JP2006195904A - Processing execution method, processing execution system, processing execution device, processing request device, computer program and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a processing execution method and a processing execution system, suppressing execution of processing to unauthorized processing request in a processing execution device when transmitting processing request such as formation request of an image to the processing execution device such as a network printer from a processing request device such as a personal computer connected to a communication network such as a LAN, and to provide the processing execution device, the processing request device, a computer program and recording medium. <P>SOLUTION: An identifier is previously transmitted to the processing request device 1 from the processing execution device 2. The processing request device 1 makes the received identifier be included in the processing request as a value of a TTL or the like showing the number of passable devices. The processing execution device 2 decides possibility/impossibility of the execution of the processing on the basis of the identifier included in the received processing request. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a process execution method for transmitting a process request from a process request apparatus connected via a communication network such as a LAN to a process execution apparatus, wherein the process execution apparatus executes a process based on the received process request, the process Process execution system to which execution method is applied, process execution apparatus and process request apparatus used in the process execution system, computer program for realizing the process request apparatus, and reading by a computer recording the computer program In particular, the present invention relates to a process execution method, a process execution system, a process execution apparatus, a process request apparatus, a computer program, and a recording medium that prevent execution of a process based on an unauthorized process request.

  When a processing request, which is an image formation request, is transmitted from a processing requesting device using a personal computer to a processing execution device using a network printer, the operator who operates the processing requesting device executes the processing request as the transmission destination of the processing request Even if a process execution device connected to a distant communication network via multiple communication networks is selected as a device and a process request is transmitted from the process request device to the process execution device, the process execution device implements access restrictions. Unless this is done, processing based on the processing request is executed, which is not preferable in terms of resource utilization.

  As a method for solving these problems, devices connected to a communication network are grouped in advance, and a TTL (Time To Live) included in an IP header of a packet to be transmitted / received is set for each group. If the TTL value of the packet received by the connection device is within a predetermined range, it is determined that the packet is a normal packet, and if it is out of the range, the packet is determined to be an illegal packet and discarded. (See Patent Document 1).

JP-A-10-271154

  However, in the method disclosed in Patent Document 1, it is necessary to set an initial value of TTL for each group and further set a TTL range for each connected device. There's a problem. In addition, there is a problem that the setting must be changed every time the configuration of the communication network changes, and if a connection device that needs to be restarted is used for the changed setting to take effect, restart the connection device. Therefore, there is a problem that the stability of the communication network is impaired.

  The present invention has been made in view of such circumstances, and an initial value of TTL included in a processing request transmitted from the processing requesting device to the processing execution device is used as an identifier, and the processing execution device includes the received processing request. When the TTL value matches the identifier for verification, it is possible to suppress the execution of processing for an illegal processing request by executing processing based on the processing request, thereby effectively using network resources. A process execution method capable of preventing an increase in the work of a system administrator, solving problems related to workability, and maintaining the stability of a communication network, and a process to which the process execution method is applied Execution system, process execution apparatus and process request apparatus used in the process execution system, computer program for realizing the process request apparatus, and Read on a computer that records the computer program and an object thereof is to provide a capable recording medium.

  A process execution method according to the present invention transmits a process request from a process request apparatus connected via a communication network to the process execution apparatus, and the process execution apparatus executes a process based on the received process request. The process request device transmits a process request including an identifier, and the process execution device collates the identifier included in the received process request with a pre-recorded identifier for collation, and the identifier matches by collation. Then, when it is determined, processing based on the received processing request is executed.

  In the process execution method according to the present invention, whether to execute the process based on the identifier included in the process request is determined based on the identifier included in the process request. It is possible to suppress the execution of processing, and it is possible to effectively use network resources.

  A process execution system according to the present invention includes a process request apparatus and a process execution apparatus connected via a communication network, the process request apparatus transmits a process request to the process execution apparatus, and the process execution apparatus receives In the processing execution system for executing processing based on the processing request, the processing requesting device includes means for transmitting a processing request including an identifier, and the processing execution device receives means for recording an identifier for collation and received It is characterized by comprising means for collating the identifier included in the processing request with the identifier for collation, and means for executing processing based on the received processing request when it is determined that the identifier matches by collation.

  In the process execution system according to the present invention, the process execution is determined by determining whether or not the process can be executed based on the identifier included in the process request transmitted from the process request apparatus such as a personal computer to the process execution apparatus such as a network printer. Since the permission / inhibition is performed based on the identifier included in the processing request, it is possible to suppress the execution of processing for an unauthorized processing request, and it is possible to effectively use network resources.

  In the processing execution system according to the present invention, the identifier is a value indicating the number of devices that can be passed.

  In the processing execution system according to the present invention, by using a value such as TTL indicating the number of devices that can be passed as an identifier, the conventional packet format can be used effectively, so the cost required for development can be reduced. It is.

  In the process execution system according to the present invention, the process execution apparatus further includes means for transmitting an identifier that matches the identifier for collation to another apparatus connected to the communication network to which the process execution apparatus is connected. When the identifier is received from the processing execution device, the information processing apparatus further comprises means for recording the received identifier and means for generating a processing request including the recorded identifier.

  In the processing execution system according to the present invention, the identifier is automatically set by the processing execution device and the processing requesting device by transmitting the identifier from the processing execution device in advance. Since there is no need to change the settings, it is possible to prevent the system administrator from increasing the work volume, and there is no need to restart the device, so the stability of the communication network is not affected. .

  The process execution system according to the present invention is characterized in that the process execution apparatus further includes means for changing an identifier for collation every time a predetermined time elapses.

  In the processing execution system according to the present invention, it is possible to prevent an operator who is not permitted to request processing from predicting the value of the identifier and illegally acquiring it by providing an expiration date for the identifier.

  The processing execution system according to the present invention is connected to the one communication network to which the processing execution device is connected and the connection device to which the other communication network is connected, and is connected to the one communication network and transmitted via the other communication network. A relay device that relays the processing request; and the connection device includes means for receiving a processing request transmitted via another communication network and means for transmitting the received processing request to the relay device. The relay device records the identifier recorded in the received processing request when it is determined to be valid, and the means for recording the identifier, the means for determining the legitimacy of the processing request transmission source device. And a means for transmitting the processing request including the identifier to the processing execution apparatus.

  In the processing execution system according to the present invention, by using a connection device such as a router and a relay device such as an account server, an identifier is included only in a processing request that is determined to be valid by the relay device, so that other communication can be performed. It is possible to suppress execution of processing for an unauthorized processing request transmitted from a device connected to the network, and it is possible to effectively use network resources.

  The process execution system according to the present invention further comprises a connection device for connecting one communication network to which the process execution device is connected and another communication network, the connection device comprising means for recording an identifier, and another communication network. A means for receiving a processing request transmitted via the device, a means for determining the validity of the apparatus that is the transmission source of the received processing request, and a record in the received processing request if it is determined to be valid. And a means for transmitting a processing request including the identifier to the processing execution apparatus.

  In the processing execution system according to the present invention, a connection device such as a router is used, and an identifier is included only in a processing request that is determined to be valid by the connection device, so that it is transmitted from a device connected to another communication network. It is possible to suppress the execution of processing for an unauthorized processing request, and it is possible to effectively use network resources.

  In the processing execution system according to the present invention, the processing execution device is an image forming device, and the processing request is an image formation request.

  The processing execution system according to the present invention can prevent unauthorized use of a network printer.

  The process execution device according to the present invention is a process execution device that performs processing based on a received process request when a process request transmitted through the communication network is connected to the communication network. Received when it is determined that the identifier matches with the means for recording the identifier, the means for checking the included identifier with the identifier for verification when the received processing request includes the identifier Means for executing processing based on the processing request.

  In the process execution device according to the present invention, whether or not to execute the process based on the identifier included in the process request is determined based on the identifier included in the process request. It is possible to suppress the execution of processing, and it is possible to effectively use network resources.

  A processing request apparatus according to the present invention generates a processing request including means for recording an identifier and a recorded identifier in the processing request apparatus that connects to a communication network and transmits the processing request via the communication network. And means for transmitting the generated processing request.

  In the processing request apparatus according to the present invention, by including an identifier in the processing request so as to determine the legitimacy, it is possible for the apparatus on the receiving side of the processing request to suppress execution of processing for an unauthorized processing request. In addition, this makes it possible to effectively use network resources.

  A computer program according to the present invention is a computer program for causing a computer connected to a communication network to transmit a processing request via the communication network, a procedure for causing the computer to generate a processing request including an identifier, and a computer generated And a procedure for transmitting a processing request.

  In the computer program according to the present invention, when executed by a computer such as a personal computer, the computer operates as a processing requesting device, and an identifier is included in the processing request to determine the legitimacy. It is possible for the apparatus to suppress execution of processing for an unauthorized processing request, and it is possible to effectively use network resources.

  The computer-readable recording medium according to the present invention is a computer-readable recording in which a computer program that causes a computer connected to a communication network to transmit a processing request via the communication network is recorded. In the medium, a computer program for executing a procedure for causing a computer to generate a processing request including an identifier and a procedure for causing the computer to transmit the generated processing request is recorded.

  In the computer-readable recording medium according to the present invention, the recorded computer program is executed by a computer such as a personal computer so that the computer can operate as a processing requesting device and determine the validity. Since the identifier is included in the processing request, it is possible for the apparatus on the receiving side of the processing request to suppress the execution of the processing with respect to the illegal processing request, and it is possible to effectively use the network resources.

  A process execution method, a process execution system, a process execution apparatus, a process request apparatus, a computer program, and a recording medium according to the present invention execute a process such as a network printer from a process request apparatus such as a personal computer connected via a communication network such as a LAN. A processing request such as an image formation request is transmitted to the device, and the processing execution device transmits an identifier from the processing execution device to the processing requesting device in advance in a form in which processing based on the received processing request is performed. In the apparatus, the received identifier is included in the process request as a value such as TTL indicating the number of apparatuses that can pass, and in the process execution apparatus, whether or not the process can be executed is determined based on the identifier included in the received process request. .

  With this configuration, whether or not processing can be executed is determined based on an identifier included in the processing request, so that execution of processing for an illegal processing request can be suppressed, and network resources can be effectively used. It has excellent effects such as being possible. Furthermore, since the identifier setting is automatically performed by the processing execution device and the processing requesting device, it is not necessary to change the setting for each group and each connection device, thereby preventing an increase in the workload of the system administrator. In addition, since the apparatus does not need to be restarted, there is an excellent effect that the stability of the communication network is not affected.

  In addition, the processing execution system of the present invention predicts the value of an identifier by an operator who is not allowed to request processing by changing the identifier according to the elapsed time and setting an expiration date for the identifier, and also illegally acquiring the identifier. It is possible to prevent this.

  Furthermore, the processing execution system of the present invention is connected to one communication network to which the processing execution device is connected and a connection device such as a router to connect another communication network, and is connected to the one communication network via the other communication network. Using a relay device such as an account server that relays a processing request to be transmitted, the connection device transmits the processing request transmitted via another communication network to the relay device, and the relay device transmits the received processing request. When it is determined that the transmission source device is valid, the recorded processing identifier is included in the received processing request, and then transmitted to the processing execution device. Alternatively, when the connection device determines that the device that is the source of the processing request transmitted via another communication network is valid, the received processing request includes the recorded identifier, Send to process execution device.

  With these configurations, it is possible to suppress execution of processing for an unauthorized processing request transmitted from a device connected to another communication network, and it is possible to effectively use network resources. Excellent effect.

  Hereinafter, the present invention will be described in detail with reference to the drawings showing embodiments for carrying out the invention.

Embodiment 1 FIG.
FIG. 1 is a block diagram conceptually showing a configuration example of a processing execution system in the first exemplary embodiment of the present invention. In FIG. 1, reference numeral 1 denotes a processing requesting apparatus according to the present invention using a computer such as a personal computer. The processing requesting apparatus 1 is connected to a first communication network 101 such as a LAN (Local Area Network). Various devices such as a processing execution device 2 using an image forming apparatus such as a network printer are connected to the communication network 101. Further, a connection device 3 such as a gateway device and a router device and a relay device 4 such as an account server computer are connected to the first communication network 101. Further, the second communication network 102 is connected to the connection device 3, and various devices such as the processing requesting device 1 are also connected to the second communication network 102. The system configuration shown in FIG. 1 is an example of the communication system of the present invention that can be developed in various forms. The present invention is not limited to the system configuration shown in FIG. 1 and can be expanded in various ways. It is. For example, three or more communication networks may be connected to the connection device 3, and the second communication network 102 may be further connected to another communication network. And the apparatus connected to each communication network can be appropriately changed according to the purpose and the like.

  FIG. 2 is a block diagram illustrating a configuration example of the process requesting apparatus 1 and the process executing apparatus 2 included in the process execution system according to Embodiment 1 of the present invention. The processing requesting device 1 is a control means 11 such as a CPU for controlling the entire device, a computer program PG of the present invention, a CD-ROM or the like that reads information from a recording medium REC such as a CD-ROM that records various information such as data. Auxiliary storage means 12, a recording means 13 such as a hard disk for recording various information read by the auxiliary storage means 12, a storage means 14 such as a RAM for temporarily storing information, a LAN port connected to the first communication network 101, etc. Communication means 15, input means 16 such as a mouse and keyboard, and output means 17 such as a monitor are provided. Then, by reading various information such as the computer program PG and data of the present invention from the recording means 13, storing the information in the storage means 14, and executing various procedures included in the computer program PG, the computer can execute the processing request apparatus of the present invention. Operates as 1.

  The processing execution apparatus 2 controls the entire apparatus, recording means 22 such as ROM, RAM, and hard disk, image forming means 23, communication means 24, operation means 25 such as a touch panel and various push buttons, and time. Time measuring means 26 is provided. The control unit 21 includes a communication control unit 211, an identifier control unit 212, and an image processing unit 213. The communication control unit 211 controls transmission / reception of information via the first communication network 101 to which the communication unit 24 is connected. The identifier control unit 212 performs control related to identifiers such as identifier distribution, collation, and change described later. When the image processing unit 213 receives an image formation request as one of the processes based on the processing request command transmitted from the processing requesting apparatus 1, the image processing unit 213 converts the data received as the processing request into image data suitable for printing. A function of performing a conversion process is provided, and the converted image data is output to the image forming unit 23, and an image is formed and output by the image forming unit 23. When the processing execution device 2 is a device using a network printer, the image forming unit 23 is a mechanism for forming and printing an image based on the processing request on a sheet. The recording unit 22 includes a temporary storage unit 221 and a communication setting information recording unit 222. The temporary storage unit 221 is used as a buffer that temporarily stores packets to be transmitted and received. The communication setting information recording unit 222 records configuration information necessary for communication such as a numerical value used as an identifier for collation, MAC (Media Access control) address information of the own device, device information, and IP address information. It is to be noted that an existing processing execution apparatus including an image forming unit, an operation unit, and the like is used as the processing execution apparatus 2 of the present invention by loading an interface card including the various circuits described above such as a control unit, a recording unit, and a communication unit You may do it.

  FIG. 3 is a block diagram illustrating a configuration example of the connection device 3 and the relay device 4 included in the processing execution system according to Embodiment 1 of the present invention. The connection device 3 includes a control unit 31, a recording unit 32 such as a ROM and a RAM, and a communication unit 33 that connects to the first communication network 101 and the second communication network 102. The control unit 31 includes a communication control unit 311 that performs control related to communication such as packet transmission / reception, an authentication management unit 312 that performs control related to authentication such as authentication processing and billing processing of a packet transmission source device, identifier verification, recording, and the like An identifier control unit 313 that performs control related to the identifier of the received packet, and a route control unit 314 that performs route determination processing (routing) for determining an output destination based on information such as an IP address and a MAC address indicating a transmission destination of the received packet is doing. The recording unit 32 includes an identifier recording unit 321 that records an identifier based on the control of the identifier control unit 313, an authentication information recording unit 322 that records authentication information based on the control of the authentication management unit 312, and MAC address information of the own device, a device The communication setting information recording unit 323 records configuration information required for communication such as information and IP address information. The communication means 33 has a plurality of communication ports 331, 331,... Connected to each communication network.

  The relay device 4 includes a control unit 41, a recording unit 42, a storage unit 43, and a communication unit 44.

  Next, a communication protocol used for communication of the communication system of the present invention will be described. In the communication system of the present invention, communication conforming to a communication protocol such as TCP / IP is performed. TCP / IP includes IPv4, which is the current standard, and IPv6, which is the next generation standard, and different packet formats are defined for each.

  FIG. 4 is a configuration diagram showing the format of the IP header of the communication protocol used in the processing execution system according to Embodiment 1 of the present invention. FIG. 4A shows an IP header format conforming to the standard defined by IPv4, and various fields are defined in a 20-octet area. The field shown as version indicates the version of the IP header, and IPv4 is version 4. The field indicated as the header length indicates the octet length of the IP header. A field indicated as ToS (Type Of Service) indicates a service type, and indicates service quality such as a priority, a low delay request, and a high throughput request. The field indicated as the packet length indicates the octet length of the entire packet, which is the sum of the IP header and the IP data. A field indicated by ID indicates an identifier, which is necessary when reconstructing the divided data. A field indicated by a flag indicates a control code related to packet division. A field indicated as a fragment offset indicates a sequence number that is an order of packets obtained by dividing the original data. A field indicated as TTL (Time To Live) is the number of passing devices (the number of hops) that is the time that can exist on the communication network or the number of connection devices that can pass. In the present invention, TTL indicates the number of passing devices, and the value of the number of passing devices is decremented by 1 every time it passes through the connection device. If the connection device receives a packet with a TTL of 0, the packet is discarded. Is done. A field indicated as a protocol number indicates an upper layer protocol such as ICMP (Internet Control Message Protocol), TCP (Transmission Control Protocol), or UDP (User Datagram Protocol). A field indicated as a header checksum indicates a checksum of the IP header. A field indicated as a transmission source IP address indicates an IP address of a transmission source device. The field indicated as the destination IP address indicates the IP address of the device that is the transmission destination. The numerical value shown in parentheses that is written along with the field name indicates the number of bits of the field.

  FIG. 4B shows an IP header format conforming to a standard defined by IPv6, and various fields are defined in a 40-octet area. The field shown as version indicates the version of the IP header, and IPv6 becomes version 6. The field indicated as traffic class indicates a class related to communication such as priority, low delay request, and high throughput request, and corresponds to ToS of IPv4. A field labeled “flow label” indicates a label when a series of packets such as VoIP (Voice over IP) is designated as a flow. The field indicated as the payload length indicates the octet length of the IP data. The field indicated as “next header” indicates the header type of the subsequent IPv6 header, and corresponds to the IPv4 protocol number. The field indicated as hop limit indicates the number of passing devices, and corresponds to IPv4 TTL. A field indicated as a transmission source IP address indicates an IP address of a transmission source device. The field indicated as the destination IP address indicates the IP address of the device that is the transmission destination. The numerical value shown in parentheses that is written along with the field name indicates the number of bits of the field.

  Next, processing of various devices used in the processing execution system according to Embodiment 1 of the present invention will be described. FIG. 5 is a flowchart showing the identifier distribution process of the process execution device 2 and the identifier recording process of the process request device 1 used in the process execution system according to the first embodiment of the present invention. The process execution device 2 executes a process of distributing the identifier to other devices connected to the first communication network 101 at the time of activation or when an elapsed time since the identifier was changed reaches a predetermined time. In the process execution device 2, under the control of the control means 21, the time counting means 26 measures the elapsed time from the previous identifier delivery, and the elapsed time from the previous identifier delivery timed has reached a predetermined time. If it is determined whether or not the predetermined time has been reached (S101: YES), the collation identifier recorded in the recording means 22 is changed (S102), and the changed identifier and The matching identifier is broadcasted from the communication means 24 to the other devices such as the processing request device 1, the connection device 3, and the relay device 4 connected to the first communication network 101 to which the matching identifier is connected via the first communication network 101. (S103). If it is determined in step S101 that the predetermined time has not been reached (S101: NO), the processing in step S101 is repeated until the predetermined time is reached. Note that when the processing execution device 2 is activated, the processing of steps S101 to S102 is not performed, and the collation identifier recorded in the recording unit 22 is transferred to the other devices connected to the first communication network 101 to which the processing execution device 2 is connected. Send it informally.

  The identifier to be recorded and changed in the recording means 22 of the process execution device 2 is selected from integer values from 0 to 255. As will be described later, since the identifier recorded in the recording means 22 is indicated in the packet as the number of passing devices, it avoids values such as 0, 127, and 255 that are generally used as the initial values of the number of passing devices. It is desirable to use a numerical value such as 195.

  The processing request apparatus 1 receives the identifier in the communication unit 15 under the control of the control unit 11 that executes the computer program PG stored in the storage unit 14 (S104), and records the received identifier in the recording unit 13 (S104). S105). If an identifier is already recorded in the recording means 13, a process for updating the recorded identifier is performed. Similarly, the connection device 3 and the relay device 4 receive and record identifiers. In this way, by setting an expiration date on the identifier for verification and changing it every time a predetermined time elapses, even if the identifier leaks, it is changed after the predetermined time elapses, so that unauthorized use can be restricted.

  FIG. 6 is a flowchart showing the process request process of the process request apparatus 1 and the process execution process of the process execution apparatus 2 used in the process execution system according to the first embodiment of the present invention. For example, the operator designates information such as image data recorded in the recording unit 13 to the process requesting apparatus 1, designates the process execution apparatus 2 that is a request destination of the process, and sends the specified process execution apparatus 2 to the designated process execution apparatus 2. An operation for requesting a process for forming an image based on the designated image data is performed. The processing requesting apparatus 1 that has received the operation of the operator reads the identifier recorded in the recording unit 13 under the control of the control unit 11 that executes the computer program PG stored in the storage unit 14 (S201). A processing request, which is a command requesting processing based on an operation, is generated as a packet including an identifier as the number of passing devices such as TTL (S202), and the generated processing request is processed from the communication unit 15 via the first communication network 101. It transmits to the execution apparatus 2 (S203). The processing for generating the processing request as a packet is executed by processing of a program such as a printer driver, a spooler, or a protocol driver according to the computer program PG of the present invention, and the printer driver instructs the protocol driver to use an identifier used as the number of passing devices. A packet is generated by the protocol driver. Instead of a program, hardware may be mounted like a layer 3 switch.

  The processing execution device 2 receives the processing request at the communication unit 24 under the control of the control unit 21 (S204), and determines whether the received processing request is a request for forming an image based on the image data (S204). S205). If it is determined in step S205 that the request is an image formation request (S205: YES), the identifier included as the number of passing devices in the received processing request is compared with the identifier for verification recorded in the recording unit 22. If it is determined that the identifiers match by collation (S206: YES), it is determined that the request is valid, and processing based on the processing request, that is, processing for forming an image is executed (S207). The collation of the identifier in step S206 is performed, for example, by determining whether or not the difference between the collation identifier and the identifier included in the processing request corresponds to the logical distance of the communication network. Since the process requesting apparatus 1 and the process execution apparatus 2 are connected to the same communication network, the logical distance of the communication network is zero.

  If it is determined in step S205 that the request is not an image formation request (S205: NO), the process execution device 2 executes a process corresponding to the received process request (S208). When it is determined in step S206 that they do not match (S206: NO), it is determined that the request is an illegal processing request, and the processing request is discarded (S209). By executing processing such as image formation based on the processing request only when the identifiers match as described above, it is possible to suppress execution of processing for an illegal processing request.

Embodiment 2. FIG.
In the second embodiment, the process requesting apparatus 1 connected to the communication network different from the first communication network 101 to which the process execution apparatus 2 is connected, for example, the second communication network 102 in the first embodiment, is transferred from the process request apparatus 1 to the process execution apparatus 2. In this mode, a processing request is transmitted. Since the configuration example of the processing execution system and various apparatuses in the second embodiment is the same as that in the first embodiment, the first embodiment will be referred to and the description thereof will be omitted.

  Processing of various devices used in the processing execution system according to Embodiment 1 of the present invention will be described. FIG. 7 is a flowchart showing the process request process of the process request apparatus 1 and the relay process of the connection apparatus 3 used in the process execution system according to the second embodiment of the present invention. The process requesting apparatus 1 described here is the process requesting apparatus 1 connected to the second communication network 102, and is connected to a communication network different from the process execution apparatus 2 connected to the first communication network 101. Therefore, the processing execution device 2 has not received the identifier that is broadcasted by the identifier distribution processing, and the number of passing devices indicated in the packet is a numerical value such as 127, 255 that is set as an initial value for general purposes. Used. For example, the operator designates information such as image data recorded in the recording unit 13 to the process requesting apparatus 1, designates the process execution apparatus 2 that is a request destination of the process, and sends the specified process execution apparatus 2 to the designated process execution apparatus 2. An operation for requesting a process for forming an image based on the designated image data is performed. The processing request apparatus 1 that has received the operation of the operator generates a processing request that is a command for requesting processing based on the operation under the control of the control unit 11 (S301), and connects the generated processing request to the first communication network. In order to transmit to the processing execution device 2 to be transmitted, the communication unit 15 transmits the data to the connection device 3 via the second communication network 102 (S302). It is assumed that 127 is set as the number of passing devices of packets constituting the processing request.

  The connection device 3 receives the processing request transmitted via the second communication network 101 by the communication unit 33 under the control of the control unit 31 (S303), and the device serving as the transmission destination of the received processing request is the present invention. It is determined whether or not the device is the processing target device, here the processing execution device 2 (S304). If it is determined in step S304 that the transmission destination is the processing execution apparatus 2 (S304: YES), the connection apparatus 3 receives the processing request as an image formation request based on the image data under the control of the control unit 31. It is determined whether or not there is (S305).

  If it is determined in step S305 that the request is an image formation request (S305: YES), the connection device 3 determines the legitimacy of the processing request device 1 that is the processing request transmission source under the control of the control unit 31 (step S305: YES). S306). The validity is determined by authentication information recorded in the authentication information recording unit 322 of the recording unit 32, information such as an IP address indicating the processing requesting apparatus 1 of the transmission source indicated in the packet constituting the processing request, and the like. The authentication requesting process determines whether the processing requesting apparatus 1 has the authority to request image formation.

  If it is determined in step S306 that it is valid (S306: YES), the connection device 3 receives the identifier received from the process execution device 2 and recorded in advance in the recording unit 32 under the control of the control unit 31. The processing request is included in the packet constituting the processed request (S307). That is, the numerical value indicated as the identifier is set to the number of passing devices indicated in the processing request. As a specific example, the numerical value 127 indicated as the number of passing devices is rewritten to the identifier 195. Then, the connection device 3 determines a route based on information such as an IP address indicating the transmission destination of the processing request under the control of the control unit 31 (S308), and sends the processing request including the identifier along the determined route to the communication unit 33. To the processing execution apparatus 2 via the first communication network 101 (S309).

  If it is determined in step S304 that the transmission destination is not the processing execution device 2 (S304: NO), the connection device 3 controls the route based on information such as an IP address indicating the transmission destination of the processing request under the control of the control unit 31. (S310), and the received processing request is transmitted to the device indicated as the transmission destination on the determined route (S311). At this time, 1 is subtracted from the value of the number of passing devices indicated in the processing request. However, when the number of passing devices is 0, the processing request is discarded.

  If it is determined in step S305 that the request is not an image formation request (S305: NO), the connection device 3 proceeds to step S308 under the control of the control unit 31, and executes the subsequent processing. At this time, the process of subtracting the value of the number of passing devices is not performed. This is because changing the value of the number of passing devices may cause a match with the identifier.

  If it is determined in step S306 that it is not valid (S306: NO), the connection device 3 discards the received processing request under the control of the control means 31 (S312).

  The processing in the processing execution apparatus 1 that has received the processing request is the same as the processing in and after step S204 in the first embodiment described with reference to the flowchart of FIG. Is omitted.

  It is possible to omit the process of determining whether or not the request is an image formation request in step S305, but in this case, in response to the process request determined to be invalid in step S306, the process request is not included. It is desirable to add a process of adding 1 to the number of passing devices when it is determined whether or not the number of passing devices shown matches the identifier. This is because if the number of passing devices matches the identifier, the processing execution device 2 may mistakenly recognize that it is an image formation request transmitted from a device having a legitimate authority. By adding 1 to the number of passing devices, it is possible to prevent the number of passing devices from becoming 0 until the processing execution device 2 as the transmission destination is discarded.

Embodiment 3 FIG.
In the third embodiment, the processing request is not directly transmitted from the connection device 3 to the processing execution device 2 in the second embodiment, but is transmitted to the processing execution device 2 via the relay device 4. is there. Since the configuration example of the processing execution system and various devices in the third embodiment is the same as that in the first embodiment, the first embodiment will be referred to and the description thereof will be omitted.

  Processing of various devices used in the processing execution system according to Embodiment 3 of the present invention will be described. FIG. 8 is a flowchart showing relay processing of the connection device 3 and the relay device 4 used in the processing execution system according to Embodiment 3 of the present invention. The processing request apparatus 1 connected to the second communication network 102 transmits a processing request to the connection apparatus 3 through the processing in steps S301 to S302 in the second embodiment described with reference to FIG. The connection device 3 receives the processing request under the control of the control unit 31 (S401), appropriately processes the received processing request, and transmits it to the relay device 4 (S402). The details of the processing performed in the connection device 4 are the same as those in the second embodiment except that the transmission destination of the processing request is the relay device 4, so the second embodiment will be referred to and description thereof will be omitted. To do. Note that the process of including the identifier shown in the second embodiment in the process request can be omitted.

  The relay device 4 receives a processing request in the communication unit 44 under the control of the control unit 41 (S403), and the received processing request is transmitted via a communication network different from the first communication network 101 to which the relay device 4 is connected. After determining that it is a transmitted processing request, the validity of the processing requesting apparatus 1 that is the transmission source of the processing request is determined (S404). The authentication process is performed by an authentication process in which authentication information recorded in advance in the recording unit 42 is compared with information such as an IP address indicating the processing requesting apparatus 1 of the transmission source indicated in the packet constituting the processing request. Thus, it is determined whether or not the processing requesting apparatus 1 is authorized to request image formation.

  If it is determined in step S404 that it is valid (S404: YES), the relay device 4 receives the identifier received from the process execution device 2 and recorded in advance in the recording means 42 under the control of the control means 41. The processed request is included in the packet constituting the processed request (S405). That is, the numerical value indicated as the identifier is set to the number of passing devices indicated in the processing request. Then, in the relay device 4, under the control of the control means 41, a processing request including the identifier is transmitted from the communication means 44 to the process execution device 2 via the first communication network 101 (S406).

  If it is determined in step S404 that it is not valid (S404: NO), the relay device 4 determines whether or not the number of passing devices indicated in the received processing request matches the identifier under the control of the control means 41. If it is determined (S407) and it is determined that they match (S407: YES), 1 is added to the number of passing devices (S408), the process proceeds to step S406, and a processing request is transmitted (S406). If it is determined in step S407 that they do not match (S407: NO), the relay device 4 does not perform the addition processing of the number of passing devices under the control of the control means 41, and proceeds to step S406 to transmit a processing request (S406). ). By adding 1 to the number of passing devices in step S408, the identifier becomes different from the number of passing devices, so that the processing execution device 2 misidentifies that it is a processing request from a device having authority to request image formation. Can be prevented.

  In the first to third embodiments, the processing request is an image forming request. However, the present invention is not limited to this, and the processing request may be applied to processing requests other than image forming. The execution apparatus may be applied to a form other than the image forming apparatus.

It is a block diagram which shows notionally the structural example of the process execution system in Embodiment 1 of this invention. It is a block diagram which shows the structural example of the process request apparatus with which the process execution system in Embodiment 1 of this invention is provided, and a process execution apparatus. It is a block diagram which shows the structural example of the connection apparatus and relay apparatus with which the process execution system in Embodiment 1 of this invention is provided. It is a block diagram which shows the format of the IP header of the communication protocol used with the process execution system in Embodiment 1 of this invention. It is a flowchart which shows the identifier delivery process of the process execution apparatus used in the process execution system in Embodiment 1 of this invention, and the identifier recording process of the process request apparatus. It is a flowchart which shows the process request process of the process request apparatus and the process execution process of a process execution apparatus which are used with the process execution system in Embodiment 1 of this invention. It is a flowchart which shows the process request process of the process request apparatus used in the process execution system in Embodiment 2 of this invention, and the relay process of a connection apparatus. It is a flowchart which shows the relay process of the connection apparatus and relay apparatus which are used with the process execution system in Embodiment 3 of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Process request apparatus 2 Process execution apparatus 3 Connection apparatus 4 Relay apparatus 101 1st communication network 102 2nd communication network PG Computer program REC Recording medium

Claims (12)

In a process execution method for transmitting a process request from a process request apparatus connected via a communication network to a process execution apparatus, wherein the process execution apparatus executes a process based on the received process request.
The processing requesting device is:
Send a processing request containing the identifier,
The process execution device includes:
The identifier included in the received processing request is collated with a collating identifier recorded in advance,
A process execution method characterized by executing a process based on a received process request when it is determined by matching that the identifiers match. A processing request device and a processing execution device connected via a communication network, wherein the processing request device transmits a processing request to the processing execution device, and the processing execution device executes processing based on the received processing request; In the processing execution system,
The processing requesting device is:
Means for transmitting a processing request including an identifier;
The process execution device includes:
Means for recording a verification identifier;
Means for collating an identifier included in the received processing request with an identifier for collation;
And a means for executing processing based on the received processing request when it is determined that the identifiers match by collation.   The processing execution system according to claim 2, wherein the identifier is a value indicating the number of devices that can be passed. The process execution device includes:
A means for transmitting an identifier that matches the identifier for verification to another device connected to a communication network to which the identifier is connected;
The processing requesting device is:
Means for recording the received identifier when receiving the identifier from the processing execution device;
The processing execution system according to claim 2, further comprising: a processing request that includes a recorded identifier.   5. The process execution system according to claim 2, further comprising means for changing a collation identifier every time a predetermined time elapses. A connection device for connecting one communication network to which the processing execution device is connected and another communication network; and
A relay device connected to one communication network and relaying a processing request transmitted via another communication network,
The connecting device is
Means for receiving a processing request transmitted via another communication network;
Means for transmitting the received processing request to the relay device,
The relay device
Means for recording the identifier;
Means for determining the legitimacy of the processing request source device;
Means for including the recorded identifier in the received processing request when it is determined to be valid;
The process execution system according to claim 2, further comprising: a process request including an identifier, which is transmitted to the process execution apparatus. And further comprising a connection device for connecting one communication network to which the processing execution device is connected and another communication network,
The connecting device is
Means for recording the identifier;
Means for receiving a processing request transmitted via another communication network;
Means for determining the legitimacy of the device that is the source of the received processing request;
Means for including the recorded identifier in the received processing request when it is determined to be valid;
The process execution system according to claim 2, further comprising: a process request including an identifier, which is transmitted to the process execution apparatus. The processing execution device is an image forming device,
The processing execution system according to claim 2, wherein the processing request is an image formation request. In a processing execution device that executes processing based on a received processing request when connected to the communication network and receives a processing request transmitted via the communication network,
Means for recording a verification identifier;
Means for collating the included identifier with the identifier for verification when the received processing request includes the identifier;
And a means for executing processing based on the received processing request when it is determined that the identifiers match by collation. In a processing request device that connects to a communication network and transmits a processing request via the communication network,
Means for recording the identifier;
Means for generating a processing request including a recorded identifier;
And a means for transmitting the generated processing request. In a computer program for causing a computer connected to a communication network to transmit a processing request via the communication network,
Causing a computer to generate a processing request including an identifier;
A computer program for causing a computer to execute a procedure for transmitting a generated processing request. In a computer-readable recording medium in which a computer program for transmitting a processing request via the communication network is recorded in a computer connected to the communication network,
Causing a computer to generate a processing request including an identifier;
A computer-readable recording medium, wherein a computer program for causing a computer to execute a procedure for transmitting a generated processing request is recorded.

Images