JP2008097217A - Image processor and information processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To switch to inter-device direct communication after session establishment in a system where the communication of devices is relayed. <P>SOLUTION: This image processor for relaying inter-device communication via a network is provided with a session establishment means for establishing session with the first device and a direct communication switching means for, after session is established by the session establishment means, notifying a second device of the session information of the first device to switch to the direct communication of the first device and the second device. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an image processing apparatus and an information processing apparatus that relay communication between apparatuses via a network, and in particular, provides an image processing apparatus and an information processing apparatus that can be switched to direct communication between apparatuses after a session is established. To do.

  Conventionally, as shown in FIG. 1, a relay server is provided to manage communication between a plurality of image processing apparatuses and a plurality of client apparatuses existing on the network, and a session is shared between the plurality of image processing apparatuses, Centralized management of authentication processing has been done.

  In the relay server shown in FIG. 1, in communication with each client apparatus, a session is established based on the authentication result using the authentication server, and each request received after the session is established is transmitted to the image processing apparatus that is the destination of the request. Was.

With such a system, since it is not necessary to provide a session management function and an authentication function for each image processing apparatus, the load on the image processing apparatus can be reduced.
JP 2005-166024 A

  However, when the number of client devices increases, there is a problem in that the load on the relay server increases and the performance of communication between the image processing device and the client device decreases.

  Therefore, an object of the present invention is to provide an image processing apparatus and an information processing apparatus that can switch to direct communication between apparatuses after establishing a session in a system in which communication between apparatuses is relayed.

  In order to solve the above-described problem, the present invention provides an image processing apparatus that relays communication between apparatuses via a network, session establishing means for establishing a session with a first apparatus, and session establishment by the session establishing means Then, it is configured to have direct communication switching means for switching to direct communication between the first device and the second device by notifying the second device of session information of the first device.

  In such an image processing apparatus, it is possible to switch to direct communication between apparatuses after session establishment.

  In the present invention, in a system in which communication between devices is relayed, direct communication between devices can be switched after session establishment.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 2 is a diagram illustrating an example of a system configuration according to an embodiment of the present invention. In the system 1001 illustrated in FIG. 2, one or more client apparatuses 3, a session management server 10, an authentication server 60, an authority check server 70, and one or more image processing apparatuses 100 are connected to each other via the network 2. It is connected.

  The client device 3 is a computer terminal used by the user, and starts communication with the image processing device 100 via the session management server 10.

  The authentication server 60 is a computer device that authenticates a user who uses the client apparatus 3 in response to a connection request from the client apparatus 3 to the image processing apparatus 100. For example, in response to an authentication request from the session management server 10 Execute user authentication processing.

  The authority check server 70 is a computer device that determines the authority that can be used by the user who uses the client device 3. For example, the authority check server 70 determines the authority of the user in response to an authority check request from the session management server 10.

  The image processing apparatus 100 has various image processing functions such as a copy, a printer, and a scanner, and after receiving a connection request with the client apparatus 3 from the session management server 10, executes direct communication with the client apparatus 3, The processing requested by the device 3 is provided as a Web service, for example.

  In the system 1001, the session management server 10 operates as a relay server, manages a session between the image processing apparatus 100 and the client apparatus 3, and establishes a session between the image processing apparatus 100 and the client apparatus 3. It has a session management framework 10a that controls direct communication with the client device 3, and a variable unit 10b that generates an instance related to a session based on a class diagram.

  FIG. 3 is a diagram showing another example of a system configuration according to an embodiment of the present invention. In the system 1002 illustrated in FIG. 3, one or more client apparatuses 3, an authentication server 60, an authority check server 70, and one or more image processing apparatuses 100 are connected to each other via the network 2.

  In the system 1002, a session management framework 10a and a changing unit 10b for operating as a relay server are provided in one of the plurality of image processing apparatuses 100. By configuring the system in this way, the session management server 10 can be omitted. Communication performed via the session management server 10 in the description in FIG. 2 is described by replacing the image processing apparatus 100 that can operate as a relay server.

  FIG. 4 is a block diagram illustrating a hardware configuration example of an image processing apparatus according to an embodiment of the present invention. In FIG. 4, an image processing apparatus 100 is an apparatus controlled by a computer, and includes a CPU (Central Processing Unit) 11, a ROM (Read-Only Memory) 12, a RAM (Random Access Memory) 13, and a nonvolatile memory. The RAM 14, the communication controller 23, the hard disk I / F 24, the engine I / F 25, the RS-232C I / F 26, and the driver 27 are connected to the system bus B 1.

  The CPU 11 controls the image processing apparatus 100 according to a program stored in the ROM 12. In the RAM 13, for example, areas are allocated to resources connected to the interfaces 21 to 26. The nonvolatile RAM 14 stores information necessary for processing by the CPU 11 in order to control the image processing apparatus 100.

  The communication control device 23 performs communication control with the client device 3 via the network 2. A hard disk 34 is connected to the hard disk I / F 24, and document data of a document to be printed or image data after print processing transmitted via the network is stored in the hard disk 34 via the hard disk I / F 24. .

  Connected to the engine I / F 25 are a plotter 35-1 for printing on a predetermined medium based on document data, a scanner 35-2 for capturing image data, and the like. An operation panel 36 is connected to the RS-232C I / F 26 to display information to the user and acquire input information from the user.

  FIG. 5 is a block diagram illustrating a hardware configuration example of the session management server. In FIG. 5, the session management server 10 is a terminal controlled by a computer, and includes a CPU (Central Processing Unit) 51, a memory unit 52, a display unit 53, an output unit 54, an input unit 55, and communication. The unit 56 includes a storage device 57 and a driver 58, and is connected to the system bus B2.

  The CPU 51 controls the session management server 10 according to a program stored in the memory unit 52. The memory unit 52 includes a RAM (Random Access Memory), a ROM (Read-Only Memory), and the like, and is obtained by a program executed by the CPU 51, data necessary for processing by the CPU 51, and processing by the CPU 51. Stored data. Further, a partial area of the memory unit 52 is allocated as a work area used for processing by the CPU 51.

  The display unit 53 displays various information required under the control of the CPU 51. The output unit 54 has a printer or the like and is used to output various types of information in accordance with instructions from the user. The input unit 55 includes a mouse, a keyboard, and the like, and is used by a user to input various information necessary for the session management server 10 to perform processing. The communication unit 56 is a device for controlling communication with another device when the session management server 10 is connected to the other device via the network 2. The storage device 57 is composed of, for example, a hard disk unit, and stores data such as programs for executing various processes.

  Since the hardware configurations of the authentication server 60, the authority check server 70, and the client device 3 are the same, description thereof is omitted.

  The processing by the session management framework 10a and the changing unit 10b provided in the session management server 10 can be realized by a computer-executable program.

  For example, it is provided to the session management server 10 by a storage medium 59 such as a CD-ROM (Compact Disc Read-Only Memory). That is, when the storage medium 59 storing the program is set in the driver 58, the driver 58 reads the program from the storage medium 59, and the read program is installed in the storage device 57 via the system bus B. . When the program is activated, the CPU 51 starts its processing according to the program installed in the storage device 57. The medium for storing the program is not limited to a CD-ROM, and any medium that can be read by a computer is acceptable. The program for realizing the processing according to the present invention may be downloaded via the network by the communication unit 56 and installed in the storage device 57.

  Further, by storing such a program in a predetermined storage area of the image processing apparatus 100, the system 1002 shown in FIG. 3 can be realized.

  In the following, description will be made by positioning the components of the session management framework 10a and the changing unit 10b as the relay server 90.

  FIG. 6 is a diagram illustrating a sequence at the start of a session. In FIG. 6, the client apparatus 3 requests the start of a session by transmitting a user ID and a password to a predetermined relay server 90 (step S1).

  When the relay server 90 receives the session start request from the client device 3, the relay server 90 makes an authentication request by transmitting the received user ID and password to the authentication server 60 (step S2). The authentication server 60 performs an authentication process with the received user ID and password, and when the authentication is successful, issues an authentication ticket and transmits it to the relay server 90 (step S3).

  Next, when the relay server 90 receives the authentication ticket, the relay server 90 sends a user ID and a password to the authority check server 70 to make an authority check request (step S4). The authority check server 70 performs an authority check process using the received user ID and password, and transmits the check result to the relay server 90 (step S5). If the authentication fails, the relay server 90 does not make an authority check request, notifies the client device 3 of the authentication failure, and does not establish a session.

  The relay server 90 establishes a session according to the check result by the authority check server 70 (step S6). Thereafter, the relay server 90 notifies the client device 3 of the session ID (step S7).

  The procedure in the relay server 90 in the sequence shown in FIG. 6 is controlled by the session management framework 10a, and an instance related to the session established in the changing unit 10b is generated.

  FIG. 7 is a diagram illustrating an example of instances generated at the start of a session. In FIG. 7, when the authentication is successful, a user authentication information instance 102a is generated. The user authentication information instance 102a indicates a certificate indicating authentication success, an authentication ticket, and the like. The user authentication information instance 102a is associated with the service user instance 103a.

  The service user instance 103 a is an instance generated when a session start request from the client device 3 is received, and represents the client device 3. The service user instance 103a is associated with a user authentication information instance 102a generated after authentication and a usage right instance 104a generated when establishing a session after the authority check.

  The usage right instance 104a is an instance generated when a session is established after the authority check, and manages session information and the like. The usage right instance 104a is associated with the service user instance 103a, and is associated with the device instance 106a-2 and the device instance 106a-4 representing the image processing apparatus every time the user makes a connection request.

  For example, when the user makes a processing request from the client apparatus 3 to one of the image processing apparatuses 100, the device instance 106 a-2 is generated, and when a processing request is made to another image processing apparatus 100, the device instance 106 a-4 Generated.

  The device instances 106a-2 and 106a-4 represent devices such as the image processing apparatus 100 on the network that can be used by the user. Each of the device instances 106a-2 and 106a-4 is associated with the usage right instance 104a. Also, the device management service instance 107a-1 and the FAX service instance 107a-2 associated with the device instance 106a-2 represent Web services of this device that can be used by the user. Similarly, the print service instance 107a-5, the repository service instance 107a-6, and the FAX service instance 107a-7 associated with the device instance 106a-4 represent Web services of this device that can be used by the user. .

  FIG. 8 is a diagram illustrating an example of a sequence from the request execution to the image processing apparatus of the client apparatus to the end of the session. In FIG. 8, after executing the sequence shown in FIG. 6, the client apparatus 3 transmits a request including the session ID issued from the relay server 90 to the relay server 90 (step S101).

  The relay server 90 transmits an authentication ticket confirmation request to the authentication server 60 (step S102). After confirming the authentication ticket, the authentication server 60 transmits a confirmation result notification to the relay server 90 (step S103). In this case, it is assumed that a confirmation result notification indicating “OK” is transmitted.

  When the relay server 90 receives the confirmation result notification indicating “OK”, the relay server 90 transmits a request to the image processing apparatus 100 (step S104). The image processing apparatus 100 executes processing according to the request, and transmits a result notification indicating the processing result to the relay server 90 (step S105).

  Thereafter, the relay server 90 confirms the relay connection (step S106), and confirms that a session with the client apparatus 3 exists. When the relay server 90 confirms that a session exists, an image such as session information, an authentication ticket, and authority information indicating an available service is displayed. The processing apparatus 100 transmits information necessary for direct communication with the client apparatus 3 to the image processing apparatus 100 (step S107).

  Further, the relay server 90 includes the location of the image processing apparatus 100 to which the client apparatus 3 is directly connected in the result notification received from the image processing apparatus 100, including a URL (Uniform Resource Locator) or an IP address. (Step S108).

  The client apparatus 3 directly transmits a request including the session ID to the image processing apparatus 100 (step S109). The image processing apparatus 100 makes an authentication ticket confirmation request to the authentication server 60 using the authentication ticket corresponding to the session ID included in the request (step S110). After confirming the authentication ticket, the authentication server 60 transmits a confirmation result notification to the image processing apparatus 100 (step S111). In this case, it is assumed that a confirmation result notification indicating “OK” is transmitted.

  Upon receiving the confirmation result notification indicating “OK” from the authentication server 60, the image processing apparatus 100 executes processing according to the request received in step S 109 and transmits a result notification indicating the processing result to the client device 3. (Step S112).

  Thereafter, when a session end request is received from the client apparatus 3 (step S113), the image processing apparatus 100 discards the session information, authentication ticket, authority information, etc. that were received and managed from the relay server 90 in step S107 (step S113). S114). Then, the image processing apparatus 100 notifies the relay server 90 that the client apparatus 3 has requested to end the session by transmitting a session end request (step S115).

  In response to the session end notification, the relay server 90 transmits an authentication ticket discard request including the authentication ticket issued to the client device 3 to the authentication server 60 (step S116). The authentication server 60 discards the requested authentication ticket and transmits a discard completion notification to the relay server 90 (step S117).

  After receiving the discard completion notification from the authentication server 60, the relay server 90 transmits a session end notification to the image processing apparatus 100 (step S118). After receiving the session end notification from the relay server 90, the image processing apparatus 100 transmits the session end notification to the client device 3 (step S119).

  As described above, the relay server 90 relays between the client apparatus 3 and the image processing apparatus 100 at least once. The relay server 90 transmits information such as session information regarding the client device 3 held in the relay server 90, an authentication ticket, and authority information indicating available services to the image processing apparatus 100. The relay server 90 holds information about the client device 3 inside after transmission.

  The relay server 90 also allows the client apparatus 3 to directly connect to the image processing apparatus 100 without going through the relay server 90. The image processing apparatus 100 such as the URL or IP address of the image processing apparatus 100 can be used. Send information that can identify the location of

  FIG. 9 is a diagram showing the behavior of the framework when executing a request from the client device. In FIG. 9, the same reference numerals are assigned to the same instances as those in FIG.

  In FIG. 9, when the relay server 90 receives a request from the client apparatus 3 in step S101 of FIG. 8, the relay server 90 generates a request form instance 130a in association with the service user instance 103a representing the user.

  The request form instance 130a is associated with the device instance 106a-4 representing the requested image processing apparatus 100, whereby the request request is executed. This corresponds to step S104 in FIG.

  FIG. 10 is a diagram illustrating the movement of the framework when the relay server determines relay continuation. In FIG. 10, the same reference numerals are given to the same instances as those in FIGS. 7 and 9, and the description thereof is omitted.

  In FIG. 10, when the relay server 90 determines to continue relaying in step S106, the relay server 90 generates a relay continuation condition instance 140a in association with the request form instance 130a.

  When the processing result corresponding to the request is received from the image processing apparatus 100, the request form instance 130a requests continuation confirmation from the relay continuation condition instance 140a which is a resident instance.

  The relay continuation condition instance 140a holds the conditions in the system, and determines whether or not to continue relaying according to the conditions. For example, when the number of requests received is a condition, the service use instance 103a holds the number of times a request used for condition determination is received as an attribute.

  When it is determined that the relay is stopped in the relay continuation determination, the request form instance 130a notifies the device 106a-4 representing the image processing apparatus 100 that the relay is stopped. The device 106a-4 acquires the session information, authority information, and the like of the client device 3 from the usage right instance 104a and the service user instance 103a, and transmits them to the image processing device 100. This corresponds to step S107 in FIG.

  FIG. 11 is a diagram showing a sequence in the case where a session has expired. In FIG. 11, after executing the sequence shown in FIG. 6, the client device 3 transmits a request including the session ID issued from the relay server 90 to the relay server 90 (step S201).

  The relay server 90 transmits an authentication ticket confirmation request to the authentication server 60 (step S202). After confirming the authentication ticket, the authentication server 60 transmits a confirmation result notification to the relay server 90 (step S203). In this case, it is assumed that a confirmation result notification indicating “OK” is transmitted.

  When the relay server 90 receives the confirmation result notification indicating “OK”, the relay server 90 transmits a request to the image processing apparatus 100 (step S204). The image processing apparatus 100 executes processing according to the request, and transmits a result notification indicating the processing result to the relay server 90 (step S205).

  Thereafter, the relay server 90 confirms the relay connection (step S206), and confirms that a session with the client apparatus 3 exists. When the relay server 90 confirms that the session exists, an image of session information, an authentication ticket, authority information indicating an available service, and the like. The processing apparatus 100 transmits information necessary for direct communication with the client apparatus 3 to the image processing apparatus 100 (step S207).

  Further, the relay server 90 includes the location of the image processing apparatus 100 to which the client apparatus 3 is directly connected in the result notification received from the image processing apparatus 100, including a URL (Uniform Resource Locator) or an IP address. (Step S208).

  The client device 3 transmits a request including the session ID directly to the image processing device 100 (step S209). The image processing apparatus 100 makes an authentication ticket confirmation request to the authentication server 60 using the authentication ticket corresponding to the session ID included in the request (step S210). After confirming the authentication ticket, the authentication server 60 transmits a confirmation result notification to the image processing apparatus 100 (step S211). In this case, it is assumed that a confirmation result notification indicating “OK” is transmitted.

  When the image processing apparatus 100 receives the confirmation result notification indicating “OK” from the authentication server 60, the image processing apparatus 100 executes processing according to the request received in step S <b> 209 and transmits a result notification indicating the processing result to the client apparatus 3. (Step S212).

  Thereafter, when the expiration date of the session of the client apparatus 3 has passed, the relay server 90 notifies the image processing apparatus 100 of a session timeout (step S213), and the manager server 60 discards the authentication ticket. An authentication ticket discard request is transmitted (step S214). When the authentication server 60 discards the authentication ticket, the authentication server 60 transmits a discard completion notification to the relay server 90 (step S215).

  When receiving a request from the client device 3 after receiving the session timeout notification from the relay server 90 (step S216), the image processing device 100 invalidates the session to notify the client device 3 that the session is invalid. A notification is transmitted (step S217).

  The relay server 90 manages the timer, and when the session expiration date has passed, stops the relay and notifies the image processing apparatus 100 that performs direct communication with the client apparatus 3 of the session timeout. The image processing apparatus 100 invalidates the session and does not accept direct communication from the client apparatus 100 unless there is a request from the relay server 90.

  FIG. 12 is a diagram illustrating a sequence in the case where the authentication ticket is invalidated by direct communication between the client apparatus and the image processing apparatus. In FIG. 12, after executing the sequence shown in FIG. 6, the client apparatus 3 transmits a request including the session ID issued from the relay server 90 to the relay server 90 (step S301).

  The relay server 90 transmits an authentication ticket confirmation request to the authentication server 60 (step S302). After confirming the authentication ticket, the authentication server 60 transmits a confirmation result notification to the relay server 90 (step S303). In this case, it is assumed that a confirmation result notification indicating “OK” is transmitted.

  When the relay server 90 receives the confirmation result notification indicating “OK”, the relay server 90 transmits a request to the image processing apparatus 100 (step S304). The image processing apparatus 100 executes processing according to the request, and transmits a result notification indicating the processing result to the relay server 90 (step S305).

  Thereafter, the relay server 90 confirms the relay connection (step S306), and confirms that a session with the client apparatus 3 exists. When the relay server 90 confirms that the session exists, an image such as session information, an authentication ticket, and authority information indicating an available service is displayed. The processing apparatus 100 transmits information necessary for direct communication with the client apparatus 3 to the image processing apparatus 100 (step S307).

  Further, the relay server 90 includes the location of the image processing apparatus 100 to which the client apparatus 3 is directly connected in the result notification received from the image processing apparatus 100, including a URL (Uniform Resource Locator) or an IP address. (Step S308).

  The client apparatus 3 transmits a request including the session ID directly to the image processing apparatus 100 (step S309). The image processing apparatus 100 makes an authentication ticket confirmation request to the authentication server 60 using the authentication ticket corresponding to the session ID included in the request (step S310). After confirming the authentication ticket, the authentication server 60 transmits a confirmation result notification to the image processing apparatus 100 (step S311). In this case, it is assumed that a confirmation result notification indicating “authentication ticket invalid” is transmitted.

  Upon receiving the confirmation result notification indicating “authentication ticket invalid” from the authentication server 60, the image processing apparatus 100 transmits an authentication ticket invalid notification to the relay server 90 to notify that the authentication ticket is invalid (step S312). ). The relay server 90 discards the session information related to the client device 3 in response to the notification that the authentication ticket is invalid (step S313).

  The image processing apparatus 100 transmits a result notification indicating that the request received in step S309 has failed to the client apparatus 3 (step S314).

  The authentication ticket is valid in the confirmation of the authentication ticket by the relay server 90 (steps S302 and S303). Thereafter, in the direct communication between the client apparatus 3 and the image processing apparatus 100, the authentication ticket is confirmed by the image processing apparatus 100. When the ticket becomes invalid, for example, the information of the client device 3 may be rewritten by an administrator or the like.

  When the image processing apparatus 100 confirms that the authentication ticket is invalid, the relay server 90 is notified that the authentication ticket is invalid. In this case, since the started session becomes invalid, the relay server 90 discards the held session information of the client device 3.

  The operation and the instance generation by the above-described sequence are performed based on a class diagram as shown in FIG. 13, for example. FIG. 13 is a diagram illustrating an example of a class diagram held by the relay server. In FIG. 13, the authenticator class 101, the user authentication information class 102, the service user class 103, the usage right class 104, the authority checker class 105, the device class 106, the service class 107, and the request form class. A class diagram showing the relationship between 130 and the relay continuation condition class 140 is shown. Based on such a class diagram, each instance described above is generated in the changing unit 10b of the relay server 90.

  The certifier class 101 is a class for executing authentication, and is a resident class that serves as an interface with the authentication server 60. In the authenticator class 101, in the user authentication information class 102, elements and operations related to user authentication information are defined.

  The service user class 103 is a class representing the client device 3, and instances are generated for the number of clients that have started a session. In the service user class 103, “-user information” 83-2 indicating a user ID and password, and a module to be executed when a session end request (step S115 in FIG. 8) is received from the image processing apparatus 100 are identified. Use end () "83-8 etc. is defined.

  The usage right class 104 is a class representing a started session, and is generated when the session starts. The usage right class 104 defines a “-valid period” 84-2 that indicates the validity period of the authentication ticket and is referred to in session timeout control, a “-identifier” 84-4 that indicates a session ID, and the like.

  The authority checker 105 is a class for executing an authority check, and is a resident class that serves as an interface with the authority check server 70. In the authority checker 105, elements and operations related to the authority check server 70 are defined.

  The device class 106 is a class representing the image processing apparatus 100 on the network 2 that can be used by the client apparatus 3, and an instance is generated after the authority check. In the device class 106, “−installation location” 86-1 indicating the installation location of the image processing apparatus 100, “+ usage right invalidation ()” 86-4 for invalidating a session after notification of a session timeout to the image processing apparatus 100, Session information such as session information, authentication ticket, and authority information for directly communicating with the client apparatus 3 by stopping the relay is transmitted to the image processing apparatus 100 “+ relay non-connection ()” 86-6, from the authentication server 60 “+ Authentication ticket invalidation ()” 86-8 etc. for invalidating the authentication ticket in response to the authentication ticket invalidation notification is defined.

  The service class 107 is a class representing a service provided by the image processing apparatus 100 on the network 2 that can be used by the client apparatus 3, and is generated after the authority check.

  The request form class 130 is a class that represents a request for a service from the client device 3. In the request form class 130, “+ request request ()” 90-6 for relaying a request from the client apparatus 3 to the image processing apparatus 100, and relaying continuation in response to reception of a result notification indicating a processing result by the image processing apparatus 100. “+ Check result notification ()” 90-7 for confirmation, “+ request result notification ()” 90-8 for notifying the processing result of the image processing apparatus 100 to the client apparatus 3 after confirmation of relay continuation, etc. are defined. .

  The relay continuation condition class 140 is a class that represents a condition for continuing the relay between the client apparatus 3 and the image processing apparatus 100. In the relay continuation condition class 140, “+ continuation confirmation ()” for confirming the condition for continuing the relay is defined.

By providing the class diagram in the relay server 90, the session management framework 10a
(1) Session establishment function (2) Authentication function (3) Usage authority check (device unit, service unit)
(4) Relay continuation determination function (5) A session information transmission function when switching from relay to direct communication can be realized.

  As described above, according to the present invention, the relay server 90 that relays between the client apparatus 3 and the image processing apparatus 100 determines that direct communication between the client apparatus 3 and the image processing apparatus 100 can be stably performed. In this case, the load on the relay server 90 can be reduced by stopping the relay and switching to direct communication.

  When the session establishment, authentication, and authority check for the client device 3 are all successful, and the relay server 90 successfully relays the request of the client device 3 to the image processing device 100, the relay server 90 establishes a connection between the client device 3 and the image processing device 100. By determining whether direct communication can be performed stably, switching to direct communication can be performed smoothly. Further, communication between the client apparatus 3 and the image processing apparatus 100 after switching to direct communication is realized without delay.

  Further, since the relay server 90 transmits information related to the client apparatus 3 to the image processing apparatus 100 at the time of switching direct communication, the relay server 90 does not perform processing related to the session with the client apparatus 3 after switching direct communication. Can be received from the request.

  By mounting the session management framework 10a for executing the above-described processing and the changing unit 10b in the image processing apparatus 100, the image processing apparatus 100 can also operate as the relay server 90.

  The present invention is not limited to the specifically disclosed embodiments, and various modifications and changes can be made without departing from the scope of the claims.

It is a figure which shows the example of a network structure provided with the relay server. It is a figure which shows the example of the system configuration | structure which concerns on one Example of this invention. It is a figure which shows the other example of the system configuration | structure which concerns on one Example of this invention. It is a block diagram which shows the hardware structural example of the image processing apparatus which concerns on one Example of this invention. It is a block diagram which shows the hardware structural example of a session management server. It is a figure which shows the sequence at the time of a session start. It is a figure which shows the example of the instance produced | generated at the time of a session start. It is a figure which shows the example of the sequence from the request execution with respect to the image processing apparatus of a client apparatus to the session end. It is a figure which shows the motion of the framework at the time of the request | requirement execution from a client apparatus. It is a figure which shows the motion of the framework at the time of the relay continuation judgment by a relay server. It is a figure which shows the sequence when a session passes the expiration date. It is a figure which shows the sequence when an authentication ticket becomes invalid by direct communication with a client apparatus and an image processing apparatus. It is a figure which shows the example of the class diagram which a relay server hold | maintains.

Explanation of symbols

2 network 3 client device 10 session management server 10a session management framework 10b variable unit 11 CPU
12 ROM
13 RAM
14 Nonvolatile RAM
23 Communication control device 24 Hard disk I / F
25 Engine I / F
26 RS-232C
34 Hard Disk 35-1 Plotter 35-2 Scanner 36 Operation Panel 51 CPU
52 memory unit 53 display unit 54 output unit 55 input unit 56 communication unit 57 storage device 58 driver 59 storage medium 60 authentication server 70 authority check server 100 image processing device 1001 system 1002 system

Claims (13)

An image processing device that relays communication between devices via a network,
Session establishment means for establishing a session with the first device;
Direct communication switching means for switching to direct communication between the first device and the second device by notifying the second device of session information of the first device after the session is established by the session establishing device. An image processing apparatus. After establishing a session by the session establishing means, the request relay means for receiving a result notification for the request from the second device by relaying a request from the first device to the second device,
The image processing apparatus according to claim 1, wherein the direct communication switching unit switches to the direct communication when the request relay unit receives the result notification from the second device. Relay continuation confirmation means for confirming whether or not to continue the relay;
The image processing apparatus according to claim 1, wherein the direct communication switching unit switches to the direct communication when the relay continuation confirmation unit determines to stop the relay.   3. A result notifying unit that transmits the result notification received by the request relay unit and communication destination information for communicating with the second device to the first device to the first device. Or the image processing apparatus of 3.   5. The apparatus according to claim 1, further comprising session ending means for ending the session of the first device in response to a session end request from the second device and transmitting the session end to the second device. An image processing apparatus according to claim 1.   The image processing apparatus according to claim 1, further comprising a session timeout unit that transmits a session timeout notification to the second apparatus when an expiration date of the session has elapsed.   7. The apparatus according to claim 1, further comprising session information discarding means for discarding information related to a session of the first device when receiving a notification that the right to use the second device is invalid from the second device. The image processing apparatus according to claim 1. An image processing apparatus that performs communication with a client apparatus connected via a network via a relay server,
First request receiving means for receiving a request from the client device from the relay server;
Session information receiving means for receiving session information of the client device from the relay server;
An image processing apparatus comprising: second request means for directly receiving a request from the client apparatus based on the session information.   The image processing apparatus according to claim 8, further comprising a session end request unit configured to transmit the session end request to the relay server when a session end request is received from the client device.   The image processing apparatus according to claim 9, further comprising a session end notification unit that receives a session end notification from the relay server and transmits a session end notification to the client device. Timeout notification receiving means for receiving a session timeout notification from the relay server;
11. The image processing device according to claim 8, further comprising session invalidity notification means for transmitting a session invalidity notification in response to a request from the client device after receiving the session timeout notification. . If the usage right for the request received directly from the client device is invalid, a usage right invalid notification means for transmitting a usage right invalid notice to the relay server;
The image according to any one of claims 8 to 11, further comprising request failure notification means for transmitting a request failure to the client device as a processing result in response to a request for which the usage right is invalidated. Processing equipment. An information processing device that relays communication between devices via a network,
Session establishment means for establishing a session with the first device;
Direct communication switching means for switching to direct communication between the first device and the second device by notifying the second device of session information of the first device after the session is established by the session establishing device. Information processing apparatus.

Images