JP2007086894A

JP2007086894A - Data relay method and data relay system

Info

Publication number: JP2007086894A
Application number: JP2005272218A
Authority: JP
Inventors: Hidehiko Yokoyama; 英彦横山
Original assignee: Canon Inc
Current assignee: Canon Inc
Priority date: 2005-09-20
Filing date: 2005-09-20
Publication date: 2007-04-05

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem wherein in the use of a Web service on the Internet, if the processing of the Web service takes time, the service side once disconnects and, upon completing the processing, reconnects the request side, while general communication in companies and others, which is via proxy servers, refuses connections from Web servers to in-house terminals. <P>SOLUTION: In the connection of an information processing apparatus on an internal network and an information processing apparatus on an external network via a proxy server, when the external information processing apparatus issues a connection suspension request, connection identification information included in the connection suspension request is saved in a connection management table, and the external information processing apparatus is disconnected. When the external information processing apparatus issues a connection restart request, if information included in the connection restart request matches the information saved in the connection management table, the related internal information processing apparatus is reconnected. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

本発明は、組織内ネットワーク（ＬＡＮ）と、インターネットなどの外部ネットワークとの間に介在し、データ通信を中継するプロキシサーバと、内部ネットワーク上の情報処理装置から、該プロキシサーバを介して、外部ネットワーク上の情報処理装置に処理依頼を行い、処理結果を得るシステムに関するものである。 The present invention provides a proxy server that relays data communication between an intra-organization network (LAN) and an external network such as the Internet, and an information processing device on the internal network from the external server via the proxy server. The present invention relates to a system that makes a processing request to an information processing apparatus on a network and obtains a processing result.

従来、企業内ネットワーク内の情報処理装置は、企業のセキュリティポリシーに従い、プロキシサーバによりインターネット等の外部ネットワークと接続されており、企業内ネットワークから外部ネットワーク上の情報処理装置には比較的容易に接続することができるが、逆に外部ネットワークから企業内ネットワーク上の情報処理装置への接続はセキュリティ上の考慮から、外部ネットワーク上の特定の情報処理装置から内部ネットワーク上の特定の情報処理装置に対する特定の通信に関してのみ許諾するようにプロキシサーバに設定することで通信を行うことができた。また、殆どの組織では電子メイル配送に用いられるＳＭＴＰ（ＳｉｍｐｌｅＭａｉｌＴｒａｎｓｆｅｒＰｒｏｔｏｃｏｌ）接続を許可することから、プロキシサーバの設定を行わずに外部ネットワーク上の情報処理装置から内部ネットワーク上の情報処理装置に通知を行うために、電子メイルを用いて通知や処理結果の送信を行っていた。 Conventionally, information processing devices in the corporate network are connected to an external network such as the Internet by a proxy server in accordance with the corporate security policy, and it is relatively easy to connect from the corporate network to the information processing device on the external network. On the other hand, the connection from the external network to the information processing device on the corporate network can be specified from the specific information processing device on the external network to the specific information processing device on the internal network. It was possible to communicate by setting the proxy server to permit only for the communication. In addition, since most organizations allow Simple Mail Transfer Protocol (SMTP) connection used for electronic mail delivery, information processing devices on the external network can be transferred from information processing devices on the external network without setting a proxy server. In order to make notifications, notifications and processing results are transmitted using electronic mail.

従来例としては、例えば特許文献１をあげることが出来る。
特開２００３−５８４５９号公報 For example, Patent Document 1 can be cited as a conventional example.
JP 2003-5859 A

しかしながら上記従来技術では、外部ネットワーク上の情報処理装置から内部ネットワーク上の情報処理装置への通信を行うためには、各通信の接続元と接続先および接続ポート番号等をプロキシサーバに設定する必要があった。そのため、近年利用が増えているＷｅｂサービスと呼ばれる、ＨＴＴＰを用いてインターネット等の外部ネットワーク上の情報処理装置に対して何らかの処理を依頼する場合、その処理に時間が掛かるため、当該情報処理装置から接続の中断が行われると、前記プロキシサーバの設定変更なしには、処理結果を送信するための再接続要求がプロキシサーバで拒絶されるため、処理結果を得ることが出来なかった。また、電子メイルを用いて通知や処理結果の送信を行う場合、処理要求とは異なるプロトコルで結果や通知が送られてくることから、送信元の情報処理装置においてプロトコルを跨いだコネクション管理が必要となり処理が複雑になっていた。 However, in the above prior art, in order to perform communication from the information processing apparatus on the external network to the information processing apparatus on the internal network, it is necessary to set the connection source, connection destination, connection port number, etc. of each communication in the proxy server was there. For this reason, when a request is made to an information processing apparatus on an external network such as the Internet called HTTP, which is called a Web service that has been increasingly used in recent years, the process takes time, and the information processing apparatus When the connection is interrupted, the reconnection request for transmitting the processing result is rejected by the proxy server without changing the setting of the proxy server, so that the processing result cannot be obtained. Also, when sending notifications and processing results using electronic mail, the results and notifications are sent using a protocol different from the processing request, so connection management across protocols is required in the source information processing device. The process was complicated.

上記の課題を解決する本発明の情報処理装置は以下の構成を備える。即ち、内部ネットワーク上の情報処理装置と情報を送受信する内部通信手段と、インターネット等の外部ネットワーク上の情報処理装置との間で情報の入出力を行う外部通信手段と、内部通信手段により接続された内部ネットワーク上の情報処理装置から受信した情報が外部ネットワーク上の情報処理装置への接続要求かどうかを判定する内部通信判定手段と、外部通信手段により外部ネットワーク上の情報処理装置から受信した情報を判定する外部通信判定手段と、外部通信判定手段により外部ネットワーク上の情報処理装置から、接続中断要求を受信したと判定すると、接続中断要求に含まれる接続識別情報と、該接続先の外部ネットワーク上の情報処理装置の識別情報を保存する保存手段とを備えることを特徴とする情報処理装置。 The information processing apparatus of the present invention that solves the above-described problems has the following configuration. That is, the internal communication means is connected to the internal communication means for transmitting and receiving information to and from the information processing apparatus on the internal network, and the external communication means for inputting and outputting information between the information processing apparatus on the external network such as the Internet. Information received from the information processing apparatus on the internal network is an internal communication determination means for determining whether the information is a connection request to the information processing apparatus on the external network, and information received from the information processing apparatus on the external network by the external communication means If the external communication determination means determines that the connection interruption request has been received from the information processing apparatus on the external network by the external communication determination means, the connection identification information included in the connection interruption request and the external network of the connection destination An information processing apparatus comprising: storage means for storing identification information of the information processing apparatus above.

上記の構成によれば、内部ネットワーク上の情報処理装置（内部情報処理装置）から外部ネットワーク上の情報処理装置（外部情報処理装置）への接続要求を受信したデータ中継機能を有する情報処理装置（プロキシサーバ）は、指定された外部情報処理装置と接続し、内部情報処理装置と、外部情報処理装置のデータ通信を仲介する。外部情報処理装置から、接続中断要求を受信したプロキシサーバは、外部接続を一意に識別する識別情報と外部情報処理装置の識別情報を保存し、内部情報処理装置との接続は保持したまま、外部情報処理装置との接続を切断する。プロキシサーバが外部情報処理装置から接続再開要求を受信すると、保存された識別情報と比較し、一致した場合に識別情報と関連付けられた内部情報処理装置との接続の中継を行うように再構成することにより、外部情報処理装置における処理に時間がかかる場合、外部処理装置との接続を一旦切断し、処理が終了後に再接続することにより、内部ネットワーク上の情報処理装置に対してプログラムの修正等を強ることなく、外部情報処理装置からの非同期通信を可能とし、外部ネットワーク上で帯域の無駄な占有を防ぐものである。 According to the configuration described above, an information processing apparatus having a data relay function that receives a connection request from an information processing apparatus on the internal network (internal information processing apparatus) to an information processing apparatus on the external network (external information processing apparatus) ( The proxy server is connected to the designated external information processing apparatus, and mediates data communication between the internal information processing apparatus and the external information processing apparatus. The proxy server that has received the connection interruption request from the external information processing apparatus stores the identification information for uniquely identifying the external connection and the identification information of the external information processing apparatus, and maintains the connection with the internal information processing apparatus while maintaining the connection to the external information processing apparatus. Disconnect from the information processing device. When the proxy server receives a connection resumption request from the external information processing apparatus, the proxy server compares the stored identification information and reconfigures to relay the connection with the internal information processing apparatus associated with the identification information if they match. As a result, if the processing in the external information processing device takes time, the program is corrected for the information processing device on the internal network by temporarily disconnecting from the external processing device and reconnecting after the processing is completed. As a result, asynchronous communication from an external information processing apparatus can be performed without forcing the band to prevent unnecessary occupancy of bandwidth on the external network.

以上説明した様に本発明によれば、内部ネットワーク上の情報処理装置から、外部ネットワーク上の情報処理装置に対して処理を要求する際に、要求された処理に時間が掛かると判断した外部情報処理装置は、プロキシサーバに対して接続中断要求を送信し、これを受信したプロキシサーバは、接続中断要求に含まれる識別情報と、外部情報処理装置の識別情報及び内部情報処理装置の接続情報の組を保存し、内部情報処理装置との接続を維持したまま、外部情報処理装置との接続を切断するする。そして、外部情報処理装置で、当該処理が終了した段で、外部情報処理装置からプロキシサーバに対して、接続再開要求が送信され、これを受信したプロキシサーバは、接続再開要求に含まれる識別情報及び接続再開要求を送信した外部情報処理装置の識別情報を保存されているそれぞれの識別情報と比較し、これが一致した場合にのみ、外部情報処理装置との接続を許可し、識別情報に関連付けられていた内部情報処理装置との接続情報から、継続中の内部処理装置との接続と、外部情報処理装置との新しい接続との間でデータ中継を行うことにより、プロキシサーバに対して相手先毎の接続許可設定をすることなしに、且つセキュリティレベルを下げずに、外部情報処理装置及び内部情報処理装置との接続の中断・再開を可能とし、ネットワーク上で無用の接続を維持しないことから、ネットーワーク資源の有効活用を図るものである As described above, according to the present invention, when an information processing device on the internal network requests processing from the information processing device on the external network, the external information determined to take a long time for the requested processing. The processing device transmits a connection interruption request to the proxy server, and the proxy server that has received the request transmits the identification information included in the connection interruption request, the identification information of the external information processing device, and the connection information of the internal information processing device. The set is saved, and the connection with the external information processing apparatus is disconnected while maintaining the connection with the internal information processing apparatus. Then, at the stage where the processing is completed in the external information processing apparatus, the connection restart request is transmitted from the external information processing apparatus to the proxy server, and the proxy server that has received the request receives the identification information included in the connection restart request. And the identification information of the external information processing apparatus that transmitted the connection resumption request is compared with each stored identification information, and only when they match, the connection with the external information processing apparatus is permitted and associated with the identification information. By relaying data between the connection with the internal information processing apparatus and the new connection with the external information processing apparatus from the connection information with the internal information processing apparatus that has been Without allowing the connection permission to be set and without lowering the security level, the connection with the external information processing apparatus and the internal information processing apparatus can be interrupted and resumed. Because it does not maintain unnecessary connection on the work, but to achieve effective use of the net over the workpiece resources

（実施例１）
図１は、本発明の一実施形態を示すシステム構成図である。情報処理装置１０１は、内部ネットワーク（ＬＡＮ）１０２と接続されており、ＬＡＮ１０２を経由して他の装置と通信を行うことが可能である。情報処理装置１０３はＬＡＮ１０２及び、Ｉｎｔｅｒｎｅｔ等の外部ネットワーク１０４に接続されており、ＬＡＮ１０２及び外部ネットワーク１０４上の装置と通信を行うことが可能である。情報処理装置１０５は外部ネットワーク１０４に接続されており、外部ネットワーク１０４上の装置と通信を行うことが可能である。なお、情報処理装置１０１と情報処理装置１０５は、セキュリティポリシーにより、直接通信を行うことができず、情報処理装置１０３がデータ中継を行うことにより、通信を行えるものとする。 Example 1
FIG. 1 is a system configuration diagram showing an embodiment of the present invention. The information processing apparatus 101 is connected to an internal network (LAN) 102 and can communicate with other apparatuses via the LAN 102. The information processing apparatus 103 is connected to the LAN 102 and an external network 104 such as the Internet, and can communicate with the LAN 102 and apparatuses on the external network 104. The information processing apparatus 105 is connected to the external network 104 and can communicate with apparatuses on the external network 104. Note that the information processing apparatus 101 and the information processing apparatus 105 cannot perform direct communication according to the security policy, and can perform communication when the information processing apparatus 103 performs data relay.

図２は、本発明を実現する情報処理装置（図１の１０３に相当）の内部構成例である。２０１はネットワークポートであり、図１のＬＡＮ１０３に接続され、ＬＡＮ１０３に接続された機器と相互に通信することが可能である。プロトコルスタック２０２は、ネットワークポート２０１を介してＬＡＮ１０３から受信した通信情報をプロトコルに対応したデータ形式に変換し、ＨＴＴＰ（ＨｙｐｅｒｔｅｘｔＴｒａｎｓｆｅｒＰｒｏｔｏｃｏｌ）データを受信した場合には、ＨＴＴＰ解析部２０３にデータを渡す。たり、各プロトコルを通信情報に変換して、ネットワークポート２０１に渡す。また、プロトコルスタック２０２は、ＨＴＴＰ解析部２０３やコネクションマネージャ２０５から渡された情報をプロトコルに合成して、ネットワークポート２０１を介してＬＡＮ１０３に送信する。一方、ネットワークポート２０７は、図１のインターネット１０４に接続され、インターネット１０４上の機器と相互に通旬することが可能である。プロトコルスタック２０６はネットワークポート２０７から受信したデータをプロトコルに対応したデータ形式に変換し、プロトコルがＨＴＴＰだった場合に、ＨＴＴＰ解析部２０３にデータを渡す、ＨＴＴＰ解析部２０３で、ネットワークポート２０７で受信したデータを解析し、インターネット１０４上の情報処理装置に対する接続要求であった場合に、コネクションマネージャ２０５に対してインターネット１０４上の情報処理装置への接続指示を発行する。また、ネットワークポート２０７を介してインターネット上から受信したデータを解析し、コネクションマネージャ２０５に指示を出す。コネクションマネージャ２０５はＨＴＴＰ解析部からの指示により、プロトコルスタック２０２及びプロトコルスタック２０６を制御して各コネクションの接続、切断等の管理を行う。データ保存部２０４はコネクションに関する各種情報を保存する。 FIG. 2 is an internal configuration example of an information processing apparatus (corresponding to 103 in FIG. 1) for realizing the present invention. Reference numeral 201 denotes a network port which is connected to the LAN 103 in FIG. 1 and can communicate with devices connected to the LAN 103. The protocol stack 202 converts communication information received from the LAN 103 via the network port 201 into a data format corresponding to the protocol, and when receiving HTTP (Hypertext Transfer Protocol) data, passes the data to the HTTP analysis unit 203. . Each protocol is converted into communication information and passed to the network port 201. Further, the protocol stack 202 synthesizes information passed from the HTTP analysis unit 203 and the connection manager 205 into a protocol and transmits it to the LAN 103 via the network port 201. On the other hand, the network port 207 is connected to the Internet 104 in FIG. 1 and can communicate with devices on the Internet 104. The protocol stack 206 converts the data received from the network port 207 into a data format corresponding to the protocol, and passes the data to the HTTP analysis unit 203 when the protocol is HTTP. The HTTP analysis unit 203 receives the data at the network port 207. In response to a request for connection to the information processing apparatus on the Internet 104, the connection manager 205 issues a connection instruction to the information processing apparatus on the Internet 104. It also analyzes data received from the Internet via the network port 207 and issues an instruction to the connection manager 205. The connection manager 205 controls the protocol stack 202 and the protocol stack 206 according to an instruction from the HTTP analysis unit, and manages connection and disconnection of each connection. The data storage unit 204 stores various information related to the connection.

図５は接続管理テーブルで、図２のデータ保存部２０４に配置される。内部ネットワーク上の情報処理装置より外部ネットワーク上の情報処理装置に接続要求があり、プロキシサーバと外部ネットワークの情報処理装置との間で接続が行われた場合に、関連する情報がテーブルに追加され、一連の処理が終了するとテーブルから削除される。接続管理テーブルには、接続要求元の内部ネットワーク上の情報処理装置との接続を識別する接続ＩＤ、接続状態、接続先の外部ネットワーク上の情報処理装置のＩＰアドレスと接続を識別する接続ＩＤ、そして中断中の内部情報処理装置との接続を識別する識別ＩＤからなる。図２のコネクションマネージャ２０５は、接続管理テーブルを参照し、同じ行に記載された内部情報処理装置との接続ＩＤと外部情報処理装置との接続ＩＤがそれぞれ示す、２つの接続間でデータの中継を行う。 FIG. 5 is a connection management table and is arranged in the data storage unit 204 of FIG. When there is a connection request from the information processing device on the internal network to the information processing device on the external network, and the connection is made between the proxy server and the information processing device on the external network, the related information is added to the table. When the series of processing is completed, it is deleted from the table. The connection management table includes a connection ID for identifying a connection with an information processing apparatus on the internal network of the connection request source, a connection state, a connection ID for identifying the IP address and connection of the information processing apparatus on the external network of the connection destination, It consists of an identification ID that identifies the connection with the interrupted internal information processing apparatus. The connection manager 205 in FIG. 2 refers to the connection management table, and relays data between two connections indicated by the connection ID with the internal information processing apparatus and the connection ID with the external information processing apparatus described in the same row, respectively. I do.

以下、図３と図４のフローチャート及び図５の接続管理テーブルを用いて、本発明を実現する図１の情報処理装置１０３におけるデータ中継処理の一例を説明する。 Hereinafter, an example of data relay processing in the information processing apparatus 103 in FIG. 1 that implements the present invention will be described using the flowcharts in FIGS. 3 and 4 and the connection management table in FIG.

まず、ステップＳ３０１で、図２のネットワークポート２０１を介して、内部ネットワーク上の情報処理装置（以下、内部情報処理装置と称する）から接続要求が送られたかどうかを判定する。この判定は、図２のＨＴＴＰハンドラ２０３において、ＨＴＴＰポート（ポート番号８０）に対してコネクション要求があったかどうに関して行われる。接続要求を受信した場合、ステップＳ３０２に進み、接続先が外部ネットワーク上の情報処理装置（図１の１０５に相当、以下、外部情報処理装置と称する）かどうかをＨＴＴＰのＨｏｓｔヘッダにより判定する。Ｈｏｓｔヘッダには、接続先の情報処理装置を一意に表すＩＰアドレスあるいはドメイン名を含んだ正式名（ＦＱＤＮ）が指定されることから、接続先がプロキシサーバが配置された組織内に属するかどうかを判定することが出来る。外部情報処理装置への接続ではない場合、即ち内部情報処理装置への接続要求であった場合、該プロキシサーバ機能を利用せずに直接通信が可能であるため、ステップＳ３０３でエラー返答後、ステップＳ３０７に進む。ステップＳ３０２で接続先が外部情報処理装置であったと判定された場合、ステップＳ３０４で、図２のコネクションマネージャ２０５に対して、要求先の外部情報処理装置に対して接続するように指示を出す。次にステップＳ３０５で、外部情報処理装置との接続に成功したかどうかを判定し、失敗したらステップＳ３０３でエラー返答を行った後、ステップＳ３０７に進む。ステップＳ３０５で接続に成功したと判定されると、ステップＳ３０６で図５の接続管理テーブルに、接続元の内部情報処理装置の識別情報と接続先の外部情報処理装置の識別情報及び、それぞれとの接続を識別する接続識別情報、そして接続状態を「接続中」とした接続情報を登録し、ステップＳ３０７の処理に移動する。接続元の内部ネットワーク上の情報処理装置及び接続先の外部ネットワーク上の情報処理装置のそれぞれとプロキシサーバとの接続を示す識別情報は、ＢｅｒｋｌｅｙＳｏｃｋｅｔＡＰＩにおけるソケット記述子を利用することが出来る。ステップＳ３０７では、図２のネットワークポート２０７を介して、外部情報処理装置から、接続中断要求を受信したかどうかを判定する。接続中断要求を受信していなければ、図４のステップＳ４０１へ進み、接続中断要求を受信したと判定した場合、ステップＳ３０８で、図５の接続管理テーブルの当該接続（図５の５０１に相当）に関する、接続状態欄を「接続中」から「中断」に変更し、接続中断要求に含まれる接続識別コードを設定する。そして、ステップＳ３０９で、図２のコネクションマネージャ２０５に対して外部情報処理装置との接続を切断するように指示を出して、ステップＳ４０１の処理に進む。ステップＳ４０１では、外部情報処理装置から接続再開要求を受信したかどうかを判定し、受信していなければステップＳ４０６へ進む。ステップ４０１で、外部情報処理装置から接続再開要求を受信したと判定されると、ステップＳ４０２で、接続再開要求に含まれる接続識別コードが図５に示すような接続テープルに記載されているかを判定し、記載されていなければ当該装置は接続を再開する権限が無いことを示すため、ステップＳ４０３でエラー応答を行った後に、接続再開要求を送った外部情報処理装置との接続を切断して、ステップＳ４０６の処理に移動する。ステップＳ４０２で接続再開要求に含まれる接続識別コードが、図５に示すような接続管理テーブルの記載項目と一致した場合、例えば図５の５０１に示す行で、接続識別コードが、「0123456789」となっているが、接続再開要求としてこの値が設定されていた場合、ステップＳ４０４で、当該行に含まれている内部接続ＩＤが示す内部ネットワーク上の情報処理装置との接続と、接続再開要求を送信した外部情報処理装置との外部接続の関連付けを行う。そして、ステップＳ４０５で図５の接続管理テーブルの当該行（図５の５０１に相当）で、外部接続IDを現在の接続IDに、状態を「中断」から「接続中」に、識別情報を空欄に、それぞれ変更して、ステップＳ４０６の処理に移動する。ステップＳ４０６では、終了要求が送られたかどうかを判定し、受信していれば処理を終了し、受信していなければ、図３のステップＳ３０１の処理に戻り、これまで説明してきた処理を繰り返す。 First, in step S301, it is determined whether a connection request is sent from an information processing apparatus on the internal network (hereinafter referred to as an internal information processing apparatus) via the network port 201 of FIG. This determination is made as to whether or not there is a connection request for the HTTP port (port number 80) in the HTTP handler 203 of FIG. When the connection request is received, the process proceeds to step S302, and it is determined by the HTTP Host header whether the connection destination is an information processing apparatus on the external network (corresponding to 105 in FIG. 1, hereinafter referred to as an external information processing apparatus). In the Host header, an official name (FQDN) including an IP address or a domain name that uniquely represents the information processing apparatus of the connection destination is specified, so whether or not the connection destination belongs to the organization where the proxy server is arranged. Can be determined. If it is not a connection to the external information processing apparatus, that is, if it is a connection request to the internal information processing apparatus, direct communication is possible without using the proxy server function. The process proceeds to S307. If it is determined in step S302 that the connection destination is an external information processing apparatus, in step S304, the connection manager 205 in FIG. 2 is instructed to connect to the requesting external information processing apparatus. Next, in step S305, it is determined whether or not the connection with the external information processing apparatus has succeeded. If the connection fails, an error response is made in step S303, and the process proceeds to step S307. If it is determined in step S305 that the connection is successful, in step S306, the connection management table in FIG. 5 stores the identification information of the connection source internal information processing apparatus, the identification information of the connection destination external information processing apparatus, and The connection identification information for identifying the connection and the connection information with the connection state “connected” are registered, and the process proceeds to step S307. As the identification information indicating the connection between the information processing apparatus on the connection source internal network and the information processing apparatus on the connection destination external network and the proxy server, a socket descriptor in the Berkeley Socket API can be used. In step S307, it is determined whether a connection interruption request has been received from the external information processing apparatus via the network port 207 in FIG. If the connection interruption request has not been received, the process proceeds to step S401 in FIG. 4. If it is determined that the connection interruption request has been received, the connection in the connection management table in FIG. 5 (corresponding to 501 in FIG. 5) is determined in step S308. Change the connection status column from “connected” to “suspended” and set the connection identification code included in the connection suspension request. In step S309, the connection manager 205 in FIG. 2 is instructed to disconnect the external information processing apparatus, and the process proceeds to step S401. In step S401, it is determined whether a connection resumption request has been received from the external information processing apparatus. If not received, the process proceeds to step S406. If it is determined in step 401 that a connection resumption request has been received from the external information processing apparatus, it is determined in step S402 whether or not the connection identification code included in the connection resumption request is described in the connection table as shown in FIG. If it is not described, it indicates that the device is not authorized to resume the connection, and after making an error response in step S403, disconnects the connection with the external information processing device that sent the connection resume request, The process proceeds to step S406. If the connection identification code included in the connection resumption request in step S402 matches the item described in the connection management table as shown in FIG. 5, the connection identification code is “0123456789” on the line 501 in FIG. However, if this value is set as a connection resumption request, in step S404, a connection with the information processing apparatus on the internal network indicated by the internal connection ID included in the row and a connection resumption request are sent. The external connection with the transmitted external information processing apparatus is associated. In step S405, in the corresponding row of the connection management table in FIG. 5 (corresponding to 501 in FIG. 5), the external connection ID is changed to the current connection ID, the status is changed from “suspended” to “connected”, and the identification information is blank. And change to the processing of step S406. In step S406, it is determined whether an end request has been sent. If received, the process ends. If not received, the process returns to step S301 in FIG. 3 to repeat the processes described so far.

以上、説明したように本実施形態によれば、内部ネットワークと外部ネットワークの両方と接続可能な情報処理装置（プロキシサーバ）が、内部ネットワーク上の情報処理装置（内部情報処理装置）と外部ネットワーク上の情報処理装置（外部情報処理装置）との間でデータの中継を行い、接続中の外部情報処理装置より接続中断要求を受信すると、識別情報を保存し、内部情報処理装置との接続を保持したまま、外部情報処理装置との接続を切断する。次に外部情報処理装置から接続再開要求を受信すると、保存している識別情報と比較し、これが一致していれば、内部情報処理装置とのデータ中継を再開することにより、プロキシサーバにおけるセキュリティ設定を弱めることなく、外部情報処理装置との接続の中断および再開を可能とし、外部ネットワークの無用な接続による帯域占有を防ぐことが可能になる。 As described above, according to the present embodiment, the information processing apparatus (proxy server) that can be connected to both the internal network and the external network is the information processing apparatus (internal information processing apparatus) on the internal network and the external network. Relays data to other information processing devices (external information processing devices), saves identification information when a connection interruption request is received from a connected external information processing device, and maintains a connection with the internal information processing device The connection with the external information processing apparatus is cut off. Next, when a connection resumption request is received from the external information processing device, it is compared with the stored identification information, and if it matches, the data relay with the internal information processing device is resumed, thereby setting the security setting in the proxy server. The connection with the external information processing apparatus can be interrupted and resumed without weakening the bandwidth, and it is possible to prevent band occupation due to unnecessary connection of the external network.

（実施例２）
第一実施形態では、プロキシサーバは、外部情報処理装置から接続中断要求があると、外部情報処理装置との接続を切断するものの内部情報処理装置との接続は維持していた。しかし、内部ネットワークにおいては、プロキシサーバと内部情報処理装置間での接続に関して制限はない事から、プロキシサーバが外部情報処理装置から接続中断要求を受信した場合、内部情報処理装置に対して接続を中断するかどうかを確認し、中断可能であると応答（接続中断許諾応答）があった場合に、内部情報処理装置との接続も切断し、対応する外部情報処理装置から接続再開要求があった場合に、内部情報処理装置との接続を再開するようにしてもよい。この場合、内部情報処理装置は、プロキシサーバを介して外部処理装置からの結果が何時送信されてくるかが分からないことから、イベントシンクと呼ばれるＨＴＴＰを受信する接続点を設け、このアドレス（ＵＲＬ）を接続中断許諾応答に含み、図２のデータ保存部２０４に保存することにより、プロキシサーバが外部情報処理装置からの再開要求を受信した際に、このアドレスとの間で接続を開始することが可能である。 (Example 2)
In the first embodiment, when there is a connection interruption request from the external information processing apparatus, the proxy server disconnects the connection with the external information processing apparatus but maintains the connection with the internal information processing apparatus. However, in the internal network, there is no restriction on the connection between the proxy server and the internal information processing device. Therefore, when the proxy server receives a connection interruption request from the external information processing device, it connects to the internal information processing device. Check whether or not to interrupt, and if there is a response (connection interruption permission response) that it can be interrupted, the connection with the internal information processing device is also disconnected, and a connection restart request is received from the corresponding external information processing device In this case, the connection with the internal information processing apparatus may be resumed. In this case, since the internal information processing device does not know when the result from the external processing device is transmitted via the proxy server, a connection point for receiving HTTP called an event sink is provided, and this address (URL ) Is included in the connection interruption permission response and is stored in the data storage unit 204 in FIG. 2, so that when the proxy server receives a restart request from the external information processing apparatus, the connection with this address is started. Is possible.

本実施形態によれば、内部ネットワークに接続された情報処理装置（内部情報処理装置）と外部ネットワークに接続された情報処理装置（外部情報処理装置）の間でプロキシサーバを介して接続されている場合に、外部情報処理装置から接続中断要求を受信したプロキシサーバは、接続中断要求に含まれる接続識別情報を保存するとともに外部情報処理装置との接続を切断する一方、内部情報処理装置に対して、接続の切断が可能かどうかを問い合わせ、切断可能通知が返却されると内部情報処理装置との接続を切断し、外部情報処理装置が再接続されたと同時に再接続することにより、内部情報処理装置において、外部情報処理装置からの結果を得るまで、プロキシサバーとの接続を維持する必要が無くなり、内部ネットワークにおける帯域の占有を防ぐと共に、内部情報処理装置における待ち処理を無くすることを可能にする。 According to the present embodiment, the information processing apparatus (internal information processing apparatus) connected to the internal network and the information processing apparatus (external information processing apparatus) connected to the external network are connected via the proxy server. In this case, the proxy server that has received the connection interruption request from the external information processing apparatus stores the connection identification information included in the connection interruption request and disconnects the connection with the external information processing apparatus. Inquires whether or not the connection can be disconnected. When the disconnection notification is returned, the connection with the internal information processing device is disconnected, and the external information processing device is reconnected at the same time as the internal information processing device. In this case, it is not necessary to maintain the connection with the proxy server until the result from the external information processing device is obtained. It prevents the occupation, allowing to eliminate the waiting process inside the information processing apparatus.

本発明を実現するシステム構成例。The system structural example which implement | achieves this invention. 本発明を実現する情報処理装置（プロキシサーバ）の内部構成例。The internal structural example of the information processing apparatus (proxy server) which implement | achieves this invention. 本発明を実現する情報処理装置（プロキシサーバ）における、データ中継処理の一例。An example of the data relay process in the information processing apparatus (proxy server) which implement | achieves this invention. 本発明を実現する情報処理装置（プロキシサーバ）における、データ中継処理の一例。An example of the data relay process in the information processing apparatus (proxy server) which implement | achieves this invention. 本発明を実現するプロキシサーバで管理される接続管理テーブルの一例。An example of the connection management table managed with the proxy server which implement | achieves this invention.

Explanation of symbols

１０１処理依頼元の情報処理装置
１０２内部ネットワーク
１０３データ中継機能を実現する情報処理装置
１０４外部ネットワーク
１０５処理依頼先の情報処理装置 DESCRIPTION OF SYMBOLS 101 Information processing apparatus of request source 102 Internal network 103 Information processing apparatus which implement | achieves data relay function 104 External network 105 Information processing apparatus of process request destination

Claims

A data relay system that can be connected to an internal network (internal network) and an external network (external network) by an arbitrary communication medium, and communicates with an information processing apparatus belonging to the internal network. Means, internal request determination means for determining a request received by the internal communication means, and information processing on the external network when the internal request determination means determines that the request is for an information processing apparatus existing on the external network Connection between external communication means for communicating with the apparatus, external request determination means for determining a request sent from the information processing apparatus on the external network by the external communication means, and information information processing apparatus on the internal network by the internal communication means And relay data between the external communication means and the information processing device on the external network. And relay means, when requested by an external request determining means determines that the connection interrupt, the data relay system comprising: a storage means for storing identification information included in the connection interrupt request.

2. The data relay system according to claim 1, wherein the identification information included in the connection interruption request received by the external communication means is arbitrary information for uniquely specifying a connection in the external information processing apparatus.

The identification information of the information processing apparatus of the connection destination that is stored in association with the identification information included in the connection interruption request by the storage unit is an IP address of the information processing apparatus. And 2 data relay system.

When a connection interruption request is received from an information processing apparatus on an external network connected by the external communication unit, the storage unit stores the identification information and disconnects the connection with the information processing apparatus on the external network. The data relay system according to any one of claims 1 to 3.

When the external request determination means determines that a connection resumption request has been received from an information processing apparatus on an external network, a pair of identification information included in the connection resumption request and identification information of the information processing apparatus is stored in the storage means 5. The data relay system according to claim 1, wherein, when the information matches the information stored in step 1, the connection to the information processing apparatus is resumed by the external communication unit.

The communication protocol between the information processing apparatus on the internal network and the information processing apparatus on the external network that is relayed by the relay means is HTTP (Hypertext Transfer Protocol), and relays a plurality of HTTP connections. The data relay system according to claim 1.

If a connection interruption request is received from an information processing device on an external network connected by the external communication means, is it possible to interrupt the connection to the information processing device on the internal network associated with the information processing device? The data relay system according to any one of claims 1 to 6, wherein the connection to the information processing apparatus on the internal network is disconnected when an inquiry is made and a response is made that it is possible.

The information stored by the storage unit is stored by associating connection identification information with an information processing apparatus on an internal network, identification information of the information processing apparatus on a connection destination external network, and a connection identifier. The data relay system according to claim 1.

A data relay method in an information processing apparatus that can be connected to an internal network (internal network) and an external network (external network) by an arbitrary communication medium, and communicates with an information processing apparatus belonging to the internal network An internal communication means that performs a request, an internal request determination means that determines a request received by the internal communication means, and an external network when the internal request determination means determines that the request is for an information processing apparatus existing on the external network. External communication means for communicating with the above information processing apparatus, external request determination means for determining a request sent from the information processing apparatus on the external network by the external communication means, and information processing on the internal network by the internal communication means Between the connection with the device and the connection with the information processing device on the external network by the external communication means Data comprising: relay means for relaying data; and storage means for storing identification information included in the connection interruption request when the external request determination means determines that the request is connection interruption. Relay method.

10. The data relay method according to claim 9, wherein the identification information included in the connection interruption request received by the external communication unit is arbitrary information for uniquely specifying a connection in the external information processing apparatus.

10. The identification information of the information processing apparatus of the connection destination that is stored in association with the identification information included in the connection interruption request by the storage unit is an IP address of the information processing apparatus. And 10 data relay methods.

When a connection interruption request is received from an information processing apparatus on an external network connected by the external communication unit, the storage unit stores the identification information and disconnects the connection with the information processing apparatus on the external network. 12. The data relay method according to claim 9-11.

When the external request determination means determines that a connection resumption request has been received from an information processing apparatus on an external network, a pair of identification information included in the connection resumption request and identification information of the information processing apparatus is stored in the storage means 13. The data relay method according to claim 9, wherein when the information matches with the information stored in step (b), the connection with the information processing apparatus is resumed by the external communication unit.

The communication protocol between the information processing apparatus on the internal network and the information processing apparatus on the external network that is relayed by the relay means is HTTP (Hypertext Transfer Protocol), and relays a plurality of HTTP connections. 14. The data relay method according to claim 9-13.

If a connection interruption request is received from an information processing device on an external network connected by the external communication means, is it possible to interrupt the connection to the information processing device on the internal network associated with the information processing device? The data relay method according to any one of claims 9 to 14, wherein the connection with the information processing apparatus on the internal network is disconnected when an inquiry is made and a response is made that the response is possible.

The information stored by the storage unit is stored by associating connection identification information with an information processing apparatus on an internal network, identification information of the information processing apparatus on a connection destination external network, and a connection identifier. The data relay method according to claim 9 to 15.