referred to with a symbol “7”) will now be described referring to FIG. 32.

[0017] For each type of the above-mentioned service type registration processing (1) and service import/export processing (2), and the like, the trader 1 comprises an interface 11 and a processing portion 12. The service type information saved by the trader 1 is saved in a service type repository 13 in the trader 1, and the service information is saved in a service offer repository 14 in the trader 1.

[0018] Receiving a processing request from the client 7 at the corresponding portion within the interface 11, the trader 1 transfers the processing to the corresponding portion of the processing portion 12. Each processing portion 12 takes out suitable information from the service type repository 13, the service offer repository 14, or an interface repository 6 which is located outside of the trader 1 to perform the processing. The processing result is returned to the client 7 of the trader 1 through the interface 11.

[0019] Next, details of internal processing of such a trading system will be described below:

[0020] When newly registering a service type, the service type registration requesting client 3 calls a service type registration interface 131 of the trader 1.

[0021] Extracts from a CORBA.IDL definition for the service type registration are given as follows:

[0022] IncarnationNumber add_type (

[0023] in CosTrading::ServiceTypeName name,

[0024] in Identifier if_name,

[0025] in PropStructSeq props,

[0026] in ServiceTypeNameSeq super_types

[0027] ):

[0028] Having received a registration request from the service type registration interface 131, a service type registration processing portion 132 takes out super type information corresponding to a super type name in the registration request from a service type repository 13. The processing portion 132 also takes out interface definition information of the service in the registration request from the interface repository 6 which is located outside of the trader 1.

[0029] The trader 1 examines the correspondence between a super type-sub type relationship in the service type repository 13 and a successional relationship of the interface definition in the interface repository 6, confirms the validity in case both relationship correspond mutually, and saves a new service type in the service type repository 13.

[0030] When the processing ends normally, the service type registration interface 131 allots an incarnation number to the registration processing and returns the processing to the service type registration requesting client 3.

[0031] (2.1) Service Export Processing (see FIG. 33B)

[0032] In the export processing of a service, the exporter 4 calls an export interface 141 of the trader 1. Extracts from a CORBA.IDL definition for this are given as follows:

[0033] OfferId export (

[0034] in Object reference,

[0035] in ServiceTypeName type,

[0036] in PropertySeq properties

[0037] );

[0038] Having received an export processing request from the export interface 141, an export processing portion 142 takes out service type information designated in the request from the service type repository 13. If a property type in a parameter coincides with the property type in a service type definition and if a property value of an mandatory mode is given in the export processing request, the request is valid, so that the trader 1 stores the service in a service offer repository 14.

[0039] When the processing ends normally, the export interface 141 returns an offer ID to the exporter 4.

[0040] (2.2) Service Import Processing (see FIG. 33C)

[0041] In the import processing of a service, the importer 5 calls an import interface 151 of the trader 1. Extracts from a CORBA.IDL definition for this are given as follows:

[0042] void query (

[0043] in ServiceTypeName type,

[0044] in Constraint constr,

[0045] in Preference pref,

[0046] in PolicySeq policies,

[0047] in SpecifiedProps desired_props,

[0048] in unsigned long how_many,

[0049] out OfferSeq offers,

[0050] out OfferIterator offer_itr,

[0051] out PolicyNameSeq limits_applied

[0052] );

[0053] Having received an import processing request form the import interface 151, an import processing portion 152 takes out service type information designated in the request from the service type repository 13, and performs the processing according to the following procedures (see FIG. 34).

[0054] 1) Extract the service type name designated in the import processing request and service information of the sub type from the service offer repository 14.

[0055] 2) Calculate a constraint expression in the import processing request based on the property value of each service and select the services for which the expression value becomes true as an import processing object.

[0056] 3) Sort the services to be import-processed based on a preference in the import processing request.

[0057] 4) Return a number of services to the importer as designated by a policy parameter in the import processing request.

[0058] By applying this trading system to the distributed object oriented environment, the flexibility between the clients and the server is increased and the efficiency in system designing, mounting, and operation is improved. However, there still remain problems as under-mentioned:

[0059] [1] Collision of Service Type Names

[0060] A service type name in a trader must be unique. Therefore, when a registration processing of a service type in the trader is tried, there are cases where the names collide. For example, a communication service “Asynchronous Transfer Mode” and a financial service “Automatic Teller Machine” cannot be registered the same name “ATM”, so that they must have different names.

[0061] Also, in the export processing of a service offer, the trader does not know in what intention the exporter classified its own service into the service type, that is, whether the “ATM” means the “Asynchronous Transfer Mode” or the “Automatic Teller Machine”. In the import processing, the trader cannot know the meaning of the service type name designated by the importer.

[0062] On the other hand, there is a link or the like as means for the cooperative operation of a plurality of traders. In the presence of a link, the import processing request is transferred accordingly, but contradictions are caused unless the meanings of the service types and the services are in conformity among the traders.

[0063] For example, if the service type “ATM” is used as meaning the “Asynchronous Transfer Mode” in a trader while as meaning the “Automatic Teller Machine” in another trader, the mixed services of different meanings are to be offered to the importer.

[0064] [2] Client Authentication by Trader

[0065] A trader receives export processing requests from various exporters to construct a service offer repository. Also, it receives service type registration requests from various clients to construct a service type repository.

[0066] A trader is an object forming a basis of the distributed environment so that the information in a trader must not be rewritten illegally or carelessly. Therefore, it is necessary to incorporate such an authentication means that a certain service type can only be registered from a certain object into an interface between a trader and its client which is closely linked with the functions of the trader.

[0067] [3] Import Processing Authority

[0068] For security reasons and the like, there are cases where an exporter desires to make the service available only from limited clients (importers). In such cases, the trader can even offer the whereabouts of the service to the importer as usual and perform some kind of authentication processing between the server and the client. However, in order not to inform the importer of the existence of the server carelessly, it is preferable to be able to designate for the trader the range where the service can be opened to public at the time of the export processing.

[0069] However, in the existing trading system, it is not possible to designate a range where the service can be opened to public at the time of the export processing nor to indicate the authority indicating the service which enables the import processing by the importer.

[0070] It is accordingly an object of the present invention to provide a trading system which avoids the collision of service type names or enables a client authentication by a trader or authority assignment for import processing.

[0071] [1] Collision of Service Type Names

[0072] This problem is caused by the fact that there is no means for indicating the contents of service type/service offer in more detail than the service type name and the property in the form recognizable by the trader. The trader only determines the coincidence/non-coincidence (agreement/disagreement) at the time of export processing/import processing with regard to the service type name as a mere character string and does not judge the meaning of the service type name. In order to deal with this problem, it is necessary to describe the meaning of the service type in a machine-recognizable and extensible form.

[0073] [2] Client Authentication by Trader

[0074] This problem is caused by the fact that there is no procedures for indicating information related to such a client of the trader as an import processing requestor or a service type registration processing requester. This problem can be dealt with by installing a mechanism for the client of the trader to affix signature information to the processing request in order to indicate that the request has been issued by a proper client and a mechanism for the trader to decrypt the signature information and to compare the information with the authority information.

[0075] [3] Import Processing Authority

[0076] This problem is also caused by the fact that there is no procedures for indicating the information related to such a client of the trader as the import processing requestor or the service type registration processing requester. This problem can be dealt with by installing a mechanism for indicating the identity of the importer to the trader. In order to perform an efficient authentication, an authentication procedure by a challenge-response procedure is required.

[0077] Means for realizing the above-mentioned viewpoints will be described hereafter, respectively.

[0078] [1] Context-based Trading Processing

[0079] An arrangement of the present invention according to claim 1 is shown in FIG. 1A. The client 7 of the trader 1, which may be a service type context registration requesting client, a service type registration requesting client, an exporter, an importer, or the like, individually describes, at a metadata generating portion 75, a character string type parameter of an operation made at a request processing portion 71 with metadata including a service type and a service type context which is a supplementary or generic information of the service type and transfers the same to the trader 1 through an interface 72.

[0080] In the trader 1 which receives the processing request from the client 7, the interface 11, as stated in claim 8, can be the one common to the prior art trader. However, a metadata interpreting portion 15 which interprets the received processing request as a metadata, or data describing data, and extracts the character string type parameter of the operation, and a metadata generating portion 16 which transforms the processing result at a processing portion 12 into metadata are provided between the interface 11 and the processing portion 12

[0081] Also, as a database to which the processing portion 12 refers, there are the service type repository 13, within the trader 1, which saves the service type information including the service type context and the service offer repository 14 which saves the information of the export-processed service existing as stated in claims 10 and 11. Moreover, there is an interface repository 6 existing outside of the trader 1, as stated in claim 12, which is a database for saving a service interface definition required for examining the conformity of the service type.

[0082] On the side of the client of the trader 1, a metadata interpreting portion 76 which interprets the response received from the trader 1 as a metadata is provided between the request processing portion 71 which requests the processing to the trader 1 and the trader interface 72 which interfaces with the trader besides the above-mentioned metadata generating portion 75.

[0083] An arrangement of the present invention according to claim 2 is shown in FIG. 1B. The difference from FIG. 1A is that the interfaces of the trader 1 are made a common interface 17.

[0084] Namely, in the client 7, contents of the request processing are transformed all together into a metadata description at the metadata generating portion 75 and transferred to the trader 1 through the interface 72. In the trader 1, the processing request is received at the common interface 17 and the whole processing request is interpreted as a metadata at the metadata interpreting portion 15.

[0085] After the interpretation, the processing is dispatched to each part of the processing portion 12 according to the contents, or the parameters, of the processing request which are contained in the metadata description. The processing result is returned to the client 7 after being transformed into a metadata form at the metadata generating portion 16.

[0086] In FIG. 1B, as an arrangement corresponding to claims 3-7, an authentication processing portion 18 is provided, as shown by dotted lines, which is called as required from each part of the processing portion 12 to perform an authentication processing.

[0087] Effects of the present invention having such compositions will now be described.

[0088] In each claim, the service type context is defined as supplementary information, or generic information, of the service type in order to avoid the collision of service type names and the confusion of concepts indicated by the service types. A name space of the service type name is divided according to the service type context. If the service type contexts are different, the service type names do not collide. A schematic example of the information within the service type repository 13 in which the service type name space is structured by the service type context is shown in FIG. 2A, which will be described as follows:

[0089] (1) Service Type Structure (see FIG. 2A)

[0090] The name space of the service type (abbreviated as SvcType shown) name composed of the service type name is divided according to the service type contexts into contexts such as X, Z, and X.Y.

[0091] An inclusive relationship can be set between service type contexts. In this example, the context X includes the context X.Y.

[0092] A default context 130 which includes the whole set of service types is defined. The default context 130 includes all of the service type contexts directly or indirectly. In this example, the default context 130 directly includes SvcTypes A, D, and E.

[0093] As long as the service type contexts are different, a plurality of service types having the same name can exist. In this example, the SvcType A exists in the default context 130, the service type contexts X.Y and Z.

[0094] How to handle the service type contexts in the trader will now be described.

[0095] A trading processing flow based on the service type context is shown in FIG. 4. Namely, the client 7 which requests the processing to the trader 1 adds the service type context name which is the supplementary information of the service type name as a service type name parameter within the processing request and transforms the same into the metadata description at the metadata generating portion 75. The metadata-described parameter is transferred to the trader 1 with other parameters through the interface 72.

[0096] Having received the processing request at the interface portion 11 (step S1), the trader 1 interprets the metadata-described parameters at the metadata interpreting portion 15 (step S2), and transfers the request to each part of the processing portion 12. After the processing is finished in each part of the processing portion 12 (step S3), the processing result is transformed into the metadata description at the metadata generating portion 16, and transferred to the origin of the processing request through the interface 11 (step S4).

[0097] Having received the processing result, the client 7 interprets the metadata-described parameters in the response at the metadata interpreting portion 76 and performs the processing according to the response result at the request processing portion 71.

[0098] The processings within the trader 1 based on the concept of the context will now be described.

[0099] (2) Service Type Context Registration Processing (see FIG. 2B)

[0100] In an initial state of the service type information within the service type repository 13 (see FIG. 2A), if the trader 1 receives a request with the default context 130 designated as a superior service type context to newly register a service type context W, the trader 1 generates the new service type context W, shown by a thick line, within the default context 130.

[0101] (3) Service Type Registration Processing (see FIG. 2C)

[0102] The case where the service type context X.Y is designated with FIG. 2B being made the initial state and a new service type E is registered under a super type A is considered.

[0103] The trader 1 retrieves the service type context X.Y and generates the new service type E as a sub type of the service type A if the existence of the service type A within the context X.Y is confirmed.

[0104] Although the service type A exists in the default context 130 and the context Z besides the context X.Y, the service type which assumes the super type can be uniquely determined since the concept of the context functions.

[0105] (4) Export Processing (see FIG. 2D)

[0106] The case where the service type context Z is designated with FIG. 2C being made the initial state and a new service is export-processed to a service type D is considered.

[0107] The trader 1 retrieves the service type context Z and registers a new service NS_VCin the service type D if the existence of service type D within the context Z is confirmed. Although the service type D exists in the default context 130 besides the service type context Z, the service type of the new service can be uniquely determined since the concept of the context functions.

[0108] (5) Import Processing (see FIGS. 3A-D)

[0109] The case where the trader 1 receives an import processing request in the state of FIG. 2D is considered. According to the service type name in the import processing request and the service type context designation, the service type of the service which is the import processing object will be determined as follows:

[0110] In case the service type A is import-processed without a context designation, the service type A and its sub types, i.e. the service type D and the service type E, existing within the default context 130; the service type A and its sub type, i.e. the service type E, existing within the service type context X.Y included in the default context 130; and the service type A within the service type context Z correspond therewith (see FIG. 3A).

[0111] In case the service type A is import-processed by designating the service type context X, the service type A in the context X.Y within the service type context X and the service type E which is the sub type of the service type A correspond therewith (see FIG. 3B).

[0112] In case the service type E is import-processed by designating the service type context Z, there is no corresponding service type since the service type E does not exist within the service type context Z (see FIG. 3C).

[0113] In case the service type E is import processed by designating the default context, there is no context designation, so that the service type E in the default context 130, the service type E in the context X, and the service type E in the context X.Y correspond therewith (see FIG. 3D).

[0114] [2] Authentication of Trader's Client

[0115] In the present invention according to claims 3-7, 11, and 13, an authentication of the trader's client is performed. The client 7 of the trader 1 can set authority information in the service type context, the service type, and the service within the repository 13 possessed by the trader, and the client 7 must present in the processing request a signature coinciding with the authority.

[0116] (1) Authentication Processing Arrangement (see FIG. 5)

[0117] The authentication is performed at the times of the service type context registration, the service type registration, the service export, and the import processing.

[0118] The client 7 of the trader 1 transforms the authentication information indicating that it has the authority to make the processing request and the authority information to be set in the information generated as a result of the processing, such as the service type context, the service type, and the service, together with other parameters of the processing request, into a metadata form at the metadata generating portion 75, which is transferred to the trader 1 through the interface 72.

[0119] Having received the processing request from the client 7 through the common interface 17, the trader 1 interprets and extracts the above-mentioned authority information and authentication information at the metadata interpreting portion 15, and then determines at the authentication processing portion 18 with this authentication information whether or not the client 7 has the authority for the request.

[0120] If the authority is recognized, the trader 1 performs the ordinary processing at each part of the processing portion 12 and sets the authority information in the generated information, such as the service type context, the service type, and the service. The processing result is transformed into the metadata description at the metadata generating portion 16 and returned to the client 7 through the interface 17.

[0121] (2) Client Authentication Procedure (see FIG. 6)

[0122] The client 7 of the trader 1 can set the authority information in the service type context, the service type, and the service to be registered in trader 1. The authority information is described in metadata with other parameters and transferred to the trader (step S1). Setting the authority information enables restrictions such as not accepting the processing if an appropriate signature is not affixed in the following request from the client.

[0123] Having received the request from the client, the trader extracts the authority information at the metadata interpreting portion (step S1), and stores the same in the service type repository or the service offer repository as follows:

[0124] 1) An authority information for restricting the client 7 capable of registering a subordinate service type context included in a new service type context is stored in the service type repository 13 with the context information (claims 3, 11).

[0125] 2) An authority information for restricting the client 7 capable of performing the registration processing of a sub type under a new service type is stored in the service type repository 13 with the service type information (claims 4, 11).

[0126] 3) An authority information restricting the client 7 capable of performing the registration processing of a new service type under a new service type context is stored in the service type repository 13 with the service type context information (claims 5, 11).

[0127] 4) An authority information for restricting the client 7 capable of performing the export processing of a service as a service type is stored in the service type repository 13 with the service type information (claims 6, 11).

[0128] 5) An authority information for restricting the client or importer acapable of performing the import processing of a service to be registered is stored in the service offer repository 14 with the service information (claims 7, 11, 13).

[0129] Namely, in the present invention according to claim 7, the authentication processing of the importer is performed based on the authority enabling the import processing of the service designated by the exporter (step S5). The exporter can set the authority information to the service to which the exporter itself has performed the export processing, while the importer must present in the import processing request the signature coinciding with this authority.

[0130] After having decided whether or not it is a valid processing request at each part of the processing portion 12 (steps S6, S3), the authority information for restricting the importer of the service is stored in the service offer repository 14 of the trader 1 as a result of the authentication (step S7).

[0131] (3) Importer Authentication Procedure

[0132] The authentication of the importer is performed according to a challenge-response procedure between the trader and the importer. The processing flow between the trader and the importer at the time of authentication is shown in FIGS. 7A and 7B, which will be described herebelow referring to FIG. 8.

[0133] 1) Having received the import processing request, the import processing portion 12 in the trader 1 requests the authentication processing portion 18 to generate the challenge information for authenticating the importer or the client 5 (step S8). The generated challenge information is transformed into the metadata description at the metadata generating portion 16 and transferred to the importer 5 for inquiry (step S9).

[0134] 2) The importer 5 hashes or simply encrypts the received challenge information after encrypting the same with its own private key and responds to the trader 1 with the metadata-described information of the encryption method and the hash method.

[0135] 3) Having received the response from the importer 5, the trader 15 compares the encrypted and hashed information with the challenge information at the authentication processing portion to perform the authentication (step S10), and returns the import processing result in the same way as the ordinary import processing if the response is found appropriate (step S11).

[0136] Thus, the trading system according to the present invention introduces a metadata description for the request parameter and the response parameter transferred between the trader and its client, thereby enabling the service type context of the service type, the authentication information, the authority information of the client, and the like to be described in a strict and extensible form.

[0137] FIGS. 1A and 1B are block diagrams illustrating an arrangement principle of a trading system according to the present invention;

[0138] FIGS. 2A-2D are diagrams illustrating an operation principle (1) of a trading system according to the present invention;

[0139] FIGS. 3A-3D are diagrams illustrating an operation principle (2) of a trading system according to the present invention;

[0140] FIG. 4 is a flow chart illustrating a procedure of trading processing a trading system according to the present invention;

[0141] FIG. 5 is a block diagram schematically illustrating an arrangement of authentication processing in a trading system according to the present invention;

[0142] FIG. 6 is a flow chart illustrating a procedure of authentication processing in a trading system according to the present invention;

[0143] FIGS. 7A and 7B are block diagrams schematically illustrating an arrangement of challenge-response processing in a trading system according to the present invention;

[0144] FIG. 8 is a flow chart illustrating a procedure of challenge-response processing in a trading system according to the present invention;

[0145] FIGS. 9A and 9B are sequence charts schematically illustrating an embodiment of a trading system according to the present invention;

[0146] FIG. 10 is a flow chart illustrating the generation of service type name in a metadata form in a trading system according to the present invention;

[0147] FIG. 11 is a flow chart illustrating the generation of super type name in a metadata form in a trading system according to the present invention;

[0148] FIG. 12 is a block diagram illustrating a structure example of a metadata dictionary used in a trading system according to the present invention;

[0149] FIG. 13 is a flow chart illustrating an interpretation procedure of metadata in a trading system according to the present invention;

[0150] FIG. 14 is a block diagram illustrating a data structure of a repository used in a trading system according to the present invention;

[0151] FIGS. 15A-15D are block diagrams illustrating an operation embodiment (1) of a trading system according to the present invention;

[0152] FIGS. 16A and 16B are diagrams illustrating a metadata description (1) of a trading system according to the present invention;

[0153] FIGS. 17A and 17B are diagrams illustrating a metadata description (2) of a trading system according to the present invention;

[0154] FIGS. 18A-18D are block diagrams illustrating an operation embodiment (2) of a trading system according to the present invention;

[0155] FIG. 19 is a flow chart illustrating a registration processing of a service type context in a trading system according to the present invention;

[0156] FIG. 20 is a flow chart illustrating a registration processing of a service type in a trading system according to the present invention;

[0157] FIG. 21 is a flow chart illustrating an export processing in a trading system according to the present invention;

[0158] FIG. 22 is a flow chart illustrating an import processing in a trading system according to the present invention;

[0159] FIG. 23 is a flow chart illustrating a context retrieval in a trading system according to the present invention;

[0160] FIG. 24 is a flow chart illustrating a service type retrieval in a trading system according to the present invention;

[0161] FIG. 25 is a flow chart illustrating a context scan in a trading system according to the present invention;

[0162] FIG. 26 is a flow chart illustrating a service retrieval within a service type in a trading system according to the present invention;

[0163] FIG. 27 is a flow chart illustrating a service type scan in a trading system according to the present invention;

[0164] FIG. 28 is a flow chart illustrating an authentication processing in a trading system according to the present invention;

[0165] FIGS. 29A-29E are block diagrams illustrating an operation embodiment (3) of a trading system according to the present invention;

[0166] FIG. 30 is a flow chart illustrating a procedure of challenge-response processing in a trading system according to the present invention;

[0167] FIGS. 31A and 31B are sequence charts schematically illustrating an embodiment of a prior art trading system;

[0168] FIG. 32 is a block diagram schematically illustrating an arrangement of a prior art trading system;

[0169] FIGS. 33A-33C are block diagrams schematically illustrating an arrangement of a prior art trading system; and

[0170] FIG. 34 is a diagram illustrating a screening processing in a prior art import processing.

[0171] Throughout the figures, the same reference numerals indicate identical or corresponding portions.

[0172] An embodiment of the trading system according to the present invention having been described referring to FIG. 1 will be described hereafter along a trading processing flow shown in FIGS. 9A and 9B.

[0173] a) A service type context registration requesting client 2, corresponding to the client 7 in FIG. 1A, transfers the service type context name and its superior context name to the trader 1 to request the registration processing of a new service type context. At the same time, the client 2 transfers the authentication information indicating the authority for registering the service type as well as the authority information required for registering a service type context and a service type under the new service type context.

[0174] b) A service type registration requesting client 3, corresponding to the client 7 in FIG. 1A, transfers the new service type name and its super type name and service type context name, and the property information to the trader and requests the registration of the new service type. At the same time, the client 3 transfers the authentication information indicating the authority for registering the service type and the authority information required for export processing the service of the service type.

[0175] a) An exporter 4, corresponding to the client 7 in FIG. 1A, transfers its own interface (I/F) reference, the service type name, the property value of the service, and the service type context name which is an additional information to the service type to the trader 1 to request the service export processing. At the same time, the exporter 4 transfers the signature information indicating the authority for performing the export processing and the authority information required for performing the import processing of the service.

[0176] b) An importer 5, corresponding to the client 7 in FIG. 1A, presents the service type name, the service type context name which is an additional information to the service type, a constraint expression, and the like to request the import processing to the trader 1. At the same time, the importer 5 transfers the authentication information indicating that it has the authority for performing the import processing.

[0177] c) The trader 1 returns the information of a selected service group to the importer 5.

[0178] d) The client or the importer 5 uses the interface reference previously obtained by performing the import processing to call the server or the exporter 4. The trader 1 no longer participates in this operation.

[0179] (3.1) Operation of Metadata Generating Portion

[0180] In the client of the trader, character strings of a fixed format are used for generating a metadata description within the processing request. An embodiment of a service type registration-requesting object when requesting the service type registration in case of an individual description of the parameters with metadata is as follows:

[0181] Service Type Parameter Generation (see FIG. 10)

[0182] The fixed format character string for the service type parameter is fined as follows:

[0183] The generation of the service type parameter follows the flow shown in FIG. 10. This parameter is formed of the metadata description-starting character string “<rdf:RDF>” (steps S21, S22), added with “%1” and “%2” within the name_template character string substituted with the character string of the service type name and the character string of the service type context name respectively (step S23), and finally added with the character string “</rdf:RDF>” which indicates the end of metadata description (step S24).

[0184] b) Super Type Parameter Generation (see FIG. 11)

[0185] The fixed format character string for the super type parameter is defined as follows:

[0186] The generation of the super type parameter follows the flow shown in FIG. 11. This parameter is formed of the metadata description-starting character string “<rdf:RDF>”, added with “%1” and “%2” within the super_type character string substituted with the character string of the super type name and the character string of the super type context name (steps S25, S26), and finally added with the character string “</rdf:RDF>” which indicates the end of metadata description (steps S27, S28).

[0187] (3.2) Operation of Interface

[0188] The existing processing can be used for the processing of the interfaces 11 and 72 of the trader 1 and the client 7, respectively. Having received the processing request, the interface transfers the parameter to each part of the processing portion 12 through the metadata interpreting portion 15.

[0189] (3.3) Operation of Metadata Interpreting Portion

[0190] The metadata interpreting portion 15 in the trader 1 has a dictionary shown in FIG. 12. The dictionary has a statement portion 100 and a large number of word portions 200. The word portion 200 is composed of a name space 210 and a word name 220. The statement portion 100 is a list for referring three elements 110-130 of the dictionary.

[0191] In the metadata interpreting portion 15, an entry is added to the dictionary based on the metadata description received from another object. The processing flow of reading the metadata description and of constructing the dictionary is shown in FIG. 13.

[0192] Firstly, after initializing the property list (PROP list) and the object list (OBJ list) (step S31), the metadata description is found to be an error if the character string does not start with “<rdf:RDF>” (step S32). Then, if the character string does not start in the form of metadata description “<rdf: Description about=”, it is also found to be an error (step S33, 34). The next token is then added to the word and substituted for an ABOUTATTR (step S35). The ABOUTATTR assumes the first element 110 of the statement.

[0193] The next coming token is also added to the word, and simultaneously added to the PROP list (step S36, 37). The element of the PROP list assumes the second element 120 of the statement. If the equal sign “−” is not read next, it is also found to be an error (step S38).

[0194] The next token is also added to the word, and simultaneously added to the OBJ list (step S39). The element of the OBJ list assumes the third element 130 of the statement. If a further metadata description follows, it is added to the PROP list and the OBJ list without any modification.

[0195] If the description is closed, the statement is generated (step S40, 42). After setting the ABOUTATTR in the first element 110 of generated statement, the elements of the PROP list and the OBJ list are set in the second element 120 and the third element 130, respectively (step S43, 44). If any element of the list still remains (step S45), further statements are generated so that the ABOUTATTR is set in the first element 110 and the elements of the PROP list and the OBJ list is set in the second and the third elements 120 and 130, respectively (step S46, S47, S43, S44). The generation of statement ends when there is no more element of the list.

[0196] (3.4) Data Structure of Repository (see FIG. 14)

[0197] The information on the service type context, the service type, and the service is managed within the trader 1. Such information is saved within the data structure shown in FIG. 14.

[0198] The service type repository 13 saves the information on service type contexts 1311, 1312(A)-1314(C) and service types 1321(A) and 1322(C). The service type contexts and the service types form tree structures, respectively.

[0199] Each of the service type contexts 1311-1314 has a reference list for its superior service type context and subordinate service type context, thereby forming the tree structure. The superior service type context of the default context 1311 is null. Each of the service type contexts 1311-1314 has a list of root service types which the context includes directly.

[0200] Each of the service types 1321 and 1322 has a reference list for its super type and a reference list for its sub type, thereby forming the tree structure. The super type of the root service type 1321 in any service type context is null. Moreover, the service type saves a list of services 141-144 belonging to the service type in the service offer repository 14.

[0201] Namely, the services saved in the service offer repository 14 are referenced from the lists in the services (A)-(D) saved by the service type 1321 and 1322, and saves the information on individual services.

[0202] (3.5) Service Type Context Registration Processing (see FIG. 15A)

[0203] 1) Interface Definition

[0204] The CORBA.IDL for calling the service type context registration interface is defined as follows:

[0205] void add_context(

[0206] in ContextName name,

[0207] in ContextName super_context,

[0208] );

[0209] The service type context name whose registration is requested and the superior service type context name are stored in a name parameter and a super_context parameter, respectively to call the above-mentioned add_context operation. If the super_context parameter is a null character string, the service type context is registered as a context directly under the default context.

[0210] 2) Operations

[0211] FIG. 15A schematically shows the operations of the service type context-registration requesting client 2 and the trader 1 shown in FIG. 9A. A service type context-registration request processing portion 21, corresponding to the request processing portion 71 in FIG. 1A, describes the parameters of the service type context information and of the superior service type context information in the metadata form at a metadata generating portion 25, corresponding to the same portion 75 in FIG. 1A, and calls a service type context-registration interface 112, corresponding to the interface 11 in FIG. 1A, of the trader 1 through a context registration interface 22, corresponding to the interface 72 in FIG. 1A.

[0212] The service type context-registration interface 112 of the trader 1 transfers the parameter to the metadata interpreting portion 15 and this metadata interpreting portion 15 interprets the parameter as a metadata. Then, a context registration processing portion 122, corresponding to the same portion 12 in FIG. 1A, generates a new context in the service type repository 13 and transforms the result into the metadata form at the metadata generating portion 16 to be returned to the client 2.

[0213] (3.6) Service Type Registration Processing (see FIG. 15B)

[0214] 1) Interface Definition

[0215] In order to perform the service type registration with metadata description, the parameters of the above-mentioned existing interface should be described with metadata individually. When adding the service type context information to the service type name, the description of the name parameter and the super_types parameter should be in metadata description.

[0216] For example, a metadata description indicating a statement “The service type C is defined in the service type context X.” is given as follows:

[0217] This can be rewritten in the following character string form, which assumes the value of the name parameter:

[0218] where the RDF (Resource Description Framework) is a framework for describing network resources such as Web pages. In the RDF, the metadata description based on the first order predicate logic is formed to describe the resources.

[0219] For example, a metadata description indicating a statement “The service type C is the sub type of the service types A and B.” is given as follows:

[0220] This can be rewritten in the following character string form, which assumes the value of the super_type parameter:

[0221] Also, a metadata description indicating a statement “The property Propertyd is the property of the service type C, its type is Integer, and its mode is NORMAL.” is given as follows:

[0222] This can be rewritten in the following character string form, which assumes the value of the props parameter:

[0223] 2) Operations

[0224] The operations of the service type registration-requesting client 3 and the trader 1 are shown in FIG. 15B. A service type registration-request processing portion 31, corresponding to the request processing portion 71 in FIG. 1A, generates the metadata description of the service type name including the service type context information, the super type name, the property definition, and the interface name parameter at a metadata generating portion 35, corresponding to the same portion 75 in FIG. 1A, and calls a service type registration interface 113, corresponding to the interface 11 in FIG. 1A, of the trader 1 through a service type registration interface 32, corresponding to the interface 72 in FIG. 1A.

[0225] The service type registration interface 113 of the trader 1 transfers the parameter to the metadata interpreting portion 15 for the interpretation thereof as a metadata. A service type registration-processing portion 123, corresponding to the same portion 12 in FIG. 1A, generates the service type in the service type repository 13 after performing the examination of a new service type by referring to the data in the interface repository 6. After the completion of the processing, the processing result is transformed into metadata at the metadata generating portion 16, and an incarnation number is returned to the client 3.

[0226] (3.7) Service Export Request Processing (see FIG. 15C)

[0227] 1) Interface Definition

[0228] An export request processing can be defined by the CORBA.IDL as shown by {circle around (1)}-{circle around (3)} in FIG. 16A.

[0229] In order to perform the service export-request processing with metadata description, the parameters of the above-mentioned CORBA.IDL interface definition should be described individually with metadata as shown by {circle around (1)}-{circle around (3)} in FIG. 16B. The type parameter indicating the service type name can be described similarly as the name parameter at the time of service type registration.

[0230] For example, a metadata description indicating a statement “The type of the property propertyd is Integer and its value is 0” is given as follows:

[0231] This can be rewritten in the following character string form (see FIG. 16B {circle around (3)}, which assumes the value of the property parameter:

[0232] A metadata description indicating a statement “The value of the object reference reference is “IOR:xxxxxxx”.” is given as follows:

[0233] “IOR:xxxxxxxx” - - - InstanceOf→[reference]

[0234] This can be rewritten in the following character string form (see FIG. 16B {circle around (1)}, which assumes the value of the reference parameter:

[0235] 2) Operations

[0236] The operations of the service exporter 4 and the trader 1 are shown in FIG. 15C. A service export request processing portion 41, corresponding to the request processing portion 71 in FIG. 1A, generates metadata description of the parameter including the service type context information of the service at a metadata generating portion 45, corresponding to the same portion 75 in FIG. 1A, and calls an export interface 114, corresponding to the interface 11 in FIG. 1A, of the trader 1 through an export interface 42, corresponding to the interface 72 in FIG. 1A.

[0237] The export interface 114 of the trader 1 transfers the parameter to the metadata interpreting portion 15 for the iriterpretation thereof as a metadata. Then, a service export processing portion 124, corresponding to the same portion 12 in FIG. 1A, registers a new service in the service offer repository 14 after examining the service type repository 13, transforms the processing result into metadata at the metadata generating portion 16, and returns the offer ID to the exporter 4.

[0238] (3.8) Service Import Request Processing (see FIG. 15D)

[0239] 1) Interface Definition

[0240] In order to perform the import request processing with metadata description, the parameters of the above-mentioned existing interface should be described with metadata individually. The type parameter indicating the service type name can be described similarly as the name parameter at the time of service type registration.

[0241] For example, a metadata description indicating a statement “The constraint expression is “xxxxxxxx”.” is given as follows:

[0242] “xxxxxxxxx” - - - InstanceOf→[Constraint]

[0243] This can be rewritten in the following character string form, which assumes the value of the constr parameter:

[0244] Moreover, a metadata description indicating a statement “The preference is “xxxxxxxx”.” is given as follows:

[0245] “xxxxxxxxx” - - - InstanceOf→[Preference]

[0246] This can be rewritten in the following character string form, which assumes the value of the pref parameter:

[0247] 2) Operations

[0248] The operations of the service importer 5 and the trader 1 are shown in FIG. 15D. A service import processing portion 51, corresponding to the request processing portion 71 in FIG. 1A, generates metadata description of the parameter including the service type context information of the service for the import processing at a metadata generating portion 55, corresponding to the same portion 75 in FIG. 1A, and calls an import interface 115, corresponding to the interface 11 in FIG. 1A, of the trader 1 through an import interface portion 52, corresponding to the interface 72 in FIG. 1A.

[0249] The import interface 115 in the trader 1 transfers the parameter to the metadata interpreting portion 15 for the interpretation thereof as a metadata. Then, an import processing portion 125, corresponding to the same portion 12 in FIG. 1A, examines the relationship between the service types within the service type repository 13 and retrieves the service which is the object of the import processing from the service offer repository 14. The retrieval result is returned to the importer 5 after being transformed into metadata at the metadata generating portion 16.

[0250] (4.1) Operation of Metadata Generating Portion

[0251] The operation of metadata generating portion is similar to that per parameter as described in the above (3.1).

[0252] (4.2) Operation of Interface

[0253] The interface of the trader 1 is newly made. FIG. 17A shows an interface example. Namely, the CORBA.IDL definition is “string operation” and its “description” includes the metadata description of a series of operation groups. Such description is made as shown in the FIG. 17B at the metadata generating portion.

[0254] (4.3) Operation of Metadata Interpreting Portion

[0255] The operation of the metadata interpreting portion in the trader is similar to that per parameter as described in the above (3.3).

[0256] (4.4) Data Structure of Repository

[0257] For the data structure of the repository, that shown in FIG. 12 can be used.

[0258] (4.5) Service Type Context Registration Processing (see FIG. 18A)

[0259] 1) Interface Definition

[0260] In case of describing the parameters of the service type context-registration processing request all together as metadata, the parameter in the processing request including the service type context should be described as a single metadata.

[0261] For example, a metadata description indicating a statement “Register ContextY as a subordinate context of ContextX.” is given as

[0262] This can be rewritten in the following character string form:

[0263] 2) Operations

[0264] The operations of the service type context-registration requesting client 2 and the trader 1 are shown in FIG. 18A. The service type context registration request processing portion 21 calls the metadata generating portion 25 to generate a collective metadata description of all the parameters including the service type context information and to call the common interface 17 of the trader 1 through the client interface 22.

[0265] The common interface 17 of the trader 1 transfers the metadata description to the metadata interpreting portion 15 which interprets the same to examine the contents of the processing request. If the processing request is a service type context registration request, the processing is transferred to the context registration processing portion 122. After the context registration processing, the result is transformed into the metadata description at the metadata generating portion 16 and returned to the client 2.

[0266] (4.6) Service Type Registration Processing (see FIG. 18B)

[0267] 1) Interface Definition

[0268] In case of describing the parameters of the service type-registration processing request all together as a metadata, all of the parameters in the processing request should be described as a single metadata.

[0269] For example, a metadata description indicating a statement “Register SvcTypeC defined in ContextX. SvcTypeC is a sub type of SvcTypeA and B which has an Integer type property, PropertyD.” is given as follows:

[0270] This can be rewritten in the following character string form:

[0271] 2) Operations

[0272] The operations of the service type registration requesting client 3 and the trader 1 are shown in FIG. 18B. The service type registration request processing portion 31 calls the metadata generating portion 35, generates a collective metadata description of all the parameters including the service type context information, and calls the common interface 17 of the trader 1 through the client interface 32.

[0273] The common interface of the trader 1 transfers the metadata description to the metadata interpreting portion 15 for the interpretation thereof to examine the contents of the request. If the processing request is a service type registration request, the processing is transferred to the service type registration processing portion 123. After the service type registration processing, the result is transformed into metadata description at the metadata generating portion 16 and returned to the client 2.

[0274] (4.7) Service Export Request Processing (see FIG. 18C)

[0275] 1) Interface Definition

[0276] An export request processing can be defined by the CORBA.IDL as shown in FIG. 17A.

[0277] In case of describing the metadata of the service export request processing all together as a metadata, the metadata of the above-mentioned CORBA.IDL interface definition should be described all together as shown in FIG. 17B.

[0278] For example, a metadata description indicating a statement “Export SvcA (ServiceA). SvcA is a service of SvcTypeC in ContextX and the value of PropertyD is 0.” is given as follows:

[0279] This can be rewritten in the following character string form:

[0280] 2) Operations

[0281] The operations of the service exporter 4 and the trader 1 are shown in FIG. 18C. The service export processing portion 41 calls the metadata generating portion 45 to generate a collective metadata description of all the parameters including the service type context and calls the common interface 17 of the trader 1 through the client interface 42.

[0282] The common interface 17 of the trader 1 transfers the character string of the metadata description to the metadata interpreting portion 15 to examine the contents of the processing request. If the processing request is a service export request, the processing is transferred to the service export processing portion 124.

[0283] The processing result after the export processing is transformed into metadata description at the metadata generating portion 16 and returned to the exporter 4.

[0284] (4.8) Service Import Request Processing (see FIG. 18D)

[0285] 1) Interface Definition

[0286] In case of describing the parameters of the service import request processing all together as a metadata, all of the parameters in the processing request should be described as a single metadata.

[0287] For example, a metadata description indicating a statement “Import services of SvcTypeC in ContextX. The constraint expression is “ttxxxxxxxx” and the preference is “yyyyyy”.” is given as follows:

[0288] This can be rewritten in the following character string form:

[0289] 2) Operations

[0290] The operations of the service importer 5 and the trader 1 are shown in FIG. 18D. A service import processing portion 51 calls the metadata generating portion 55 to generate a collective metadata description of all the parameters including the service type context, and calls the common interface 17 of the trader 1 through the client interface 52.

[0291] The common interface 17 of the trader 1 transfers the character string of the metadata description to the metadata interpreting portion to examine the contents of the processing request. If the processing request is a service import request, the processing is transferred to the import processing portion 125. The information of the imported service group is transformed into metadata description at the metadata generating portion 16 and returned to the importer 5.

[0292] The service type context of the parameter in each of the above-mentioned operations is realized as follows, thereby avoiding the collision of service type names or adjusting the concepts indicated by service types.

[0293] (5.1) Operation of Service Type Context Registration Processing Portion (see FIGS. 15A, 18A and 19)

[0294] Having received the parameter from the metadata interpreting portion 15, the service type context registration processing portion 122 starts from the default context (step S51) to retrieve the superior service type context in which the service type context should be registered (step S52). If the designated context is not found, the processing is found to be an error.

[0295] Next, the context list included in the super context is taken out (step S53) and examined if there are any duplicate names with the existing context (steps S54-S56). If there is no context with a duplicate name, a new context is made and added to the subordinate context list in the superior context (steps S57-S59).

[0296] (5.2) Operation of Service Type Registration Processing Portion (see FIG. 15B, 18B and 20)

[0297] Having received the parameter from the metadata interpreting portion 15, the service type registration processing portion 123 starts from the default context to retrieve the service type context in which the service type should be registered from the service type repository (steps S61-63).

[0298] If there is no service type context designation, the processing is handled as the default context designation. If the designated service type context is not found, the processing is found to be an error.

[0299] After obtaining the service type context of the destination of the registration, the service type context is examined for the dupication between the new service type name and the existing service type name. If the names are duplicated, the processing is found to be an error (steps S64, S65).

[0300] Next, the super type is retrieved in the context. If the super type does not exist, the processing is found to be an error (step S66). After the examination, the new service type is stored in the corresponding service type context of the service type repository 13 with the processing similar to that in the registration of the existing service type (step S67).

[0301] (5.3) Operation of Service Export Processing Portion (see FIGS. 15C, 18C, and 21)

[0302] Having received the parameter from the metadata interpreting portion 15, the service export processing portion 124 starts from the default context to retrieve the service type context of the designated service type (steps S71-73).

[0303] If there is no service type context designation, the processing is handled as the default context designation. If the designated service type context is not found, the processing is found to be an error.

[0304] After finishing the retrieval of service type context, the service type is retrieved in the service type context (steps S74, S75). If the designated service type does not exist, the processing is found to be an error. After finishing the retrieval, the processing is performed in the same way as the existing service export (step S76).

[0305] Namely, if the property type of the exported service coincides with the property type defined in the service type and if all of the property values required by the service type definition are given, the validity of the export is confirmed and the service is registered in an appropriate entry of the service offer repository.

[0306] (5.4) Operation of Service Import Processing Portion (see FIGS. 15D, 18D and 22)

[0307] Having received the parameter from the metadata interpreting portion 15, the service import processing portion 125 starts from the default context to retrieve the service type context of the designated service type (steps S81-83). If there is no service type context designation, the processing is handled as the default context designation. If the designated service type context is not found, the processing is found to be an error.

[0308] After finishing the retrieval of service type context, the service type context included in the context is scanned starting from the context (step S84, S85). The service type context included in the context is recursively examined to find the service type coinciding with that import-requested among the service types in the context. Then the corresponding service type is added to the service list for saving the retrieval result.

[0309] After scanning all of the service types, the service list is subjected to an ordinary import response data-generation processing (step S86).

[0310] It is to be noted that the above-mentioned service type-context retrieval (S52, S63, S73, S83), the service type retrieval (S65, S66, S75), and the context scan (S85) are performed according to the procedures shown in FIGS. 23, 24, and FIG. 25, respectively.

[0311] The service retrieval while scanning the contexts (S113) is executed by the flow shown in FIG. 26. The service type scanning while retrieving the service is executed by the flow shown in FIG. 27.

[0312] If the contents of the operations are described all together as a single metadata as mentioned above, the client authentication by the trader can be performed by including the description related to the client of the trader itself within the operation.

[0313] (6.1) Overall Processing Flow (see FIG. 28)

[0314] As mentioned above, when performing the client authentication, the request from the client should include the authentication information indicating the authority for performing the request and the authority information indicating the authority required for accessing (i.e. adding, deleting, and the like) such information as service type contexts, service types, and the like newly made in the trader 1.

[0315] Having received the request including the authentication information and the authority information, the trader extracts the information at the metadata interpreting portion and transfers the processings to each processing portion. Each processing portion examines the existence of the authentication information if the authority is set in processing objects such as the service type context, the service type, and the like. If not so, the processing is found to be an error.

[0316] If the authentication information exists, it is compared with the authority information of the processing object to examine the signature. If the signature is appropriate, the processing is continued, while if not so, the processing is found to be an error. The authentication is performed by the following procedure:

[0317] 1) A cryptogram is made by encrypting the character string describing the operation by using the encryption method indicated by encryption method information in the processing request from the client (step S141). In this case, the encryption is performed using the authority information in the repository 13. As for this authority information, only the authority information on the default context (1311 in FIG. 14) is preliminarily prepared in the repository 13.

[0318] 2) The cryptogram is hashed using the hash method indicated by hash method information in the processing request (step S142) and compared with the authentication information from the client (step S143). This is because the authority information and the authentication information are set to have a mutually specific relationship.

[0319] 3) If both information are found equal as a result of the preceding clause 2), it is found to be a request from an appropriate client so that the ordinary operation processing is performed (step S144). Namely, the information on the request of the new registration processing or the export processing is stored in the repository 13 with the authority information transferred together from the client. If both information are not equal, the operation is rejected (step S145).

[0320] Namely, when generating the service type context, the service type, and the like, or modifying the information as a result of the processing, the existence of the authority information to be set as the processing object is examined. If the authority information exists, the information is set as an attribute of the processing object such as the service type context or the service type.

[0321] (6.2) Service Type Context Registration-request Processing Accompanying Authentication (see FIG. 29A)

[0322] 1) Interface Definition

[0323] When performing the authentication, the client's signature, the encrypted algorithm information of the signature, the hashed algorithm information of the signature, and the like are transferred as the information of the service type context registration requesting client 2.

[0324] For example, a statement describing such information, “A client (someone) affixes the signature “sign1” to the service type context registration. The whereabouts of the client information or of the public key is “xxxxxx”, and the sign1 is encrypted by “RSAcrypto” and hashed by “MD5”.” can be expressed with metadata as follows:

[0325] Furthermore, when adding the authority information for restricting those who can register the service type context and the service type under that service type context, such information is also described with metadata.

[0326] For example, a metadata description indicating a statement “The authority for registering a service type context under the service type context Y is “xx”.” is given as follows:

[0327] [contexty] - - - traderns:contextAuthority→“xx”

[0328] A metadata description indicating a statement “The authority for registering a service type of the service type context Y is “yy”.” is given as follows:

[0329] [contexty] - - - traderns:serviceTypeAuthority→“yy”

[0330] 2) Operations

[0331] The operations of the service type context registration requesting client 2 and the trader 1 in the case accompanied by authentication are shown in FIG. 29A. The service type context registration request processing portion 21 calls the metadata generating portion 25 to generate a collective metadata description of all the parameters including the above-mentioned authentication information, and calls the common interface of the trader through the client interface 22.

[0332] The common interface 17 of the trader 1 transfers the metadata description to the metadata interpreting portion 15 for the interpretation thereof to examine the contents of the processing request. If the processing request is a service type context registration request, the processing is transferred to the service type context registration processing portion 122.

[0333] The context registration processing portion 122 takes out the authority information of the superior service type context from the service type repository 13 to perform the authentication processing together with the authentication information in the request at the authentication processing portion 18.

[0334] After the success of authentication, the processing is performed similarly to the case without authentication. After the completion of processing, the authority information is set in the newly made service type context. Then, the processing result is transformed into the metadata description at the metadata generating portion 16 and returned to the client 2.

[0335] (6.3) Service Type Registration Request Processing Accompanying Authentication (see FIG. 29B)

[0336] 1) Interface Definition

[0337] When performing the authentication, the client's signature, the encrypted algorithm information of the signature, the hashed algorithm information of the signature, and the like are transferred as the information of the service type registration requesting client. The statement describing such information is the same as mentioned above.

[0338] Furthermore, when adding the authority information for restricting those who can register the sub type in this service type, such information is also described with metadata. For example, a metadata description indicating a statement “The authority for registering a sub type of the service type A is “xx”.” is given as follows:

[0339] [serviceTypeA] - - - traderns:subTypeAuthority→“xx”

[0340] A metadata description indicating a statement “The authority for exporting the service as service type A is “yy”.” is given as follows:

[0341] [serviceTypeA] - - - traderns:exportAuthority→“yy”

[0342] 2) Operations

[0343] The operations of the service type registration requesting client 3 and the trader 1 in the case accompanied by authentication are shown in FIG. 29B. The service type registration request processing portion 31 calls the metadata generating portion 25, generates a collective metadata description of all the parameters including the above-mentioned authentication information, and calls the common interface of the trader through the client interface 22.

[0344] The common interface 17 of the trader 1 transfers the metadata description to the metadata interpreting portion 15 for the interpretation thereof to examine the contents of the processing request. If the processing request is a service type registration request, the processing is transferred to the service type registration processing portion 123.

[0345] The service type registration processing portion 123 takes out the authority information of the service type context and the authority information of the super type from the service type repository 13 to perform the authentication processing together with the authentication information in the request at the authentication processing portion 18.

[0346] After the success of authentication, the processing is performed similarly to the case without authentication. After the completion of processing, the authority information is set in the newly made service type. Then, the processing result is transformed into the metadata description at the metadata generating portion 16 and returned to the client 3.

[0347] (6.4) Service Export Request Processing Accompanying Authentication (see FIG. 29C)

[0348] 1) Interface Definition

[0349] When performing authentication, the exporter's signature, the encrypted algorithm information of the signature, the hashed algorithm information of the signature, and the like are transferred as the information of the exporter. The statement describing such information is the same as above-mentioned.

[0350] Furthermore, when adding the authority information for restricting those who can import this service, such information is also described with metadata. For example, a metadata description indicating a statement “The authority for importing the service type A is “yy”.” is given as follows:

[0351] [contexty] - - - traderns:importAuthority→“xx”

[0352] 2) Operations

[0353] The operations of the service exporter 4 and the trader 1 in the case accompanied by authentication are shown in FIG. 29C. The service export processing portion 41 calls the metadata generating portion 124, generates a collective metadata description of all the parameters including the above-mentioned authentication information, and calls the common interface 17 of the trader through the client interface 42.

[0354] The common interface 17 of the trader 1 transfers the metadata description to the metadata interpreting portion 15 for the interpretation thereof to examine the contents of the processing request. If the processing request is a service export request, the processing is transferred to the service export processing portion 124.

[0355] The export processing portion 124 takes out the service type authority information from the service type repository 13 to perform the authentication processing together with the authentication information in the request at the authentication processing portion 18.

[0356] After the success of authentication, the processing is performed similarly to the case without authentication. After the completion of processing, an authority information is set in the newly made service in the service offer repository 14. Then, the processing result is transformed into the metadata description at the metadata generating portion 16 and returned to the service exporter 4.

[0357] (6.5) Service Import Request Processing Accompanying Authentication (see FIG. 29D and E)

[0358] 1) Interface Definition

[0359] When the importer 5 tries to import a service which requires authentication for an import request processing, the trader 1 returns challenge information required for the authentication and an import request ID which the trader has made corresponding to the import request. Both are expressed with metadata as follows:

[0360] This can be rewritten in the following character string form:

[0361] In response, the importer affixes signature to the challenge information. The signature is expressed with metadata description as follows:

[0362] This can be rewritten in the following character string form:

[0363] 2) Operations

[0364] The operations of the service importer 5 and the trader 1 in the case accompanied by authentication are shown in FIG. 29D and 29E. The authentication of the importer 5 is performed according to the challenge-response procedure between the trader 1 and the importer 5 (see FIGS. 29E and 30).

[0365] The service import request processing portion 51 firstly calls the metadata generating portion 55 to generate a metadata description of the import request without any authentication information, and calls the common interface 17 of the trader 1 through the client interface 52.

[0366] The common interface 17 of the trader 1 transfers the metadata description to the metadata interpreting portion 15 for the interpretation thereof to examine the contents of the processing request (steps S151, S152). If the processing request is a service import request, the processing is transferred to the service import processing portion 125. The import processing portion 125 takes out the authority information of the service from the service offer repository 14 and requests the generation of the challenge information to the authentication processing portion 18 if the authentication is required (step S153).

[0367] The import processing portion 125 transforms the challenge information and the import request ID which is uniquely allocated to each import request into the metadata description at the metadata generating portion 16 to be returned to the client (step S154).

[0368] Having received the challenge information in metadata description, the importer 5 interprets the challenge information at the metadata interpreting portion 56. Then the import request processing portion 51 affixes the signature on the challenge information and transfers it to the trader 1.

[0369] The trader 1 checks the signature on the challenge information (step S155), performs the ordinary import processing if the authority is proven (step S156), and transforms the import result into metadata form to be returned to the client 5 (step S157).

[0370] Following effects are obtained by the trading system according to the present invention:

[0371] [1] Avoidance of Collision of Service Type Names

[0372] Restriction such that a service type name must be unique in a trader can be removed. By using context names in order to avoid collisions of service type names, the client of the trader is made to consider the object for the service and the area where the service is applicable, so that the confusion of names caused by the service type as a mere character string can be avoided.

[0373] Additionally, at the time of import in case where services saved by a plurality of traders are provided to the importer as a result of the link operation, the service types are classified by the context names and the importer can designate an appropriate context name whereby the importer can obtain only the service of its desired service type. Moreover, by describing this context with the metadata description, the freedom degree of describing the service type is enhanced.

[0374] [2] Client Authentication by Trader

[0375] The trader receives requests such as the service type registration request and the export processing from various clients, and renews the information in the service type repository and service offer repository at every reception. By the trader having the authentication procedure, processing requests from malicious clients can be rejected. As a result, the information in the service type repository and the service offer repository can be safely kept.

[0376] By performing this authentication procedure with the metadata description, an encryption algorithm for authentication such as the hash method can be switched over and used arbitrarily without any additional parameters. Furthermore, an extendibility such as a plurality of encryption algorithms used together can be provided.

[0377] [3] Import Processing Authority

[0378] By the trader returning the challenge information to the importer and permitting the import request processing only to the importer who properly returns the authentication information to the challenge information, the exporter is enabled to publicize the service to only a part of objects, thus preventing the use of the server object by illegal clients.

[0379] By performing this authentication procedure with the metadata description, the extendibility can be secured as mentioned in the preceding clause.