JP2004151964A - Tunneling communication system, http tunneling server, http communication library, tunneling communication method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To realize HTTP tunneling of high response performance. <P>SOLUTION: A system for communication between a client 3 and a data holding server 6 via a network 1 or/and unauthorized access prevention equipment 5, 12 has an HTTP tunneling server 5 capable of being installed between the unauthorized access prevention equipment and the data holding server so as to receive a communication start request from the client, connect with the data holding server, create and save data on relations with the data holding server, and return the relation data to the client, and an HTTP communication library 2 installed in the client so as to receive the relation data returned from the HTTP tunneling server, send contents requested by the client according to the relation data to the HTTP tunneling server, and receive data depending on the request contents from the tunneling server. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a tunneling communication system, an HTTP tunneling server, an HTTP communication library, an HTTP communication library, a tunneling communication method, and a program for performing real-time communication between a client and a server on a network limited to HTTP (Hypertext Transfer Protocol) communication.
[0002]
[Prior art]
In recent years, a firewall and an HTTP proxy server are installed at the boundary between the Internet and a LAN from the viewpoint of security, but only HTTP communication can be applied accordingly.
[0003]
Conventionally, in a network in which only users passing through a firewall or an HTTP proxy server are allowed to communicate as described above, an HTTP tunneling server is installed in front of the server, where encapsulation by HTTP is performed, and the client and server are connected. Are communicating between
[0004]
In such a network using HTTP, data is transmitted and received under the initiative of the client, but data transmission from the client to the server uses a data transmission method based on the HTTP agreement, while data transmission from the server to the client is performed. Uses the following data transfer method. That is, in this data transfer, the client accesses the HTTP tunneling server at predetermined intervals, and checks whether or not data exists in the HTTP tunneling server. When the client confirms that the data exists in the HTTP tunneling server, the client receives the data from the server by downloading the data.
[0005]
[Problems to be solved by the invention]
By the way, in a network using a firewall as described above, a remote GUI (Graphical User Interface) environment is often used.
[0006]
When using this remote GUI environment, operation information such as a pointing device such as a mouse on the client side is transmitted to the server side, and a graphical element such as an icon or a window is received. Next, you need to change the firewall settings. Increasing the types of packets to be passed in this way lowers the security level of the network and is not a desirable state.
[0007]
Similarly, a remote GUI environment is used in a network using an HTTP proxy server, but when communicating with a machine existing in an external network, the only option is to use HTTP. As a result, in the communication by the remote GUI, it is necessary to encapsulate operation information of a pointing device such as a mouse or the like and Web content information including an HTML document of a server based on an HTTP agreement.
[0008]
Therefore, in the remote GUI environment as described above, the keyboard input information from the client and the input information of the pointing device are transmitted to the server. After recognizing the information, the server provides feedback or returns graphical information desired by the client to the client.
[0009]
Therefore, in a conventional network using a firewall or an HTTP proxy server, a client accesses the HTTP tunneling server at predetermined intervals, so that a high-speed response cannot be expected beyond the predetermined interval.
[0010]
In the remote GUI communication, it is necessary to encapsulate operation information of a pointing device such as a mouse or the like and Web content information including an HTML document of a server based on an HTTP agreement. There is a problem that a processing wait time occurs and the throughput decreases.
[0011]
The present invention has been made in view of the above circumstances, and has a tunneling communication system, an HTTP tunneling server, and an HTTP communication that reduce the amount of communication at the time of data transfer from a data possessing server to a client and realize HTTP tunneling with high response performance. A library, a tunneling communication method, and a program are provided.
[0012]
It is another object of the present invention to provide a tunneling communication system, an HTTP tunneling server, an HTTP communication library, a tunneling communication method, and a program which can be sufficiently applied to a remote GUI environment.
[0013]
[Means for Solving the Problems]
(1) In order to solve the above problem, a tunneling communication system according to the present invention for performing communication between a client and a data possessing server through a network or / and an unauthorized possession device, comprises the unauthorized possession device and the data possessing server. Between the client and the server, accepts a communication start request from the client side, connects to the data holding server, creates and saves association data with the data holding server, and transmits the association data to the client side. An HTTP tunneling server having a communication start processing function for returning the request to the client; receiving association data returned from the HTTP tunneling server provided on the client side; Send to the tunneling server, An HTTP communication library for receiving data corresponding to the request content from the tunneling server is provided.
[0014]
According to the present invention, when the HTTP tunneling server receives a communication start request from a client via an HTTP communication library, the present invention creates and saves data associated with a data possessing server, and Since the data is returned to the HTTP communication library, the subsequent data exchange between the client and the data holding server is performed by the server association data, so that the client user can perform data communication without any stress and contribute to improvement of high-speed response. It becomes possible.
[0015]
In addition, when the tunneling server receives a data request from the data holding server based on the association data from the HTTP communication library, the tunneling server searches for the data holding server using the received association data as a key. It is determined whether or not data has arrived from the data possessing server. If the data has arrived, the data is transferred to the HTTP communication library. If the data has not arrived from the data possessing server, By adopting a configuration of waiting until the data arrives, the data can be transferred to the HTTP communication library as soon as the data arrives from the data possession server, and the response can be increased. Also, when using the remote GUI environment, data can be exchanged smoothly.
[0016]
(2) The present invention relates to an HTTP tunneling server that can be installed between an unauthorized protection device and a data possession server and that performs required processing between the network and / or an HTTP communication library on the client side through the unauthorized protection device. Communication start processing means for receiving a communication start request from the HTTP communication library, connecting to the data possession server, creating association data with the data possession server, and returning the data to the HTTP communication library; Request source data transfer processing means for receiving an HTTP request including the data from the HTTP communication library and the association data, searching for the relevant data possession server from the association data, and transferring the data to the retrieved data possession server Is provided.
[0017]
In the HTTP tunneling server according to the present invention, since the association data with the data possessing server is stored, when an HTTP request accompanying the data to be transferred and the association data is received from the client side HTTP communication library, the association data is stored. And retrieves the corresponding data possessing server from the server, and transfers the data to the retrieved data possessing server. Therefore, it is possible to quickly transfer the client data to the data possessing server.
[0018]
When the HTTP tunneling server receives the HTTP request including the association data from the HTTP communication library, the HTTP tunneling server searches the relevant data holding server from the association data, and when the data is received from the searched data holding server. Transfer the data to the HTTP communication library, and if the data has not arrived from the data possession server, wait for the data to arrive and then transfer the data to the HTTP communication library. The same operation and effect as described above can be obtained.
[0019]
(3) The present invention is a tunneling communication method for performing communication between a client and a data possessing server through a network or / and an unauthorized protection device, wherein the tunneling communication method is input from the client-side HTTP communication library via the unauthorized protection device. Receiving a communication start request, and connecting to the data possession server, creating and storing association data with the data possession server, a server association data creation step, and the server association data created by this step A communicable information returning step of transmitting to the HTTP communication library and notifying that it is in a communicable state; and receiving an HTTP request including data to be transferred and server association data from the client side HTTP communication library, the tunneling server. But A server search step of searching for the data holding server from the server association data stored therein using the server association data as a key, and transferring the received data to the searched data holding server; and After the data transfer, the tunneling server sends a data transfer completion notification to the HTTP communication library.
[0020]
Such a tunneling communication method has the same operation and effect as the tunneling communication system described in (1).
[0021]
(4) Further, the present invention is an HTTP communication library for requesting the contents of a request from a client to an HTTP tunneling server in cooperation with a data possession server through a network or / and an unauthorized device.
Means for receiving a communication start request from the client, transmitting the request to the tunneling server, receiving and storing server association data of a data processing server created by the tunneling server, and receiving data to be transferred from the client. In this case, by returning control to the client and providing a means for transmitting an HTTP request including the received data and the association data to the HTTP tunneling server, the client can immediately transfer the next data. Become.
[0022]
(5) Further, according to the present invention, when the tunneling server receives a plurality of HTTP requests including the association data from the HTTP communication library, the existence data delivered from the data holding server for each HTTP request, and the standby data delivered thereafter Is transferred to the HTTP communication library, data can be transferred in real time with high response and throughput, and it is possible to sufficiently cope with a remote GUI environment.
[0023]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0024]
FIG. 1 is a system configuration diagram showing one embodiment of a tunneling communication system according to the present invention. The configuration of this system is an example in which a firewall is installed on the server side.
[0025]
In this tunneling communication system, a network 1 such as the Internet (wide area network) is provided, and a client 3 as a user terminal is connected to the network 1 via an HTTP communication library 2. Note that a large number of HTTP communication libraries 2 and clients 3 are connected to the network 1.
[0026]
At least one data holding server 6 is connected to the network 1 via a server-side firewall 4 and an HTTP tunneling server 5. Usually, one data possessing server 6 is installed, but in many cases, a plurality of data possessing servers 6 are installed according to purpose and function as shown in FIG.
[0027]
The HTTP communication library 2 is an alternative to a normal communication library, and is based on HTTP or HTTPS (Hypertext Transfer Protocol over Transport Layer Security / Secret Software Socket) for exchanging an HTML document with at least the Web server 6. In addition, various communication software required for communication are installed.
[0028]
The HTTP communication library 2 communicates with the HTTP tunneling server 5 by encapsulating a packet from the client 3 based on an agreement based on HTTP or HTTPS and transmitting the encapsulated packet to the network 1. This HTTP communication library 2 is provided with an input buffer 7 for storing various data received via the HTTP tunneling server 5.
[0029]
The client 3 is equipped with communication software based on HTTP or HTTPS that exchanges HTML documents, browser software that decodes and displays HTML documents and other Web contents, e-mail software, and various communication software required for communication.
[0030]
The firewall 4 is provided between the network 1 and the data possessing server 6 and has an interface function for managing data communication and protecting the internal network against external attacks and unauthorized access. Incidentally, the firewall 4 has a function of blocking data communication from the client side other than, for example, the port 80 (HTTP) and the port 443 (HTTPS).
[0031]
The HTTP tunneling server 5 executes a protocol conversion process between the HTTP communication library 2 and the data possession server 6, and stores a protocol conversion process program in the storage medium 8, and transmits the protocol from the client 3 to the server 6. A server association table 9 for storing association data with the server 6 created at the time of access to the server 6 and server data storage means 10 for storing data sent from the server 6 are provided.
[0032]
The HTTP tunneling server 5 functionally includes a communication start processing unit 51, a request source (client) data transfer processing unit 52, and a request destination (data possession server) data transfer processing unit 53, as shown in FIG. Have been.
[0033]
The communication start processing means 51 includes a server connection means 511 for establishing a communication line with the server 6 as an access destination, and server association data creation for creating association data for associating with the server 6 after connection with the server 6 Means 512, and communicable information returning means 513 for returning identification data indicating completion of the communication line to the server 6 to the HTTP communication library 2.
[0034]
The server connection unit 511 has a function of connecting to the server 6 based on the IP address and port number of the access destination server 6 received from the client 3 via the HTTP communication library 2.
[0035]
After connecting to the server 6 as the access destination, the server association data creating unit 512 creates server association data composed of, for example, a sequence obtained by generating random numbers, for example, in order to associate with the server 6, and Has the ability to store.
[0036]
Further, the communicable information returning unit 513 transmits the server association data created by the server association data creation unit 512 to the HTTP communication library 2 and returns to the HTTP communication library 2 that the server is in a communicable state for the communication start request. Has a function. Note that the HTTP communication library 2 receives the association data and stores it in the input buffer 7.
[0037]
Next, upon receiving an HTTP request accompanied by transfer data and association data transmitted from the client 3 via the HTTP communication library 2, the request source data transfer processing unit 52 sets the server association The server 9 retrieves the connected data possessing server 6 from the table 9, and transfers the data from the client 3 to the retrieved server 6 and the server connection retrieval means 521, and then transmits the data from the HTTP communication library 2 to the retrieved server 6. A data transfer completion notifying unit 522 for notifying the HTTP communication library 2 of data transfer completion as a reply to the request is provided.
[0038]
Further, the request destination data transfer processing unit 53 searches the data possession server 6 from the server association table 9 for the HTTP request accompanied by the association data by the thread of the HTTP communication library 2 and transfers the data from the searched server 6. Server data existence confirmation means 531 for confirming whether data to be transmitted has arrived at server data storage means 10, that is, whether or not data exists; and HTTP communication when data to be transferred to server data storage means 10 exists. When there is no data to be transferred to the server data storage unit 10 and there is no existing data transfer unit 532 that transfers the data as a reply to the library 2, the server 2 stands by without returning a reply, and At the same time, standby data transfer for transferring data to the HTTP communication library 2 It is constituted by a means 533.
[0039]
Therefore, according to the above-described embodiment of the tunneling system and the HTTP tunneling server, when the firewall 4 is provided and only the HTTP communication is permitted, the HTTP communication library 2 is provided on the client side, and the HTTP tunneling is provided on the data holding server 6 side. When the server 5 is provided and receives a communication start request from the HTTP communication library 2 on the client side, the HTTP tunneling server 5 connects to the data possession server 6 to create association data with the server and stores it in the server association table 9 And returns it to the HTTP communication library 2. Therefore, the HTTP communication library 2 on the client side transmits the transfer data to the HTTP tunneling server 5 using the association data and requests the HTTP tunneling server 5 for the data received from the data possessing server 6. Data can be exchanged irrespective of a predetermined cycle as in the related art, and a high-speed response can be secured.
[0040]
Further, the HTTP tunneling server 5 always transmits necessary requests to the HTTP tunneling server 5 by a dedicated thread, so that the HTTP tunneling server 5 can sufficiently cope with a remote GUI environment and realize high-response HTTP tunneling. Moreover, when the client 3 sends out the required data, the HTTP communication library 2 makes a request to the HTTP tunneling server 5 under the association data, so that the user can use the remote GUI environment without stress.
[0041]
Next, the operation of the system configured as described above and the tunneling communication method according to the present invention will be described with reference to FIGS.
[0042]
A. Data communication start processing (not shown).
[0043]
(1) The client 3 transmits the IP address and port number of the server 6 to be accessed to the HTTP communication library 2.
[0044]
(2) The HTTP communication library 2 transmits an HTTP request including the IP address and the port number from the client 3 to the HTTP tunneling server 5.
[0045]
(3) The HTTP tunneling server 5 connects to the data possessing server 6 that is the request destination based on the IP address and the port number received from the HTTP communication library 2, and generates a random number after this connection, for example, from a sequence. The server association data is created and stored in the server association table 9 so as to associate the association data with the server 6 (server association data creation step).
[0046]
(4) The HTTP tunneling server 5 returns, as an HTTP request from the HTTP communication library 2, association data associated with the server 6 to the client-side HTTP communication library 2 (communicable information return step).
[0047]
(5) The HTTP communication library 2 stores the server association data received from the HTTP tunneling server 5 in the input buffer 7.
[0048]
B. Processing for transferring data of requesting client to server 6 (see FIG. 3)
(1) The client 3 passes data to be transferred to the HTTP communication library 2 (S1).
[0049]
(2) The HTTP communication library 2 sends the HTTP request to the HTTP tunneling server 5 with the server association data stored in the input buffer 7 added to the data received from the client 3 as an HTTP request (S2).
[0050]
(3) The HTTP tunneling server 5 searches the data possessing server 6 associated with the relevant association data from the data stored in the server association table 9 by using the server association data as a key among the received data. The data is transferred to the searched server 6 (S3: server search step).
[0051]
(4) At this time, after transferring the data to the server 6, the HTTP tunneling server 5 notifies the HTTP communication library 2 of data indicating the completion of the data transfer as a reply to the HTTP request from the HTTP communication library 2. (S4: Data transfer completion notification step).
[0052]
(5) Upon receiving the data transmission completion notification, the HTTP communication library 2 returns control to the client 3 (S5). Here, the client 3 enters a standby state or a state in which data transfer can be repeatedly executed.
[0053]
C Processing for transferring data of the request destination server to the client side (see FIGS. 4 and 5).
[0054]
First, if data from the server 6 has arrived at the input buffer 7 of the HTTP communication library 2, the client 3 acquires the data. Block if data has not arrived.
[0055]
(1) The HTTP communication library 2 transmits and connects an HTTP request including server association data to the HTTP tunneling server 5 under a thread (Thread) serving as one processing unit divided as application processing. (S11).
[0056]
(2) The HTTP tunneling server 5 searches for the server 6 associated with the association data in the server association table 9 using the association data transmitted from the HTTP communication library 2 as a key. Thereafter, it is confirmed whether or not the data corresponding to the retrieved server 6 has reached the server data storage means 10 (server data confirmation step).
[0057]
(3) As a result of this check, if data has arrived from the server 6 to the server data storage means 10 (S12), the data is transferred to the HTTP communication library 2 as a reply to the HTTP request (S13: existing data transfer step). .
[0058]
(4) The HTTP communication library 2 stores the data received from the HTTP tunneling server 5 in the input buffer 7 (S14). On the other hand, the client 3 acquires the data stored in the input buffer 7 of the HTTP communication library 2 as described above.
[0059]
(5) On the other hand, in the server data confirmation step described above, when it is confirmed that data has not arrived from the server 6 to the tunneling server 5, as shown in FIG. 5, the apparatus waits without returning an HTTP reply (S16: standby step). . When data arrives from the server 6 to the tunneling server 5 during this standby (S12 '), the tunneling server 5 immediately transfers the data to the HTTP communication library 2 (S17: standby data transfer step).
[0060]
(6) The HTTP communication library 2 stores the data received from the HTTP tunneling server 5 in the input buffer 7 (S18). On the other hand, the client 3 acquires the data stored in the input buffer 7 of the HTTP communication library 2 as described above.
[0061]
Therefore, according to the above-described embodiment of the tunneling communication method, the same effects as those of the above-described tunneling system can be obtained.
[0062]
Further, an example in which the HTTP tunneling server 5 reads a program recorded on the recording medium 8 and executes a required process will be described with reference to FIG.
[0063]
The HTTP tunneling server 5 determines whether or not an HTTP request with an IP address / port number has been received from the HTTP communication library 2 (F1). If it is determined that the HTTP request has been received, the IP address and the port number are also determined. (F2). After connecting to the server 6, the HTTP tunneling server 5 creates server association data for associating with the server 6, and stores it in the server association table 9 (F3: identification data creation function).
[0064]
Subsequently, the HTTP tunneling server 5 returns the association data to the HTTP communication library 2 as a reply to the HTTP request, to notify that the communication is possible (F4: communication capability information return function).
[0065]
Thereafter, the HTTP tunneling server 5 determines whether or not data including the association data has been received as an HTTP request from the HTTP communication library 2 on the client side. From the server 6 and transfer the data to the searched server 6 (F5 to F7: server search connection function).
[0066]
Here, after transferring the client-side data to the server 6, the HTTP tunneling server 5 notifies the HTTP communication library 2 of the completion of the data transfer (F8: data transfer completion notification function).
[0067]
Further, the HTTP tunneling server 5 determines whether or not there is an HTTP request accompanied by server association data from the HTTP communication library 2 on the client side after notifying the completion of the data transfer. Using the key as a key, the server 6 is searched for from the server association table 9 and it is determined whether or not the searched data of the server 6 exists in the server data storage means 10, that is, whether data has been received from the server 6 (F9, F10: server data existence confirmation function).
[0068]
Here, when data is received from the server 6, the HTTP tunneling server 5 reads the data and transfers the data to the HTTP communication library 2 (F11: existing data transfer function). If the data has not arrived from the server 6, it waits until the data arrives from the server 6. The HTTP tunneling server 5 is in a standby state, but immediately transfers data to the HTTP communication library 2 as soon as data arrives from the server 6 (F12, F11: standby data transfer function).
[0069]
Therefore, the HTTP tunneling server 5 can realize the same effect as the tunneling system by reading and executing the program recorded in the recording medium 8 in advance.
[0070]
Next, other embodiments of the tunneling communication system, the HTTP tunneling server, the HTTP communication library, the tunneling communication method, and the program according to the present invention will be described.
[0071]
Note that the entire configuration of the tunneling communication system is the same as that of FIG.
[0072]
The difference in this embodiment lies in the HTTP communication library 2, some functions of the HTTP tunneling server 5, the HTTP communication library 2, the tunneling communication method, and the program.
[0073]
First, upon receiving a data transfer request from the client 3, the HTTP communication library 2 is provided with control return means for immediately returning control to the client 3, so that the client 3 can immediately transmit the next data. The HTTP communication library 2 transmits an HTTP request including server association data to the tunneling server 5 when receiving data from the server 6. At this time, the HTTP communication library 2 transmits a plurality of HTTP requests including server association data. In other words, the tunneling server 5 increases the hits of the data received from the server 6 and receives the data from the server 6 very quickly.
[0074]
Next, the HTTP tunneling server 5 includes a communication start processing unit 51, a request source data transfer processing unit 52, and a request destination data transfer processing unit 53, of which the communication start processing unit 51 and the request source data transfer processing unit 52 The description is omitted because it is the same as that of FIG.
[0075]
The request destination data transfer processing unit 53 includes a request unit 534 that receives a plurality of HTTP requests including server association data by a thread of the HTTP communication library 2 as shown in FIG. In response to the HTTP request, the server 6 is searched from the server association table 9, and a plurality of server data existence confirmations are performed to confirm whether data to be transferred from the retrieved server 6 exists in the server data storage unit 10. If there is data to be transferred to the server data storage means 10 by the means 531a, 531b and the server data existence confirmation means 531a, the existence data transfer means 532 transfers the data to the HTTP communication library 2 as a reply to the first HTTP request. And the next HTTP sent The server data existence confirmation means 531b waits until you receive data from the server 6, a waiting data transfer means 533 to immediately transfer the HTTP communication library 2 when received is provided for quests. Note that the server data existence check units 531a and 531b have individually separated functions, and may actually be a single function.
[0076]
Therefore, according to the above-described embodiment of the tunneling communication system and the HTTP tunneling server, when the tunneling server 5 receives a plurality of HTTP requests including the association data from the HTTP communication library 2, the data possession is performed for each HTTP request. If the existence data delivered from the server 6 and the waiting data arrived thereafter are transferred to the HTTP communication library 2, the data is transferred between the client 3 and the data possessing server 6 in real time with high response and throughput. It is possible to use the remote GUI environment more effectively.
[0077]
In addition, the HTTP communication library 2 not only requests sequential data by its own thread, but also transmits a plurality of HTTP requests including association data to the HTTP tunneling server 5, so that the user of the client 3 does not feel any particular stress. The required data can be obtained quickly.
[0078]
Next, the operation of the above system and the tunneling communication method according to the present invention will be described with reference to FIGS.
[0079]
A. Data communication start processing (not shown).
[0080]
(1) The client 3 passes the IP address and port number of the server 6 to be accessed to the HTTP communication library 2.
[0081]
(2) The HTTP communication library 2 transmits an HTTP request including the IP address and the port number from the client 3 to the HTTP tunneling server 5.
[0082]
(3) The HTTP tunneling server 5 connects to the server 6 that is the request destination based on the IP address and the port number received from the HTTP communication library 2, and generates a random number after this connection, for example, a server composed of a sequence. The association data is created and stored in the server association table 9 so as to associate the association data with the server 6 (identification data creation step).
[0083]
(4) The HTTP tunneling server 5 returns the server association data to the requesting HTTP communication library 2 as an HTTP request from the HTTP communication library 2 (communication information return step).
[0084]
(5) The HTTP communication library 2 stores the association data received from the HTTP tunneling server 5 in the input buffer 7.
[0085]
B. Processing for transferring the data of the requesting client to the server (see FIG. 8)
(1) The client 3 passes data to be transferred to the HTTP communication library 2 (S21).
[0086]
(2) Upon receiving the data from the client 3, the HTTP communication library 2 returns control to the client 3 (S22). As a result, upon receiving the control, the client 3 can immediately output the next data to be transferred, and the HTTP communication library 2 can receive the next data request from the client 3.
[0087]
(3) Upon receiving the data from the client 3, the HTTP communication library 2 returns the control to the client 3 (S 22), and also copies the data received from the client 3 by the HTTP request and the server association data stored in the input buffer 7. The accompanying HTTP request is transmitted to the HTTP tunneling server 5 (S23).
[0088]
(4) The HTTP tunneling server 5 searches the server 6 to be associated from the server association table 9 using the association data as a key among the received data, and transfers the data to the searched server 6 (S24: server) Search step).
[0089]
(5) After transferring the data to the server 6, the HTTP tunneling server 5 notifies the HTTP communication library 2 of data indicating the completion of data transmission as a reply to the HTTP request from the HTTP communication library 2 (S25: Data transfer completion notification step).
[0090]
C Processing for transferring data of the request destination server to the client (see FIG. 9).
[0091]
First, if data from the server 6 has arrived at the input buffer 7 of the HTTP communication library 2, the client 3 acquires the data. Block if data has not arrived.
[0092]
(1) The HTTP communication library 2 transmits a plurality of HTTP requests including association data to the HTTP tunneling server 5 under a thread (Thread) serving as one processing unit divided as application processing. The connection of the communication line is established (S31).
[0093]
(2) The HTTP tunneling server 5 searches the server 6 associated with the server association table 9 using the association data transmitted from the HTTP communication library 2 as a key. Thereafter, it is confirmed whether or not the data corresponding to the retrieved server 6 has reached the server data storage means 10 (server data confirmation step).
[0094]
(3) As a result of this confirmation, if data has arrived from the server 6 to the server data storage means 10 (S32), the data is transferred to the HTTP communication library 2 as an HTTP reply (S33: existing data transfer step).
[0095]
(4) The HTTP communication library 2 stores the data received from the HTTP tunneling server 5 in the input buffer 7 (S34). On the other hand, the client 3 acquires the data stored in the input buffer 7 of the HTTP communication library 2 as described above.
[0096]
(5) If no data has arrived from the server 6 to the server data storage means 10, the server waits without returning an HTTP reply (S35: standby step). Since the data that has already arrived from the server 6 is transmitted to the HTTP communication library 2 based on the first HTTP request, the data is always in a standby state for the next HTTP request.
[0097]
When data arrives from the server 6 to the tunneling server 5 during this standby, the tunneling server 5 immediately transfers the data to the HTTP communication library 2 as a reply to the next HTTP request (S36: standby data transfer step).
[0098]
(6) The HTTP communication library 2 stores the data received from the HTTP tunneling server 5 in the input buffer 7 (S18). On the other hand, the client 3 acquires the data stored in the input buffer 7 of the HTTP communication library 2 as described above.
[0099]
Therefore, according to this tunneling communication method, the same effects as those obtained by the above-described tunneling system, HTTP tunneling server, and HTTP communication library can be obtained.
[0100]
Further, an example in which the HTTP tunneling server 5 reads a program recorded on the recording medium 8 and executes a required process will be described with reference to FIG. 6, steps F1 to F10 are the same as F1 to F10 in FIG. 6, and therefore, the description of FIG. 6 will be given here, and the processing after step F10 will be described.
[0101]
In this step F10, it is determined whether there is server data. If yes, the server data is transferred as a reply to the first HTTP request (F11), and then it is determined whether there is the next HTTP request (F13). Waits until data arrives from the server 6 (F12), and when the data arrives from the server 6, the server data is transferred as a reply to the next request.
[0102]
Therefore, the HTTP tunneling server 5 can realize the same effect as the tunneling system by reading and executing the program recorded in the recording medium 8 in advance.
[0103]
The present invention is not limited to the above-described embodiment, and can be implemented with various modifications without departing from the scope of the invention. For example, in the tunneling communication system shown in FIG. 1, the firewall 4 is provided. However, for example, an HTTP proxy server 12 may be provided instead of the firewall 4 as shown in FIG.
[0104]
Further, the embodiments can be implemented in combination as much as possible, and in that case, the effect of the combination can be obtained. Furthermore, each of the above embodiments includes various upper and lower stage inventions, and various inventions can be extracted by appropriately combining a plurality of disclosed components. For example, when an invention is extracted because some constituent elements can be omitted from all the constituent elements described in the means for solving the problem, if the extracted invention is implemented, the omitted part is omitted. Is appropriately supplemented by well-known conventional techniques.
[0105]
【The invention's effect】
As described above, according to the present invention, a tunneling communication system, an HTTP tunneling server, an HTTP communication library, which can reduce the amount of communication at the time of data transfer from a data possessing server to a client and realize HTTP tunneling with high response performance, A tunneling communication method and program can be provided.
[0106]
Another object of the present invention is to provide a tunneling communication system, an HTTP tunneling server, an HTTP communication library, a tunneling communication method, and a program which can be sufficiently applied to a remote GUI environment.
[Brief description of the drawings]
FIG. 1 is a system configuration diagram showing an embodiment of a tunneling communication system according to the present invention.
FIG. 2 is a functional configuration diagram showing an example of a tunneling server.
FIG. 3 is a sequence diagram illustrating data transfer from a client to a server.
FIG. 4 is a sequence diagram illustrating data transfer from the server to the client when data has arrived from the server to the tunneling server.
FIG. 5 is a sequence diagram illustrating data transfer from the server to the client when data does not reach the tunneling server from the server.
FIG. 6 is a flowchart illustrating program processing in the tunneling server.
FIG. 7 is a functional configuration diagram showing another example of the tunneling server.
FIG. 8 is a sequence diagram illustrating data transfer from a client to a server.
FIG. 9 is a sequence diagram illustrating data transfer from a server to a client.
FIG. 10 is a flowchart illustrating a program process in the tunneling server.
FIG. 11 is a system configuration diagram showing another embodiment of the tunneling communication system according to the present invention.
[Explanation of symbols]
1. Network
2. HTTP communication library
3. Client
4 ... Firewall
5. HTTP tunneling server
6 ... Server
7 Input buffer
8. Recording medium
9: Server association table
10. Server data storage means
11 ... Database
12 ... HTTP proxy server
51 communication start processing means
52 ... request source data transfer processing means
53 request destination data transfer processing means
511: server connection means
512 ... means for creating server association data
513 ... communicable information return means
521: server search connection means
522: Data transfer completion notifying means
531 (531a, 531b) ... server data existence confirmation means
532... Existence data transfer means
533: standby data transfer means
534 ... Request receiving means

Claims (17)

In a tunneling communication system for performing communication between a client and a data possessing server through a network and / or an unauthorized device, the tunneling communication system can be installed between the unauthorized device and the data possessing server, and a communication start request is issued from the client side. An HTTP tunneling server having a communication start processing function for receiving and connecting to the data possession server, creating and storing association data with the data possession server, and returning the association data to the client side;
Provided on the client side, receives association data returned from the HTTP tunneling server, transmits the request content of the client to the HTTP tunneling server based on the association data, and responds to the request content from the tunneling server. A tunneling communication system, comprising: an HTTP communication library for receiving data. The tunneling communication system according to claim 1,
Data transfer from the client to the data possession server,
The HTTP communication library sends an HTTP request including the data from the client and the association data to the HTTP tunneling server,
The tunneling server searches the data possessing server using the association data received from the HTTP communication library as a key, and transfers the received data to the retrieved data possessing server. . The tunneling communication system according to claim 1,
Data transfer from the data possession server to the client,
The HTTP communication library sends an HTTP request including the association data to the HTTP tunneling server,
The tunneling server uses the received association data as a key, searches the data possessing server, determines whether or not data has arrived from the retrieved data possessing server, and determines whether the data has arrived. Transfer the data to the HTTP communication library and, if the data has not arrived from the data possession server, wait until the data arrives. An HTTP tunneling server that can be installed between the unauthorized defense device and the data possession server and executes a required process with the client-side HTTP communication library through the network or / and the unauthorized defense device. Communication start processing means for receiving a communication start request, connecting to the data possession server, creating association data with the data possession server, and returning the data to the HTTP communication library;
Upon receiving an HTTP request including the data from the HTTP communication library and the association data, a request source data transfer process for searching a corresponding data holding server from the association data and transferring the data to the searched data holding server And an HTTP tunneling server. An HTTP tunneling server that can be installed between the unauthorized defense device and the data possession server and executes a required process with the client-side HTTP communication library through the network or / and the unauthorized defense device. Communication start processing means for receiving a communication start request, connecting to the data possession server, creating association data of the data possession server, and returning the data to the HTTP communication library;
When receiving the HTTP request including the association data from the HTTP communication library, the server searches the relevant data possession server from the association data and determines whether or not data has arrived from the retrieved data possession server. Request destination data transfer processing means for transferring data to the HTTP communication library if data has arrived from the data possession server, and waiting for data to arrive if data has not arrived from the data possession server An HTTP tunneling server comprising: An HTTP tunneling server that can be installed between the unauthorized protection device and the data possession server and that performs required processing between the network and / or an HTTP communication library on the client side through the unauthorized protection device;
Communication start processing means for receiving a communication start request from the HTTP communication library, connecting to the data possession server, creating association data with the data possession server, and returning the data to the HTTP communication library;
Upon receiving an HTTP request including the data from the HTTP communication library and the association data, a request source data transfer process for searching a corresponding data holding server from the association data and transferring the data to the searched data holding server Means,
When receiving the HTTP request including the association data from the HTTP communication library, the server searches the relevant data possession server from the association data and determines whether or not data has arrived from the retrieved data possession server. Request destination data transfer processing means for transferring data to the HTTP communication library if data has arrived from the data possession server, and waiting for data to arrive if data has not arrived from the data possession server An HTTP tunneling server comprising: In a tunneling communication method for performing communication between a client and a data possession server through a network or / and an unauthorized device,
Receives a communication start request input from the client-side HTTP communication library or input via the unauthorized protection device, connects to the data possession server, and creates and stores data associated with the data possession server Server association data creation step to be performed,
Transmitting the server association data created in this step to the HTTP communication library and notifying that it is in a communicable state;
When receiving an HTTP request accompanied by data to be transferred and server association data from the client-side HTTP communication library, the HTTP tunneling server uses the server association data as a key and obtains the data possession from the server association data stored therein. A server search step of searching a server and transferring the received data to the searched data holding server;
A data transfer completion notification step in which the HTTP tunneling server transmits a data transfer completion notification to the HTTP communication library after the data transfer in this step. The tunneling communication method according to claim 7,
When receiving the HTTP request including the server association data from the client-side HTTP communication library, the HTTP tunneling server searches for the data possessing server from the already stored server association data using the server association data as a key. Server data confirming step for confirming whether or not there is data to be transferred from the data possessing server,
When the data of the data possessing server exists by this step, an existing data transfer step of transferring the data to the HTTP communication library;
When the HTTP tunneling server confirms in the server data confirmation step that data has not arrived from the data possessing server, a standby step of waiting without returning a reply to the HTTP request;
A standby data transfer step of transferring data to the HTTP communication library as a reply to the HTTP request when data arrives from the data possession server during the standby in the standby step. When a required processing request is received from the HTTP communication library on the client side through the network or / and the unauthorized protection device, a computer that executes a process corresponding to the processing request while cooperating with the data possession server includes:
A server association data creation function for connecting to the data possession server and creating and storing server association data with the data possession server when receiving a communication start request from the client side HTTP communication library; A function for returning the server association data created by the above to the HTTP communication library, and a function to transmit the data to be transferred from the client via the HTTP communication library and the server association data after receiving the server association data. When receiving the HTTP request, a server search connection function for searching the data holding server using the server association data as a key and transferring the received data to the searched data holding server, After transferring data to the server Program for realizing a data transfer completion notification function for data transfer completion notification to the HTTP communication library. The program according to claim 9,
When an HTTP request including the server association data is received from the client-side HTTP communication library, a data possession server is searched for from the already stored server association data, using the server association data as a key. A server data confirmation function for confirming whether or not there is data to be transferred from the server; and a presence data transfer function for transferring the data to the HTTP communication library when data of the data possessing server exists by this function. A standby function that waits without returning the HTTP reply when the server data confirmation function determines that data has not arrived from the data possession server; The HTTP request Program for realizing a standby data transfer function for transferring data to the HTTP communication library as reply. The tunneling communication system according to claim 1,
Data transfer from the data possession server to the client,
The HTTP communication library sends a plurality of HTTP requests including the association data to the HTTP tunneling server,
The tunneling server uses the received association data as a key, searches the data possessing server, determines whether data has been received from the retrieved data possessing server, and determines whether the data has arrived. Transfers the data to the HTTP communication library based on the first HTTP request, waits for the next HTTP request, and immediately transfers the data to the HTTP communication library when data arrives from the data holding server. A tunneling communication system, comprising: The tunneling communication system according to claim 1,
In the data transfer from the data possession server to the client, the HTTP communication library sends a plurality of HTTP requests including the association data to the HTTP tunneling server,
The tunneling server searches the data possessing server using the received association data as a key, and if no data has been received from the retrieved data possessing server, as soon as data arrives from the data possessing server, A tunneling communication system wherein data is sequentially transferred to the HTTP communication library as a reply to an HTTP request. An HTTP tunneling server that can be installed between the unauthorized protection device and the data possession server and that performs required processing between the network and / or an HTTP communication library on the client side through the unauthorized protection device;
Communication start processing means for receiving a communication start request from the HTTP communication library, connecting to the data possession server, creating association data with the data possession server, and returning the data to the HTTP communication library;
When a plurality of HTTP requests including the association data are received from the HTTP communication library, the corresponding data possession server is searched from the association data, and it is determined whether or not data has been received from the searched data possession server. If the data has arrived from the data possessing server, the data is transferred to the HTTP communication library based on the first HTTP request, and is put into a standby state for the next HTTP request. Requesting data transfer processing means for immediately transferring data to the HTTP communication library when data arrives, the tunneling server comprising: An HTTP communication library for requesting the contents of a request from a client to an HTTP tunneling server in cooperation with a data possession server through a network or / and an unauthorized protection device,
Means for receiving a communication start request from the client, transmitting the request to the tunneling server, and receiving and storing server association data of a data processing server created by the tunneling server;
Means for, when receiving data to be transferred from the client, returning control to the client so that the next data can be transmitted, and transmitting an HTTP request including the received data and the association data to the HTTP tunneling server. An HTTP communication library comprising: In an HTTP communication library that requests an HTTP tunneling server to transfer data from a data possession server through a network or / and an unauthorized protection device,
Means for receiving a communication start request from the client, transmitting the request to the tunneling server, and receiving and storing server association data of a data processing server created by the tunneling server;
Means for transmitting a plurality of HTTP requests including the server association data stored by the means to the HTTP tunneling server, and requesting data of the data possessing server, wherein the HTTP request is delivered to the tunneling server for each HTTP request. An HTTP communication library wherein data from a data possession server can be received. In a tunneling communication method for performing communication between a client and a data possession server through a network or / and an unauthorized device,
When receiving a communication start request input from the HTTP communication library on the client side or input via the unauthorized protection device, the server connects to the data possession server and creates association data with the data possession server. A server association data creation step to be saved;
Transmitting the server association data created in this step to the HTTP communication library and notifying that it is in a communicable state;
A server search step of receiving a plurality of HTTP requests including association data from the HTTP communication library, searching for the corresponding data holding server from the association data, and transferring the received data to the searched data holding server; When,
It is determined whether or not data has been received from the retrieved data possessing server. If the data has arrived from the data possessing server, the data is transferred to the HTTP communication library based on the first HTTP request. Steps to
And if the data has not arrived from the data possessing server, the process waits for the next HTTP request and immediately transfers the data to the HTTP communication library when the data arrives from the data possessing server. A tunneling communication method comprising: When a required processing request is received from the HTTP communication library on the client side through the network or / and the unauthorized protection device, a computer that executes a process corresponding to the processing request while cooperating with the data possession server includes:
A server association data creation function for connecting to the data possession server and creating and storing server association data with the data possession server when receiving a communication start request from the client-side HTTP communication library; And a function for returning communicable information returning the server association data created by the HTTP communication library to the HTTP communication library, and receiving a plurality of HTTP requests including the association data from the HTTP communication library, A server search function for searching and transferring the received data to the searched data possessing server, and determining whether data has been received from the data possessing server searched by this function, When data is received from the server An existing data transfer function of transferring the data to the HTTP communication library based on the first HTTP request; and if the data has not arrived from the data possessing server by the determination, the data is put into a standby state for the next HTTP request; A program for realizing a standby data transfer function of transferring data to the HTTP communication library immediately when data arrives from the data possession server.

Images