JP2000092111A - Repeater and network system provided with the same - Google Patents

Abstract

PROBLEM TO BE SOLVED: To automatically transmit information with simple operation and further to prevent illegal access from the outside by transmitting transfer information, stored in a transfer information storage part or managing information on the transfer information to the designated transfer destination device, while using a selected communication means. SOLUTION: A communication means selecting part 5 collates the names of a network and transfer device from a transfer destination detecting part 4 with transfer destination information registered in a transfer destination information storage part 2 and reports the name of transfer information, the name of network, transfer destination device name, communication means and communication device connector to be designated to a transfer information managing part 3. A communication means control part 6 starts a higher-order layer communication protocol, corresponding to the communication means from the transfer information managing part 3 and transmits the transfer information stored in a main memory toward the transfer destination device of the prescribed network. Either a client computer or repeater analyzes whether or not the sent communication data are addressed to itself, and when the data are addressed to itself, the transfer information is stored.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a relay device for mutually exchanging information between two or more networks using different types of communication devices and communication protocols. In particular, a network system is provided in which information exchange between networks having different communication architectures can be performed by a simple operation.

[0002]

2. Description of the Related Art In recent years, communication techniques for personal computers and workstations have been developed, and local area networks, that is, computer networks called LANs, have been widely used in companies and organizations. Recently, these local area networks have been connected to each other, and information has been transmitted through a network between offices or between offices, thereby improving work efficiency. For example, various relay devices called bridges, routers, gateways, and the like are provided between networks, and connected to a dedicated line via these relay devices, and interconnecting the individual networks, the WAN is connected to the WAN. It has become possible to construct a so-called wide area network and exchange information with each other.

Incidentally, the network architectures currently operating individually have different communication architectures depending on the types of personal computers, workstations, or host computers that constitute the systems, and on the operating system (OS) used. Is different. In these network systems having different communication architectures, different types of communication devices and communication protocols are used. Therefore,
These different types of networks cannot be directly connected to communicate with each other. In this case, information must be manually exchanged via an information recording medium such as a magnetic tape, a flexible disk, or a magneto-optical disk.

[0004] In order to communicate between networks using different types of communication architectures, there is a case where both are connected via a communication device or a relay device for mutually converting communication protocols. However, the conventional relay device is generally configured to correspond only to a dedicated communication device and a communication protocol so as to connect two specific networks, and therefore, is not versatile, and therefore has a low cost. Is also expensive.

[0005] On the other hand, conventionally, in each company or organization,
Computer-based information processing and design / production (CAD
/ CAM) is widely performed. For example, design data and the like are transmitted to a customer's computer for approval or correction, or design data created on the customer's computer is received by the company's own computer, and the Examples of operating production machines are increasing. However, if the company's computer system is connected to an external computer via a communication line, even if it is a customer or a subcontractor, unauthorized access to the connected computer system cannot be completely prevented.

Therefore, usually, a dedicated communication device is provided which is physically separated from a computer network built in each company or organization, and a magnetic tape device or a flexible disk connected to the communication device is provided. Information is temporarily stored in a device or the like. An information recording medium such as a magnetic tape or a flexible disk is mounted on a drive device connected to a network system, and the transfer information is read and used. However, in this system configuration, it is necessary to manually handle the information recording medium, so that a task of frequently inputting / outputting various types of information is labor intensive and hinders the work efficiency.

On the other hand, recently, a defense system for directly connecting a network to an external computer system has been developed. For example, a defense system called a firewall is often provided at a connection point with an external network. The firewall determines whether it is a specific authorized user, whether it is a specific authorized source or destination, or whether it is information of a specific authorized type (format). And so on, and only information that passes all the conditions is passed.

Further, attempts have been made to encrypt communication data to make access from outside more difficult. However, if a defense system such as a cryptographic processing device or a firewall is provided in the network system, the equipment cost and operation cost of the entire network system increase. In addition, in communication between networks, communication concentrates on these devices, and the actual communication speed of network transmission is reduced. Therefore, when transmitting large-capacity information such as image information, there is a great effect on business efficiency. May occur.

[0009]

As described above, since the information to be handled is concentrated on the relay device used for connection between the networks, the relay device is usually specialized in a predetermined communication protocol or communication device. In addition, a high-performance dedicated device is used so that information does not stagnate or fall off. However, as the types of interconnected networks increase, so do the types of relay devices installed,
Managing and operating these various relay devices has placed a great burden on network system administrators. Further, as the number of connected networks increases, the types of information handled also become diversified. However, if the types of information handled in the relay device are unnecessarily increased, the security and reliability of the system are impaired.

Therefore, the present invention can widely support various communication protocols and communication devices, and can automatically transmit information to a predetermined transfer destination device by a simple operation in an information processing apparatus connected to a network. And a relay device capable of securing substantial information communication capability without using a high-performance dedicated device and effectively preventing unauthorized access from the outside. is there. It is another object of the present invention to obtain a network system including the relay device.

[0011]

In order to solve the above-mentioned problems, a relay device according to the present invention first includes a network connection unit to which a heterogeneous communication device connection device can be attached so that it can be connected to various communication devices. Have. The network connection unit may be configured to mount two or more different types of communication device connection devices, or may be provided with only one. Further, the relay device of the present invention includes a transfer information storage unit for temporarily storing transfer information received from a network via the communication device connection device. The transfer information storage unit is set to be connected as a shared resource of the information processing apparatus connected to the network.

[0012] Further, the relay device of the present invention is a transfer destination information storage device in which a plurality of transfer destination information for specifying a transfer device for transfer information temporarily stored in the transfer information book storage unit and communication means are registered. It has a part. In addition, communication means is provided corresponding to the transfer destination device registered in the transfer destination information storage unit. The communication means may be constituted by two or more different upper layer communication protocols.
The communication protocol may be composed of various types.

Still further, the relay device of the present invention includes a transfer destination detecting unit for detecting a transfer destination device of the transfer information when the transfer information is stored in the transfer information storage unit, wherein the transfer destination detecting unit is The information on the detected transfer destination device is compared with the transfer destination information registered in the transfer destination information storage unit described above,
Using the communication unit selected by the communication unit selection unit that selects the communication unit corresponding to the transfer destination device, the transfer information stored in the transfer information storage unit or the management information related to the transfer information is designated. Communication means control unit for transmitting the data to the transfer destination device.

The relay device is installed between networks using different types of communication devices and communication protocols, and a communication device connection device corresponding to each network is mounted to connect to the network. By mounting each upper layer communication protocol, information can be mutually exchanged between networks using different types of communication architectures. At this time, since the relay device includes the transfer information storage unit as a shared resource of the information processing device connected to the network, information can be transferred between the information processing device and the relay device by a simple operation. .

That is, in the present relay device, when the transfer information is stored in the transfer information storage unit, the transfer destination detecting unit detects information on the transfer destination device of the transfer information, and obtains the information of the obtained transfer destination device. The transfer destination information registered in advance in the transfer destination information storage unit is compared with the transfer destination information on the communication means. Next, a predetermined communication unit corresponding to the transfer destination device is selected, and the transfer information temporarily stored in the transfer information storage unit can be automatically transferred to the transfer destination device. At this time, the transfer information can be transferred using an upper layer communication protocol different from the communication protocol used when receiving the transfer information.

Further, since the present relay apparatus is provided with a transfer information storage unit connected and set as a shared resource of the information processing apparatus connected to the network, information transfer from the information processing apparatus to the relay apparatus is simple. In a short time, the information processing apparatus can immediately start another information processing operation, and can secure substantially high information communication capability. Furthermore, transfer destination information such as communication means corresponding to the transfer destination device of the transfer information is registered only in the relay device, and furthermore, by limiting the communication protocol installed in the relay device, the connection to the partner network can be established. It is possible to prevent unauthorized access to the information processing devices that have been set, and to prevent unauthorized access to the own network from outside.

That is, by using the relay device of the present invention, it is possible to realize information exchange by various communication protocols between networks using different types of communication architectures and, of course, between networks using the same type of communication architectures. Becomes possible. Further, the network system can be easily expanded without providing an expensive dedicated relay device as in the related art. In addition, when exchanging information between networks via defense systems such as firewalls,
By performing protocol conversion by the relay device so as to match a communication protocol that can pass through the firewall, information exchange can be performed while maintaining high security of the connected network.

[0018]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the relay device according to the present invention will be described below in detail with reference to the drawings. FIG. 1 is a block diagram showing a functional configuration of the present relay device, and FIG. 2 is a hardware configuration diagram of the present relay device. FIG. 3 shows a configuration example of a network system incorporating the relay device. FIG. 4 is a flowchart showing the operation of the relay device.

(Configuration Example of Apparatus) First, a configuration example of the relay apparatus will be described. As shown in FIGS. 1 and 2, the relay device of the present invention can be basically configured using an information processing device such as a personal computer or a workstation. In the figure, reference numeral 10 denotes a relay device. The relay device 10 is a communication device connection device COM1 for communicating with a computer (not shown) connected to the network 1 and a communication device connection for communication between a computer (not shown) connected to the network 2. And a device COM2.

The communication device connection devices COM1, CO
M2 is connected to a communication line constituting a network, and controls physical interface units 9A and 9B for inputting and outputting an electric signal or an optical signal, and the physical interface unit 6, respectively. It comprises lower-layer communication protocol units 8A and 8B for transmitting error-free communication data with the connected information processing device. The communication device connection devices COM1, COM2
Has different configurations depending on the physical characteristics of the network to be connected, and is mainly configured as an electronic circuit.

The communication data transmitted via the communication line of the network 1 or network 2 is checked by the lower layer communication protocol section of the communication device connection device COM1 or COM2 whether or not it is addressed to the relay device. Only the communication data addressed to the relay device is transmitted by the communication means control unit 6
Is transmitted to the upper layer communication protocol. In this relay device, a plurality of types of different upper layer communication protocols 7A and 7B are incorporated corresponding to the communication protocols used in each network to be connected. These upper layer communication protocols 7A and 7B can be mainly configured by software.

The communication data transmitted to the relay device is
After being temporarily stored in the main memory 13 shown in FIG. 2 via the communication device connection device COM1 or COM2, via one of a plurality of types of upper layer communication protocols 7A and 7B constituting the communication means control unit 6, Are stored as transfer information in the transfer information storage unit 1 provided in the relay device 10 shown in FIG.

As shown in FIG. 2, the transfer information storage unit 1 can be constituted by an external storage device 14 using a large-capacity storage medium such as a fixed magnetic disk or a magneto-optical disk. Note that the transfer information storage unit 1 may be configured using a volatile semiconductor memory. Further, in the present relay device, a transfer information management unit 3 for storing received transfer information in the transfer information storage unit 1 and managing a call of the stored transfer information to the main memory, and the like, When transfer information is stored in the unit 1, a transfer destination detection unit 4 that detects a transfer destination device of the transfer information is provided.

Further, the relay device 10 includes a transfer destination information storage unit 2 for registering information on a transfer destination device of transfer information. The transfer destination information is registered in the transfer destination information storage unit 2 in advance. Keep it. Then, the transfer information storage unit 1
The information of the transfer destination device included in the transfer information stored in the transfer destination information stored in the transfer destination information storage unit 2 is compared with the transfer destination device, and only the transfer information that matches is transmitted via the communication unit control unit 6. That is, a plurality of types of upper layer communication protocols 7
A and 7B are used to transfer to the destination device. Therefore, the relay device 10 searches for the transfer destination information registered in the transfer destination information storage unit 2 and obtains information on the communication means used by the registered transfer destination device,
A communication means selection unit 5 for selecting an upper layer communication protocol for transferring the received transfer information is provided. The transfer destination information storage unit 3 for registering the transfer destination information is configured by a storage device such as a nonvolatile semiconductor memory or a magnetic disk.

The relay device 10 includes the transfer destination information storage unit 3
As shown in FIG. 2, an input operation device 15 such as a mouse and a keyboard, and a CRT
And the like. Further, the relay device 1
Reference numeral 0 denotes an arithmetic and control unit 11 for controlling the entire apparatus, a main memory 13 for storing a program for operating the apparatus, communication data, and the like, as well as a personal computer and a workstation. A ROM (Read Only Memory) 12 having a program for storing programs and control data stored in the main memory 13 is provided.

(Example of constructing network system)
A configuration example of a network system using the relay device 10 will be described. FIG. 3 shows an example of a case where information is exchanged between a local area network A and a local area network B which are geographically or spatially separated from each other via a communication network 30 constituting a network E. I have. It is assumed that the local area network A and the local area network B use different types of communication devices and communication protocols, respectively. A communication network 3 for connecting the networks;
0 is a backbone, which is a private network established in a business establishment, a dedicated line or a public line provided by a telecommunications carrier to connect between the business establishments, or a communication network which combines them. Constitute.

Client computers C1, C2 and C3, C4, which are information processing devices such as personal computers and workstations, are connected to the local area networks A, B shown in FIG. 3, respectively. In the system construction, first, each of the networks is indicated by 10A and 10B as shown in FIGS.
Is provided.

Next, a communication device connection device applicable to the network A is mounted on one network connection portion of the relay device 10A, and the other network connection portion is mounted on the other network connection portion.
A communication device connection device for connecting to the network E is mounted and connected to each communication line. Further, a communication device connection device applicable to the network B is mounted on one network connection portion of the relay device 10B, and a communication device connection device for connecting to the network E is mounted on the other network connection portion, Connect to each communication line. Each of the relay devices is connected to the network E via the communication control devices 20A and 20B. As described above, the network E uses a private network in a company, a communication network 30 such as a specific communication line, a public communication line, or a digital data line provided by a communication carrier.

Next, communication means for transmitting communication data is constructed for each local area network. First, the relay device 1 of the local area network A
0A and the client computers C1 and C2, transfer of information from the client computers C1 and C2 to the transfer information storage unit 1A of the relay device 10A and transfer of transfer information from the transfer information storage unit 1A to the client computers C1 and C2. The communication setting program module for performing the transfer process is incorporated in the communication unit control unit of the relay device 10A and the communication unit control unit (not shown) of the client computers C1 and C2.

Similarly, the relay device 10B of the local area network B and the client computers C3, C
4, client computers C3, C
4 to the relay device 10B or the relay device 1B.
The communication setting program module for performing the transfer processing of the transfer information from 0B to the client computers C3 and C4 is incorporated in the communication unit control unit of the relay device 10B and the communication unit control unit (not shown) of the client computers C3 and C4.

Next, the transfer information storage sections 1A and 1B of the relay devices 10A and 10B are opened to the client computers of the networks to which the relay devices 10A and 10B are directly connected, respectively, so that the respective client computers can freely open the transfer information storage units 1A and 1B. The sharing setting is registered in the communication setting program module so that it can be accessed. Next, in each client computer, the connection setting is registered in the communication setting program module so that each client computer can access the transfer information storage sections 1A, 1B of the opened relay devices 10A, 10B.

More specifically, as shown in FIG. 3, the transfer information storage section 1A of the relay device 10A connected to the network A is separated into a network A area and a network B area. The network A area is used as a storage unit for information transferred from the other network to the own network, that is, the network A.
The area for the network B is transmitted from the client computers C1 and C2 connected to the network A.
It is used as a storage unit for information to be transferred to the other network, here, the network B.

Then, in the client computers C1 and C2 connected to the network A, connection settings for the transfer information storage unit 1A of the relay device 10A separated into the network A area and the network B area are registered. Then, the client computer C1 or C2 can access the transfer information storage unit 1A of the relay device 10A. At this time, as shown in FIG. 3, the network A area and the network B area of the transfer information storage unit 1A of the relay device 10A are displayed as virtual storage devices A and B on the display screens of the client computers C3 and C4. Is displayed.

Similarly, in the relay device 10B connected to the network B, the transfer information storage unit 1B is separated into a network A area and a network B area, and the network A area is connected to the network B. The client computer C3, C4 is used as a storage unit for information transferred to the other network, here, the network A, and the area for the network B is addressed to the network B from the other network, here, the network A. It is used as a storage for the transferred information.

Then, in the client computers C3 and C4 connected to the network B, connection settings for the transfer information storage unit 1B of the relay device 10B separated into the network A area and the network B area are registered. Then, the client computer C3 or C4 can access the transfer information storage unit 1B of the relay device 10B. At this time, as shown in FIG. 3, the area for network A and the area for network B in the transfer information storage unit 1B of the relay device 10B are displayed as virtual storage devices A and B on the display screens of the client computers C3 and C4. Is displayed.

Next, the local area networks A and B
Relay devices 10A and 10B for exchanging information between
The setting will be described. First, the relay devices 10A and 10A
B, various communication protocols used in the networks A and B are mounted as communication means.

For example, as shown in FIG.
As shown in FIG. 1, as a communication means for a network A composed of A and client computers C1, C2, etc., a message communication protocol "msg", a printer output communication protocol "lpt", or a file transfer A communication protocol “ftp” for communication is incorporated as an upper layer communication protocol.

Further, a network B composed of a relay device 10B and client computers C3, C4, etc.
As shown in FIG. 1, a communication protocol "MSG" for message transmission, a communication protocol "LPT" for printer output, or a communication protocol "FTP" for file transfer, as shown in FIG. Incorporate as a communication protocol.

Next, in the relay devices 10A and 10B,
Information about the transfer destination device of the transfer information stored in the transfer information storage units 1A and 1B is set and registered. As the transfer destination information, for example, as shown in FIG.
The names of the transfer destination networks corresponding to the virtual storage devices A and B of A and 1B, the names of the transfer destination devices, the names of the communication protocols used as the communication means with the transfer destination devices, and the names of the communication device connection devices used, etc. The transfer destination information is registered in the transfer destination information storage unit 2 shown in FIG.

As shown in FIG.
The client computer “C3” uses the communication protocol “LTP” to communicate with the communication device connection device “CO
M2 ". Similarly,
Regarding other transfer destination devices including the data transfer device 10B connected to the network B, the communication protocol name or the like as the communication means is registered as transfer destination information. Further, as shown in FIG. 5, the transfer device 10A and the client computers C1 and C2 connected to the network A are also transferred as transfer destination devices such as the transfer destination device name of the transfer information and the name of the communication protocol to be used. The destination information is registered in advance.

(Communication Data) Communication data handled by the relay devices 10A and 10B installed in the network system will now be described. FIG. 6 shows an example of information transferred by the relay device of the present invention. As shown in the figure, the basic format of communication data exchanged between each device connected to the network system is a start code 21,
Destination address 22, Source address 23, Format information 2
4, transfer information 25, error control code 26, and end code 2
7 and the like.

In the communication data, the destination address 2
2 and the source address 23 and the format information 24 are, for example, address information required between an adjacent device such as a computer and a communication control device, and information such as another network or a communication network connected to the communication control device. The address information required in the relay network and the address information required for the upper layer communication protocol that ultimately transmits and receives the transfer information are hierarchically configured.

Note that, of the communication data, transfer information 2
5 is created by application software or the like on the client computer. At this time, transfer information 2
Although not shown in FIG. 5, the name and information amount of the transfer information, and the names of the transfer destination device and the transmission source device are added to 5. The transfer information 25 is transmitted to the virtual storage device A provided on the screen by the operator of the client computer.
Or, when a copy instruction or a move instruction is issued to B, the client computer is transferred to the transfer information storage unit 1A or 1B provided in the relay device of the network connected to the client computer.

For example, when a copy or move instruction is issued to the virtual storage device B of the client computer connected to the network A, the transfer information 25 is transmitted to the relay device 10.
A is transferred to the area for network B in the transfer information storage 1A provided in A. At this time, the communication data including the transfer information 25 is the communication device connection device COM of the relay device 10A.
1 and is checked by the lower layer communication protocol 8A whether or not the destination address 22 included in the communication data matches the shared connection address initially registered. Only the communication data obtained is taken into the relay device 10A.

(Operation of the present apparatus) Next, the operation of the relay apparatus will be described with reference to the drawings. FIG. 4 is a flowchart showing the operation of each unit in the relay device 10 shown in FIG. 1 and FIG. First, in step S1, communication data transmitted from the client computer connected to the own network or the other network to the relay device is stored in the transfer information storage unit. This process is a process performed by the communication device connection device COM1 or COM2 of the relay device 10, the communication unit control unit 6, and the transfer information management unit 3 illustrated in FIG.

Communication device connection device COM1 or C
The communication data received through the OM 2 is temporarily stored in the main memory 13 shown in FIG. 2, and the transmission destination address 22 is analyzed by the lower layer communication protocol 8A or 8B. The transfer information 25 is delivered to the corresponding upper layer communication protocol. If the received communication data is not addressed to the present relay device, the communication data is discarded.

Next, in a predetermined upper layer communication protocol, the transfer information 25 stored in the main memory 13 is subjected to a format conversion process or the like based on the format information 24, and then the transfer information 25 is delivered to the transfer information management unit 3. . The transfer information management unit 3 transfers the transferred transfer information 25 to the transfer information storage unit 1 and stores it. At this time, the transfer information management unit 3 stores the transfer information 25 in the transfer information management area of the transfer information storage unit 1.
And registration information such as the name and amount of transfer information included in the transfer information and the names of the transfer destination device and the transmission source device. together,
The processing status of the transfer information is recorded. As the processing status, for example, a reception date and a flag indicating “waiting for transfer” are recorded in the transfer information management area. FIG. 7 is an example showing the configuration of the transfer information management area.

When the transfer information management unit 3 completes storing the transfer information 25 in the transfer information storage unit 1 and registering the reception management information, the transfer destination detection unit 4 monitoring the operation of the transfer information management unit 3 Accordingly, the process proceeds to the transfer destination information acquisition process in step S2 shown in FIG. First, the transfer destination detecting unit 4
The transfer information management area of the transfer information storage unit is accessed, and the name of the transfer information “waiting for transfer” and the name of the transfer destination device are acquired. At this time, when the transfer information 25 is stored in the area for the network B in the transfer information storage unit, the communication means selecting device 5 is notified of the network name “net B”, the name of the transfer information, and the transfer destination device. Is notified, and the process proceeds to the communication means selecting process in steps S3 to S5. This process is performed by the communication means selecting unit 5 by accessing the transfer destination information storage unit 2.

First, the communication means selecting section 5 first proceeds to step S3
, The network name and the name of the transfer destination device notified from the transfer destination detection unit 4 are compared with the transfer destination information registered in the transfer destination information storage unit 2. If the corresponding network name and the name of the transfer destination device are not registered, the collation processing is terminated in step S4, and the process proceeds to the transfer interruption processing shown in step S8. In the transfer interruption process of step S8, the transfer information management unit 3 is notified of the name of the transfer information whose transfer process is to be interrupted and the deletion of the transfer information. Upon receiving the notification, the transfer information management unit 4 accesses the transfer information management area of the transfer information storage unit and records in the status column that the transfer of the transfer information has been interrupted.

In the transfer destination information collation processing in step S3, if the name of the network and the name of the transfer destination device are registered in the transfer destination information storage unit 2, step S4
After that, the process proceeds to the communication means selecting process in step S5. In step S5, the communication unit selection unit 5 first acquires the name of the communication unit corresponding to the network and the transfer destination device registered in the transfer destination information storage unit 1, and the name of the communication device connection device to be used. . Next, the transfer information management unit 3 is notified of the name of the transfer information to be transferred, the network name of the transfer destination, the transfer destination device name, the communication means for the transfer destination device, and the designated communication device connection device. .

The transfer information management unit 3 that has received the notification starts the transfer information transfer processing shown in step S6. This transfer processing is performed by the transfer information management unit 3, the communication unit control unit 6,
And the communication device connection device COM1 or COM2. In the transfer processing in step S6, first, the transfer information management unit 3 calls the transfer information stored in the transfer information storage unit 1 into the main memory 13. Next, after recording “transferring” in the status column of the transfer information management area, the type of the communication means designated by the communication means selection unit 5 to the communication means control unit 6, ie,
The name of the communication device connection device used with the upper layer communication protocol, and the name of the transfer destination network and the transfer destination device are notified.

The communication means control section 6 activates the upper layer communication protocol corresponding to the communication means notified from the transfer information management section 3 and transfers the transfer information stored in the main memory 13 to a predetermined network transfer destination. Send to device. At this time, the upper layer communication protocol is a communication device connection device CO composed of a lower layer communication protocol corresponding to a specified network and a physical interface unit.
Using either M1 or COM2, transfer information 2
5 is transmitted to a predetermined network.

At the same time, either the client computer directly connected to the network or the relay device connected to the other network via the network E determines whether the transmitted communication data is addressed to itself. Analyze, and if it is addressed to itself, the client computer or the other relay device connected via the network E captures the communication data and stores the transfer information.

According to the above-described procedure, when the communication means control unit 6 provided in the transmission source relay device normally transfers the transfer information 25 on the main memory 13 specified by the transfer information management unit 3, The transfer information management unit 3 is notified to that effect. Upon receiving the transfer completion notification, the transfer information management unit 3 performs a transfer completion process in step S7. In the transfer completion processing, the transfer information management unit 3 accesses the transfer information management area of the transfer information storage unit 1 and records “transferred” in the status column related to the transfer information, and additionally, The transfer information relay process is completed by performing the above-described transfer information erasing process.

In the above series of relay processing, for example, when another transfer information is transmitted from another client computer or the other network to the present relay apparatus during the transfer information transfer processing in step S6, As shown in FIGS. 1 and 2, the present relay apparatus includes two sets of communication device connection apparatuses COM1 and COM2 and a communication unit control unit 6 including a plurality of types of upper layer communication protocols. Another transfer information can be received and stored in the transfer information storage unit using the communication device connection apparatus that is not being processed and another upper layer communication protocol that is not being operated.

That is, since the relay apparatus of the present invention includes a plurality of network connection means, it can simultaneously receive transfer information transmitted from different networks or transfer the transfer information to one network. inside,
It is also possible to receive transfer information transmitted from another network, and to simultaneously transfer a plurality of transfer information stored in the relay device to another network.

In the network system shown in FIG. 3, for example, the relay device 1 connected to the network A
The transfer information from 0A is transmitted via a communication network 30 constituting a network E such as a backbone network in a business office connected via the communication control device 20A, a dedicated line connecting the business offices, or a public line, and the like. Is transferred to the relay device 10B of the network B via the communication control device 20B provided in the business office of No. 1 and temporarily stored.

The relay device 10B is a relay device similar to the above-described relay device 10A, and includes transfer information transferred via the communication network 30 constituting the network E and transfer information transferred from each device connected to the network B. Relays outgoing transfer information to each other. Therefore, the relay device 10B includes
A communication device connection device including a physical interface unit and a lower-layer communication protocol unit for connecting to a communication network 30 forming the network E;
And a communication device connecting device comprising a physical interface unit and a lower layer communication protocol unit for connecting to a communication line constituting the communication line, and further, various upper layer communication protocols used in the own network B. And a communication means control unit configured with various upper layer communication protocols used in the network A connected via the network E.

Therefore, the relay device 10B, which has received and stored the transfer information from the network A transferred via the network E, determines the name and information amount of the transfer information contained in the transfer information, the transfer destination device and the transmission source device. The name is analyzed and compared with the transfer destination information of the transfer destination information storage unit registered in advance, and the predetermined upper layer communication protocol registered to the final transfer destination device connected to the network B is transmitted. Can be used to transfer information.

According to the functions and operation procedures of the respective devices constituting the network system including the present relay device shown in FIGS. 1 to 3, the client computers C1 and C2 connected to the network A are connected to the network B. First, the information transferred to the transferred device is received by the relay device 10A connected to the network A according to the communication protocol used in the network A, and is temporarily stored in the network B area of the transfer information storage unit 1A.

According to the operation flow of the present relay apparatus shown in FIG. 4, the transfer information is connected to the network B from the relay apparatus 10A via the network E by the communication protocol used in the network B. The data is transferred to the relay device 10B and stored in the area for network B in the transfer information storage unit 1B. Further, the transfer information stored in the relay device 10B is transmitted from the relay device 10B to the predetermined transfer destination device connected to the network B by the communication protocol used in the network B in accordance with the operation flow of the relay device shown in FIG. Is forwarded to

On the contrary, the information transferred from the client computers C3 and C4 connected to the network B to the devices of the network A is received by the relay device 10B according to the communication protocol used in the network B.
The information is temporarily stored in the network A area of the transfer information storage unit 1B.

In accordance with the operation flow of the relay device shown in FIG. 4, the transfer information is transmitted from the relay device 10B via the network E to the relay device connected to the network A by the communication protocol used in the network A. The data is transferred to the device 10A and stored in the network A area of the transfer information storage unit 1A. Further, the relay device 1
The transfer information stored in 0A is transferred from the relay device 10A to a predetermined transfer destination device connected to the network A by the communication protocol used in the network A according to the operation flow of the relay device shown in FIG. .

In the network system shown in FIG. 3 described above, the communication data of the communication protocol used in the network A and the communication data of the network B It seems that information is mutually exchanged between networks while communicating with communication data according to the communication protocol used. But actually,
A communication line for the communication protocol used in the network A and a communication line for the communication protocol used in the network B are physically provided separately, or a multi-line network that is logically multiplexed is used. Or using a packet-switched network does not cause any particular problems.

Further, in the network system shown in FIG. 3, when information is to be exchanged between the client computer C1 or C2 connected to the network A and the client computer C3 or C4 connected to the network B, Since only the name of the final transfer destination device is registered in the relay device, for example, in the communication control devices 20A and 20B connecting the networks, the relay device is registered so as to be the actual transfer destination device. This does not cause any inconvenience.

Further, the final destination device of the transfer information is
When the transfer is performed as the relay device itself of the partner network, as described above, since the transfer information storage unit provided in the relay device has the connection setting registered as a shared resource of the client computer connected to the network, The appearance of the virtual storage device icon on the display screen of the client computer allows the user to easily know that the relay device has received the transfer information. In this case, it is preferable that the relay apparatus notifies the client computer of the reception management information such as the name and amount of transfer information, the name of the transmission source, and the reception time. That is, the relay device itself may be configured to have the same function as the file server.

In this embodiment, the transfer information created by the client computer is transferred to another network via the relay device. For example, information on a file server (not shown) connected to the network, or Alternatively, the image information read by the image input device, the design information created by the CAD computer, or the like may be transferred to the relay device by operating the client computer and transmitted to the other network.

Through the series of processing operations of steps S1 to S8 described in detail above, the data is transferred from the client computer connected to the network or various information processing devices provided in the network to the relay device of the present invention. The transferred information is temporarily stored in the transfer information storage unit of the relay device, and thereafter, a predetermined communication protocol is transmitted to the network registered in the transfer destination information storage unit and the transfer destination device connected to the network. The transfer information is transferred. The communication protocol used at this time is determined by searching for transfer destination information registered in advance in the transfer destination information storage unit of the relay device.

That is, for example, the print information of the client computer connected to the network A is transferred to the relay device by the file transfer protocol “ftp”, and then the print information for the printer device connected to the network B is transmitted to the relay device. It is converted into the protocol “LTP” and can be printed out by a printer on the network B. At this time, the communication architecture in the network A and the communication architecture in the network B may be configured with different communication architectures.

[0070]

Embodiment 1 Next, an embodiment of a network system using the above-described relay device will be described. FIG. 9 is a configuration diagram of a network system using the relay device of the present invention. As shown in the figure, a network A is connected to a file server S1, client computers C1 and C2, image output printers P1 and P2, image input image scanner G1, and the like. The network B also has a file server S2, client computers C3 and C4, and image output printers P3 and P3.
4. An image scanner G2 for image input is connected.

The networks A and B are geographically or spatially separated from each other.
Therefore, in order to connect the networks to each other and exchange information, the networks are connected via a communication network 30 such as a dedicated line connecting the offices or a public line. At this time,
At the connection point between the network A and the communication network 30, a defense system called a firewall is inserted. By providing this firewall, the communication network 30
, It becomes very difficult to access the network A from outside.

Normally, the firewall 40 includes a router for enabling data communication only with a specific permitted communication destination device, and a packet for enabling data communication in a specific permitted communication protocol format. filter,
An authenticator that checks the identification code and password given to a specific authorized operator, and a proxy server for exchanging information with an external computer system in place of a client machine in the network if necessary It is composed of

As described above, when the firewall 40 is provided between the networks, the communication destination device, the communication protocol to be used, the communication device, and the like are restricted, and only the communication data of the specific condition permitted is limited to the firewall 40. Can not pass through.

Therefore, by providing the above-described relay device of the present invention at both ends of the firewall, for example, print information created by a client computer on the network A can be output by a printer connected to the network B. And, conversely, image information created by the image input image scanner connected to the network B can be transferred to a file server connected to the network A.

Of course, each relay device has a communication device connection device and an upper layer communication protocol so as to convert the transfer information created in the network A or the network B into a communication device or a communication protocol compatible with a firewall. Will be.

Further, even when the communication architecture forming the network A and the communication architecture forming the network B are of different types, each relay device is provided with a communication device connection device or a host By providing the layer communication protocol, information can be mutually exchanged.

For example, if the network A sets UNIX to O
S (operating system) is a computer system, and the other network B is Macint
osh (trademark of Apple Inc.), a communication device connection device conforming to each communication architecture and an upper-layer communication protocol include:
By providing each of the relay devices connected to the network, information can be mutually exchanged between networks having different communication architectures.

[0078]

Embodiment 2 Next, another embodiment of a network system using the relay device of the present invention will be described. FIG.
Is an example of a system configuration in which two or more types of networks having different communication architectures are connected to each other to exchange information.

In the figure, a network A is a ring network system using an optical cable, a network B is a tree network system using a twisted pair cable, a network C is a star network system centered on a host computer, and a network D Is a bus network system using a coaxial cable represented by Ethernet.

In each network, a personal computer or workstation as a client, a printer or an image scanner (not shown),
Various devices such as a file server are arranged in a distributed manner and individually constitute a local area network.

In each of the networks, for example, App
Apple's AppleTalk, Novell's Net
ware, Microsoft's WindowsN
T, DEC's DECnet, IBM's SNA, etc.
Computer manufacturers, communication device manufacturers, software manufacturers, and the like use different communication architectures developed individually.

To connect these networks to each other via the communication network 30 forming the network E, the relay device 10A and the relay device 10A are connected to the connection section between the communication network 30 forming the network E and each network. 10
B, 10C, 10D, and the communication control devices 20A, 20B,
20C and 20D are provided. The communication network 30 that constitutes the network E includes a private trunk network provided in the office, a wide area network such as a dedicated line or a public line provided by a communication carrier for connecting the offices. It is configured using.

In the network system shown in FIG.
A unique physical communication device and a logical communication protocol used in each network are temporarily converted to an international standard communication device and communication device defined by ISO or the like via the relay device of the present invention. By converting the data into a protocol, the standardized communication means is used as a mediator to exchange information between individual networks using different types of communication architectures. That is, by using the relay device of the present invention as a communication server for a plurality of other types of networks, mutual communication between networks configured with different communication devices and communication protocols becomes possible.

That is, the information created in each network is first transferred to the transfer information storage unit of the relay device connected to the network using a communication device and a communication protocol unique to each network. Then
A communication network in which transfer information configures a network E via a communication control device in which an actual transfer destination device is registered in advance using a communication device of an international standard pre-installed in the relay device and a communication protocol. 30
Sent to

FIG. 8 shows a configuration example of the transfer destination information storage unit of the relay device provided in the present network system. The figure is an example of the relay device 10A provided in the network A. Nos. 1 to 3 indicate communication means with the devices SA1, CA1, and CA2 connected to their own networks.
4 to 7, devices SB1 and C connected to the network B
No. B1, CB2, and the communication means with CB1 are No. 8-11
Are the devices HST, CC1, connected to the network C,
The communication means with CC2 and CC1 is No. 12-15
Devices SD1, SD2, CD connected to network D
1. Communication means with CD2 are registered.

Except for the communication means with the own network A, transfer destination information is registered in the other network so as to transmit the transfer information by using the communication device of the international standard and the communication protocol. ing. Although not shown, the relay device connected to each of the other networks also has a communication means used in its own network, a communication device of the international standard used for communication with the other network, and a communication device. It has communication means corresponding to the protocol. Therefore, each relay device is configured to exchange information with the other network using communication means of the international standard, and to perform communication with its own network using communication means specific to each network. are doing.

The communication data based on the international standard transmitted from the relay device connected to a certain network reaches the relay device of the designated network via the communication network 30 constituting the network E, and is stored in the transfer information storage unit. Once stored. Thereafter, the transfer information is transferred to a predetermined final transfer destination device by using a communication device unique to the network to which the relay device is connected and a communication protocol.

As described above, the relay device of the present invention is provided in each local area network, and only by transmitting the transfer information from the information processing device connected to the network to the relay device, automatically. Transfer information is transmitted to a predetermined transfer destination device of another network configured with a heterogeneous communication architecture. Further, it is possible to return, for example, a result of receiving the transfer information from the transfer destination device to the transmission source device by a reverse route, and it is possible to obtain a network system capable of reliably exchanging information.

In the network system shown in FIG. 10, the communication control devices 20A, 20B, 20C, and 20D connected to the communication network 30 constituting the network E communicate with a specific permitted source and destination. If configured to pass only data, a network system that can prevent unauthorized access to each network from the outside can be constructed. Also, the relay devices 10A, 1
By limiting the means of communication with the network E mounted on 0B, 10C, and 10D to a specific communication protocol, unauthorized access from the outside can be more reliably prevented. That is, the relay system and the communication control device of the present invention can be provided with a defense system function for each network.

[0090]

[Other Embodiments] The above-mentioned relay device has a communication device connection device for connecting to two types of communication devices.
Without being limited to this, even if only one type of communication device connection device is provided, the gist of the present invention is not spoiled. That is, even in this case, by mounting a plurality of types of upper layer communication protocols, the communication protocol used for receiving the transfer information and the communication protocol for transmitting the transfer information are made different from each other, so that one of the initial purposes can be achieved. Department can be achieved.

Further, by providing a communication device connection device for connecting to three or more types of communication devices,
One relay device can support various communication architectures. That is, one of the greatest features of the relay device of the present invention is that its configuration can be flexibly changed according to the type of network, information processing device, communication control device, or the like to be connected.

In the above-described relay device, in order to obtain information on the transfer destination device of the transfer information, the information on the transfer destination device is previously incorporated in the transfer information. By registering the information of the transfer destination device corresponding thereto in the transfer destination information storage unit in advance, the transfer destination detection unit can acquire information on the transfer destination device by using the transfer information name in the transfer information as a clue. Such a configuration is also possible. That is, even if there is no information on the transfer destination device in the transfer information, the transfer destination device can be detected from the name of the transfer information.

In the above-described relay device, the transfer information storage section for temporarily storing transfer information is divided into areas corresponding to the transfer destination network, and each network area is shared with the client computer. The connection setting is made to be a resource, and it is configured to be displayed as a virtual storage device on the display screen of the client computer, but the transfer information storage unit is configured to correspond to the transfer destination device connected to the transfer destination network. The transfer information storage unit, which is divided into regions and divided into regions corresponding to the transfer destination devices, may be connected and set as a shared resource as a virtual storage device displayed on a display screen of a client computer.

In this case, the virtual storage device displayed on the client computer indicates the transfer destination device of the transfer information, and by instructing the virtual storage device to copy or move the transfer information, Since the area of the transfer information storage unit in which the transfer information is temporarily stored corresponds to the transfer destination device, by detecting in which area of the transfer information storage unit the transfer information is temporarily stored, the transfer is performed. The transfer destination detecting unit can detect which information should be transferred to which information processing apparatus on which network.

Further, in the network system of the embodiment having the above-mentioned relay device, a relay device is provided for each local area network connected for exchanging information. However, for example, only a private communication line is provided. In the case where networks using different communication architectures provided in the same business office are connected to each other and information is to be exchanged, communication corresponding to each network is performed so that any network can directly access the relay device of the present invention. It is also possible to configure a network system by providing a device connection device and a communication protocol in the present relay device, and furthermore, providing only one relay device in a network connection unit.

[0096]

As described above, the relay device of the present invention comprises a first network connection for connecting to its own network and a second network connection for connecting to the other network. Since different types of communication device connection devices that are physically different from each other can be installed, information can be exchanged between at least two types of networks that have physically different communication architectures by simple operations without extra manual work. can do.

Further, since the relay apparatus of the present invention includes communication means composed of a plurality of types of communication protocols that can support the different types of communication device connection apparatuses, the relay apparatus supports the transfer destination apparatus of the received transfer information. The transfer information can be transferred to the designated transfer destination device using the communication protocol thus set. That is, since transfer information can be transmitted in accordance with the communication protocol of the transfer destination device, information can be easily exchanged even between networks using different communication protocols.

Further, the relay apparatus of the present invention simply changes the communication device or communication protocol and relays the transfer information, so that the time required for the relay processing is short.
Transfer information can be transferred at high speed without lowering the communication speed. Therefore, it is suitable for high-speed relay of not only character data but also large-capacity information such as figures, images, sounds, and videos.

Furthermore, the relay device of the present invention includes a transfer information storage unit for temporarily storing received information and can support different types of communication architectures.
Different functions such as a file server, a communication server, and a printer server can be substituted by the apparatus alone, and the operation of the client computer user is much simpler than in the case of individually accessing the various servers. In addition, the operational efficiency can be dramatically improved, and further, there is a great economical advantage.

Also, by providing the relay device,
Access to a network or a device other than the transfer destination device registered in the relay device in advance becomes difficult, which is also preferable in terms of security. In other words, by providing the relay device of the present invention in each network, both internal access from the external network and external access from the internal network pass through the device, so that a highly secure system can be configured. Can be.

The relay device according to the present invention includes a transfer destination information storage unit for registering a plurality of transfer destination information for specifying a transfer destination device of transfer information and a communication means, and a transfer destination information registered in the transfer destination information storage unit. Communication means provided with a plurality of types of communication protocols provided corresponding to the transfer destination device. The communication means is formed of two or more different upper layer communication protocols. Information can be bidirectionally exchanged between the information processing apparatuses used, and there is also an effect that substantial restrictions on information exchange are eliminated.

[0102] The relay device of the present invention is configured such that, when transfer information is stored in the transfer information storage section, a transfer destination detecting section for detecting a transfer destination of the transfer information, and a transfer information detecting section for detecting the transfer information detected by the transfer destination detecting section. A transfer destination device, a communication unit selection unit that compares transfer destination information registered in the transfer destination information storage unit, and selects a communication unit corresponding to the transfer destination device, using the selected communication unit, Transfer information stored in the transfer information storage unit, or, the communication information control unit for transmitting the management information related to the transfer information to a designated destination device, the transfer of the transfer information automatically, And it is guaranteed that it is performed reliably.

In the relay apparatus according to the present invention, the transfer information storage section provided in the relay apparatus is set to be connected as a shared resource of another information processing apparatus connected to the network. It is possible to transmit the transfer information and confirm the reception of the transfer information by a simple operation. In a network system provided with this relay device, information can be mutually exchanged by a simple operation.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a functional configuration of the present apparatus.

FIG. 2 is a hardware configuration diagram of the apparatus.

FIG. 3 is a configuration example of a network system incorporating the present device.

FIG. 4 is a flowchart showing the operation of the present apparatus.

FIG. 5 is a configuration example of a transfer destination information storage unit.

FIG. 6 is a conceptual diagram of the configuration of communication data.

FIG. 7 is a configuration example of a transfer information management area.

FIG. 8 is another configuration example of a transfer destination information storage unit.

FIG. 9 is a first embodiment of a network system.

FIG. 10 is a second embodiment of the network system.

[Explanation of symbols]

1, 1A, 1B Transfer information storage unit 2 Transfer destination information storage unit 3 Transfer information management unit 4 Transfer destination detection unit 5 Communication unit selection unit 6 Communication unit control unit 7A, 7B Upper layer communication protocol unit 8A, 8B Lower layer communication protocol Unit 9A, 9B Physical interface unit COM1, COM2 Communication device connection device 10, 10A, 10B, 10C, 10D Relay device 11 Operation control device 12 ROM 13 RAM 14 External storage device 15 Input operation device 16 Display device 17, 18 Network connection Unit 20A, 20B, 20C, 20D Communication control device 30 Communication network 40 Firewall HST Host computer S, S1, S2, SA1, SB1, SD1, SD2 Server computer C, C1-C4, CA1, CA2, CB1, CB2, C
B3, CC1, CC2, CC3, CD1, CD2 Client computer P1 to P4 Image output device G1 to G2 Image input device

Claims (7)

[Claims] 1. A relay device for exchanging information between networks having different communication architectures,
A network connection unit for connecting to a network, a transfer information storage unit for temporarily storing transfer information received from the network via the connection unit, and a communication unit corresponding to a transfer destination device of the transfer information, A transfer destination information storage unit in which a plurality of transfer destination information is registered, communication means provided corresponding to the transfer destination device registered in the transfer destination information storage unit, and transfer information stored in the transfer information storage unit The transfer destination detection unit that detects the transfer destination device of the transfer information, the transfer destination device detected by the transfer destination detection unit, and the transfer destination device registered in the transfer destination information storage unit. And a communication means selecting unit for selecting a communication means corresponding to the transfer destination device, and using the selected communication means, the transfer information stored in the transfer information storage unit or management information related to the transfer information. The relay apparatus characterized by a communication unit control unit to be transmitted to the specified transfer destination device, comprising a. 2. The relay device according to claim 1, wherein the network connection unit includes a network connection unit to which a different type of communication device connection device can be attached. 3. The apparatus according to claim 2, wherein the network connection unit includes a first network connection unit for connecting to the own network, and a second network connection unit for connecting to the other network. Claim 1
Alternatively, the relay device according to claim 2. 4. The communication device connection device mounted on the first network connection unit and the communication device connection device mounted on the second network connection unit are different types of communication device connection devices. Claim 3
3. The relay device according to claim 1. 5. The relay device according to claim 1, wherein the transfer information storage unit is connected and set as a shared resource of an information processing device connected to a network. 6. The relay device according to claim 1, wherein said communication means is configured by two or more different upper layer communication protocols. 7. The transfer information storage unit provided in the relay device according to claim 1 is set to be connected as a shared resource of an information processing device connected to a network. Network system.