JP2003242107A - Network system, information processing device and method, recording medium, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To efficiently and flexibly make requests to a plurality of application programs for controlling devices having mutually different functions. <P>SOLUTION: When a WEB server obtains request information in a step S161, a framework changes the request information into an XML document in a step S173, and supplies it to a corresponding application program in a step S174. The application program conducts a specific process requested based on the request information in a step S182, and supplies response information to the framework in a step S185. The framework generates the optimum response information for output to a supplier of the request information based on the response information in a step S176, and the WEB server supplies the response information for output to an external terminal device in a step S164. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network system, an information processing device and method, a recording medium, and a program, and more particularly, efficiently and flexibly with respect to a plurality of application programs for controlling devices having mutually different functions. The present invention relates to a network system capable of making a request, an information processing device and method, a recording medium, and a program.

[0002]

2. Description of the Related Art Recently, LAN (Local A), which is represented by a home network, has been used in homes and other local areas as well as the constant connection of Internet and broadband.
rea Network) is becoming popular. In the home network, home appliances and the like having a communication function are connected, and information can be shared with each other.

As a home electric appliance having a communication function,
For example, in addition to a personal computer, an image recording / reproducing device such as a video tape recorder, a television receiver,
There are various devices such as audio devices, lighting devices, air conditioners, and game machines. This allows the user to make a video reservation and control the turning on and off of the light using a personal computer, for example.

In addition, by connecting the LAN to an external network such as the Internet, not only the devices connected to the LAN share information, but also, for example, from a mobile phone or the like to the home network via the Internet. Such as controlling the operation of connected home appliances,
It becomes possible to communicate with an external terminal device. Thus, for example, the user can read a mail received by a personal computer at home or make a recording reservation of a television broadcast by operating the mobile phone even when he is out.

At this time, for example, IPv6 (Internet Protocol)
Use version 6) to assign global IP addresses to each. With these IP addresses, the user can communicate with and control each device using a terminal device or the like connected to an external network.

In this case, however, individually setting each of the devices connected to the home network involves complicated work, and therefore a server for managing all of these devices is usually installed. This server is installed with application programs for controlling each device, and controls the operation of each device via the home network using the functions of these application programs.

[0007] Further, this server can communicate with an external terminal device connected to the external network, and the user can use the external terminal device to communicate via the external network. By supplying a request to each device to the server, each device can be controlled.

[0008]

In this case, however, the external terminal device must make a request with a data structure that can be processed by the application program installed in the server and corresponding to the device to be controlled. That is, when an application program controlling each device connected to the home network processes data having a different structure, the external terminal device needs a function that can be requested by the corresponding data structure. Therefore, for example, when the external terminal device is a mobile phone whose storage capacity is limited, there is a problem that it is difficult to realize.

On the other hand, there is a method in which each application program processes data having a common structure. Thereby, the external terminal device can make a request to all application programs installed in the server by creating the request with one type of data structure and supplying the request to the server.

However, in this case, since the data structure is common, the external terminal device has to supply unnecessary information to the server, which causes a problem that the amount of information increases.

In addition, when the data structure is common, the assumed functions are limited, and when the device newly connected to the home network has the newest function that has not existed before, the existing data structure is controlled. There was a problem that it could not be possible.

The present invention has been made in view of such circumstances, and makes it possible to efficiently and flexibly make requests to a plurality of application programs for controlling devices having mutually different functions. It is a thing.

[0013]

A network system according to the present invention includes a first information processing apparatus connected to a network and a second information processing apparatus connected to the network and communicating with the first information processing apparatus. And a first information processing device, wherein the first information processing device obtains first processing request information supplied from the second information processing device, and processing means for performing a predetermined predetermined process. A first obtaining means, a first producing means for producing optimal second processing request information for the corresponding processing means based on the first processing request information obtained by the first obtaining means; By supplying the second processing request information optimal for the processing means, which is generated by the generation means, to the corresponding processing means, the control means for controlling the processing means, and the processing performed under the control of the control means To the means A second generation unit that generates optimum response information for the second information processing device based on the result information of the predetermined processing; and the response information generated by the second generation unit. The second information processing apparatus supplies the first processing request information including the information for requesting the processing means to perform processing to the first information processing apparatus. It is characterized by comprising means and acquisition means for acquiring the response information supplied by the first supply means.

The information processing apparatus of the present invention includes processing means for performing a predetermined processing, processing request information acquisition means for acquiring the first processing request information supplied from another information processing apparatus, and processing. First obtained by the request information obtaining means
First generating means for generating the second processing request information most suitable for the corresponding processing means based on the processing request information of
By supplying the second processing request information optimum for the processing means, which is generated by the generation means of, to the corresponding processing means,
Control means for controlling the processing means, and second generation means for generating optimum response information for another information processing device based on result information of a predetermined process performed by the processing means under the control of the control means. , And a response information supply unit that supplies the response information generated by the second generation unit to another information processing apparatus.

The predetermined processing includes processing relating to transmission / reception of electronic mail, and the first and second processing request information are:
It may include information requesting a process regarding acquisition of an email, a process regarding creation of an email, a process regarding notification of receipt of an email, or a process regarding forwarding of an email.

The predetermined processing includes processing relating to management of address information, and the first and second processing request information are:
It is possible to include information requesting a process regarding acquisition of address information or a process regarding editing of address information.

The predetermined processing includes processing related to management of schedule information, and the first and second processing request information include information requesting processing related to acquisition of schedule information or processing related to editing of schedule information. Can be

The predetermined processing includes processing relating to management of still image information, moving image information, or audio information.
And the second processing request information is processing relating to reproduction of still image information, moving image information, or audio information, processing relating to recording of still image information, moving image information, or audio information, or still image information, moving image information. Alternatively, it may include information requesting processing for editing audio information.

The first generating means may use the XML language to generate the second processing request information most suitable for the processing means.

The first and second processing request information includes information regarding the function of the other information processing apparatus, and the second generation means includes the function of the other information processing apparatus included in the second processing request information. It is possible to generate the optimum response information for another information processing device based on the information regarding the above.

The second generation means uses the programming language that can be processed by the other information processing device to generate the response information based on the information regarding the function of the other information processing device included in the second processing request information. It can be generated.

According to the information processing method of the present invention, a processing step in which a processing unit performs a predetermined processing and processing request information for controlling acquisition of first processing request information supplied from another information processing apparatus are provided. A first generation step of generating optimum second processing request information for the corresponding processing unit based on the acquisition control step and the first processing request information whose acquisition is controlled by the processing of the processing request information acquisition control step. And a control step for controlling the processing of the processing step by supplying the second processing request information optimal for the processing section, which is generated by the processing of the first generation step, to the corresponding processing section, and A second generation step of generating optimum response information for another information processing device based on the result information of the processing performed by the processing step controlled by Characterized in that it comprises a response information supply control step of controlling the supply to the other information processing apparatus of the response information generated by the processing.

The program of the recording medium of the present invention includes a processing step in which the processing section performs a predetermined processing and a processing request for controlling acquisition of the first processing request information supplied from another information processing apparatus. A first generation that generates optimal second processing request information for the corresponding processing unit based on the information acquisition control step and the first processing request information whose acquisition is controlled by the processing of the processing request information acquisition control step. And a control step for controlling the processing of the processing step by supplying the second processing request information that is generated by the processing of the first generation step and is optimal for the processing section to the corresponding processing section. A second generation step of generating optimum response information for another information processing device based on the result information of the processing by the processing step which is controlled by the processing of the step, and the second generation Characterized in that it comprises a response information supply control step of controlling the supply to the other information processing apparatus of the response information generated by the processing of step.

The program of the present invention is a processing request information acquisition control for controlling a processing step in which a processing unit performs a predetermined processing and a first processing request information supplied from another information processing apparatus. And a first generation step of generating optimum second processing request information for the corresponding processing unit based on the first processing request information whose acquisition is controlled by the processing of the processing request information acquisition control step, A control step that controls the processing of the processing step by supplying the second processing request information that is generated by the processing of the first generation step and that is optimum for the processing section to the corresponding processing section, and the processing of the control step Of the second generation step of generating the optimum response information for the other information processing device based on the result information of the processing performed by the processing step controlled by To execute a response information supply control step of controlling the supply to the other information processing apparatus of the response information generated by the management on a computer.

In the network system of the present invention, a first information processing apparatus connected to the network,
A second information processing device that is connected to the network and communicates with the first information processing device is provided. In the first information processing device, a predetermined process is performed by a processing unit, and a first processing is performed. The first processing request information supplied from the second information processing device is acquired, and based on the acquired first processing request information, optimum second processing request information is generated for the corresponding processing unit. By supplying the second processing request information, the processing unit is controlled, and the optimum response information for the second information processing device is obtained based on the result information of the predetermined processing performed by the processing unit under the control. The generated response information is supplied to the second information processing apparatus, and in the second information processing apparatus, the first information including the information requesting the processing unit to perform the processing.
The processing request information of is supplied to the first information processing apparatus, and the response information is acquired.

In the information processing apparatus and method and the program of the present invention, a predetermined processing is performed by the processing unit to obtain the first processing request information supplied from another information processing apparatus, Based on the acquired first processing request information, optimal second processing request information is generated for the corresponding processing unit, and the second processing request information is supplied, whereby the processing unit is controlled, Optimal response information is generated for another information processing device based on the result information of the predetermined process performed by the controlled processing unit, and the generated response information is supplied to the second information processing device.

[0027]

1 is a diagram showing a configuration example of a network system to which the present invention is applied.

Local area 10 represented by a building or the like
The local server 11 installed in is connected to a LAN 12 which is a network in the local area 10 represented by a home network or the like. Further, the terminal device 13 installed in the local area 10 is also connected to the LAN 12.

The LAN 12 is connected via a router (not shown) or the like.
It is always connected to a network 21 outside the local area 10, represented by a telephone network or the Internet.

The local server 11 controls other devices such as the terminal device 13 installed in the local area 10 via the LAN 12. In addition, the local server 11 is an LA from outside the local area 10.
It has information about users who are permitted to connect to the N12, acquires a connection request to the LAN 12 supplied from the network 21, and authenticates the user.

An external terminal device 22 such as a personal computer is connected to the network 21, and the external terminal device 22 communicates with the local server 11 via the network 21 to control the local server 11 or to execute local communication. Via the server 11, the terminal device 13 connected to the LAN 12 can be controlled.

The mobile phone 23 is connected to the network 2
1 is connected to the network 21 by performing wireless communication with the base station 24 connected to 1, and in this state, similarly to the external terminal device 22, it communicates with the local server 11 via the network 21, LA is controlled via the server 11 or via the local server 11.
It is possible to control the terminal device 13 connected to the N12.

At this time, the external terminal device 22 and the mobile phone 23 access the local server 11 through the network 21 to access the authentication service provider 30.
It communicates with the connection management server 31 installed in.

The authentication service provider 30 provides a user authentication service, and performs an authentication process for a user who accesses the local server 11 from outside the local area 10.

The connection management server 31 installed in the authentication service provider 30 is connected to the network 21 and processes a connection request to the LAN 12 from outside the local area 10. For example, the connection management server 31
Manages access to the local server 11 from the external terminal device 22 or the mobile phone 23.

The address management server 32 installed in the authentication service provider 30 is the network 2
It manages the information about the local server 11 supplied from the local server 11 via 1. The address management server 32 is also connected to the connection management server 31, and can supply information about the local server 11 to the connection management server 31.

The authentication server 33 installed in the authentication service provider 30 is connected to the address management server 32 and performs user authentication processing for access to the authentication service provider 30. For example, when the local server 11 accesses the address management server 32 via the network 21, the authentication server 33 performs the authentication process of the user of the local server 11. Also, for example,
When the external terminal device 22 accesses the connection management server 31 via the network 21, the authentication server 33 communicates with the connection management server 31 via the address management server 32 to perform authentication processing of the user of the external terminal device 22. To do.

Since the connection management server 31, the address management server 32, and the authentication server 33 are connected to each other in the authentication service provider 30, necessary information can be shared and processing can be distributed and executed. be able to.

FIG. 2 is a block diagram showing a configuration example of the local server 11 shown in FIG.

In FIG. 2, a CPU (Central Processing)
Unit) 51 is a program stored in a ROM (Read Only Memory) 52 or a RAM (Random Memory) from the storage unit 63.
Various processes are executed according to the program loaded in the m Access Memory) 53. RAM53 also has CPU51
Data necessary for executing various processes are also stored as appropriate. CPU51, ROM52, and RAM53
Are mutually connected via a bus 54. An input / output interface 60 is also connected to the bus 54.

The input / output interface 60 includes an input unit 61 including a keyboard and a mouse, a CRT (Cathode Ray).
Tube), LCD (Liquid Crystal Display), and other displays, and speakers and other output units 6
2, a storage unit 63 including a hard disk,
A communication unit 64 including a modem, a terminal adapter, a LAN adapter or the like is connected.

The storage unit 63 stores data including information about the user and programs for executing various processes, and is controlled by the CPU 51 to supply the data and programs to the RAM 53.

The communication section 64 performs communication processing via the LAN 12. For example, the communication unit 64 includes the terminal device 13 and the LAN.
12 and the external terminal device 22 outside the local area 10 via the network 21.

A drive 70 is connected to the input / output interface 60 if necessary, and a magnetic disk 71,
The optical disc 72, the magneto-optical disc 73, the semiconductor memory 74, or the like is appropriately mounted, and the computer program read from them is installed in the storage unit 63 as necessary.

FIG. 3 is a block diagram showing a configuration example of the external terminal device 22 shown in FIG.

In FIG. 3, the CPU 101 is a program stored in the ROM 102 or RA from the storage unit 113.
Various processes are executed according to the program loaded in M103. The RAM 103 also appropriately stores data necessary for the CPU 101 to execute various processes. The CPU 101, ROM 102, and RAM 103 are connected to each other via a bus 104. This bus 10
An input / output interface 110 is also connected to 4.

The input / output interface 110 includes an input unit 111 including a keyboard and a mouse, an output unit 112 including a display and a speaker, a storage unit 113 including a hard disk, a communication including a modem and a terminal adapter. The part 114 is connected.

The storage unit 113 stores data necessary for logging in to the local server 11 in the local area 10, programs for executing various processes, and the like. The data is stored in the RAM 113 under the control of the CPU 111. And supply the program.

The communication unit 114 performs communication processing via the network 21. For example, the communication unit 114 communicates with the connection management server 31 and the local server 11 via the network 21.

A drive 120 is also connected to the input / output interface 110 as required, and the magnetic disk 1
21, the optical disk 122, the magneto-optical disk 123, the semiconductor memory 124, or the like is appropriately mounted, and the computer program read from them is installed in the storage unit 113 as necessary.

FIG. 4 is a block diagram showing a configuration example of the connection management server 31 shown in FIG.

In FIG. 4, the CPU 151 uses the program stored in the ROM 152 or RA from the storage unit 163.
According to the program loaded in the M153, various processes relating to management of connection to the LAN 12 from the outside of the local area 10 are executed. RAM153 also has CPU15
Data and the like necessary for the 1 to execute various processes are also stored as appropriate. CPU 151, ROM 152, and RAM
153 are connected to each other via a bus 154.
The bus 154 also has an input / output interface 160.
Is also connected.

The input / output interface 160 includes an input unit 161 including a keyboard and a mouse, an output unit 162 including a display and a speaker, a storage unit 163 including a hard disk, a communication including a modem and a terminal adapter. The section 164 is connected.

The storage unit 163 stores programs and data for executing various processes.
It is controlled by 51 and supplies data and programs to the RAM 153.

The communication section 154 performs communication processing with the external terminal device 22 via a network, for example. The communication unit 154 is also connected to the address management server 32 and performs communication processing with the address management server 32.

A drive 170 is also connected to the input / output interface 160 if necessary, and the magnetic disk 1
71, an optical disk 172, a magneto-optical disk 173, a semiconductor memory 174, or the like is appropriately mounted, and a computer program read from them is installed in the storage unit 163 as necessary.

FIG. 5 shows the address management server 3 shown in FIG.
It is a figure which shows the structural example of 2.

In FIG. 5, the CPU 201 uses the program stored in the ROM 202 or RA from the storage unit 213.
According to the program loaded in the M203, various processes relating to address management of the local server 11 are executed. The RAM 203 also appropriately stores data necessary for the CPU 201 to execute various processes. CP
U201, ROM202, and RAM203 are bus 204
Are connected to each other via. An input / output interface 210 is also connected to the bus 204.

The input / output interface 210 includes an input unit 211 including a keyboard and a mouse, an output unit 212 including a display and a speaker, a storage unit 213 including a hard disk, a communication including a modem and a terminal adapter. The part 214 is connected.

The communication unit 214 is, for example, the network 2
The communication processing with the local server 11 is performed via 1.
Further, the communication unit 214 is connected to the connection management server 31 and the authentication server 33, and performs communication processing with them.

A drive 220 is also connected to the input / output interface 210 if necessary, and the magnetic disk 2
21, the optical disk 222, the magneto-optical disk 223, the semiconductor memory 224, and the like are appropriately mounted, and the computer program read from them is installed in the storage unit 213 as necessary.

Next, the operation will be described. In the network system shown in FIG. 1, it is assumed that a user (not shown) of the local server 11 that manages the LAN 12 is a member of the authentication service provider 30 and user information is registered in the authentication server 33. The user may be automatically registered at the time of purchasing the local server 11 or at the time of setup. The user of the local server 11 registered in the authentication server 33 has the identification information for the authentication service provider including the ID and password for logging in to the connection management server 31 and the address management server 32.

As described above, when the local server 11 is newly installed or initialized by a user who is a member of the authentication service provider 30 and has identification information for the authentication service provider, the local server 11 is , Information about the local server 11 is supplied to the address management server 32 via the network 21, and the local server 11 is registered.

The local server information registration processing by the local server 11 shown in FIG. 1 will be described with reference to the flowchart of FIG.

First, in step S1, the CPU 51 of the local server 11 performs an initialization process to generate local server information which is information about the local server 11.

The local server information includes model information, corresponding user information, address information, and connection key information necessary for access.

The model information includes the model name, product number, performance information, etc. of the local server 11, and the user information is the identification information for the authentication service provider used when connecting to the address management server 32,
The address information includes information about the already registered user corresponding to the identification information, the address information includes the address assigned to the local server 11 or the initial address of the login screen, and the connection key information is Contains information about the connection key and its settings.

Next, the CPU 51 controls the communication unit 64 to access the address management server 32 using the authentication service provider identification information. Then, in step S3, information regarding the authentication processing result is acquired from the address management server 32, and it is determined whether or not the authentication is completed. When it is determined that the user has been authenticated, the CPU 51 proceeds to step S4.

In step S4, the CPU 51 supplies the local server information to the address management server 32 and requests the server key. The server key is a key generated by the address management server 32 and supplied to the local server 11.
Used when logging into 2.

As will be described later, the local server 11
The address management server 32 may be periodically connected, and in that case, the local server 11 periodically sends the authentication service provider identification information to the network 32, which is not preferable in terms of security. Therefore, the local server 11 logs in using the authentication service provider identification information only once at the first time. That is, after that, the local server 11
When reconnecting to the address management server 32, the server key is used.

Since the server key is generated and registered in association with the user information registered in the authentication server 33, it is valid until the local server 11 is initialized again.

The CPU 51, which has requested the server key to the address management server 32, proceeds to step S5, determines whether or not the server key has been acquired, and waits until it is determined that the server key has been acquired. It should be noted that when a predetermined time has elapsed or an error message has been acquired, the CPU 51 ends the local server information registration processing.

If it is determined that the server key has been acquired,
The CPU 51 proceeds to step S6, stores the acquired server key in, for example, the storage unit 63, and ends the local server information registration processing.

When it is determined in step S3 that the user has not been authenticated, the CPU 51 ends the local server information registration process.

In response to the local server information registration processing by the local server 11 described above, the address management server 32 executes the local server information registration processing.

The local server information registration processing by the address management server 32 shown in FIG. 1 will be described with reference to the flowchart of FIG.

First, in step S21, the CPU 201 of the address management server 32 causes the local server 11
It is further determined whether or not the connection is requested, and the process waits until it is determined that the connection is requested.

The local server 11 executes step S in FIG.
If the CPU 201 determines in step 2 that the address management server 32 is accessed and a connection is requested, the CPU 201 proceeds to step S22 and performs authentication processing based on the acquired authentication service provider identification information. The CPU 201 controls the communication unit 214 to supply the authentication server 33 with the acquired identification information for the authentication service provider, execute the user authentication process, and acquire the process result.

Then, in step S23, the CPU 201 determines whether or not the authentication service provider identification information acquired from the local server 11 has been authenticated.
When it is determined that the user has been authenticated, the CPU 201 determines in step S
Proceed to 24, allow the connection request of the local server 11,
Perform connection processing. At this time, the processing result is supplied to the local server 11. Based on the supplied processing result, the CPU 51 of the local server 11
Determine whether it has been authenticated.

Then, in step S25 of FIG.
The CPU 201 determines whether the local server information has been acquired from the connected local server 11, and waits until it determines that the local server information has been acquired. Note that when a predetermined time has elapsed, the line is electrically disconnected, or an error message is acquired, the CPU 201 ends the local server information registration process.

If it is determined in step S4 of FIG. 6 that the local server information supplied by the local server 11 has been acquired, the CPU 201 proceeds to step S26 to generate a server key and associate it with the acquired local server information. And register it in the storage unit 213.

The server key is stored in association with the local server information. As will be described later, in the user authentication using the server key, the server key authentication and the device which has supplied the server key are performed. Is authenticated. Therefore, the server key assigned to the local server 11 cannot be used by other devices.

CPU 20 which has generated and registered the server key
In step S27, the No. 1 controls the communication unit 214 to supply the generated server key to the local server 11, and ends the local server information registration process.

If the authentication server 33 determines in step S23 that the authentication service provider identification information has failed to be authenticated, the CPU 201 determines in step S28.
Then, the error processing is performed and the local server information registration processing ends.

When the local server 11 is initialized as described above, the local server information including information about the local server 11 is supplied to the address management server 32 and registered.

As described later, the address of the login screen is set based on the information about the connection key included in the local server information registered as described above. Information about the connection key is input by the user at the local server 11.

FIG. 8 is a diagram showing an example of the state of a setting screen on the local server 11 in which the user makes settings relating to the connection key.

In FIG. 8, a setting screen 251 is a screen for the user to input the settings related to the connection key.
A GUI (Graphical User Interface) controlled by the CPU 51 and displayed on the display of the output unit 62.
The user inputs the input unit 61 based on the setting screen 251.
Input the setting information by operating the keyboard and mouse of.

Various tabs are prepared on the setting screen 251, and various settings can be made by the user operating the mouse to select a tab. In FIG. 8, the connection key tab 252 is selected, and settings relating to the connection key can be made.

At the center of the setting screen 251, a connection key setting field 253 is displayed. Whether the user sets the connection key or not, if the user uses the connection key, the contents are automatically changed. It is possible to selectively set such as whether or not. In addition, when changing automatically, the time interval can also be set.

Further, a connection key input field 254 is provided below the connection key setting field, and the connection key setting field 25 is provided.
When the connection key is set so as not to be automatically changed in 3, the user can input a desired connection key in the connection key input field 254. In FIG. 8, a character string “04C3DAFA0723” is displayed in the connection key input field 254.
4e3c94ECAC7800681515 ”has been input.

FIG. 9 is a diagram showing another example of the state of the setting screen in which the user makes settings relating to the connection key in the local server 11.

In FIG. 9, the user has a setting screen 251.
The status tab 261 is selected so that the service related to the connection key can be controlled.

Below the status tab 261 of the setting screen 251, a service control setting field 262 for controlling services related to the connection key is provided. The user operates the input unit 61 to start or stop the service,
It can be restarted.

Below the service control setting field 262, the login screen URL for displaying the address information of the login screen is displayed.
A display field 263 is provided. Login screen URL
Has a configuration in which a connection key is added to the basic URL. That is, in the case of Fig. 9, the URL of the login screen is configured by adding the connection key "04C3DAFA07234e3c94ECAC7800681515" to the basic URL "http://00.11.222.3/aaa/bbb/ccc?" : //00.11.222.3/aaa/bbb/ccc
? LoginKey = 04C3DAFA07234e3c94ECAC7800681515 ”is displayed. In the case of FIG. 9, the login screen URL display field 263 has a normal URL and SSL ((Secure Socket Layer
r)) The corresponding URL is displayed.

SSL is a protocol for encrypting and transmitting and receiving information on a network such as the Internet, and is widely used at present such as WWW (World Wide Web) and FTP (File Tra
nsfer Protocol) for encrypting data, and securely transmitting and receiving information related to privacy, credit card numbers, company secrets, etc. SSL combines security technologies such as public key cryptography, private key cryptography, digital certificates, and hash functions to prevent data sniffing, tampering, and spoofing. Based on the network structure design policy established by the International Standards Organization to realize data communication between different models,
In the OSI (Open Systems Interconnection) reference model, which is a model that divides the communication functions that a computer should have into a hierarchical structure, it corresponds to the transport layer (fourth layer)
(HyperText Transfer Protocol) and application software that uses higher-level protocols such as FTP can be used transparently without any particular awareness.

By configuring the URL of the login screen as described above, for example, by setting the connection key to be automatically changed periodically, the URL of the login screen is changed regularly. Even if the third party obtains the ID and the password, the login screen cannot be opened unless the identification information for the authentication service provider is obtained, and thus unauthorized access can be suppressed.

The user of the local server 11 uses the input unit 6
1 by operating the keyboard, mouse or the like, and selecting the connection key tab 252 from the tabs provided on the setting screen 251 displayed on the display or the like of the output unit 62, as shown in FIG. In the key setting field 253, whether or not the connection key is used, if it is used, whether or not the connection key is automatically changed, and if it is automatically changed, a time interval for making the change is set. Further, when the setting is not made automatically, the user inputs the connection key in the connection key input field 254. Note that the number of characters of the connection key may be limited, and may be composed of, for example, a 128-bit character string of up to 32 characters or a number string.

The user who has completed the input of the setting screen 251 shown in FIG. 8 next operates the keyboard or mouse of the input unit 61 to select the status tab 261 and sets the status in the service control setting field 262. Start the connection key service. The set connection key and address information of the login screen are displayed in the login screen URL display field.

As described above, in the local server 11, the connection key is set and validated by the user.
The activated connection key is included in the local server information and supplied to the address management server 32.

The settings relating to the connection key as described above can be updated at any time by performing the same operation. And if the settings related to the connection key are updated,
The local server information registered in the address management server 32 is also updated. This update process is performed at the user's instruction or automatically at regular intervals.

The local server information update processing by the local server 11 shown in FIG. 1 will be described with reference to the flowchart of FIG.

First, in step S41, the CPU 51 of the local server 11 adds the updated connection key to the address information and updates the local server information stored in the storage unit 63.

Then, in step S42, the CPU 5
1 adds the server key stored in the storage unit 63 to the updated local server information, controls the communication unit 64, and controls the address management server 32 via the network 21.
Supply to. CPU 51 that supplied the local server information
Proceeds to step S43, determines whether the processing result information is acquired from the address management server 32, and waits until it is determined that the processing result information is acquired. When the predetermined time has elapsed, the CPU 51 ends the local server information update process.

When it is determined that the processing result information has been acquired,
The CPU 51 proceeds to step S44, displays the processing result on the display or the like of the output unit 62 based on the acquired processing result information, and ends the local server information update processing.

In response to the local server information update processing by the local server 11 described above, the address management server 32 also executes the local server information update processing.

The local server information update processing by the address management server 32 shown in FIG. 1 will be described with reference to the flowchart of FIG.

The CPU 201 of the address management server 32
In step S61, the local server 11 operates as shown in FIG.
It is determined whether or not the local server information and the server key supplied in step S42 have been acquired via the network 21, and the process waits until it is determined that they have been acquired.

When it is determined that the local server information and the server key are acquired from the local server 11, the CPU
In step S <b> 62, the 201 compares the newly acquired server key with the server key registered in the storage unit 213 to perform authentication processing. At this time, in addition to the server key authentication, for example, user authentication or local server 11 authentication may be performed based on the contents of the local server information. In this way, security can be further improved by performing a plurality of authentications.

The CPU 201 which has completed the authentication process determines whether or not the user has been authenticated in step S63. When it is determined that the user has been authenticated, the CPU 201
Updates the local server information registered in the storage unit 213 based on the acquired address information in step S64.

Then, in step S65, the CPU 2
01 creates processing result information, supplies it to the local server 11 via the network 21, and ends the local server information update processing.

If it is determined in step S63 that the authentication has failed and the user has not been authenticated, the CPU 201
Advances to step S65, generates processing result information, supplies the processing result information to the local server 11, and ends the local server information update processing.

Since the local server information update processing is performed as described above, the authentication service provider identification information is periodically leaked to the network 21 even when the connection key is set to be automatically changed. Can be prevented.

Next, using the connection key set as described above, the network 2 is accessed from outside the local area 10.
A method of connecting to the local server 11 via 1 will be described.

A case of logging in to the local server 11 from the external terminal device 22 via the network 21 will be described with reference to the timing chart of FIG.
Further, description will be made with reference to FIGS. 13 to 16 as necessary. The user of the external terminal device 22 is registered in the local server 11 and has identification information such as an ID and a password.

First, the CPU 101 of the external terminal device 22
In step S81, controls the communication unit 114 to access the connection management server 31 of the authentication service provider 30 via the network 21 and supply the authentication service provider identification information.

FIG. 13 is a diagram showing an example of the login screen of the WEB browser displayed on the display of the output unit 112 when the external terminal device 22 accesses the connection management server 31.

In FIG. 13, on the login screen 281, an ID entry field 282 for entering an ID, a nest word entry field 283 for entering a password, and a user operating the mouse of the input unit 111 or the like to instruct login. A login button 284 is displayed.

When the user accesses a predetermined address of the connection management server 31, the connection management server 31 supplies the GUI information as shown in FIG. 13 to the external terminal device 22 via the network 21. The external terminal device 22
When the GUI information is acquired, the W displayed on the display
A login screen 281 as shown in FIG. 13 is displayed on the EB browser.

The user of the external terminal device 22 has the ID input field 2
The ID and password included in the identification information for the authentication service provider are entered in the 82 and password input fields 283, and the login button is operated with a mouse or the like.
When the user operates the login button 284, the CPU 101 of the external terminal device 22 supplies the input ID and password to the connection management server 31 via the network 21.

In step S101, the CPU 151 of the connection management server 31 acquires the supplied identification information for the authentication service provider. Then, step S102
At, the CPU 151 supplies the acquired identification information for the authentication service provider to the authentication server 33 and requests the authentication.

When the CPU of the authentication server 33 (not shown) acquires the supplied identification information for the authentication service provider in step S121, the CPU performs the authentication process on the identification information in step S122. Then, the CPU of the authentication server 33 supplies the authentication result to the connection management server 31 in step S123.

In step S103, the CPU 151 of the connection management server 31 controls the communication unit 164 to acquire the authentication result supplied from the authentication server 33, and when it is determined that the authentication result is authenticated, in step S104, the authenticated authentication service The provider identification information is supplied to the address management server 32.

In step S111, the CPU 201 of the address management server 32 controls the communication section 214 to
When the supplied authenticated authentication service provider identification information is acquired, in step S112, the storage unit 21
The local server information registered in No. 3 and corresponding to the acquired identification information for the authentication service provider is searched.

The CPU 201 then proceeds to step S113.
At, the communication unit 214 is controlled to supply the retrieved local server information to the connection management server 31. In step S105, the CPU 151 of the connection management server 31 controls the communication unit 164 to acquire the supplied local server information.

The CPU 151 of the connection management server 31 which has acquired the local server information, in step S106,
The supply data for supplying to the external terminal device 22 is generated based on the acquired local server information. The supply data includes address information of the login screen of the local server 11 corresponding to the authentication service provider identification information supplied by the external terminal device 22. At this time, if there is a plurality of address information of the login screen corresponding to the identification information, the supply data includes a plurality of address information.

Connection management server 3 that has generated supply data
In step S107, the CPU 151 of No. 1 controls the communication unit 164 to supply the supply data to the external terminal device 22 via the network 21.

When the CPU 101 of the external terminal device 22 controls the communication unit 114 to acquire the supply data in step S82, based on the supply data, the local server as the connection destination as shown in FIG. Is displayed on the WEB browser displayed on the display of the output unit 112.

FIG. 14 is a diagram showing an example of a local server list screen displayed on the WEB browser.

In the center of the local server list screen 291, a personal computer (hereinafter referred to as a PC) which is a local server registered in the address management server 32 corresponding to the user of the external terminal device 22 is shown in FIG. Local server list display field 292 for displaying a list
Is provided. When the user of the external terminal device 22 selects a target PC from the displayed PCs and operates the access button 293 displayed in the local server list display field 292 with a mouse or the like, the CPU 101 causes the communication unit 1 to operate.
Control 14 to access the instructed PC.

When the user operates the update button 294 provided at the upper right of the local server list display field 292 of the local server list screen 291 with the mouse or the like, the CPU
Reference numeral 101 updates the information displayed in the local server list display field 292 and displays the latest PC list information.

Further, below the local server list display field 292, a detailed information display button 295 is provided, and the user can use the mouse or the like to display this detailed information display button 295.
Is operated, for example, the local server list display field 29
Detailed information such as the PC address information and model information displayed in 2 is displayed. Further, the registration of the PC displayed in the local server list display field 292 can be canceled. When the user cancels the registration of the PC based on the displayed GUI, the PC is deleted from the local server list display field 292 of the local server list screen 291.

Further, in the upper right part of the local server list screen 291, the SSL release button 296 and the logout button 2 are displayed.
97 is provided.

The external terminal device 22 normally connects to the local server 11 by encrypting information using SSL. When the user operates the SSL release button 296 with a mouse or the like, the external terminal device 22 can communicate with the local server 11 without performing SSL encryption. As a result, communication can be performed without imposing a load due to encryption using SSL. Therefore, for example, even if the processing capacity of the external terminal device 22 is not high, the local server 11
Can communicate with.

When the user operates the logout button 297 with a mouse or the like, the external terminal device 22 logs out from the connected connection management server 31 and interrupts the connection processing to the local server 11.

Returning to FIG. 12, when the user of the external terminal device 22 selects the PC to be connected from the local server list screen 291 and instructs the connection, the external terminal device 2
In step S83, the second CPU 101 accesses the local server 11 based on the supply data.
The CPU 101 refers to the URL to which the connection key of the access destination of the designated PC is added, from the acquired supply data, and accesses the URL.

In step S91, the external terminal device 2
In step S92, the CPU 51 of the local server 11 accessed from the network server 2 through the
The login screen data is supplied to the external terminal device 22 via the network 21.

In step S84, the CPU 101 of the external terminal device 22 acquires the login screen data supplied from the local server 11 and controls the output unit 112 to display the acquired login screen on the display or the like.

FIG. 15 is a diagram showing an example of the login screen displayed on the display.

In FIG. 15, the display shows WEB
A browser screen 301 is displayed, and a login screen 302 is displayed on the WEB browser screen. Login screen 302
In the center of, a user name input field 303 for inputting the user name included in the identification information for the local server owned by the user of the external terminal device 22, and a password input field for inputting the password included in the identification information for the local server in the same manner. Thirty
4. An OK button 305 is provided for instructing the start of the process of supplying the input user name and password to the local server 11 by the user operating the mouse or the like.

The user operates the keyboard or mouse to operate the user name input field 303 of the login screen 302.
Enter the user name registered in the local server 11, enter the password registered in the local server 11 in the password input field 304, and operate the OK button 305 to set the local server 11 in the local server 11. Identification information can be supplied.

Returning to FIG. 12, the user has a login screen 30.
When the local server identification information is input and supply is instructed based on 2, the CPU 101 of the external terminal device 22 controls the communication unit 114 to input the local server via the network 21 in step S85. Supply identification information to the local server 11.

In step S93, the CPU 51 of the local server 11 controls the communication section 64 to acquire the supplied local server identification information, and in step S94, regarding the acquired local server identification information,
The authentication process is performed based on the information about the user stored in the storage unit 63. Then, when the authentication process ends, the CPU 51 supplies the authentication process result to the external terminal device 22 in step S95. Of the external terminal device 22
The CPU 101 displays the supplied authentication processing result in step S8.
Get in 6.

It should be noted that, for example, after the connection key is changed (the URL of the login screen is changed), the external terminal device 2
When 2 accesses the URL to which the connection key before the change is added, the local server 11 supplies the error processing result to the external terminal device 22 and rejects the connection. External terminal device 2
2, based on the acquired error processing result, as shown in FIG. 16, the WEB browser 301 displaying the error screen 310 displaying the error message “Please re-enter from My Page” is displayed on the display. Let

By performing the connection processing as described above,
In order to access the login screen of the local server 11 from the outside, it is necessary to connect to the connection management server 31 of the authentication service provider 30 and acquire the URL of the login screen. That is, in order to communicate with the local server 11, the identification information for the authentication service provider and the identification information for the local server are required, so that an unauthorized login can be suppressed more reliably.

The user of the local server 11 can freely adjust the security level by setting the connection key on the setting screen 251 of FIG. For example, when the connection key is set to be invalid, the external terminal device 22 can log in to the local server 11 only with the local server identification information if the URL of the login screen of the local server 11 is acquired. , If the fixed connection key is set to be valid, the external terminal device 22 logs in to the local server 11 once to obtain the URL to which the connection key of the login screen of the local server 11 is added. For example, it is possible to log in to the local server 11 only with the identification information for the local server, and when the connection key that is automatically changed at a predetermined time interval is set, the external terminal device 22
Authentication service provider 3 each time the connection key is changed
The URL of the login screen must be requested to the connection management server 31 of 0.

Even if the user of the external terminal device 22 is allowed to log in to a plurality of local servers, the URL of the login screen of the local server 11 is set.
The address management server 3 of the authentication service provider 30
The external terminal device 22 does not need to store all the URLs of the login screen, and the address management is easy because the information managed by the server 2 and the information about the local server corresponding to the request are supplied as a list.

In the above description, the external terminal device 22
Has described the process of connecting to the local server 11, but when performing wireless communication with the base station 24 connected to the network 21 and connecting the mobile phone 23 connected to the network 21 to the local server 11, The processing is performed similarly.

Next, the access control processing executed by the connection management server at this time will be described with reference to the flowchart of FIG.

First, in step S131, the CPU 151 of the connection management server 31 controls the communication unit 164 to determine whether or not the authentication service provider identification information has been acquired from the external terminal device 22, and It is determined whether or not the connection to the server 11 is requested, and the process waits until it is determined that the request is made.

When the authentication service provider identification information is acquired and it is determined that the connection to the local server 11 is requested, the CPU 151 proceeds to step S132 to perform the authentication processing on the acquired authentication service provider identification information. As the authentication process, the CPU 151 supplies the acquired identification information for the authentication service provider to the authentication server 33 and requests the authentication of the identification information. Then, the authentication result supplied from the authentication server 33 is acquired. This process is performed in steps S102 and S103 of FIG.
Corresponding to.

In step S133, the CPU 151 determines whether or not the authentication service provider identification information has been authenticated, based on the acquired authentication result. When it is determined that the user has been authenticated, the CPU 151 determines in step S134.
The authenticated identification information is sent to the address management server 3
2 and request corresponding local server information.
This process corresponds to step S104 in FIG.

Then, in step S135, the CPU
151 determines whether or not the local server information requested by the address management server 32 has been acquired, and waits until it determines that the local server information has been acquired. In addition, when a predetermined time has passed or when an error message is acquired, the CPU
151 ends the access control process.

When it is determined that the requested local server information has been acquired, the CPU 151 proceeds to step S136 to generate supply data based on the acquired local server information. This process is step S10 in FIG.
Corresponds to 6.

The CPU 151 having generated the supply data supplies the generated supply data to the external terminal device 22 via the network 21 and proceeds to step S137, and ends the access control process. This process corresponds to step S107 in FIG.

If it is determined in step S133 that the authentication service provider identification information is not authenticated based on the acquired authentication result, the CPU 151
Ends the access control process.

As described above, the external terminal device 22 connected to the local server 11 communicates with the local server 11 via the network 21 based on the instruction of the user, and the application provided in the local server 11 is communicated with. By requesting the program, the terminal device 13 connected to the local server 11 or the LAN 12
Etc. can be controlled.

FIG. 18 is a diagram showing the appearance of the application programs possessed by the external terminal device 22 and the local server 11. Referring to FIG. 18, the external terminal device 2
The communication between the server 2 and the local server 11 will be described.

In FIG. 18, the local server 11 is provided with a WEB server 321. The WEB server 321 performs communication using HTTP or the like, and various information such as HTML documents, images, voices, etc. And to communicate with the external terminal device 22 via the network 21.

Further, the WEB server 321 is linked with the SSL 322 for performing encryption using SSL, and the WEB server 3
21 uses the SSL 322 to encrypt the transmission data to be transmitted to the external terminal device 22, or the external terminal device 22.
It decrypts the encrypted received data that is supplied.

Further, the local server 11 is provided with a framework 323 for operating various application programs, and the request information from the external terminal device 22 supplied via the WEB server is supplied to the application programs. Alternatively, the processing result of the application program is supplied to the external terminal device 22 via the WEB server 321.

In FIG. 18, the framework 323 is used.
Includes a mail client program 331A that performs client processing for a mail server (not shown), manages information related to addresses, for example, an address management program 331B that operates in cooperation with the mail client program 331A, and a schedule input by a user. Schedule management program 331 for managing information
C, and an application program 331D, which is another application program, are installed. In addition to the above, any application program may be installed in the framework 323, and the number of installed application programs may be any number as long as it is operable.

The framework 323 includes, for example, WEB
The contents 324 and the like are linked and provide the help 332A, the image 332B, and the like required by the framework 323 or an application program installed in the framework 323. Web content 3
The 24 may include contents other than those described above.

A JAVA (registered trademark) related module 325 is linked to the framework 323, and the JAVA (registered trademark) related module 325 is connected to the framework 32.
3 and JAVA (registered trademark) required by the application program installed in the framework 323
Provides language-related functions.

The external terminal device 22 connected to the local server 11 via the LAN 12 and the network 21.
Has a WEB browser 341, and the WEB browser 34
1 is used to communicate using HTTP or the like, and various kinds of information such as HTML documents, images, and voices are exchanged with the local server 11. Although illustration is omitted, the WEB browser 34
1 has an SSL function, and can perform encrypted communication with the WEB server 321 using SSL.

As described above, the local server 11 and the external terminal device 22 include the WEB server 321 and the WEB browser 341.
The communication is performed using HTTP.

Next, the communication processing by the local server 11 and the external terminal device 22 will be described with reference to the timing chart of FIG. Here, the external terminal device 22 uses the application program 331D of the local server 11.
The case of controlling is explained.

First, in step S151, the WEB browser 341 of the external terminal device 22 sends request information such as screen display and information setting, which is instructed by the user, to the W of the local server 11 via the network 21 and the LAN 12.
It is supplied to the EB server 321.

When the WEB server 321 acquires the request information supplied from the WEB browser 341 in step S161, the WEB server 321 supplies the acquired request information to the framework 323 in step S162.

The framework 323 executes step S17.
In step 1, when the request information is acquired, first, in step S172, authentication processing of the user of the external terminal device 22 that has supplied the request information is executed. The authentication process is performed using, for example, the connection key used when supplying the request information, the user identification information included in the request information, and the like.
Then, when the user is authenticated, the framework 323
XM the acquired request information in step S173.
L (eXtensible Markup Language) documentation,
In step S174, the request information converted into an XML document is converted into the corresponding application program 331.
Supply to D.

FIG. 20 shows XM executed by the framework 323.
It is a figure which shows the example of the request information L documented.

In FIG. 20, the first line from the top includes basic information such as the XML version and encoding method. On the third to sixth lines, connection information including information regarding the model of the connected device and information regarding the address is configured.

On the 7th and 9th lines from the top,
Information about the connecting user is configured, including the user's ID and password, and information about the folder in which the file for that user exists. The information input as the processing request is configured in the eighth line. Further, in lines 10 to 13, the location where the application inputs the items required by the framework is a notation used for specifying the position of the XML document, XPath.
It is described by.

The request information supplied to the application program as described above is made into an XML document, all necessary information is configured, and there are no particular restrictions on the data structure such as items and the number of lines. The application only needs to be able to handle XML documents, and does not need to provide a common data structure that can be read by all application programs.
That is, for example, when a new application program is added to the framework 323, the data structure read by the added application program is
The data structure does not have to be the same as the data structure read by the previously installed application program, and is highly versatile.

Therefore, for example, by changing the standard,
The data necessary for the latest application program is
Even when the data structure used by the application programs up to now is different, the latest application program can be added without changing the framework.

Returning to FIG. 19, the application program 331D acquires the request information in the form of an XML document as described above in step S181, and in step S182, based on the acquired request information, the requested unique processing is performed. Then, in step S183, response information corresponding to the request information is generated.

The application program 331D is
For example, various information to be used such as a folder having files for the currently connected user and request contents is acquired from the request information in the form of an XML document supplied from the framework 323. Since the framework 323 performs necessary information analysis on the request information, the application program 331D can acquire the necessary information according to the contents described in XPath of the request information in the form of XML document.

Then, the application program 33
In step S184, the 1D adds display information related to screen display to the generated response information, and then in step S185, supplies the response information to which the display information is added to the framework 323.

FIG. 21 shows the application program 3
It is a figure which shows the example of the response information supplied from 31D to the framework 323.

In FIG. 21, the first to ninth lines from the top are upset with the contents shown in FIG. 20, and therefore the description thereof will be omitted. The 10th to 14th lines are the framework 323.
Request is set, and the 16th and subsequent lines are configured by application-specific information settings.

The response information output from the application program 331D is supplied to the terminal device which is the request source of the request information via the framework. Therefore, the displayed content and format vary depending on the size of the display unit of the requesting terminal device. However, the application program 331D adds all the necessary information to the XML document without being aware of the model of the terminal device that has supplied the request information, unless the terminal device that is the request source requests. The framework 323 creates the most suitable information by editing the response information supplied from the application program.

Returning to FIG. 19, the response information supplied to the application program 331D as described above is acquired by the framework 323 in step S175. Then, the framework 323 executes step S
In 176, based on the acquired response information, optimum output response information is generated for the supply source of the request information, and in step S177, the generated output response information is supplied. That is, the framework 323 analyzes the response information and uses the XSL (e
Xtensible Stylesheet Language) is changed and an HTML document is generated. The framework 323 is
Generates an HTML document, analyzes the response information, and changes the CSS (Cascading Style Sheet) to be used so that the output image has an optimal layout according to the type of WEB browser that supplies the request information. You may do it.

When the WEB server 163 acquires the output response information supplied to the framework 323 in step S163, the WEB server 163 transfers the acquired output response information to the external terminal device 22 which is the source of the request information in step S164. Supply. The external terminal device 22 performs step S1.
At 52, the supplied output response information is acquired and displayed on a display or the like.

As described above, the local server 11 and the external terminal device 22 perform communication processing. Although the external terminal device 22 controls the application program 331D of the local server 11 in the above description, the application program controlled by the external terminal device 22 is not limited to this, and the application program installed in the framework 323 is not limited to this. Anything is fine. Also, when the mobile phone 23 performs communication processing with the local server 11, the same processing as that described above is performed.

Next, the application program management processing by the framework 323 performed in this communication processing will be described with reference to the flowchart in FIG.

The framework 323 executes step S20.
In No. 1, it is determined whether the request information is acquired from the WEB server 321, and the process waits until it is determined that the request information is acquired. If it is determined that the framework has been acquired, the framework 323
Advances to step S202, and determines whether or not the above-described authentication processing is necessary for the acquired request information.

If the framework 323 determines that the authentication process is necessary, the framework 323 proceeds to step S203 to perform the authentication process on the acquired request information. This process corresponds to the process of step S172 of FIG. Then, the framework 323 proceeds to step S204, and determines whether the user of the supply source of the request information has been authenticated.

If the framework 323 determines that it has been authenticated, the framework 323 proceeds to step S205. If the framework 323 determines in step S202 that authentication processing is not required, the framework 323 proceeds to step S205.

In step S205, the framework 323 sends the acquired request information to the XM as described above.
L Document. This process corresponds to the process of step S173 of FIG.

The framework 323, which has converted the request information into an XML document, determines in step S206 whether or not the request information corresponding to the framework 323 exists. If it is determined that the request information exists, step S207 is executed.
Then, the necessary processing is performed based on the request information, and the process proceeds to step S208. When it is determined in step S206 that the request information corresponding to the framework 323 does not exist, the framework 323 proceeds directly to step S208.

In step S208, the framework 323 determines whether or not there is request information to be supplied to the application program, and if it is determined to be present, the process proceeds to step S209 to supply the request information to the corresponding application program. . This process corresponds to the process of step S174 of FIG.

Framework 323 that supplied the request information
Proceeds to step S210. Also, step S208
In the case where it is determined that the request information to be supplied to the application program does not exist, the framework 32
In step 3, the process proceeds to step S210. In step S210, the framework 323 determines whether the response information has been acquired from the application program that has supplied the request information, and waits until it is determined that the response information has been acquired or the request information has not been supplied.

When it is determined that the response information is acquired or the request information is not supplied, the framework 323
Proceeds to step S211. Also, step S204
In, if it is determined that the user has not been authenticated,
The framework 323 proceeds to step S211.

In step S211, the framework 323 generates optimum output response information based on the acquired response information. This process corresponds to the process of step S176 of FIG. The framework 323 that has generated the optimum output response information proceeds to step S212, supplies the generated output response information to the WEB server 321, and ends the application program management process.

The communication processing is performed as described above, the external terminal device 22 controls the mail client program 331A of the local server 11, and the processing when referring to the electronic mail received by the local server 11 from the outside of the local area 10 is performed. This will be described with reference to the timing chart of FIG. Description will be made with reference to FIGS. 24 to 26 as appropriate.

First, in step S251, the mail client program 331A shown in FIG. 18 accesses the mail server and requests an unreceived mail which is an electronic mail that has not been received yet. This process is automatically and repeatedly performed at predetermined time intervals based on the settings registered in advance.

When the mail server obtains the request from the mail client program 331A in step S241, if there is any unreceived mail, step S2
At 42, the requested unreceived mail is supplied to the mail client program 331A. When the mail client program 331A acquires the supplied e-mail in step S252, the mail client program 331A proceeds to step S2.
At 53, the acquired mail is saved.

The external terminal device 22 existing outside the local area 10 is instructed by the user to perform the step S23.
In No. 1, the local server 11 is accessed via the network 21 and a mail corresponding to the user's account is requested.

FIG. 24 is a diagram showing an example of the mail client top screen displayed on the display of the external terminal device 22. When the external terminal device 22 accesses the local server 11 via the network 21, the authentication process is performed as described above, and the framework 323 of the local server 11 uses the mail client program 331.
Is operated, and the GUI as shown in FIG. 24 is used as response information.
Information is supplied to the external terminal device 22. External terminal device 22
CPU 101 controls the output unit 112 to obtain the acquired GUI.
The information is displayed on the WEB browser screen 301 displayed on the display.

In FIG. 24, the WEB browser screen 301
Shows a mail client top screen 351. The mail client top screen 351 is the highest-level GUI among the GUIs supplied by the mail client program 331A, and is composed of buttons and links for executing various functions provided by the mail client program 331A. That is, the user of the external terminal device 22 uses the mail client top screen 351.
By operating the links and buttons that make up,
It is possible to display an inbox displaying a list of received e-mails or a screen for creating a new e-mail.

At the upper part of the mail client top screen 351, for example, an address book button 352 for operating the function of the address book used when a user operates a mouse or the like to create a new e-mail, and an incoming call A button group for executing various functions including a notification / transfer setting button 353 for activating a function for setting a notification of an email and a transfer destination address is formed.

On the left side of the mail client top screen 351, a function selection field 354 in which a list of functions provided by the mail client program 331A is displayed as links is constructed, and the user instructs these links with a mouse or the like. By doing so, various functions can be executed.

The mail client top screen 35
In the center of 1, there is formed a main menu section 355 composed of a button group for operating main functions and its description. The user can use the mouse etc. to enter the main menu column 3
A function to be operated can also be selected by operating a button included in 55.

The user of the external terminal device 22 issues a request to the mail client program 331A based on the above GUI screen. For example, when the user requests the display of the inbox, the external terminal device 22 supplies the request to the mail client program 331A in step S231. This request is supplied to the local server 11 and processed as described above,
It is supplied to the mail client program 331A.

In step S254, the mail client program 331A, which has obtained the request, performs the unique processing as described above and supplies the information regarding the saved mail list. When the external terminal device 22 acquires the information regarding the supplied saved mail list in step S232, the external terminal device 22 displays the acquired saved mail list on a display or the like as illustrated in FIG. 25.

FIG. 25 is a diagram showing an example of an inbox screen displayed on the display of the external terminal device 22.

The WEB browser screen 301 displayed on the display of the external terminal device 22 has an inbox screen 36 for displaying a list of stored mails supplied from the mail client program 331A of the local server 11.
1 is configured.

[0208] On the inbox screen 361, a received mail selection field 362 composed of a list of saved mails is formed. The received mail selection column 362 includes an item indicating a status such as unread or already read, an item indicating the presence or absence of an attached file, an item indicating the name of the sender of the email, an item indicating the subject of the email, and an incoming date or transmission date. It is composed of items indicating the date and the like.

[0209] A part or all of the contents displayed in the received mail selection field 362 are constituted by links, and the user of the external terminal device 22 can, for example, use the electronic mail displayed in the received mail selection field 362. By selecting the subject of the target e-mail from among the items by operating the mouse or the like, the text of the e-mail can be displayed.

Returning to FIG. 23, when the user selects the target mail from the received mail selection field 362 shown in FIG. 25, the external terminal device 22 proceeds to step S233.
From the acquired stored mail list, an electronic mail designated by the user is selected, and the mail client program 331A is requested to supply the electronic mail.

A request from the WEB browser 341 of the external terminal device 22 is sent to the WEB server 321 and the framework 3.
23 via the mail client program 331A
Is supplied to. Mail client program 331A
Acquires the request in step S256.
The mail client program 331A that has received the request from the external terminal device 22 performs a process corresponding to the request, and supplies the requested electronic mail to the external terminal device 22 in step S257.

When the external terminal device 22 acquires the supplied electronic mail in step S234, the external terminal device 22 displays it on a display or the like.

FIG. 26 is a diagram showing an example of the mail display field displayed on the display of the external terminal device 22.

In FIG. 26, the WEB browser screen 301
In the mail display field 37 for displaying the text of the e-mail, etc.
1 is displayed. In the mail display field 371, in addition to the body of the email, the date of the email, the sender, the recipient,
Information such as broadcast, subject, and attached file is displayed.

The user of the external terminal device 22 refers to the mail display field 371 to check the local server 1
You can see the contents of the email received in 1. As a result, for example, the user can use the mail client 331A of the local server 11 installed at home.
The email received by can be read on the go.

In the above, the processing of acquiring the electronic mail received by the mail client program 331A outside the local area 10 has been described, but the present invention is not limited to this, and the user of the external terminal device 22 can perform the same processing as the above-mentioned processing. By performing the processing, for example, an outgoing mail is created by an account registered in the mail client program 331A, received mails are sorted into folders, and the mails are organized.
It is possible to control various functions of the mail client program 331A, such as changing various settings related to 31A.

In the above description, the external terminal device 22 accesses the local server 11 based on a user's instruction to acquire the electronic mail previously received by the mail client program 331A, but the present invention is not limited to this. Instead, when an e-mail is received, the e-mail client program 331A may automatically notify that the e-mail has been received, or the received mail may be transferred to the external terminal device 22.

In this case, the user sets in advance that the mail client program 331A notifies the external terminal device 22 when the electronic mail is received, or transfers the received electronic mail. The user of the external terminal device 22 uses the mouse or the like to move the external terminal device 22.
When the notification / transfer setting button 353 shown in FIG. 24 is operated on the display, the notification / transfer setting button 353 shown in FIG.
Display the notification / transfer list display field for making settings related to transfer.

FIG. 27 is a diagram showing a notification / transfer list display field displayed on the WEB browser screen.

In FIG. 27, on the WEB browser screen 301 displayed on the display, there is displayed a notification transfer list display field 381 in which a list of notifications upon reception of electronic mail or a list of settings relating to transfer is displayed.

In the notification / forwarding list display field 381, in addition to the list of the setting information relating to the notifications and forwarding set up to now, a GUI for newly adding the setting information by the user operating the mouse or the like. There are provided an additional button 382 to be displayed on the WEB browser screen 301, a button to delete the setting information already set and displayed in the list when the user operates the mouse or the like.

The user of the external terminal device 22 operates the add button 382 by using a mouse or the like, as shown in FIG.
A notification / forwarding destination setting field, which can be set for notification or forwarding as shown in, is displayed on the WEB browser screen 301, and new setting information can be created.

FIG. 28 is a diagram showing the notification / forwarding destination setting field displayed on the WEB browser screen.

In FIG. 28, on the WEB browser screen 301 displayed on the display, there is displayed a notification transfer destination setting field 391 for making settings for notification or transfer when an electronic mail is received.

In the notification / transfer destination setting field 391, the data name input field 392 in which the user inputs the name of the setting information relating to the notification / transfer using the mouse or the keyboard, and the setting information in the user using the mouse or the like. An action selection field 393 for selecting the content of the process instructed by the user, a notification / transfer destination address input field 394 for the user to input a notification or transfer destination address using a mouse or a keyboard, etc.
And the user uses a mouse or keyboard,
A comment input field 395 for inputting a comment or the like regarding this setting information is provided. In addition to this,
An additional button or the like for newly registering the input setting information may be configured by the user operating the mouse or the like.

The user of the external terminal device 22 receives this notification
Based on the transfer destination setting field 391, setting information regarding notification or transfer can be input and registered in advance.

Refer to the timing chart of FIG. 29 for the processing in the case where the setting for notifying at the time of reception is made in advance based on the GUI screen as shown above displayed on the WEB browser screen 301. And explain.

Similar to the case shown in FIG. 23, step S2
91, the mail client program 331A
Request an unreceived mail at a predetermined time interval, the mail server obtains the request in step S281, and if there is an unreceived mail corresponding to the request in step S282, the unreceived mail Is supplied to the mail client program 331A.

Mail client program 331A
In step S292, when the supplied e-mail is acquired, in step S293, a notification mail for notifying the newly received new mail is generated.

Then, in step S294, the mail client program 331A sends the generated notification mail to the external terminal device 22 via the network 21.
Supply to. In step S271, the external terminal device 22 acquires the notification mail and displays the acquired notification mail in the mail display field 371 shown in FIG. 26 on the WEB browser 301 displayed on the display.

The notification mail acquired by the external terminal device 22 includes not only a message notifying that the mail client program 331A has received an electronic mail, but also the main received mail related to the number of received mails, the subject, or the sender. The information and the URL of the access destination accessed when the external terminal device 22 acquires the received mail corresponding to the notification mail may be included.

[0232] Also, this URL may be a link, and this URL displayed by the user on the browser screen 301
The external terminal device 22 may access the selected URL and display the corresponding received mail by selecting the URL with a mouse or the like. In this case, when the external terminal device 22 accesses the URL selected by the user, the corresponding received mail is displayed on the WEB browser screen 301 displayed on the display.
A mail display field 371 as shown in FIG. 26 is displayed.

At this time, the URL included in the notification mail includes the connection key as described above, and the authentication process by the authentication service provider 30 shown in FIG. 1 can be omitted. Also included in the notification email as well
Make sure the URL contains the identifying information for the local server,
The authentication process by the local server 11 may also be omitted.

With the above processing, the user of the external terminal device 22 can access the URL included in the acquired notification mail.
The mail client program 331A of the local server 11 can be selected by simply selecting the link of
The mail received by can be displayed on the display and viewed.

On the contrary, the URL does not include the connection key so that the user of the external terminal device 22 needs the authentication processing of the authentication service provider 30 when viewing the received mail. May be.

The external terminal device 22 which has acquired the notification mail and has it displayed on the display or the like, in step S272, determines the local server 11 based on the acquired notification mail.
To request the mail corresponding to the user's instruction from the mail client program 331A.

Mail client program 331A
After acquiring the request in step S295, supplies the requested mail to the external terminal device 22 in step S296. In step S273, the external terminal device 22 acquires the supplied e-mail and displays the content on the display or the like.

[0238] By performing the processing as described above,
The user of the external terminal device 22 can browse the mail received by the mail client program 331A from outside the local area 10.

In the above description, the external terminal device 22 is connected to the local server 11 via the network 21 to control the mail client program 331A, but the invention is not limited to this, and the application controlled by the external terminal device 22 is not limited to this. In addition to the mail client program 331A, the programs include, for example, the address management program 331B and the schedule management program 331.
Any application program that the local server 11 has, such as C, may be used.

FIG. 30 is a diagram showing an example of the address book top screen displayed on the WEB browser screen 301.

In FIG. 30, the WEB browser screen 301 displayed on the display shows the address management server 3
An address book top screen 401, which is the top screen of the GUI corresponding to 31B, is displayed.

On the address book top screen 401, a main menu screen 402 for displaying a GUI for controlling the main functions of the address management program 331B by the user operating the mouse or the like, and the user Includes a function selection column 403 that is a link group that can display a GUI for controlling various functions belonging to the address book function provided by the address management program 331B by selecting with a mouse or the like. .

The user can select the address book top screen 40.
By operating various buttons or links of 1,
You can open the address book and edit the address information.

As described above, the user of the external terminal device 22 can connect to the local server 11 via the network 21 from outside the local area 10 and control various application programs. , The local server 11, and the operation of the terminal device 13 and the like connected to the LAN 12 can be controlled.

The application programs of the local server 11 which can be controlled by the external terminal device 22 are not limited to those described above, but include, for example, application programs for recording and reproducing television signals, still image data and moving image data. If the application program installed in the framework 323 shown in FIG. 18, such as an application program for distribution or editing, an application program for recording or playing music data, has any function, Good.

In the above description, the external terminal device 22 is connected to the local server 11 to control various application programs, but the mobile phone 23 is connected to the local server 11 to control various application programs. Also in this case, the same processing as that described above is performed.

Further, as the terminal device outside the local area 10, in addition to the external terminal device 22 such as the personal computer and the mobile phone 23 described above, for example,
PDA (Personal Digital Assistance) with communication function
And so on.

In the above, the local server 11 and the terminal device 1 constituting the network system shown in FIG.
3, external terminal device 22, mobile phone 23, connection management server 31, address management server 32, and authentication server 3
Although 3 is described as being configured by one each, it is not limited to this and may be configured by a plurality of units. Further, although each server and each device installed in the authentication service provider 30 are separately configured, the entire service or a part thereof may be integrated.

In the above description, the system represents the entire device composed of a plurality of devices.

The series of processes described above can be executed by hardware, but can also be executed by software. When a series of processes is executed by software, a program that constitutes the software executes a variety of functions by installing a computer in which dedicated hardware is installed or various programs. It is installed from a network or a recording medium into a general-purpose personal computer or the like capable of performing the above.

This recording medium is a magnetic disk (including a floppy disk) on which a program is recorded, an optical disk (CD-ROM (Compact Disk-Compact Disk- Read Only
Memory), DVD (including Digital Versatile Disk), magneto-optical disk (including MD (Mini-Disk)), semiconductor memory, or other package media, and is pre-installed in the device body. ROM in which the program is recorded, which is provided to the user in the state
Etc.

In this specification, the steps for writing the program recorded on the recording medium are not limited to the processing performed in time series according to the order described, but are not necessarily performed in time series. It also includes processing executed in parallel or individually.

[0253]

As described above, according to the network system, the information processing apparatus and method, the recording medium, and the program of the present invention, it is possible to efficiently handle a plurality of application programs that control apparatuses having different functions. , You can flexibly make requests.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration example of a network system to which the present invention is applied.

FIG. 2 is a block diagram showing a configuration example of a local server shown in FIG.

FIG. 3 is a block diagram showing a configuration example of an external terminal device shown in FIG.

FIG. 4 is a block diagram showing a configuration example of a connection management server shown in FIG.

5 is a diagram showing a configuration example of an address management server shown in FIG.

6 is a flowchart illustrating local server information registration processing by the local server shown in FIG.

FIG. 7 is a flowchart illustrating local server information registration processing by the address management server shown in FIG.

FIG. 8 is a diagram showing an example of a state of a setting screen for making settings relating to a connection key.

FIG. 9 is a diagram showing another example of a state of a setting screen for making settings relating to a connection key.

10 is a flowchart illustrating a local server information update process by the local server shown in FIG.

FIG. 11 is a flowchart illustrating local server information update processing by the address management server shown in FIG.

FIG. 12 is a timing chart illustrating a process of logging in to a local server from an external terminal device.

FIG. 13 is a diagram showing an example of a login screen.

FIG. 14 is a diagram showing an example of a local server list screen.

FIG. 15 is a diagram showing an example of a login screen.

FIG. 16 is a diagram showing an example of an error screen.

FIG. 17 is a flowchart illustrating an access control process performed by the connection management server.

FIG. 18 is a diagram showing a state of an application program.

FIG. 19 is a timing chart illustrating communication processing performed by a local server and an external terminal device.

[Fig. 20] Fig. 20 is a diagram illustrating an example of request information converted into an XML document by the framework.

FIG. 21 is a diagram showing an example of response information supplied to the framework.

FIG. 22 is a flowchart illustrating application program management processing by the framework.

FIG. 23 is a timing chart illustrating a process when referring to an electronic mail received by the local server from outside the local area.

FIG. 24 is a diagram showing an example of a mail client top screen.

FIG. 25 is a diagram showing an example of an inbox screen.

FIG. 26 is a diagram showing an example of a mail display field.

FIG. 27 is a diagram showing a notification / transfer list display field.

FIG. 28 is a diagram showing a notification / transfer destination setting field.

FIG. 29 is a timing chart illustrating a process in the case where a setting for giving notification at the time of reception is made in advance.

FIG. 30 is a diagram showing an example of an address book top screen.

[Explanation of symbols]

11 local server, 12 LAN, 13 terminal device, 21 network, 22 external terminal device,
23 mobile phone, 24 base station, 30 authentication service provider, 31 connection management server, 32 address management server, 33 authentication server, 321 WEB
Server, 322 SSL, 323 framework,
324 WEB contents, 325 JAVA (registered trademark) related module, 331A mail client program, 331B address management program,
331C Schedule Management Program, 331D
Application program

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Mariko Yoshida             6-735 Kita-Shinagawa, Shinagawa-ku, Tokyo Soni             -Inside the corporation F-term (reference) 5B085 AA01 CC17

Claims (12)

[Claims] 1. A network system comprising: a first information processing apparatus connected to a network; and a second information processing apparatus connected to the network and communicating with the first information processing apparatus, The first information processing apparatus includes: a processing unit that performs a predetermined predetermined process; a first acquisition unit that acquires the first processing request information supplied from the second information processing apparatus; Based on the first processing request information acquired by the first acquisition unit, the second optimum value for the corresponding processing unit.
By supplying the second processing request information, which is optimum for the processing means and is generated by the first generation means, to the corresponding processing means. , Control means for controlling the processing means, and response information optimum for the second information processing device is generated based on result information of the predetermined processing performed by the processing means under the control of the control means. And second supply means for supplying the response information generated by the second generation means to the second information processing apparatus, wherein the second information processing apparatus comprises: A second supply means for supplying the first information processing device with the first processing request information including information requesting processing to the processing means; and the response information supplied by the first supply means. The acquisition means to acquire Network system, characterized in that to obtain. 2. An information processing apparatus, which is connected to a network and communicates with another information processing apparatus, comprising: a processing unit that performs a predetermined predetermined process; and a processing unit that is supplied from the other information processing apparatus. Processing request information acquiring means for acquiring one processing request information, and second processing request information optimal for the corresponding processing means based on the first processing request information acquired by the processing request information acquiring means. And a second generating request information that is generated by the first generating unit and that is optimal for the processing unit, is supplied to the corresponding processing unit. A second generation for generating optimum response information for the other information processing device based on result information of the predetermined process performed by the processing unit controlled by the control unit and the control unit. The information processing apparatus comprising: the stage, and a response information supplying means for supplying the response information generated by said second generating means to the other information processing apparatus. 3. The predetermined processing includes processing relating to transmission / reception of electronic mail, and the first and second processing request information includes processing relating to acquisition of the electronic mail, processing relating to creation of the electronic mail, and the electronic processing. Process related to email notification, or
The information processing apparatus according to claim 2, further comprising information requesting processing regarding transfer of the electronic mail. 4. The predetermined process includes a process related to management of address information, and the first and second process request information requests a process related to acquisition of the address information or a process related to editing of the address information. The information processing apparatus according to claim 2, further comprising: 5. The predetermined process includes a process related to management of schedule information, and the first and second process request information requests a process related to acquisition of the schedule information or a process related to editing of the schedule information. The information processing apparatus according to claim 2, further comprising: 6. The predetermined processing includes processing relating to management of still image information, moving image information, or audio information, and the first and second processing request information includes the still image information, moving image information, Alternatively, it includes information requesting processing related to reproduction of audio information, processing related to recording of the still image information, moving image information, or audio information, or processing related to editing of the still image information, moving image information, or audio information. The information processing apparatus according to claim 2, wherein: 7. The information processing apparatus according to claim 2, wherein the first generating unit uses the XML language to generate the second processing request information most suitable for the processing unit. 8. The first and second processing request information are:
The second generation unit includes information about the function of the other information processing apparatus, and the second generation unit is configured to perform the other information processing based on information about the function of the other information processing apparatus included in the second processing request information. The information processing apparatus according to claim 2, which generates optimum response information for the apparatus. 9. The second generation means, based on the information regarding the function of the other information processing apparatus included in the second processing request information, sets a programming language that can be processed by the other information processing apparatus. The information processing apparatus according to claim 8, wherein the response information is generated by using the response information. 10. An information processing method of an information processing apparatus connected to a network and communicating with another information processing apparatus, comprising: a processing step in which a processing unit performs a predetermined predetermined process; and the other information. Based on the processing request information acquisition control step for controlling the acquisition of the first processing request information supplied from the processing device, and the first processing request information whose acquisition is controlled by the processing of the processing request information acquisition control step. , A first generation step of generating optimum second processing request information for the corresponding processing unit, and the second processing request optimum for the processing unit generated by the processing of the first generation step By supplying information to the corresponding processing unit, a control step of controlling the processing of the processing step, and the processing step controlled by the processing of the control step A second generation step of generating optimum response information for the other information processing device based on the result information of the processing according to, and the other information of the response information generated by the processing of the second generation step. A response information supply control step of controlling supply to the processing device. 11. A program for an information processing apparatus, which is connected to a network and communicates with another information processing apparatus, wherein the processing unit performs predetermined predetermined processing, and the other information processing. Based on the processing request information acquisition control step that controls acquisition of the first processing request information supplied from the device, and the first processing request information whose acquisition is controlled by the processing of the processing request information acquisition control step, A first generation step of generating optimum second processing request information for the corresponding processing unit, and the second processing request information optimum for the processing unit generated by the processing of the first generation step Is supplied to the corresponding processing unit to control the processing of the processing step, and the processing step performed under the control of the processing of the control step. A second generation step of generating optimum response information for the other information processing device based on the result information of the processing according to, and the other information of the response information generated by the processing of the second generation step. And a response information supply control step for controlling supply to the processing device. A recording medium having a computer-readable program recorded thereon. 12. A program executable by a computer that controls an information processing device that is connected to a network and communicates with another information processing device, the processing unit performing predetermined predetermined processing. A processing request information acquisition control step for controlling acquisition of the first processing request information supplied from the other information processing apparatus; and the first processing whose acquisition is controlled by the processing of the processing request information acquisition control step. A first generation step for generating optimum second processing request information for the corresponding processing unit based on the request information; and the optimum generation unit for the processing unit generated by the processing of the first generation step. By supplying the second processing request information to the corresponding processing unit, a control step of controlling the processing of the processing step, and a control of the processing of the control step Generated by the processing of the second generation step, which generates optimal response information for the other information processing device, based on the result information of the processing performed by the above-described processing step, and the processing of the second generation step. A response information supply control step of controlling the supply of the response information to the other information processing apparatus.