JP2007281811A - Gateway apparatus, information sharing system, and information sharing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a gateway apparatus, an information sharing system, and an information sharing method capable of sharing information with ensured security by concealing identification information attended with the information sharing. <P>SOLUTION: The gateway apparatus provided to an edge part of a network for receiving information provision transfers key information and network information to a printer provided to the network and transfers the key information and identification management information to a provision source for providing information. A network of the provision source for providing the information transfers print data together with the key information on the basis of the transferred network information. The network for receiving the information provision discriminates the propriety of print execution by the printer depending on the presence/absence of the key information. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a gateway device and an information sharing system and method for sharing predetermined information between mutual networks, and more particularly, to a gateway device, an information sharing system and a method capable of ensuring security after information sharing.

  Generally, when information such as an electronic document is shared by a plurality of users, information sharing can be performed by providing a device that can be commonly accessed by the sharing user, such as a document management server. In addition, when providing information to an unspecified number of people, it is possible to provide information to a third party by starting up a Web server that provides Web content.

  Among them, when information is shared between specific users, it is common to share the information by simply transmitting the information using an e-mail function or a P2P (Peer to Peer) function.

  The information provider (user) who received the information can share the information by referring to the provided content, but when making an inquiry about the content of the provided information to the information provider, For example, inquiries can be made using methods such as telephone, facsimile, electronic mail, and bulletin board. In this case, from the perspective of the provider who provided the information, if a specific information is provided, it can be easily determined that the inquiry is for that information. If so, it takes time to identify the information to be inquired.

  In response to the inquiry, the information provider may provide further information to the information provider (user) who has made the inquiry as necessary. In such a case, in order to provide information immediately, it is necessary to constantly monitor the inquiry and to prepare the information to be provided in advance.

  As an example of a technology for providing information, there is a conventional technology that can provide a printing service for outputting information to a printer installed at the provider, where the information provider and the provider are at a long distance. 1 is disclosed.

  In the prior art disclosed in Patent Document 1, a proxy device that can communicate with a print server that cannot pass through a firewall by using IPP (Internet Printing Protocol) is provided, and a server site for the print server is established in the proxy device. Thus, the print server is regarded as an IPP server published on the Internet, and a print service request and a response can be exchanged.

  By using such a technology, it becomes possible to easily share necessary information between the information provider and the provider. However, in recent years, threats (risks) have been generated by exploiting rapidly developed technologies. It is also true that there is a need to protect the shared digital information from these threats.

  The threat has many causes that can be distinguished as an internal factor and an external factor. In particular, information that has been leaked to a third party due to the threat of eavesdropping or tampering with shared digital information. There is a possibility that wrong information is provided even between the parties.

In particular, in the case of information with high confidentiality and confidentiality such as personal information and billing information, there is a problem that damages caused by eavesdropping or tampering increase and the safety and reliability of the information decrease.
JP 2003-58459 A

  However, in the prior art disclosed in Patent Document 1, a proxy device is provided so that communication can be performed across a firewall. However, it is necessary to know detailed information of the information providing destination printer in advance. There is a problem that information cannot be shared with a large number of specific providers.

  Further, in this conventional technique, since it is necessary to newly provide a proxy device, it takes a lot of time and a large amount of cost to construct the system.

  Therefore, an object of the present invention is to provide a gateway apparatus, an information sharing system, and a method that can ensure information security by concealing identification information associated with information sharing and perform information sharing.

  The first invention establishes a communication session between communication devices connected to a plurality of points and capable of exchanging data with each other provided at each point, and between a communication partner and a node. In the gateway device that controls job information, information for allowing at least communication devices to recognize each other with respect to the other party with which the communication session has been established, and information for recognizing on a network targeted for a node And first control means for notifying the first control information including the second control information including at least information for specifying the job information at the other party of the communication session. Based on the first control information notified by the second notification means and the first notification means, the job information transmitted from the other party is sent to the node. Whether to signal, it is characterized by performing reception control on the basis of the first control information and the second control information.

  According to the first aspect of the present invention, since the counterparty and the node have a so-called 1: 1 relationship based on the first control information, and the node receives the job information, security is ensured. In addition, since the job information can be easily specified by the second control information, the processing time for searching or the like is shortened, and the communication time can be substantially shortened.

  In the first invention, the first control information restricts communication only between the destination and the node, and the second control information specifies the job information, so that the reception control is executed. It is characterized by that.

  In the first invention, the first control information and the second control information include key information, and the key information indicates job information between a partner of the communication session and the node. It is characterized by being information for realizing communication.

  Furthermore, in the first invention, the first control information includes network information for performing network setting of the node.

  In the first invention, the second control information includes identification management information for specifying the job information.

  Furthermore, in the first invention, the communication device is an IP telephone.

  In the first invention, the node is an image forming apparatus.

  According to a second aspect of the present invention, information is shared between a gateway device provided at each point and connected via a communication network, and with a partner that has established a communication session between communication devices via the gateway device. In the shared system, the gateway device communicates job information with a node provided for each point, and based on the establishment of the communication session, at least the communication apparatus establishes the communication session. At least to the first notification means and the node for notifying the first control information including information for allowing only communication devices to recognize each other and information for recognizing the node on the network Second notification means for notifying second control information including information for specifying the job information at the other end of the communication session; The job information between the destination and the node established in the communication session based on the first control information and the second control information notified by the first notification unit and the second notification unit It is characterized by performing communication.

  According to the second aspect of the present invention, since the counterparty and the node are in a so-called 1: 1 relationship by the first control information, and the counterparty and the node communicate job information, security is ensured. . In addition, since the job information can be easily specified by the second control information, the processing time for searching or the like is shortened, and the communication time can be substantially shortened.

  In the second aspect of the invention, communication of the job information is executed when the first control information restricts communication only between the other party and the node, and the second control information specifies the job information. It is characterized by being.

  In the second invention, the first control information and the second control information include key information, and the key information indicates job information between the communication session partner and the node. It is characterized by being information for realizing communication.

  Furthermore, in the second invention, the first control information includes network information for performing network setting of the node.

  In the second invention, the second control information includes identification management information for specifying the job information.

  Furthermore, in the third invention, the communication device is an IP telephone.

  In the second invention, the node is an image forming apparatus.

  According to a third aspect of the present invention, information is shared between a gateway device provided at each point and connected via a communication network, and with a partner that has established a communication session between communication devices via the gateway device. In the sharing method, the gateway device communicates job information with a node provided for each point, and based on the establishment of the communication session, at least a communication device with respect to a partner with which the communication session is established The first control information including information for allowing mutual recognition and information for recognizing the node on the network is notified to the node at least at the other end of the communication session. Notifying the second control information including information for specifying the job information, and notifying by the first notifying unit and the second notifying unit Based on the first control information and second control information, it is characterized by communicating the job information between the established the destination and the node of the communication session.

  According to the third aspect of the present invention, since the counterparty and the node are in a so-called 1: 1 relationship by the first control information, and the counterparty and the node communicate job information, security is ensured. . In addition, since the job information can be easily specified by the second control information, the processing time for searching or the like is shortened, and the communication time can be substantially shortened.

  According to the present invention, the network information and the key information of the printing apparatus installed in the information provider side network are transferred to the information providing source, and the key information and the identification management information are also transferred to the printing apparatus. This makes it easy to share information along with the use of a call service, and at the same time prevents unauthorized use of destination information from printing out unintended unnecessary information from the printing device. There is an effect of being able to do it.

  Hereinafter, an example of a gateway device, an information sharing system, and a method according to the present invention will be described in detail with reference to the accompanying drawings.

  FIG. 1 is a network configuration diagram configured by applying a gateway apparatus, an information sharing system, and a method according to the present invention.

  In FIG. 1, this information sharing system uses a communication service typified by broadband communication such as voice communication using a communication line, video or chat, and exchanges information on predetermined digital data with a communication partner of the communication service. In this system, safety is ensured by preventing the information providing source from issuing a processing instruction to the information providing destination device after providing the information.

  As voice communication at this time, for example, there is an IP phone using VoIP (Voice over Internet Protocol) technology, and as broadband communication, there are real-time video distribution and video chat using a network camera.

  Information sharing is performed with a communication partner using such a communication service. Information shared between each other is called “digital information”.

  In the following, an example in which “IP phone” is used as a communication service will be described.

  This information sharing system includes an information provider network 10 that accepts a call on an IP phone and provides digital information, and an information provider network that receives information by sending a call to the information provider network 10 using an IP phone. The information providing destination network 20 configured by 20 and connected to the information providing source network 10 is configured by one or more networks.

  The information providing source network 10 and the information providing destination network 20 are connected by a communication line. For example, in addition to Internet connection, a public line such as a VPN (Virtual Private Network) or a wide area Ethernet (registered trademark) service or a dedicated line is used. Connect using wires. Of course, not only these WAN (Wide Area Network) connections but also connections within a closed network using LAN cables may be used. In this case, the information providing source network 10 and the information providing destination network 20 are in the same network (in the LAN).

  The information providing source network 10 includes a gateway device 11, an IP phone 12, and a client PC 13, and the information providing destination network 20 includes a gateway device 21, an IP phone 22, and a printer 23. In this information sharing system configured by connecting these networks, the digital information stored in the storage area of the client PC 13 installed in the information providing source network 10 is printed out by the printer 23 installed in the information providing destination network 20. To share information between each other.

  Each device belonging to each network is a node connected by a LAN cable and can communicate with each other.

  In the information providing destination network 20, network information such as an IP address for identifying the printer 23, identification management information, and key information related to execution of the print job are transferred to the information providing source network 10.

  Here, the network information is information related to the network settings of the printer 23, the identification management information is information for facilitating identification of a print job at the information providing destination, and the key information is information providing destination and information providing This information is known only by the original.

  In the present embodiment, the above information is provided by the gateway device 21. That is, the gateway device 21 that is the information providing destination holds the network information and management information of the IP phone 22 and the printer 23 under its control, and the gateway device 21 also generates key information. The information is transmitted to the information provider.

  Next, nodes constituting each network will be described.

  First, in the information providing source network 10, the gateway device 11 is a network interface device that plays the role of a default gateway, and is configured by a router or the like. The gateway device 11 has path information to each connected node, and can switch a transfer destination device according to the type of data to be transferred. For example, when the data is voice data by voice communication, it is transferred to the IP telephone 12, and when it is data other than voice data by broadband communication (hereinafter referred to as “process data”), it is sent to the client PC 13. And forward. Incidentally, digital information is classified into processed data.

  Further, communication with the communication partner using the IP telephone 12 is established, and the communication state is held until an end trigger is received.

  Further, in the communication, the “data session” of the processing data can be established simultaneously with the “voice session” between the IP telephones, and the communication path of the processing data is established in addition to the voice data. That is, by specifying the communication partner of the voice session by the IP telephone as the communication partner of the processing data, there is no need to newly perform a process for establishing a route to the communication destination. The gateway devices of each network in a call state by the IP telephone can recognize each other, and the transfer destination of the digital information is determined based on the path information stored in the gateway device.

  In the VoIP technology for realizing this IP phone, a voice packet encapsulating voice data with identification information such as a source IP address and a destination IP address is received from the IP telephone set 22 of the information providing destination network 20. It is possible to specify identification information between networks in communication state.

  The IP telephone 12 realizes voice communication by transmitting voice data obtained by packetizing voice to the other party. Of course, the processing is performed via a processing server that processes voice data represented by a SIP (Session Initiation Protocol) server or the like (not shown).

  In addition, the information provider can specify which of the plurality of client PCs constituting the information providing source network 10 the digital information is stored in by the information provider.

  In this case, the information confirmation request for confirming whether the client PC designated by the button operation stores the digital information is transferred from the IP telephone 12 to the gateway apparatus 11, and the gateway apparatus 11 designates this information confirmation request. It can be confirmed that the digital information is stored by transferring it to the client PC. When the digital information is stored, the gateway device 11 transfers to the gateway device 21 of the information providing destination network 20 that information can be provided.

  Of course, the information provider does not perform the button operation, but the client PC storing the digital information is set in advance, and the gateway device receives the voice data and is stored in the client PC set with the digital information. You may make it confirm whether it is.

  A plurality of client PCs 13 can be installed in the information providing source network 10 and create digital information using a predetermined installed application. The client PC 13 stores a plurality of created digital information, and an information provider designates the digital information in advance using a user interface (such as a keyboard or a pointing device).

  In response to an information confirmation request from the IP telephone 12 via the gateway device 11, a message indicating that information can be provided is transmitted when there is digital information designated in advance by the information provider.

  Next, in the information providing destination network 20, the gateway device 21 is a network interface device that functions as a default gateway, like the gateway device 11 of the information providing source network 10, and is a route to a node in the information providing destination network 20. Hold information. Also, the IP telephone 22 relays voice packets.

  The gateway device 21 establishes a data session simultaneously with the voice session by negotiating with the gateway device 11 of the information providing source network 10. When digital information is received through the communication path in which the data session is established, the digital information is transferred to a predetermined device with reference to the stored path information. In the information providing destination network 20 shown in FIG. 1, the printer 23 is shown as the path information, so the digital information is transferred to the printer 23.

  In addition, the gateway device 21 provides network information related to the printer 23 that prints out digital information provided from the information providing source network 10 and provides key information related to printout. Further, the gateway device 21 provides key information and management information to the printer 23 under its control.

  The IP telephone set 22 creates a voice packet in which voice is packetized and transmits the voice packet to the other party via a LAN cable to perform voice communication between the IP telephones.

  In addition, the IP telephone 22 can make a request for information provision to the information providing source network 10 by pressing the numeric keypad, and at the same time, the gateway device 21 of the information providing destination network 20 to which the IP telephone 22 belongs. Notify that an information provision request has been made.

  The printer 23 performs print output by receiving digital information to which key information is added. If the key information is not added to the digital information received from the information provider, the process ends without printing the digital information.

  This key information is information for specifying printing of digital information in the printer 23, and is naturally sent from the gateway device 21 to the information provider, but it is sent to the printer 23 in its own network. Even sent. Thereby, even when digital information is directly received without going through the gateway device 21, digital printing output is possible. The information provider confirms the document indicated by the digital information printed out by the printer 23, so that the digital information is shared between the mutual networks.

  With the configuration as described above, unauthorized use of the printer 23 of the information providing destination network 20 can be prevented.

  FIG. 4 is a block diagram showing the configuration of the gateway device shown in FIG.

  The gateway device having the configuration shown in FIG. 4 is a device installed at the edge of the network and having a bridge function inside and outside the network. The gateway device has voice data of a voice call using an IP telephone and digital information from a client PC to a printer. It has a function to transfer.

  Furthermore, route information indicating an access route to a node of the network is held, and processing data such as voice data and digital information is transferred based on the route information.

  The gateway device includes a call control unit 401, a data generation unit 402, a state confirmation unit 403, a storage unit 404, a management unit 405, a data control unit 406, and a communication unit 407. The data control unit 406 receives the processing data.

  This gateway device is installed in any of the information providing source network 10 and the information providing destination network 20 shown in FIGS. 1 to 3, and the processing contents of the gateway device installed in each network are shown below.

  First, in the gateway device 21 installed in the information providing destination network 20, the call control unit 401 that has received the voice data establishes a voice session between the IP telephones by controlling the voice call service using the IP telephone.

  The call control unit 401 transfers the voice data received from the IP telephone to the data generation unit 402, and the data generation unit 402 designates the destination IP address of the voice data based on the route information stored in the storage unit 404. Then, the audio data is transferred to the communication unit 407. The route information at this time is information in which an IP address of a transfer destination processing server, for example, a DNS (Domain Name Server) server or a SIP (Session Initiation Protocol) server is designated, and is sequentially processed by each processing server. The voice data is transferred to the other party's IP phone.

  A voice session is established between IP telephones in the mutual network by notifying a response to the voice data transfer process from the IP telephone of the other party.

  Furthermore, when the voice control unit 401 receives voice data from the IP telephone, the call control unit 401 notifies the status confirmation unit 403 to that effect. When the state confirmation unit 403 is notified from the call control unit 401 that the voice data from the IP telephone has been received, the status confirmation unit 403 provides the printer node installed in the network (information providing destination network) in which the gateway device 21 is installed. In order to confirm the operation state, a state confirmation request is transmitted to the printer node via the communication unit 407. This status confirmation request may be configured to be transferred to all nodes constituting the network without being limited to only the printer node.

  In response to the status confirmation request transmitted in the operation confirmation, the data control unit 406 receives information such as an IP address and information related to the printer 23 from the printer 23. Thereby, it is determined that the printer 23 is in a normal operation state. If the IP address or the like is not notified after waiting for a certain time, it is determined that the printer 23 is not in a normal operation state.

  The data control unit 406 receives processing data other than audio data and performs processing. However, when an IP address, information about the printer 23, or the like is received from the printer 23, the management unit 405 manages it for each printer. This management unit manages the IP address, information about the printer 23, and the like from the printer 23, as well as key information and identification management information. This key information is acquired by the data generation unit 402 based on a transfer request from the data control unit 406, transferred to the client PC 13 of the information providing source network in which the voice session is established, and further stored in the storage unit. Is also transferred to the printer 23 based on the route information. The identification management information is acquired by the data generation unit 402 based on a transfer request from the data control unit 406 and transferred to the printer 23.

  The processing as described above is performed by the gateway device 21 of the information providing destination network 20.

  Next, in the gateway device 11 installed in the information providing source network 10, when the call control unit 401 accepts the voice data, it is transferred to the IP phone via the communication unit 407 based on the route information stored in the storage unit 404. To do. At the same time, the data generation unit 402 is notified that the audio data has been transferred, and the information confirmation request generated by the data generation unit 402 is transferred to the client PC 13 via the communication unit 407.

  Further, when the network information such as the IP address and the key information are received by the data control unit 406, the data control unit 406 transfers the information to the client PC 13 specified as the transfer destination via the communication unit 407. In addition, when the data control unit 406 receives a print data transfer request from the client PC 13, the data control unit 406 transfers the print data to the gateway device of the network in which the voice session has been established. The fact is transferred to the client PC 13.

  The processing as described above is performed by the gateway device 11 of the information providing destination network 10.

  Thereby, the gateway device (11, 21) can process the voice data and the processing data, respectively, and transfer the digital information shared between the mutual networks to an appropriate node.

FIG. 5 is a block diagram showing the configuration of the printer shown in FIG.
The printer 23 is connected to a network via an I / F control unit 501, and the I / F control unit 501 controls communication with the IP telephone set 22 and the gateway device 21. A data control unit 502 is a main control unit in the printer, and converts print data received via the I / F control unit into a data format (hereinafter referred to as raster data) that can be processed by the printer, or stores it in the storage unit 503. An instruction to store various data such as print data or raster data is performed, a process of fetching various data such as print data or raster data stored in the storage unit 503 is performed, and control data or status data is input to the display unit 504. Give instructions to display. Also, control is performed to transfer raster data to the printing mechanism unit 505.
Here, the printing mechanism unit 505 is a so-called print engine, and is a mechanism unit that actually performs printing on printing paper. The display unit 504 includes a display device such as a liquid crystal panel, and displays control data and status data of the printer 23.
Next, the operation will be described. The key information and identification management information transferred from the gateway device 22 are received by the I / F control unit 501 and stored in the storage unit 503 via the data control unit 502. At this time, the storage unit 503 stores the key information and the identification management information in association with each other. The identification management information can be displayed on the display unit 504 and confirmed by the user.
Next, a printing process from the information provider will be described. The data transferred from the information provider includes print data and key information, and the printer 23 determines whether or not printing is possible based on the key information. If the key information is included, the print data is stored in the storage unit, and is managed in the storage unit by the identification management information associated with the key information. The presence / absence of print data stored in the storage unit is informed to the user by displaying the identification management information on the display unit 504. Of course, the printing by the printing mechanism unit 505 may be performed directly at the same time as the storage in the storage unit 504. This difference is determined by the data control unit 502 based on the difference in identification management information. When printing the print data stored in the storage unit 503, an instruction is given from an input unit (not shown) of the printer. In addition, when the print data stored in the storage unit 504 is put on hold, the identification management information is deleted at the same time as being deleted from the storage unit 503 due to a deletion instruction from the input unit or a timeout due to the elapse of a predetermined time. The display on the display unit 504 is deleted.

FIG. 5 is a sequence diagram showing the flow of processing in the information sharing system of the present invention.
In FIG. 5, nodes connected to the gateway device of the information providing destination network in a state where the gateway devices provided at the edge portions of the information providing destination network and the information providing source network are confirmed to be connected via communication lines or wirelessly. The IP telephone of the information provider network is called from the IP telephone that is (501).

  The gateway device of the information providing destination network that received the call from the IP telephone makes a status confirmation request to the printer in the network (502). This status confirmation request includes whether or not the printer is in a normal operating state and includes an IP address set for the printer and a transmission request from the printer driver, and receives a status confirmation response as a response (503).

  Upon receipt of the status confirmation response, the gateway device stores the printer IP address and printer driver included in the status confirmation response, and waits for a response to the call originated from the IP telephone.

  Then, the IP phone of the information providing source network that receives a call from the IP telephone of the information providing destination network calls the information provider, and the gateway device of the information providing source network that forwards the call is a client PC of the same network. A status check request is made to 504 (504). When the client PC is in a normal operation state, a state confirmation response is received (505).

  When the information provider answers the call, the call response is notified to the IP telephone of the information providing destination network (506).

  As a result, a voice session in a voice call is established between the IP telephones between the mutual networks, and a data session is established between the printer and the client PC whose operation has been confirmed by the gateway device.

  The information provider of the information providing source network displays digital information to be shared on the screen by operating the client PC (507), and notifies the information provider of the information providing destination network of the display. In response to this, the information provider presses the button of the IP telephone, for example, “# 1” (508), and the button operation content is notified to the gateway device of the same network (509).

  The notified gateway device performs transfer processing of the stored key information and network information (510). By this transfer processing, the key information and the network information are transferred to the client PC of the information providing source network in which the data session is established (511-1). At this time, the gateway device of the information providing destination transfers the key information and the identification management information to the printer that executes printing in its own network. The transfer of key information and identification management information to the printer will be described later.

  The client PC of the information providing source network that has received them performs information providing processing using the key information and network information (512). In this information provision process, a provision process for providing information, which is digital information displayed on the client PC by the information provider, is performed. That is, the output destination is set based on the transferred network information. Then, a setting process for attaching the transferred key information to the digital information is performed. When these settings are made, the displayed digital information is printed out, print data for the digital information is transferred to a printer in the information providing destination network (513), and printed out from the information providing destination printer (514). ).

  Then, a print completion notification indicating that the print output has been completed by the printer is received (515). In this sequence, the sequence up to the completion of printing is shown, but if the corresponding printer can store the digital information of the information provider, the completion notification (515) is sent as the information is stored in the printer. The provider will be notified.

  Finally, the process is terminated by disconnecting the IP telephone call (516).

  Such a sequence makes it possible to provide digital information.

On the other hand, on the printer side, printing is performed according to the flowchart shown in FIG. The information providing destination printer receives the key information and the identification management information from the gateway device (S601), and determines whether similar key information has been received before (S602). This is to avoid duplicate print processing. If it is determined that the key information and the identification management information have not been received before (S602 YES), the key information and the identification management information are associated with each other and stored in the printer (S604). These steps complete the preparation of the information providing destination printer.
Next, it is determined whether or not the print data has been transferred (S605), and it is determined whether or not the transfer source of the print data is within the network to which the print data belongs (S606). Since there is no need to apply special restrictions within the same network, the type of print data transfer source is determined, and if it is a print request from within the same network, printing is executed (S613). If it is determined that they are not in the same network (NO in S606), it is determined whether or not key information is added to the transferred print data (S607). Next, it is determined whether the added key information is the same as the key information stored in the printer (S608). If the key information is not attached (S607 NO) or the key information is not the same (S608 NO), the print data is not received and printing is not executed (S609). Thereby, it is possible to prevent a print instruction request by an unspecified person from the outside, and to maintain security.
Although printing is permitted based on the determination regarding the key information, in this embodiment, the operability for the user who has the digital information is further improved. That is, even if printing is possible, printing is not executed immediately, but print data is temporarily stored in the printer (S610). Since the digital information can be recognized by the key information, the identification management information associated with the key information is displayed on the printer, and the user is prompted for the information (S611). The accumulated print data can be executed by a user's print instruction input (S613). At the same time, the accumulated data may be deleted by a user's delete instruction input (S614). Further, the accumulated time may be measured by a timer (not shown) in the printer, and the fixed time may be deleted as a threshold value (S605). At this time, the contents of the identification management information are also deleted (S616).
In this way, on the printer side, the actual printing execution is determined based on the commonality of the key information, and the key information is originally transferred from the information providing network, so that unnecessary printing is efficiently eliminated. It is possible.

  In the information sharing system shown in the above embodiment, an example is shown in which points in remote locations are connected via a communication line and information is shared at both points. However, the present invention is limited to this. Alternatively, the present invention can be applied in a closed network such as a LAN.

  Further, a plurality of points can be set for the information providing destination network connected to the information providing source network by the communication line.

  Furthermore, in the embodiment, a printer is connected as an example of an image forming apparatus to a network where information is received, and information is shared by printing out from the printer. Information may be shared by connecting a client PC to the receiving network and displaying data on the display screen of the client PC. Other examples of the image forming apparatus at this time include a multifunction peripheral and an Internet facsimile machine.

  Further, in the information sharing system having the network configuration according to the present embodiment shown in FIG. 1, the gateway device (11, 21) is provided at the edge portion of the network, but the configuration is limited to this configuration. Instead, the network configuration shown in FIGS. 2 and 3 below may be used.

  In the network configuration shown in FIG. 2, IP telephones (12, 22) are provided at the edge of the network, and the functions of the gateway devices (11, 21) shown in FIG. Realized.

  Further, in the network configuration shown in FIG. 3, a printer 23 is provided at the edge portion of the information providing destination network 20, and this printer is configured to have the functions of the gateway devices (11, 21) shown in FIG.

  With this configuration, information can be shared with a simple network configuration.

(Industrial applicability)
The present invention is applicable to a system that shares information with a communication partner in a digital communication state, and is particularly useful for preventing unauthorized use of an information providing destination device in information sharing. .

1 is a network configuration diagram configured by applying a gateway apparatus, an information sharing system, and a method according to the present embodiment. It is another network block diagram comprised by applying the gateway apparatus and information sharing system and method which concern on the modification of this Embodiment. It is a 3rd network block diagram comprised by applying the gateway apparatus and information sharing system, and method which concern on the modification of this Embodiment. It is a block diagram which shows the structure of the gateway apparatus shown in FIG. It is a sequence diagram which shows the flow of the whole process in the information sharing system which concerns on this Embodiment. 6 is a flowchart showing an operation on the printer side in the information sharing system according to the present embodiment.

Explanation of symbols

10 Information Provider Network 11 Gateway Device 12 IP Phone 13 Client PC
DESCRIPTION OF SYMBOLS 20 Information provision destination network 21 Gateway apparatus 22 IP telephone 23 Printer 401 Call control part 402 Data generation part 403 Status confirmation part 404 Storage part 405 Management part 406 Data control part 407 Communication part

Claims (15)

A gateway that connects to multiple points, establishes a communication session between communication devices provided at each point and can exchange data with each other, and controls job information between the other party of the communication session and the node In the device
First control information including information for allowing at least communication devices to recognize each other and information for recognizing on a network targeted for a node is notified to the partner with which the communication session has been established. First notification means for
Second notification means for notifying the node of second control information including at least information for specifying the job information at the other party of the communication session;
Based on the first control information notified by the first notification means, whether to cause the node to receive job information transmitted from the other party, the first control information and the second control A gateway device that performs reception control based on information.   The first control information restricts communication only between a partner and a node, and the second control information specifies the job information, so that the reception control is executed. The gateway device according to 1. The first control information and the second control information include key information,
3. The gateway apparatus according to claim 1, wherein the key information is information for realizing communication of job information between a partner of the communication session and the node. 4. The gateway device according to claim 1, wherein the first control information includes network information for performing network setting of the node. 5. 5. The gateway device according to claim 1, wherein the second control information includes identification management information for specifying the job information.   The gateway apparatus according to claim 1, wherein the communication device is an IP telephone. The gateway apparatus according to claim 1, wherein the node is an image forming apparatus. In the information sharing system in which the gateway device provided at each point is connected via a communication network and information is shared with the other party that has established a communication session between the communication devices via the gateway device,
The gateway device includes communication control means for communicating job information at a node provided for each point;
Based on the establishment of the communication session, the information includes information for allowing at least only communication devices to recognize each other with respect to the other party with which the communication session has been established, and information for recognizing on the network intended for the node. A first notification means for notifying the control information of the first, and a second notification information for notifying the node of the second control information including at least information for specifying the job information at the other party of the communication session Notification means;
The job information between the destination and the node established in the communication session based on the first control information and the second control information notified by the first notification unit and the second notification unit Information sharing system characterized by performing communication.   The first control information restricts communication only between a partner and a node, and the second control information specifies the job information, so that communication of the job information is executed. The information sharing system according to claim 8. The first control information and the second control information include key information,
10. The information sharing system according to claim 8, wherein the key information is information for realizing communication of job information between a partner of the communication session and the node.   The information sharing system according to any one of claims 8 to 10, wherein the first control information includes network information for performing network setting of the node. 12. The information sharing system according to claim 8, wherein the second control information includes identification management information for specifying the job information.   The information sharing system according to claim 8, wherein the communication device is an IP telephone. The information sharing system according to claim 8, wherein the node is an image forming apparatus. An information sharing method in which a gateway device provided at each point is connected via a communication network, and information is shared with a counterpart who has established a communication session between communication devices via the gateway device,
The gateway device communicates job information at a node provided for each point,
Based on the establishment of the communication session, the information includes information for allowing at least only communication devices to recognize each other with respect to the other party with which the communication session has been established, and information for recognizing on the network intended for the node. 1 control information is notified to the node, and at least second control information including information for specifying the job information at the other party of the communication session is notified,
The job information between the destination and the node established in the communication session based on the first control information and the second control information notified by the first notification unit and the second notification unit The information sharing method characterized by performing communication.

Images