JP2012231265A - Relay server and relay communication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a relay server used in a relay communication system constructed with a plurality of relay servers, which is composed to enable communication by the relay communication system to continue even when communication with a relay server on the administration side becomes impossible, while the relay server on the connection side is prevented from owning more access rights than necessary.SOLUTION: A first maintenance terminal detects whether communication with a center terminal is possible. The first maintenance terminal stores therein identification information and activation information about a specific relay server which is specified beforehand as a destination of connection by an operator logged in via the local terminal when communication with the center terminal becomes impossible. When the first maintenance terminal detects that communication with the center terminal is impossible, it reads the identification information of the selected specific relay server from a connection permitted list storage unit, and establishes a routing session used in routing of packets between the selected specific relay server and itself to exert routing control.

Description

  The present invention mainly relates to a relay server that enables communication between terminals connected to different LANs (Local Area Networks).

  Conventionally, a communication technique called a virtual private network (VPN) is known. This VPN is used, for example, for applications in which terminals connected to LANs at a plurality of bases provided for each region communicate via the Internet. If the VPN is used, another remote LAN can be used as if it were a directly connected network. The VPN is used for, for example, a remote maintenance of a terminal provided at another base. A maintenance target terminal can receive remote maintenance or the like from a device connected to another LAN at a remote location.

  Patent Document 1 discloses a management system via this type of network. This management system is constructed so as to straddle building owners, equipment maintenance companies, and electrical equipment manufacturers. The building owner installs electrical equipment and an operation control management device for controlling the electrical equipment in the building owned by the building owner. This operation control management device is configured to be accessible via a network such as the Internet. The equipment maintenance company is entrusted with the management of the electrical equipment by the building owner, and has obtained permission from the electrical equipment manufacturer to access the operation control management device. Accordingly, the equipment maintenance company can perform maintenance work on the electrical equipment from a remote location via a network such as the Internet.

JP 2003-223521 A

  However, in a management system such as that disclosed in Patent Document 1, when a maintenance-side device cannot communicate with a management-side device, it cannot acquire permission to access the maintenance-side device. In this case, the maintenance side device cannot perform maintenance work on the maintenance target device (the management system does not function).

  In order to solve this problem, the maintenance side device can access the maintenance side device without obtaining access permission only when the maintenance side device can no longer communicate with the management side device. Can be considered. However, in this configuration, the maintenance-side device has an access right more than necessary.

  The present invention has been made in view of the above circumstances, and the purpose thereof is a relay server used in a relay communication system constructed by a plurality of relay servers, even when communication with a management-side relay server becomes impossible. An object of the present invention is to provide a configuration capable of continuing communication by a relay communication system while preventing a connection-side relay server from having an access right more than necessary.

Means and effects for solving the problems

  The problems to be solved by the present invention are as described above. Next, means for solving the problems and the effects thereof will be described.

  According to a first aspect of the present invention, a connection-side relay server having the following configuration is provided. That is, the connection-side relay server includes a management destination information storage unit, a communication detection unit, a connection permission list storage unit, a routing session establishment unit, and a routing control unit. The management destination information storage unit includes an operator who can log in to a relay communication system including itself and another relay server, and a connected side on which the operator is set as a connection candidate that can be permitted to be connected The identification information of the relay server with management function, which is the storage destination of the connection job that is associated with the relay server, is stored. The communication detection unit detects whether communication with the relay server with a management function is possible. When the connection permission list storage unit cannot communicate with the relay server with the management function, the other connection side designated in advance as a connection destination to which an operator who is logged in to the relay communication system can connect via the connection permission list storage unit For the specified relay server that is the relay server or the connected relay server, the identification information of the specified relay server and the activation information indicating whether or not the specified relay server is activated are stored. When the communication detection unit detects that the routing session establishment unit cannot communicate with the relay server with management function, the routing session establishment unit reads identification information of the designated relay server selected as a connection target from the connection permission list storage unit. A routing session used for routing packets is established with the selected designated relay server. The routing control unit performs routing control based on the routing session.

  Thereby, even when communication with the relay server with a management function becomes impossible due to a communication failure, it is possible to communicate with the designated relay server designated in advance based on the activation information and the identification information. Therefore, even when a communication failure occurs, it is possible to connect from the connection-side relay server to the connected-side relay server while preventing an unnecessary access right from being set in the connection-side relay server. it can.

  The relay server on the connection side preferably has the following configuration. That is, the connection permission list storage unit stores a designated operator designated in advance and the identification information of the other relay server on the connection side that has received the login request of the designated operator in association with each other. When the communication detection unit detects that the routing control unit cannot communicate with the management function relay server, when the designated operator is selected as a connection partner, the routing control unit receives another login request from the operator. The routing session is established with the relay server on the connection side.

  Accordingly, when communication with the relay server with management function becomes impossible due to a communication failure, not only the designated relay server but also the designated operator can be selected for communication.

  In the relay server on the connection side, it is preferable that the storage contents of the connection permission list storage unit are created and updated based on a notification from the relay server with management function.

  As a result, the processing performed in the relay communication system can be simplified compared to a configuration in which identification information, activation information, and the like are notified from the connection-side relay server or the connected-side relay server.

  In the connection-side relay server, it is preferable that the contents of the connection permission list storage unit are created and updated based on a notification from the designated relay server.

  Thereby, even when communication with the relay server with a management function becomes impossible, the contents of the connection permission list storage unit can be updated. Therefore, more accurate information can be acquired about connectable relay servers (or operators).

  According to the 2nd viewpoint of this invention, the relay server with a management function of the following structures is provided. That is, the relay server with a management function includes an operator list storage unit, a connection job creation unit, a management information storage unit, a connection permission list transmission unit, and a candidate job list transmission unit. The operator list storage unit stores a list of operators that can log in to the relay communication system including the relay server and other relay servers. The connection job creation unit creates a connection job in which a connected relay server is associated with an operator as a connection candidate that is a candidate that can be permitted to connect to the connected relay server. The management information storage unit stores identification information and activation information indicating whether or not the connected relay server and the connected relay server are activated. The connection permission list transmission unit identifies identification information of a designated relay server that is a relay server designated in advance as a connection destination to which the connection-side relay server can be connected when the connection-permitted list transmission unit cannot communicate with the connection-side relay server. And the activation information are transmitted to the relay server on the connection side. The candidate job list transmission unit is a candidate job that is a list of the connection jobs in which an operator who is logged in through the connection-side relay server is set as a connection candidate in response to a request from the connection-side relay server The list is transmitted to the relay server on the connection side.

  As a result, even if the relay server on the connection side cannot communicate with the relay server with the management function due to a communication failure, it communicates with the designated relay server designated in advance based on the activation information and the identification information. be able to. Therefore, even when a communication failure occurs, communication can be performed between the connection side and the connected side relay server while preventing an access right more than necessary from being set in the connection side relay server.

  In the relay server with management function, the candidate job list transmission unit associates the connection job constituting the candidate job list with activation information of the connected relay server indicated in the connection job. It is preferable to transmit to the relay server on the connection side.

  As a result, in the candidate job list, the connection job that can be executed and the connection job that cannot be executed can be distinguished and notified to the operator.

  In the relay server with a management function, it is preferable that the candidate job list transmission unit transmits only the connection job corresponding to the active connected relay server to the connected relay server.

  As a result, it is possible to notify the operator of only connection jobs that may be executed in the candidate job list.

  According to the 3rd viewpoint of this invention, the relay communication system of the following structures is provided. That is, the relay communication system includes a plurality of connection-side relay servers, a plurality of connected-side relay servers, and a relay server with a management function. The relay server with management function manages whether or not the connection-side relay server can be connected to the connected-side relay server. The connection-side relay server includes a communication detection unit, a connection permission list storage unit, a routing session establishment unit, and a routing control unit. The communication detection unit detects whether communication with the relay server with a management function is possible. The connection permission list storage unit may be another connection-side relay server or the connected-side relay server that is designated in advance as a connection destination to which the connection permission list storage unit can be connected when the communication with the relay server with the management function becomes impossible. For a specified relay server, the identification information of the specified relay server and activation information indicating whether or not the specified relay server is activated are stored. When the communication detection unit detects that the routing session establishment unit cannot communicate with the relay server with management function, the routing session establishment unit reads identification information of the designated relay server selected as a connection target from the connection permission list storage unit. A routing session used for routing packets is established with the selected designated relay server. The routing control unit performs routing control based on the routing session.

  Thereby, even when communication with the relay server with a management function becomes impossible due to a communication failure, it is possible to communicate with the designated relay server designated in advance based on the activation information and the identification information. Therefore, even when a communication failure occurs, it is possible to connect from the connection-side relay server to the connected-side relay server while preventing an unnecessary access right from being set in the connection-side relay server. A possible relay communication system can be realized.

BRIEF DESCRIPTION OF THE DRAWINGS Explanatory drawing which shows the whole structure of the relay communication system which concerns on one Embodiment of this invention. The functional block diagram which shows the structure of a center terminal. The figure which shows the content of an operator list. The figure which shows the content of the maintenance terminal list. The figure which shows the content of a to-be-maintained terminal list. The figure which shows the content of a connection job list. The figure which shows the content of the designation | designated list. The figure which shows the example of notification of a candidate job list. The functional block diagram which shows the structure of a 1st maintenance terminal. The figure which shows the content of a connection permission list | wrist. The functional block diagram which shows the structure of a 1st to-be-maintained terminal. The sequence diagram which shows the flow of a process when a connection job is produced. The sequence diagram which shows the flow of the process performed at the time of login to the relay communication system by an operator. The sequence diagram which shows the flow of the process performed at the time of selection of the connection job by an operator. The sequence diagram which shows the flow of the process performed after completion | finish of a maintenance work. The sequence diagram which shows the flow of the process performed when a center terminal and a maintenance terminal cannot communicate.

  Next, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is an explanatory diagram showing the overall configuration of a relay communication system 1 according to an embodiment of the present invention.

  As shown in FIG. 1, a relay communication system 1 is connected to a plurality of relay servers connected via a wide area network (WAN) 3 such as the Internet, and these relay servers via a LAN. And a client terminal. The relay server can communicate with other relay servers and client terminals connected to the other relay servers. The client terminal can communicate with other relay servers and client terminals connected to other relay servers via a relay server connected via a LAN.

  In the present embodiment, remote maintenance and management are performed using the relay communication system 1. In the relay communication system 1, the terminals functioning as the relay server are the center terminal 5, the first maintenance target terminal 7A, the second maintenance target terminal 7B, the first maintenance terminal 9A, and the second maintenance terminal 9B.

  The center terminal 5 is provided in the call center. A call center is a base where an operator who responds to an inquiry from the owner of a maintenance target device is enrolled. The center terminal 5 manages the access right of the maintenance terminal (or the operator who performs maintenance) to the maintenance target terminal. A center terminal operating terminal 11 as the client terminal is connected to the center terminal 5 via a LAN 13. The ID of the center terminal 5 is “Center@relaysystem.net”.

  The first maintenance target terminal 7A is provided at an installation destination of a device to be remotely maintained. A first maintenance target system 15A and a second maintenance target system 15B as the client terminals are connected to the first maintenance target terminal 7A via the LAN 17. The first maintenance target system 15A and the second maintenance target system 15B are a file server, a Web server, or the like that is a target of remote maintenance. The ID of the first maintenance target terminal 7A is “Target1@relaysystem.net”.

  The second maintenance target terminal 7B is provided at an installation destination of a device to be subjected to remote maintenance. A third maintenance target system 19A and a fourth maintenance target system 19B as the client terminals are connected to the second maintenance target terminal 7B via the LAN 21. The third maintenance target system 19A and the fourth maintenance target system 19B are a file server, a Web server, or the like that is a target of remote maintenance. The ID of the second maintenance target terminal 7B is “Target2@relaysystem.net”.

  The first maintenance terminal 9A is provided at a maintenance base where an operator who performs remote maintenance is present. A first maintenance operation terminal 23A and a second maintenance operation terminal 23B as the client terminals are connected to the first maintenance terminal 9A via the LAN 25. The ID of the first maintenance terminal 9A is “Maintenance2@relaysystem.net”.

  The second maintenance terminal 9B is provided at a maintenance base where an operator who performs remote maintenance is present. A third maintenance operation terminal 27A and a fourth maintenance operation terminal 27B as the client terminals are connected to the second maintenance terminal 9B via the LAN 29. The ID of the second maintenance terminal 9B is “Maintenance1@relaysystem.net”.

  In order for an operator at the maintenance base to perform maintenance work, it is necessary to log in to the relay communication system 1. The operator can log in to the relay communication system 1 by operating the maintenance operation terminal and inputting the ID and password. In the relay communication system 1 of this embodiment, the operator is not tied to a specific maintenance operation terminal, and can log in to the relay communication system 1 even when any maintenance operation terminal is used. After logging in to the relay communication system 1, the operator uses the maintenance operation terminal to perform remote maintenance of the maintenance target system within the range of access rights managed by the center terminal 5.

  Next, the configuration of the center terminal 5 will be described with reference to FIGS. FIG. 2 is a functional block diagram showing the configuration of the center terminal 5. 3 to 7 are diagrams showing contents stored in the database storage unit 33 of the center terminal 5.

  As shown in FIG. 2, the center terminal 5 includes an interface 35, a database storage unit 33, and a control unit 31.

  The interface 35 can communicate with a device connected to the LAN 13 using a private IP address. The interface 35 can perform communication via the WAN 3 using a global IP address.

  The database storage unit 33 includes a management information storage unit 54, a specified list storage unit 58, and a connection job list storage unit 59. In addition, the management information storage unit 54 includes an operator list storage unit 53, a maintenance terminal list storage unit 55, and a maintenance target terminal list storage unit 57.

  The operator list storage unit 53 stores, for example, an operator list 53a shown in FIG. As shown in FIG. 3A, the operator list 53a includes “ID”, “password”, and “login relay server”. In the “ID” column, an ID of an operator who can log in to the relay communication system 1 is described. In the “password” column, a password necessary for logging in to the relay communication system 1 using the ID described in the same row is described. In the “login relay server” column, when the operator has logged in to the relay communication system 1 using the ID described in the same row, the operator ID and the relay server used by the operator ( ID of the center terminal or maintenance terminal) is described. If the operator has not logged in to the relay communication system 1, the “login relay server” is blank.

  From the example of FIG. 3A, operators Op1 to Op4 are registered in the operator list, the second operator Op2 uses the center terminal 5, and the third operator Op3 uses the second maintenance terminal 9B. I understand that It can also be seen that the first operator Op1 and the fourth operator Op4 are not logged in to the relay communication system 1.

  The maintenance terminal list storage 55 stores a maintenance terminal list 55a shown in FIG. The maintenance terminal list 55a includes “name”, “terminal ID”, and “activation information” that describe the maintenance terminals that constitute the relay communication system 1. In “Name”, a name given to the maintenance terminal is described. An appropriate name that is easy to understand, such as the installation location of the maintenance terminal (name of the maintenance base), can be given to this name. “Terminal ID” describes the ID of the maintenance terminal. In “activation information”, information indicating whether or not the maintenance terminal is activated is described.

  The maintained terminal list storage unit 57 stores a maintained terminal list 57a shown in FIG. The to-be-maintained terminal list 57a includes “name”, “terminal ID”, and “activation information” that describe the to-be-maintained terminals that constitute the relay communication system 1. In “Name”, a name given to the maintenance target terminal is described. This name can be given an easy-to-understand appropriate name such as the location (company name) of the terminal to be maintained. “Terminal ID” describes the ID of the maintenance target terminal. In “activation information”, information indicating whether the maintenance target terminal is activated is described.

  The connection job list storage unit 59 stores information related to connection jobs. The connection job indicates a unit of maintenance work. The connection job is created by the center terminal 5 every time maintenance work is required for the maintenance target system, and is stored in the connection job list storage unit 59. The connection job list storage unit 59 stores a connection job list 59a including one or a plurality of connection jobs. The connection job list 59a is composed of “maintenance terminal ID”, “connection candidate ID”, and “job information” described for each connection job as shown in FIG. The “maintenance terminal ID” describes the ID of the maintenance target terminal connected to the same LAN as the maintenance target system requiring maintenance work. In “connection candidate ID”, an ID of an operator set as a candidate (connection candidate) that can be permitted to connect to the maintenance target terminal is described. The “connection candidate ID” can describe the IDs of one or more operators. “Job information” describes the state of the current connection job (for example, which operator is executing the connection job). The connection job is deleted from the connection job list 59a when the maintenance work is completed.

  From the example of FIG. 6A, it can be seen that the first connection job is created for the second maintenance target terminal 7B, and the first operator Op1 and the third operator Op3 are set as the connection candidate operators. . In the example of FIG. 6B, in addition to the first connection job, a second connection job has been created for the first maintenance target terminal 7A, and the first operator Op1 is set as a connection candidate operator. I understand that. From the example of FIG. 6C, it can be seen that the first operator Op1 is executing the second connection job.

  The designation list storage unit 58 stores a designation list 58a shown in FIG. The designated list 58a is a connection destination relay server (designated relay server) or operator (designated operator) to which an operator using the maintenance terminal can connect when the maintenance terminal and the center terminal 5 cannot communicate with each other. Is shown. The designated relay server and the designated operator are designated in advance in association with the operator ID. FIG. 7A describes a designated relay server and a designated operator corresponding to the first operator Op1. FIG. 7B describes a designated relay server and a designated operator corresponding to the third operator Op3. Although not shown in FIG. 7, the designated list 58a also describes designated relay servers and designated operators corresponding to the second operator Op2 and the fourth operator Op4.

  The control unit 31 includes a CPU, a RAM, a ROM, and the like, and can execute various processes by a program read from the ROM or the like. 2, the control unit 31 includes a connection permission list transmission unit 41, a login authentication unit 43, a connection job creation unit 45, an execution determination unit 47, a connection job list management unit 49, and a candidate job list. A transmission unit 51 and a permission information transmission unit 52 are provided.

  The connection permission list transmission unit 41 extracts information on the designated relay server and the designated operator corresponding to the operator from the stored contents of the management information storage unit 54, and transmits the extracted information to the corresponding operator. Specifically, as shown in FIG. 7A, four maintenance terminals and two maintenance target terminals are set as designated relay servers corresponding to the first operator Op1. Further, the third operator Op3 and the fourth operator Op4 are designated as designated operators corresponding to the first operator Op1. Based on the maintenance terminal list 55a, the to-be-maintained terminal list 57a, and the operator list 53a, the connection permission list transmission unit 41 acquires activation information and identification information corresponding to the designated relay server and the designated operator, and obtains the first operator Op1. Send to. Further, when there is a change in the activation information of the designated relay server and the designated operator, the login status, or the like, the connection permission list transmission unit 41 notifies the maintenance terminal according to the change.

  The connection job creation unit 45 creates the connection job when receiving a notification from the maintenance target terminal that a failure has occurred in the maintenance target system. The connection job list management unit 49 manages the connection job list 59a stored in the connection job list storage unit 59. Specifically, the connection job created by the connection job creation unit 45 is registered in the connection job list 59a, the job information in the connection job list 59a is updated, or the connection job is deleted from the connection job list 59a.

  The login authentication unit 43 collates the operator list 53a with the operator ID and password received from the maintenance terminal or the like, and determines whether or not the operator can log in. Further, the login authentication unit 43 determines whether or not login is possible based on whether or not the ID of the maintenance terminal that transmitted the operator ID or the like is included in the maintenance terminal list 55a.

  In response to a request from an operator who performs maintenance, the candidate job list transmission unit 51 extracts a list of connection jobs (candidate job list) in which the operator is a connection candidate from the connection job list 59a. Then, the candidate job list transmission unit 51 reads the activation information of the maintenance target terminal indicated by the extracted connection job from the maintenance target terminal list 57a, and creates the candidate job list in consideration of the activation information. Then, the candidate job list transmission unit 51 transmits the created candidate job list to the operator who has requested the candidate job list. As an example of the candidate job list in consideration of the activation information, for example, as shown in FIG. 8A, a method of describing the activation information of the maintenance target terminal along with the ID of the maintenance target terminal of the connection job is conceivable. As a result, the operator who sees the candidate job can distinguish between a connection job that can be executed and a connection job that cannot be executed at the present time. Further, as another example of the candidate job list in consideration of the activation information, as shown in FIG. 8B, a connection job corresponding to the maintenance target terminal that has not been activated may not be displayed. In FIG. 8B, since the second serviced terminal 7B is not activated, the connection job corresponding to the second serviced terminal 7B is not displayed. As a result, the operator can select a connection job from the executable connection jobs. The operator selects a connection job desired to be executed from the candidate job list and notifies the center terminal 5 via the maintenance terminal. The execution determining unit 47 reads the job information of the connection job notified from the operator from the connection job list 59a, and based on this job information (for example, whether there is another operator who has already executed the connection job). To determine whether to permit execution of the connection job. The permission information transmission unit 52 transmits the determination result of the execution determination unit 47 (whether or not to permit execution of the connection job) to the maintenance operation terminal via the maintenance terminal and notifies the operator.

  Next, the configuration of the maintenance terminal will be described with reference to FIGS. 9 and 10. FIG. 9 is a functional block diagram showing the configuration of the first maintenance terminal 9A. FIG. 10 is a diagram showing the contents of the connection permission list. Since the configuration of the first maintenance terminal 9A and the second maintenance terminal 9B is the same, the configuration of the first maintenance terminal 9A will be described as a representative. As shown in FIG. 9, the first maintenance terminal 9 </ b> A includes an interface 65, a control unit 61, and a database storage unit 63.

  The interface 65 can communicate with a device connected to the LAN 25 using a private IP address. The interface 65 can perform communication via the WAN 3 using a global IP address.

  The control unit 61 includes a CPU, a RAM, a ROM, and the like, and can execute various processes by a program read from the ROM or the like. As shown in FIG. 10, the control unit 61 includes a routing session establishment unit 71, a routing control unit 73, a login information transmission unit 75, a selected job notification unit 77, and a communication detection unit 78.

  The routing session establishment unit 71 establishes a routing session between the first maintenance terminal 9A and the first maintenance target terminal 7A or the second maintenance target terminal 7B. The routing session is a media session used for routing communication packets transferred between a device connected to the LAN 25 and a device connected to a LAN (LAN 17 or LAN 21) where the maintenance target system is installed. . The routing control unit 73 uses this routing session to perform routing control of communication packets with devices connected to other LANs.

  The login information transmission unit 75 transmits the operator ID and password (hereinafter referred to as login information) received from the first maintenance target terminal 7A or the second maintenance target terminal 7B to the center terminal 5. The selected job notification unit 77 transmits the connection job selected from the candidate job list by the operator to the center terminal 5.

  The communication detector 78 can detect whether or not the first maintenance terminal 9A can communicate with the center terminal 5.

  The database storage unit 63 includes a center terminal information storage unit 81 and a connection permission list storage unit 83. The center terminal information storage unit 81 stores the name and ID of the center terminal 5. The first maintenance terminal 9A can access the center terminal 5 by notifying the connection job selected from the candidate job list by referring to the stored contents of the center terminal information storage unit 81, for example.

  The connection permission list storage unit 83 stores a connection permission list 83a received from the center terminal 5 (the connection permission list transmission unit 41). FIG. 10 shows a connection permission list 83a corresponding to the first operator Op1 logging in to the first maintenance terminal 9A. The connection permission list 83a includes the identification information and activation information of the designated relay server designated in the designation list 58a, and the login status of the designated operator designated in the designation list 58a. As described above, when there is a change in the activation information and login status of the designated relay server and the designated operator, the connection permission list transmission unit 41 provided in the center terminal 5 notifies each time of the notification according to the change. Do. Therefore, the information shown in the connection permission list 83a basically indicates the latest information.

  The connection permission list 83a can be updated by notifying the connection permission list transmission unit 41, for example, directly from a designated relay server and a designated operator. In the present embodiment, when the center terminal 5 is stopped, notification by the connection permission list transmission unit 41 cannot be performed, so that notification is directly performed from the designated relay server.

  Next, the configuration of the maintenance target terminal will be described with reference to FIG. FIG. 11 is a functional block diagram showing the configuration of the first maintenance target terminal 7A. Since the configuration of the first serviced terminal 7A and the second serviced terminal 7B is the same, the configuration of the first serviced terminal 7A will be described as a representative. As illustrated in FIG. 11, the first maintenance target terminal 7 </ b> A includes an interface 95, a control unit 91, and a database storage unit 93.

  The interface 95 can communicate with a device connected to the LAN 17 using a private IP address. Further, the interface 95 can perform communication via the WAN 3 by using a global IP address.

  The control unit 91 includes a CPU, a RAM, a ROM, and the like, and can execute various processes by a program read from the ROM or the like. As shown in FIG. 11, the control unit 91 includes a routing session establishment unit 101 and a routing control unit 103.

  The routing session establishing unit 101 establishes a routing session between the first maintenance target terminal 7A and the first maintenance terminal 9A or the second maintenance terminal 9B. The routing control unit 103 performs routing control of communication packets with devices connected to other LANs using this routing session.

  The database storage unit 93 includes a center terminal information storage unit 105. The center terminal information storage unit 105 stores the name and ID of the center terminal 5. The first maintenance target terminal 7A can access the center terminal 5 by referring to the stored contents of the center terminal information storage unit 105, for example, to notify that maintenance work is necessary.

  Next, the flow of processing when performing remote maintenance using the relay communication system 1 of the present embodiment will be described with reference to the sequence diagrams of FIGS. In the following, the second operator Op2 has logged in to the relay communication system 1 using the center terminal 5 as a login relay server, and the third operator Op3 has logged in to the relay communication system 1 using the second maintenance target terminal 7B as a login relay server. Consider a situation (the operator list 53a is in the state shown in FIG. 3A). Also, consider a situation where only the first connection job exists as a connection job (the connection job list 59a is in the state shown in FIG. 6A).

  First, processing performed in the relay communication system 1 when a connection job is created will be described. As described above, the connection job is created every time maintenance work is required on the maintenance target system. In the following, a case where maintenance work is required for the first maintenance target system 15A will be considered. For example, when a failure occurs in the first maintenance target system 15A, the fact is notified to the first maintenance target terminal 7A. When the first maintenance target terminal 7A receives the fact that a failure has occurred (sequence number 1 in FIG. 12), it notifies the center terminal 5 to that effect and requests the creation of a connection job (sequence number 2).

  The center terminal 5 transfers this notification and request to the center terminal operation terminal 11 and notifies the second operator Op2 (sequence number 3). The second operator Op2 selects an operator that preferably performs maintenance based on the content of the failure, the name of the maintenance target terminal, and the like. Here, it is assumed that the first operator Op1 is selected. As a result, the center terminal 5 (connection job creation unit 45) creates a connection job (second connection job) (sequence number 4). The center terminal 5 (connection job list management unit 49) registers the created second connection job in the connection job list 59a (sequence number 5). That is, in the connection job list 59a, “maintenance terminal ID” describes the ID of the first maintenance target terminal 7A, and “connection candidate ID” describes the ID of the first operator Op1 (FIG. 6 ( see b)).

  The connection job is created as described above. If it is necessary to cause the first operator Op1 to perform maintenance work as soon as possible, the first operator Op1 may be notified immediately after creating the connection job. The notification that the connection job has been created can be performed in various ways. For example, when the instant message service is operated on the relay communication system 1 and the first operator Op1 has logged in to the relay communication system 1, The second operator Op2 can make the notification using the instant message service. If the first operator Op1 is not logged in to the relay communication system 1, it may be notified by appropriate means such as a telephone.

  Next, when the first operator Op1 operates the first maintenance operation terminal 23A to make a login request to the relay communication system 1 using the first maintenance terminal 9A as a login relay server, processing performed in the relay communication system 1 Will be explained. In this login request, the first operator Op1 is requested to input login information (ID and password). Then, the first operator Op1 operates the first maintenance operation terminal 23A to input the ID (Op1) and the password (abc), and confirms the input contents, whereby the login information is transmitted to the first maintenance terminal 9A. The Thereby, the first maintenance terminal 9A receives the login request (sequence number 11 in FIG. 13), and transmits the received login information to the center terminal 5 (sequence number 12).

  The center terminal 5 (login authentication unit 43) that has received this login information determines whether or not login is possible. Specifically, the login authentication unit 43 determines whether or not the input ID and password are registered in the operator list 53a (sequence number 13), and the first maintenance terminal 9A that transmitted the login information serves as the maintenance terminal. It is determined whether or not it is registered in the list 55a (sequence number 14).

  As shown in FIG. 3, the ID and password input above are registered in the operator list 53a. Further, as shown in FIG. 4, the first maintenance terminal 9A is registered in the maintenance terminal list 55a. Therefore, the login authentication unit 43 permits the login of the first operator Op1. Then, the center terminal 5 updates the contents of the operator list 53a (sequence number 15). Specifically, the ID of the first operator Op1 and the ID of the first maintenance terminal 9A are described in the “login relay server” corresponding to the first operator Op1 in the operator list 53a (from FIG. 3A). The operator list 53a is updated as shown in FIG. 3B). Then, the center terminal 5 (connection permission list transmission unit 41) notifies the other operators that the first operator Op1 has logged in from the first maintenance terminal 9A. Then, the center terminal 5 notifies the first maintenance terminal 9A of successful login (sequence number 16). When the center terminal 5 fails to authenticate the terminal ID or the login information, the center terminal 5 notifies the maintenance terminal of the login failure.

  The first maintenance terminal 9A transfers the login success notification received from the center terminal 5 to the first maintenance operation terminal 23A and notifies the first operator Op1 of the login success (sequence number 17). Then, the first maintenance terminal 9A requests the center terminal 5 for the candidate job list (a list of connection jobs in which the logged-in first operator Op1 is a connection candidate) (sequence number 18).

  Upon receiving this notification, the center terminal 5 (candidate job list transmission unit 51) extracts a connection job in which the first operator Op1 is a connection candidate from the connection jobs stored in the connection job list 59a, and obtains a candidate job. A list is created (sequence number 19). At this time, as shown in FIG. 8, a candidate job list may be created based on the activation information of the maintenance target terminal. Then, candidate job list transmission unit 51 transmits the created candidate job list to first maintenance terminal 9A (sequence number 20). When there is no connection job for which the first operator Op1 is a connection candidate, the center terminal 5 transmits a message to that effect to the first maintenance terminal 9A.

  The first maintenance terminal 9A transfers the candidate job list received from the center terminal 5 to the first maintenance operation terminal 23A and notifies the first operator Op1 (sequence number 21). Specifically, the first maintenance operation terminal 23A displays the candidate job list on its own display. Accordingly, the first operator Op1 can know a list of connection jobs that can be executed by the first operator Op1. Next, the first maintenance target terminal 7A requests the connection permission list from the center terminal 5 (sequence number 22).

  Upon receiving this notification, the center terminal 5 reads out the designated relay server and designated operator of the first operator Op1 based on the designated list 58a, and creates a connection permission list (sequence number 23). Thereafter, the center terminal 5 (connection permission list transmission unit 41) transmits the created connection permission list to the first maintenance terminal 9A (sequence number 24).

  The first maintenance terminal 9A stores the received connection permission list in the connection permission list storage unit 83 (sequence number 25). The center terminal 5 (connection permission list transmission unit 41) detects, for example, that the activation information of the maintenance terminal or the maintenance target terminal has changed from ON to OFF, and that the operator has logged in or logged out. Whenever the content of the connection permission list is updated, the updated content is transmitted to the first maintenance terminal 9A.

  The first operator Op1 can also log in to the relay communication system 1 from the first maintenance terminal 9A by operating the second maintenance operation terminal 23B. Furthermore, it is possible to log in to the relay communication system 1 from the second maintenance terminal 9B by operating the third maintenance operation terminal 27A or the fourth maintenance operation terminal 27B.

  Next, processing performed in the relay communication system 1 from selection of a connection job by the operator to maintenance work will be described. In the following, it is assumed that the first operator Op1 selects the second connection job from the candidate job list.

  When the first operator Op1 selects the second connection job and confirms the selection, information indicating the selected connection job is transmitted to the first maintenance terminal 9A. As a result, the first maintenance terminal 9A accepts the selection of the connection job (sequence number 31 in FIG. 14) and notifies the selection content of the first operator Op1 to the center terminal 5 together with the ID of the first operator Op1 (sequence number 32). ).

  Based on this notification, the center terminal 5 (execution determination unit 47) reads job information of the second connection job that is the corresponding connection job from the connection job list 59a (sequence number 33). Then, the execution determination unit 47 determines whether the second connection job is being executed or is being prepared for execution based on the read job information (sequence number 34). As shown in FIG. 6B, since the job information of the second connection job is blank, the connection job is neither being executed nor being prepared for execution. Accordingly, the execution determination unit 47 permits the first connection Op 1 to execute the second connection job. Thereafter, the connection job list management unit 49 describes “preparing for execution” in the job information of the second connection job in the connection job list 59a (sequence number 35). Thereby, the second operator Op2 of the call center can know that the connection work for the second connection job has started. At this time, the execution of the second connection job by another operator can be excluded. Then, the center terminal 5 (permission information transmission unit 52) notifies the first maintenance terminal 9A that the execution of the corresponding connection job is permitted (sequence number 36). If the center terminal 5 does not permit execution of the connection job, the center terminal 5 notifies the maintenance terminal to that effect.

  The first maintenance terminal 9A transfers a notification that the execution of the connection job is permitted to the first maintenance operation terminal 23A and notifies the first operator Op1 (sequence number 37). Then, the first maintenance terminal 9A (routing session establishment unit 71) makes a routing session establishment request to the first maintenance target terminal 7A that is the maintenance destination of the corresponding connection job (sequence number 38). In response to this request, first maintenance target terminal 7A (routing session establishing unit 101) returns an OK response as access permission (sequence number 39). As a result, a media session is established between the first maintenance terminal 9A and the first maintenance target terminal 7A. After the media session is established, the first maintenance terminal 9A and the first maintenance target terminal 7A exchange the network addresses of the LAN 17 and the LAN 25 that are routing targets. This enables communication between the first maintenance operation terminal 23A and the first maintenance target system 15A or the second maintenance target system 15B via the routing session. Then, the first maintenance terminal 9A transmits to the first maintenance operation terminal 23A that the routing session has been established and notifies the first operator Op1 (sequence number 40). Furthermore, the first maintenance terminal 9A notifies the center terminal 5 that a routing session has been established (sequence number 41).

  Upon receiving this notification, the center terminal 5 (connection job list management unit 49) writes “Op1 in progress” in the job information of the second connection job in the connection job list 59a, as shown in FIG. 6C. (Sequence number 42). Thereby, the second operator Op2 of the call center can know that the second connection job is started by the first operator Op1.

  The first maintenance terminal 9A performs maintenance work on the system (first maintenance target system 15A) requiring maintenance via the routing session established with the first maintenance target terminal 7A (sequence number 43). ). Specifically, the first operator Op1 can perform maintenance work such as grasping the state of the first maintenance target system 15A and updating the software by operating the first maintenance operation terminal 23A.

  Next, processing performed in the relay communication system 1 when the maintenance work by the first operator Op1 is completed will be described.

  After the maintenance work is completed, the first operator Op1 notifies the completion of the maintenance work to the first maintenance target terminal 7A via the first maintenance terminal 9A (sequence number 51 in FIG. 15). Further, the first operator Op1 notifies the completion of the maintenance work also to the center terminal 5 via the first maintenance terminal 9A (sequence number 52).

  Upon receiving this notification, the center terminal 5 (connection job list management unit 49) registers the completion of the maintenance work in the job information of the second connection job (sequence number 53), and sends the second connection job from the connection job list 59a. Delete (sequence number 54).

  Thereafter, the first maintenance terminal 9A requests the candidate job list to the center terminal 5 again, and a new maintenance operation by the first operator Op1 is performed through the same processing.

  As described above, in the present embodiment, the connection of the maintenance terminal to the maintenance target terminal is managed based on the connection job stored in the center terminal 5. Therefore, when the management by the center terminal 5 is strictly applied, when the maintenance terminal becomes unable to communicate with the center terminal 5, the maintenance terminal cannot perform the maintenance work because the connection job permission is not obtained. It becomes impossible. In this regard, the present embodiment is configured such that a connection can be made to the designated relay server and the designated operator described in the connection permission list 83a stored in the maintenance terminal.

  Hereinafter, a case where the first maintenance terminal 9A cannot communicate with the center terminal 5 after the first operator Op1 logs in will be described with reference to FIG. FIG. 16 is a sequence diagram showing a flow of processing performed when the center terminal 5 and the first maintenance terminal 9A cannot communicate.

  When first maintenance terminal 9A (communication detection unit 78) detects that communication with center terminal 5 cannot be performed (sequence number 61), it notifies the operator of that fact and also displays the connection permission list in first maintenance operation terminal 23A and the like. To display. Since the first maintenance terminal 9A also acquires activation information for the designated relay server described in the connection permission list, the first maintenance terminal 9A can also display the activation information side by side in the connection permission list.

  Here, it is assumed that the first maintenance target terminal 7A is selected by the operator. When the selection by the operator is confirmed, the first maintenance terminal 9A accepts the operator's selection (sequence number 62). Then, the first maintenance terminal 9A (routing session establishment unit 71) makes a routing session establishment request to the first maintenance target terminal 7A (sequence number 63). In response to this request, first maintained terminal 7A (routing session establishing unit 101) returns an OK response as access permission (sequence number 64). As a result, a media session is established between the first maintenance terminal 9A and the first maintenance target terminal 7A.

  Thereafter, the operator performs maintenance work on a system that requires maintenance through the routing session established between the first maintenance terminal 9A and the first maintenance target terminal 7A (sequence number 65).

  As a result, even if the center terminal 5 and the first maintenance terminal 9A cannot communicate, if the first maintenance terminal 7A is described in the connection permission list 83a, the first maintenance terminal 9A and the first maintenance terminal 9A Maintenance work can be performed by connecting the terminal 7A. That is, the first maintenance terminal 9A has only the access right based on the connection permission list 83a. Therefore, even when the center terminal 5 and the first maintenance terminal 9A cannot communicate, maintenance work can be continued while preventing unnecessary or unauthorized access by the first maintenance terminal 9A.

  Next, it is assumed that the first operator Op1 selects to connect to the third operator Op3 again with reference to the connection permission list 83a after the maintenance work on the first maintenance target terminal 7A is completed (sequence number 71). . In this case, the first maintenance terminal 9A reads the login relay server of the third operator Op3 based on the connection permission list 83a. As can be seen from FIG. 10, the third operator Op3 uses the second maintenance terminal 9B as a login relay server.

  Then, the first maintenance terminal 9A (routing session establishment unit 71) makes a routing session establishment request to the second maintenance terminal 9B (sequence number 72). In response to this request, the second maintenance terminal 9B (routing session establishment unit 71) returns an OK response as access permission (sequence number 73). As a result, a media session is established between the first maintenance terminal 9A and the second maintenance terminal 9B. As a result, data necessary for maintenance work can be exchanged. If necessary, the activation information and the connection permission list are updated.

  Then, after the necessary data exchange, the third operator Op3 decides to log out by stopping the second maintenance terminal 9B. At this time, since the center terminal 5 is stopped, the third operator Op3 notifies the first operator Op1 that logout is performed and that the second maintenance terminal 9B is stopped (sequence number 74).

  Upon receiving this notification, the first operator Op1 updates the connection permission list 83a (sequence number 75). The update of the connection permission list 83a and the communication using the connection permission list 83a are performed as described above.

  As described above, the first maintenance terminal 9A of the present embodiment includes the center terminal information storage unit 81, the communication detection unit 78, the connection permission list storage unit 83, the routing session establishment unit 71, and the routing control unit. 73. The center terminal information storage unit 81 identifies the center terminal 5 that is a storage destination of a connection job in which an operator who can log in to the relay communication system 1 is associated with a maintenance target terminal in which the operator is set as the connection candidate. Store information. The communication detection unit 78 detects whether communication with the center terminal 5 is possible. When the connection permission list storage unit 83 becomes unable to communicate with the center terminal 5, the designated relay server designated in advance as a connection destination to which the logged-in operator can connect via itself (first maintenance terminal 9A) The identification information of the designated relay server and activation information indicating whether or not the designated relay server is activated are stored. When the communication detection unit 78 detects that the routing session establishment unit 71 cannot communicate with the center terminal 5, the routing session establishment unit 71 reads the identification information of the designated relay server selected as the connection target from the connection permission list storage unit 83 and is selected. A routing session used for packet routing is established with the designated relay server (first maintenance target terminal 7A). The routing control unit 73 performs routing control based on the routing session.

  Thereby, even when communication with the center terminal 5 becomes impossible due to a communication failure, it is possible to communicate with the first designated maintenance target terminal 7A based on the activation information and the identification information. Therefore, even when a communication failure occurs, it is possible to connect from the first maintenance terminal 9A to the first maintenance target terminal 7A while preventing an unnecessary access right from being set in the first maintenance terminal 9A. it can.

  In the first maintenance terminal 9A of the present embodiment, the connection permission list storage unit 83 is an operator who can log in to the relay communication system 1 including itself and other relay servers, and is designated in advance. The operator and the identification information of the other first maintenance terminal 9A that has received the login request of the designated operator are stored in association with each other. When the communication detecting unit detects that communication with the relay server with management function is impossible, the routing control unit 73 accepts the login request of the operator when the designated operator (third operator Op3) is selected as the connection partner. A routing session is established with another maintenance terminal (second maintenance terminal 9B).

  Thereby, when communication with the center terminal 5 becomes impossible due to a communication failure, not only the designated relay server but also the designated operator can be selected for communication.

  Further, in the first maintenance terminal 9A of the present embodiment, the storage contents of the connection permission list storage unit 83 are created and updated based on the notification from the center terminal 5.

  Thereby, the processing performed in the relay communication system 1 can be simplified as compared with the configuration in which the identification information and the activation information are notified from the maintenance target terminal or the maintenance terminal.

  Further, in the first maintenance terminal 9A of the present embodiment, the connection permission list storage unit 83 is created and updated based on the notification from the designated relay server.

  Thereby, even when communication with the center terminal 5 becomes impossible, the contents of the connection permission list storage unit 83 can be updated. Therefore, more accurate information can be acquired about connectable relay servers (or operators).

  Further, the center terminal 5 of the present embodiment includes an operator list storage unit 53, a connection job creation unit 45, a management information storage unit 54, a connection permission list transmission unit 41, and a candidate job list transmission unit 51. . The operator list storage unit 53 stores a list of operators that can log in to the relay communication system 1. The connection job creation unit 45 creates a connection job in which the maintenance target terminal and the operator as a connection candidate are associated with each other. The management information storage unit 54 stores identification information and activation information indicating whether the maintenance terminal and the maintenance target terminal are activated. The connection permission list transmission unit 41 identifies identification information of a designated relay server that is a relay server designated in advance as a connection destination to which the first maintenance terminal 9A can be connected when the connection permission list transmission unit 41 cannot communicate with the first maintenance terminal 9A. The activation information is transmitted to the first maintenance terminal 9A. In response to a request from the first maintenance terminal 9A, the candidate job list transmission unit displays a candidate job list that is a list of connection jobs in which an operator who is logged in via the first maintenance terminal 9A is set as a connection candidate. Transmit to the first maintenance terminal 9A.

  Thus, even when the first maintenance terminal 9A cannot communicate with the relay server with a management function due to a communication failure, the first maintenance terminal 9A communicates with the designated relay server designated in advance based on the activation information and the identification information. be able to. Therefore, even when a communication failure occurs, it is possible to communicate with the relay server between the connection side and the connected side while preventing an unnecessary access right from being set in the first maintenance terminal 9A.

  Further, in the center terminal 5 of the present embodiment, the candidate job list transmission unit associates the startup information of the first maintenance target terminal 7A indicated by the connection job with the connection job constituting the candidate job list, and Transmit to maintenance terminal 9A.

  As a result, the operator can be notified of the connection job that can be executed and the connection job that cannot be executed.

  Further, in the center terminal 5 of the present embodiment, the candidate job list transmission unit transmits only the connection job corresponding to the activated first maintenance target terminal 7A to the first maintenance terminal 9A.

  As a result, it is possible to notify the operator of only connection jobs that may be executed in the candidate job list.

  The preferred embodiment of the present invention has been described above, but the above configuration can be modified as follows, for example.

  The connection job can also be created from the maintenance operator side. For example, when a regular maintenance is scheduled, an operator in charge of the regular maintenance makes a connection job creation request to the center terminal at the maintenance timing, thereby creating a connection job.

  The number of maintenance target terminals and maintenance terminals constituting the relay communication system 1 is not limited to the above embodiment, and may be one each, or may be three or more. In addition, the number of maintenance target systems connected to the maintenance target terminal and the number of maintenance operation terminals connected to the maintenance terminal are not limited to the above embodiment, and may be one each, or three or more. There may be.

  The first maintenance terminal 9A and the second maintenance terminal 9B may be a memory detachably attached to a personal computer and an application stored in the memory.

  The operator list 53a, maintenance terminal list 55a, maintenance target terminal list 57a, and connection job list 59a can be stored in an appropriate format (for example, XML format).

  Instead of the configuration of the above-described embodiment, an external server used for communication between each relay server may be installed on the Internet, and a communication may be performed by exhibiting a function as a SIP (Session Initiation Protocol) server. .

1 Relay communication system 5 Center terminal (relay server with management function)
9A 1st maintenance terminal (relay server on the connection side)
9B Second maintenance terminal (relay server on the connection side)
71 Routing session establishment unit 73 Routing control unit 78 Communication detection unit 83 Connection permission list storage unit

Claims (8)

Associating an operator who can log in to a relay communication system including itself and other relay servers, and a connected relay server in which the operator is set as a connection candidate that can be permitted to be connected A management destination information storage unit that stores identification information of the relay server with management function that is the storage destination of the connected job
A communication detection unit for detecting whether communication with the relay server with the management function is possible;
When it becomes impossible to communicate with the relay server with the management function, the other relay server on the connection side or the connected side designated in advance as a connection destination to which an operator who is logged in to the relay communication system can connect via the management server A connection permission list storage unit for storing identification information of the designated relay server and activation information indicating whether or not the designated relay server is activated,
When the communication detection unit detects that communication with the relay server with management function is impossible, the identification information of the designated relay server selected as a connection target is read from the connection permission list storage unit, and the selected designated relay is selected. A routing session establishment unit that establishes a routing session used for routing packets with the server;
A routing control unit that performs routing control based on the routing session;
A relay server on the connection side, comprising: The connection-side relay server according to claim 1,
A pre-designated designated operator and the identification information of the other relay server on the connection side that received the login request of the designated operator are stored in association with each other;
When the communication detection unit detects that the routing control unit cannot communicate with the management function relay server, when the designated operator is selected as a connection partner, the routing control unit receives another login request from the operator. A connection-side relay server, wherein the routing session is established with a connection-side relay server. A connection-side relay server according to claim 1 or 2,
A connection-side relay server, wherein the contents stored in the connection permission list storage unit are created and updated based on a notification from the relay server with a management function. A connection-side relay server according to claim 1 or 2,
A connection-side relay server, wherein the contents of the connection permission list storage unit are created and updated based on a notification from the designated relay server. An operator list storage unit for storing a list of operators that can log in to a relay communication system including the relay server itself and other relay servers;
A connection job creation unit that creates a connection job that associates a connected relay server with an operator that is a candidate for connection that can be permitted to connect to the connected relay server;
A management information storage unit for storing identification information and activation information indicating whether or not the relay server on the connected side and the relay server on the connection side are activated;
The identification information and activation information of the designated relay server that is a relay server designated in advance as a connection destination to which the connection-side relay server can connect when the connection-side relay server cannot communicate with the connection-side relay server. A connection permission list transmission unit for transmitting to the relay server of
In response to a request from the connection-side relay server, a candidate job list, which is a list of the connection jobs set as connection candidates by an operator who is logged in via the connection-side relay server, is relayed to the connection-side relay server. A candidate job list transmission unit to be transmitted to the server;
A relay server with a management function. A relay server with a management function according to claim 5,
The candidate job list transmission unit associates the connection job constituting the candidate job list with activation information of the connected relay server indicated by the connection job, and transmits the association information to the connection relay server. A relay server with a management function. A relay server with a management function according to claim 5,
The relay server with management function, wherein the candidate job list transmission unit transmits only the connection job corresponding to the active connected relay server to the connected relay server. Multiple relay servers on the connection side,
Multiple connected relay servers;
A relay server with a management function for managing whether or not the connection side relay server can connect to the connected side relay server;
A relay communication system comprising:
The connection side relay server is:
A communication detection unit for detecting whether communication with the relay server with the management function is possible;
For the designated relay server that is the other connected relay server or the connected relay server that is designated in advance as a connection destination to which it can connect when communication with the relay server with management function becomes impossible A connection permission list storage unit that stores identification information of the relay server and startup information indicating whether or not the designated relay server is running;
When the communication detection unit detects that communication with the relay server with management function is impossible, the identification information of the designated relay server selected as a connection target is read from the connection permission list storage unit, and the selected designated relay is selected. A routing session establishment unit that establishes a routing session used for routing packets with the server;
A routing control unit that performs routing control based on the routing session;
A relay communication system comprising:

Images