JP2008177829A - Communication system, communication controller, program for communication control, and image processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a communication controller capable of suitably controlling communication with an image processor managed by a mutually different communication controller and verifying adequacy of an image processor as a communication partner. <P>SOLUTION: Disclosed is the communication controller controlling communication between a first image processor and a second image processor whose communication is controlled by a different communication controller, the communication controller having: an application information acquiring unit 132 which acquires application information for applying for permission to communicate from the first image processor; a first communication judging unit 133 which judges whether communication with another communication controller is permitted based upon a verification result of the application information; a communication request information transmitting unit 135 which transmits communication request information for requesting communication from the other communication controller when it is judged that the communication is permitted; and a fist communication relaying unit 237 which relays the communication between the first image processor and the other communication controller when receiving communication answer information showing the communication is permitted from the other communication controller in response to the communication request information. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to communication technology, and more particularly, to a communication system, a communication control device, a communication program, and an image processing device that increase communication safety and control inappropriate communication.

  For example, two image processing apparatuses having a scanner function, a printing function, etc. are used in combination, and one image processing apparatus captures an image as image information by the scanner function, and the other image processing apparatus is installed in a remote place, for example. There has been known a communication system in which the image information is transmitted via a communication network (network), and the other image processing apparatus that has received the image information outputs the image information as an image by a printing function.

  In such a communication system, for example, communication is performed using an Internet line or the like. Therefore, a communication control device having a packet filtering function, such as a firewall device, is installed between image processing devices to transmit and receive image information. Be controlled.

In addition, a technique using a VPN (Virtual Private Network) device to determine whether communication between image processing devices is possible is also known. For example, in Patent Document 1, when one image processing apparatus communicates with the other image processing apparatus via a communication control apparatus, the setting value of IPsec (IP security) used as the basic technology of the VPN apparatus is set. Accordingly, it is determined whether or not the communication control device permits communication. When communication is permitted, the communication refusal state of the communication control device is canceled.
JP 2006-20266 A

  By the way, in the above-described prior art, the communication control device only determines permission / denial of communication between the image processing device under the management of the communication control device and the image processing device not under the management, For example, the case where the image processing apparatuses are under the control of different communication control apparatuses is not considered.

  In addition, when one image processing apparatus communicates with the other image processing apparatus, there is no mechanism for one image processing apparatus to verify whether the other image processing apparatus is a valid communication partner. The device can be used illegally. Furthermore, there is a possibility that information leakage may occur if communication is performed with an inappropriate image processing apparatus.

  The present invention has been made in view of such circumstances, and appropriately controls communication between image processing apparatuses managed by different communication control apparatuses, and verifies the validity of an image processing apparatus serving as a communication partner. An object of the present invention is to provide a communication system, a communication control device, a communication program, and an image processing device.

In the communication system of the present invention, a first image processing apparatus whose communication is controlled by a first communication control apparatus and a second image processing apparatus whose communication is controlled by a second communication control apparatus are connected to a communication network. The first communication control device transmits application information for applying for permission for communication between the first image processing device and the second image processing device to the first image processing device. A second communication unit, a first communication determination unit that determines whether communication to the second communication control device is possible based on an acquisition unit acquired from the device, and a verification result of the application information; Request transmission means for transmitting communication request information for requesting communication with the second image processing apparatus to the communication control apparatus, and communication response information for permitting communication with respect to the communication request information. When received from the communication control device, the first screen A first relay unit that relays communication between the processing device and the second communication control device, and the second communication control device, based on the verification result of the communication request information, A second communication determining means for determining whether communication with the second image processing apparatus is possible; a response transmitting means for transmitting communication response information to the first communication control apparatus when it is determined that communication is permitted; It is characterized by having a second relay means for relaying communication between the first communication control device and the second image processing device in response to transmission of the response information.
According to this configuration, when communicating with the image processing apparatus serving as the communication partner, the validity of the image processing apparatus serving as the communication partner is verified in advance through the communication control device that manages itself, and the correctness can be secured. In some cases, communication is permitted.

Further, according to the present invention, the application information includes first proof information for certifying the validity of the first image processing apparatus and second proof information for certifying the validity of the second image processing apparatus. And communication condition information defining communication conditions between the first image processing apparatus and the second image processing apparatus.
According to this configuration, the application information may include certification information for certifying the validity of each image processing apparatus and communication condition information that defines communication conditions for the image processing apparatus.

In addition, the present invention is characterized in that the first communication control device performs verification using an authentication device for guaranteeing the validity of the first certification information and the second certification information.
According to this configuration, the authenticity of the second image processing apparatus serving as the communication partner can be firmly secured by using the authentication apparatus for ensuring the validity of the first communication control apparatus.

In addition, the present invention is characterized in that the communication request information includes first certification information and communication condition information.
According to this configuration, the first certification information and the communication condition information may be included in the communication request information.

In addition, the present invention is characterized in that the second communication control device verifies the validity of the first certification information by using the authentication device.
According to this configuration, the second communication control device may verify the validity of the first certification information using the authentication device.

In the present invention, the second communication control device verifies that the first certification information received from the first communication control device matches the first certification information of the second image processing device. It is characterized by that.
According to this configuration, the second communication control device may verify the validity of the first image processing device without using the authentication device.

Further, the present invention is characterized in that the first communication control device and / or the second communication control device forcibly terminates communication based on the contents of the communication condition information.
According to this configuration, the communication control device may forcibly end communication based on the content of the communication condition.

Further, the present invention is characterized in that the communication request information and / or the communication response information is transmitted after being encrypted.
According to this configuration, the communication request information and / or the communication response information may be transmitted after being encrypted.

Further, the present invention is characterized in that information relating to communication contents and communication condition information are stored in a storage means as a communication history.
According to this configuration, since the communication content is stored in the storage unit, the administrator can view the communication content.

The communication control apparatus according to the present invention is a communication control apparatus that controls communication between a first image processing apparatus and a second image processing apparatus whose communication is controlled by a communication control unit. An acquisition unit that acquires application information for applying for communication permission from the processing device, a communication determination unit that determines whether communication to the communication control unit is possible based on the verification result of the application information, and a determination that communication is permitted A request transmission unit that transmits communication request information for requesting communication to the communication control unit, and communication response information for permitting communication with respect to the communication request information is received from the communication control unit. And a relay means for relaying communication between the first image processing apparatus and the communication control means.
According to this configuration, the validity of the image processing apparatus serving as a communication partner is verified in advance, and communication is permitted when the validity can be ensured.

The communication control apparatus of the present invention is a communication control apparatus that controls communication between a first image processing apparatus and a second image processing apparatus whose communication is controlled by the communication control means. Communication determining means for determining whether communication is possible based on a verification result of communication request information transmitted for requesting communication, and communication indicating that communication is permitted to the communication control means when it is determined that communication is permitted It is characterized by having response transmission means for transmitting response information and relay means for relaying communication between the communication control means and the first image processing apparatus in response to transmission of the communication response information.
According to this configuration, the validity of the image processing apparatus serving as a communication partner is verified in advance, and communication is permitted when the validity can be ensured.

The communication control program of the present invention is a communication control program for controlling communication between a first image processing apparatus and a second image processing apparatus whose communication is controlled by a communication control means. Obtaining application information for applying for communication permission from the image processing apparatus, determining whether communication with the communication control means is possible based on the verification result of the application information, and determining that communication is permitted. A communication request information for requesting communication to the communication control means, and a communication response information for permitting communication with respect to the communication request information is received from the communication control means. And a step of relaying communication between the image processing apparatus and the communication control means.
According to this configuration, the validity of the image processing apparatus serving as a communication partner is verified in advance, and communication is permitted when the validity can be ensured.

The communication control program of the present invention is a communication control program for controlling communication between a first image processing apparatus and a second image processing apparatus whose communication is controlled by a communication control means. A step of determining whether or not communication is possible based on a verification result of communication request information transmitted to request communication from the means, and communication indicating that communication is permitted to the communication control means when it is determined that communication is permitted A step of transmitting response information and a step of relaying communication between the communication control means and the first image processing apparatus in response to transmission of the communication response information are characterized by causing the computer to execute.
According to this configuration, the validity of the image processing apparatus serving as a communication partner is verified in advance, and communication is permitted when the validity can be ensured.

The communication method of the present invention includes a first image processing device whose communication is controlled by the first communication control device, and a second image processing device whose communication is controlled by the second communication control device. A communication method for communicating via a communication network, wherein a first communication control device receives application information for applying for permission for communication between a first image processing device and a second image processing device in a first manner. When it is obtained from the image processing apparatus and based on the verification result of the application information, it is determined whether communication to the second communication control apparatus is possible, and when it is determined that communication is permitted, the second communication control apparatus The communication request information for requesting communication with the image processing apparatus is transmitted, and the second communication control apparatus determines whether the first communication control apparatus and the second image processing apparatus are based on the verification result of the communication request information. If it is determined whether or not communication is allowed and communication is permitted, Communication response information indicating that communication is permitted is transmitted to the communication control device, and the communication between the first communication control device and the second image processing device is relayed in response to the transmission of the communication response information. When the communication control apparatus receives communication response information from the second communication control apparatus, the communication between the first image processing apparatus and the second communication control apparatus is relayed.
According to this method, when communicating with an image processing apparatus serving as a communication partner, the validity of the image processing apparatus serving as the communication partner can be verified in advance through the communication control device that manages the communication partner. If it can be secured, communication is permitted.

In addition, an image processing apparatus according to the present invention includes the communication control apparatus described above.
According to this configuration, the communication control device described above may be included in the image processing device.

  According to the present invention, when communicating with an image processing apparatus serving as a communication partner, communication is permitted when the validity of the image processing apparatus serving as a communication partner is verified in advance and the validity can be ensured. Therefore, it is possible to suppress the possibility that the image processing apparatus of the communication partner is illegally used or information is leaked from the image processing apparatus due to incorrect communication.

Hereinafter, embodiments of the present invention will be specifically described with reference to the drawings.
FIG. 1 is a configuration diagram of a communication system according to an embodiment of the present invention.
As shown in FIG. 1, the communication system includes a first intranet 100, a second intranet 200, an authentication device 400, and the like. The first intranet 100 and the second intranet 200 include the Internet 300. Connected through.

  The first intranet 100 includes a first image processing device 110, a first communication control device 130, and the like. The second intranet 200 includes a second image processing device 210, a second communication control device 230, and the like.

  The first image processing apparatus 110 is composed of a multifunction machine having at least one of a printing function, a copying function, a facsimile function, a scanner function, an electronic mail transmission / reception function, and the like. The first image processing device 110 communicates with the second image processing device 210 via the first communication control device 130, the second communication control device 230, and the Internet 300. For example, the first image processing apparatus 110 captures an image as image information by the scanner function and transmits the image information to the second image processing apparatus 210. The second image processing apparatus 210 receives the image information, and the image is printed by the printing function. Output as.

  The first communication control device 130 is configured by a firewall function, for example, and controls communication between the first intranet 100 and the Internet 300. More specifically, control is performed based on a transmission source IP address, a transmission destination IP address, and the like transmitted and received as image information. Further, it is determined whether or not communication with the first image processing apparatus 110 and the second communication control apparatus 230 is possible. The firewall function is not limited as long as it controls communication.

The second image processing apparatus 210 has the same configuration and functions as the first image processing apparatus 110.
Similar to the first communication control device 130, the second communication control device 230 has a firewall function and the like, and controls communication between the first communication control device 130 and the second image processing device 210.

  The authentication device 400 has a function of guaranteeing certification information for proving the validity of the first image processing device 110 and the second image processing device 210. The authentication device 400 is managed not only by a public organization but also by an organization for assuring certification information.

Next, details of the configuration of each apparatus will be described with reference to the drawings.
FIG. 2 is a functional block diagram showing the main part of the first image processing apparatus 110. 2 includes, for example, a processing device such as a CPU (Central Processing Unit), a semiconductor storage device such as a DRAM (Dynamic Random Access Memory), an SRAM (Static RAM), and a ROM (Read Only Memory), Each function is realized by a magnetic disk such as an HD (Hard Disc) and necessary software, and the CPU reads a required program stored in the ROM and performs calculations according to the program. The same applies to functional blocks described later.

  As shown in FIG. 2, the first image processing apparatus 110 includes an operation unit 111, a certification information management unit 112, an application information transmission unit 113, a transmission / reception unit 114, an application result information reception unit 115, and the like.

  The operation unit 111 includes operation buttons, a touch panel, a display screen for displaying an error, and the like. When the operation unit 111 is operated by the user, the first image processing apparatus 110 performs an operation corresponding to the function.

  The certification information management unit 112 manages certification information for proving the validity of the first image processing apparatus 110 and the second image processing apparatus 210. The certification information includes, for example, a digital certificate relating to the image processing apparatus, a product number, an IP address, a MAC address, a company name, and an affiliation. The certification information is transmitted from an administrator who manages the second image processing apparatus 210 by an electronic mail encrypted by PGP (Pretty Good Privacy), S / MIME (Secure / Multipurpose Internet Mail Extensions), or the like. Note that a non-volatile memory such as a flash memory in which certification information is stored may be handed over from an administrator who manages the second image processing apparatus 210 to an administrator who manages the first image processing apparatus 130. When the certification information is obtained, an administrator who manages the first image processing apparatus 110 operates the operation unit 111 to cause the certification information management unit 112 to manage the certification information.

  The application information transmission unit 113 generates application information for applying for permission of communication between the first image processing apparatus 110 and the second image processing apparatus 210, and transmits the application information to the transmission / reception unit 114. The application information includes, for example, first certification information for certifying the validity of the first image processing apparatus 110, second certification information for certifying the validity of the second image processing apparatus 210, Communication condition information that defines communication conditions between the first image processing apparatus 110 and the second image processing apparatus 130 is included. The communication condition information includes, for example, the IP address of the communication partner, the purpose of use of communication, and the use time.

  The transmission / reception unit 114 transmits application information to the first communication control device 130 and receives application result information transmitted as a response result of the application information transmitted from the first communication control device 130. In addition to these pieces of information, the transmission / reception unit 114 transmits / receives image information and various types of information when communication between the first image processing apparatus 110 and the second image processing apparatus 210 is established.

  The application result information receiving unit 115 receives the application result information received by the transmission / reception unit 114 and manages the contents of the application result. The application result information includes either permission information indicating that communication is permitted or rejection information indicating that communication is rejected. When receiving permission information, each unit is operated to start communication with the second image processing apparatus 210. In the case of refusal information, an error display is output on the display screen and the process for applying for communication permission is stopped. In addition, when refusal information is received, you may make it perform the process which applies for permission of communication again. Further, the number of such processes may be set by the user.

FIG. 3 is a functional block diagram showing a main part of the first communication control apparatus 130.
The first communication control device 130 is an example of the communication control means of the present invention. As shown in FIG. 3, the first internal transmission / reception unit 131, the application information acquisition unit 132, the first communication determination unit 133, First proof information verification unit 134, communication request information transmission unit 135, application result information transmission unit 136, first external transmission / reception unit 137, communication response information reception unit 138, first communication relay unit 139, first communication It consists of a content storage unit 140 and the like.

  The first internal transmission / reception unit 131 receives application information transmitted from the first image processing apparatus 110 and transmits application response information to the first image processing apparatus 110. When communication is permitted, image information and various types of information are transmitted to and received from the first image processing apparatus 110.

  The application information acquisition unit 132 is an example of an acquisition unit of the present invention, acquires application information received by the first internal transmission / reception unit 131, and transmits the application information to the first communication determination unit 133. Specifically, the second certification information and the communication condition information included in the application information are transmitted.

  The first communication determination unit 133 is an example of the first communication determination unit of the present invention, and transmits the second certification information and the communication condition information to the first certification information verification unit 134, and The verification result information that is the verification result of the certification information is received from the certification information verification unit 134, and it is determined whether or not to communicate with the second communication control device 230. When the verification result information is valid, the communication request information transmission unit 135 is controlled. When the verification result information is invalid, the application result information transmission unit 136 is controlled. To do.

  The first proof information verification unit 134 receives the second proof information and communication condition information received from the first communication determination unit 133 and verifies the contents of these pieces of information. The verification includes, for example, verification of the expiration date of the digital certificate and verification of the issuing authority of the digital certificate in the case of the second certification information, and verification of the purpose of use and usage time in the case of the communication condition information. . The verification is realized by matching information related to verification criteria stored in advance by the first communication control device 130 with the received second certification information and communication condition information. As a result of the verification, for example, when the digital certificate is within the validity period or the purpose of use is valid, the verification result information indicating that the certification information is valid is transmitted to the first communication determination unit 133. If this is not the case, verification result information indicating that it is invalid is transmitted. Thereby, communication can be appropriately controlled according to the legitimacy of the communication partner. Note that verification result information may be obtained by inquiring the verification apparatus 400 for verification.

  The communication request information transmission unit 135 is an example of a request transmission unit of the present invention, and transmits communication request information based on control from the first communication determination unit 133. The communication request information is information for requesting the second communication control device 230 to communicate with the second image processing device 210. The communication request information includes first certification information and communication condition information.

  The application result information transmission unit 136 transmits the application result information to the first internal transmission / reception unit 131 based on the control from the first communication determination unit 133 or the communication response information reception unit 138. The application result information includes information indicating that the application for communication between the first image processing apparatus 110 and the second image processing apparatus 210 is permitted or rejected. Further, the application result information transmission unit 136 controls the operation of the first communication relay unit 139 in synchronization with the transmission of the application result information.

  The first external transmission / reception unit 137 transmits communication request information to the second communication control device 230 and receives communication response information from the second communication control device 230. The communication response information is information having the content of permission or rejection of communication with respect to the communication request information. When communication is permitted, image information and various types of information are transmitted / received to / from the second communication control device 230.

  The communication response information reception unit 138 acquires the communication response information received by the first external transmission / reception unit 137 and transmits the contents of the application result information while controlling the application result information transmission unit 136. Since the application result information includes information on permission or denial of communication, the application result information transmission unit 136 performs an operation corresponding to the content by transmitting it to the application result information transmission unit 136.

  The first communication relay unit 139 is an example of the first relay unit of the present invention, and based on the control of the application result information transmission unit 136, the first internal transmission / reception unit 131 and the first external transmission / reception unit 137. Relay communication with More specifically, when the control of the application result information transmission unit 136 is control for permitting communication, the communication is relayed, and when the control is for rejecting communication, the communication is interrupted. . As a result, communication between the first image processing apparatus 110 and the second communication control apparatus 210 is established. When communication is established, information related to communication contents, communication condition information, and the like are stored as a communication history in the first communication content storage unit 140 as an example of the storage means of the present invention.

FIG. 4 is a functional block diagram showing a main part of the second communication control device 230.
The second communication control device 230 is an example of the communication control means of the present invention. As shown in FIG. 4, the second external transmission / reception unit 231, the communication request information acquisition unit 232, and the second communication determination unit 233. , A second certification information verification unit 234, a communication response information transmission unit 235, a second internal transmission / reception unit 236, a second communication relay unit 237, a second communication content storage unit 238, and the like.

  The second external transmission / reception unit 231 receives communication request information transmitted from the first communication control device 130 and transmits communication response information to the first communication control device 130. When communication is permitted, image information and various types of information are transmitted to and received from the first communication control device 130.

  The communication request information acquisition unit 232 acquires communication request information received by the second external transmission / reception unit 231 and transmits the communication request information to the second communication determination unit 233. Specifically, the first certification information and the communication condition information included in the communication request information are transmitted.

  The second communication determination unit 233 is an example of a second communication determination unit of the present invention, and transmits the first certification information and the communication condition information to the second certification information verification unit 234, and The verification result information that is the verification result of the certification information is received from the certification information verification unit 234, and it is determined whether or not to communicate with the first communication control apparatus 130. The second communication determination unit 233 controls the communication response information transmission unit 235 according to the contents of the verification result information.

  The second certification information verification unit 234 receives the second certification information and the communication condition information received from the second communication determination unit 233, and verifies the contents of these pieces of information. The verification includes, for example, verification of the expiration date of the digital certificate and verification of the issuing organization of the digital certificate in the case of the first certification information, and verification of the purpose of use and usage time in the case of the communication condition information. . The verification is realized by matching information related to verification criteria stored in advance by the second communication control device 230 with the received first certification information and communication condition information. As a result of the verification, for example, when the digital certificate is within the validity period or the purpose of use is valid, verification result information indicating that the certification information is valid is transmitted to the communication determination unit 133, and so on. If not, the verification result information indicating that it is invalid is transmitted. Thereby, communication can be appropriately controlled according to the legitimacy of the communication partner. Note that verification result information may be obtained by inquiring the verification apparatus 400 for verification.

  The communication response information transmission unit 235 is an example of a response transmission unit of the present invention, and transmits communication response information to the second external transmission / reception unit 231 based on control from the second communication determination unit 233. The communication response information includes information indicating that communication between the second image processing apparatus 210 and the first communication control apparatus 110 is permitted or denied. In addition, the communication response information transmission unit 136 controls the operation of the second communication relay unit 237 in synchronization with the transmission of the communication response information.

  The second internal transmission / reception unit 236 transmits / receives image information and various types of information to / from the second image processing device 230 when communication is permitted.

  The second communication relay unit 237 is an example of the second relay unit of the present invention, and based on the control of the communication response information transmission unit 235, the second external transmission / reception unit 231 and the second internal transmission / reception unit 236. Relay communication with More specifically, when the control of the communication response information transmitting unit 235 is control for permitting communication, the communication is relayed and when control is for rejecting communication, the communication is blocked. . As a result, communication between the second image processing apparatus 210 and the first communication control apparatus 130 is established. When communication is established, information related to communication content, communication condition information, and the like are stored in the second communication content storage unit 238 as an example of the storage means of the present invention as a communication history.

Next, the operation of each device described above will be described with reference to the drawings.
FIG. 5 is a flowchart illustrating an example of processing in the first image processing apparatus 110.
The first image processing apparatus 110 first acquires second certification information related to the second image processing apparatus 210 (step S1). Next, application information is generated based on the second certification information, the first certification information held by itself, and the communication condition information related to the communication condition, and is transmitted to the first communication control device 130 (step S2).

  Next, the first image processing apparatus 110 receives application result information for the application information from the first communication control apparatus 130 (step S3), and determines whether or not the application result information includes permission. (Step S4). When the first image processing apparatus 110 determines that the application result information includes information indicating that communication is permitted, the first image processing apparatus 110 starts communication (step S5). On the other hand, if the first image processing apparatus 110 determines that the application result information includes information indicating that communication is rejected, the first image processing apparatus 110 ends the process (step S6). Note that the first image processing apparatus 110 may determine that communication is rejected because the application result information does not include information indicating that communication is permitted.

FIG. 6 is a flowchart illustrating an example of processing in the first communication control apparatus 130.
The first communication control apparatus 130 first acquires application information from the first image processing apparatus 110 (step S11). Next, the validity of the second certification information and communication condition information regarding the second image processing apparatus 210 included in the application information is verified (step S12).

  Next, when the first communication control device 130 determines that the second certification information and the communication condition information are valid (step S13), the first communication control device 130 transmits the communication request information to the second communication control device 230 ( Step S14).

  Next, the first communication control device 130 receives communication response information for the communication request information from the second communication control device 230 (step S15). If the communication response information includes information indicating that communication is permitted (step S16), application result information indicating that application is permitted is transmitted to the first image processing apparatus 110 (step S17). The communication between the first image processing apparatus 110 and the second communication control apparatus 230 is relayed (step S18).

  On the other hand, the first communication control device 130 receives the communication response information indicating that the communication is refused in the process of step S13 when it is determined that the verified second certification information is not valid or in the process of step S16. If so, application result information indicating that the application is rejected is transmitted to the first image processing apparatus 110 (step S19).

FIG. 7 is a flowchart illustrating an example of processing in the second communication control device 230.
First, the second communication control device 230 acquires communication request information from the first communication control device 130 (step S21). Next, the validity of the first certification information and communication condition information regarding the first image processing apparatus 110 included in the application information is verified (step S22).

  Next, when the second communication control device 230 determines that the first certification information and the communication condition information are valid (step S23), the second communication control device 230 transmits communication response information to the first communication control device 130 ( In step S24), communication between the first communication control device 130 and the second image processing device 210 is relayed (step S25). On the other hand, if it is determined in step S23 that the verified first proof information or the like is not valid, communication response information indicating that communication is refused is transmitted to the first communication control device 130 (step S26). .

  Note that the present invention is not limited to the above-described embodiment, and various modifications can be made without departing from the scope of the invention. For example, the program of the present invention can be provided not only by communication means but also stored in a recording medium such as a CD-ROM. In the above-described embodiment, the description has been made using image information. However, the present invention is not limited to image information, and the type of information transmitted and received through communication, such as information about a document, is not limited. In the above-described embodiments, the communication control devices have different configurations. However, each communication control device has the same configuration and performs the same function by incorporating the functions of the communication control devices into the other communication control device. It may be.

  As described above, according to the present invention, communication is possible when the communication partner's legitimacy can be ensured, and therefore the communication partner may be used illegally or information may be leaked from the communication partner. The industrial applicability is high.

It is a block diagram of a communication system. It is a functional block diagram which shows the principal part structure of a 1st image processing apparatus. It is a functional block diagram which shows the principal part structure of a 1st communication control apparatus. It is a functional block diagram which shows the principal part structure of a 2nd image processing apparatus. 4 is a flowchart illustrating an example of processing in the first image processing apparatus. It is a flowchart which shows an example of the process in a 1st communication control apparatus. It is a flowchart which shows an example of the process in a 2nd communication control apparatus apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 1st intranet 110 1st image processing apparatus 111 Operation part 112 Certification information management part 113 Application information transmission part 114 Transmission / reception part 115 Application result information reception part 130 1st communication control apparatus 131 1st internal transmission / reception part 132 Application Information acquisition unit 133 First communication determination unit 134 First proof information verification unit 135 Communication request information transmission unit 136 Application result information transmission unit 137 First external transmission / reception unit 138 Communication response information acquisition unit 139 First communication relay unit 140 First communication content storage unit 200 Second intranet 210 Second image processing device 230 Second communication control device 231 Second external transmission / reception unit 232 Communication request information acquisition unit 233 Second communication determination unit 234 Second Proof information verification unit 235 communication response information transmission unit 236 second internal transmission / reception unit 237 second Communication relay unit 238 Second communication content storage unit 300 Internet 400 Authentication device

Claims (15)

A communication system in which a first image processing device whose communication is controlled by a first communication control device and a second image processing device whose communication is controlled by a second communication control device communicate via a communication network Because
The first communication control device includes:
Obtaining means for obtaining application information for applying for permission of communication between the first image processing apparatus and the second image processing apparatus from the first image processing apparatus;
First communication determination means for determining whether communication to the second communication control device is possible based on the verification result of the application information;
Request transmission means for transmitting communication request information for requesting communication with the second image processing device to the second communication control device when determining that the communication is permitted;
Communication between the first image processing apparatus and the second communication control apparatus when communication response information indicating that the communication is permitted is received from the second communication control apparatus with respect to the communication request information. First relay means for relaying
The second communication control device includes:
Second communication determination means for determining whether communication between the first communication control device and the second image processing device is possible based on the verification result of the communication request information;
A response transmission means for transmitting the communication response information to the first communication control device when it is determined that the communication is permitted;
A communication system, comprising: a second relay unit that relays communication between the first communication control device and the second image processing device in response to transmission of the communication response information.   The application information includes first certification information for certifying the validity of the first image processing apparatus, second certification information for certifying the validity of the second image processing apparatus, The communication system according to claim 1, further comprising communication condition information defining communication conditions between the first image processing apparatus and the second image processing apparatus.   3. The communication system according to claim 2, wherein the first communication control device performs verification by using an authentication device for guaranteeing validity of the first certification information and the second certification information. .   The communication system according to claim 2 or 3, wherein the communication request information includes the first certification information and the communication condition information.   5. The communication system according to claim 2, wherein the second communication control device verifies validity of the first proof information using the authentication device. 6.   The second communication control device verifies that the first certification information received from the first communication control device matches the first certification information included in the second image processing device. The communication system according to any one of claims 2 to 5.   The first communication control device and / or the second communication control device forcibly terminates communication based on content of communication condition information. The communication system described.   The communication system according to any one of claims 1 to 7, wherein the communication request information and / or the communication response information is transmitted after being encrypted.   The communication system according to any one of claims 1 to 8, wherein information related to communication contents and the communication condition information are stored in a storage unit as a communication history. A communication control device for controlling communication between a first image processing device and a second image processing device whose communication is controlled by a communication control means,
Obtaining means for obtaining application information for applying for permission of communication from the first image processing apparatus;
Based on the verification result of the application information, a communication determination unit that determines whether communication to the communication control unit is possible,
A request transmission means for transmitting communication request information for requesting the communication to the communication control means when determining to permit the communication;
A relay unit that relays communication between the first image processing apparatus and the communication control unit when communication response information indicating that the communication is permitted is received from the communication control unit in response to the communication request information; A communication control device comprising: A communication control device for controlling communication between a first image processing device and a second image processing device whose communication is controlled by a communication control means,
Communication determination means for determining whether communication is possible based on a verification result of communication request information transmitted to request communication from the communication control means;
A response transmission unit that transmits the communication response information indicating that communication is permitted to the communication control unit when it is determined that the communication is permitted;
A communication control apparatus comprising relay means for relaying communication between the communication control means and the first image processing apparatus in response to transmission of the communication response information. A communication control program for controlling communication between a first image processing apparatus and a second image processing apparatus whose communication is controlled by a communication control means,
Obtaining application information for applying for permission of communication from the first image processing apparatus;
Determining whether communication to the communication control means is possible based on the verification result of the application information;
A step of transmitting communication request information for requesting the communication to the communication control means when determining to permit the communication;
Relaying communication between the first image processing apparatus and the communication control means when communication response information for permitting the communication is received from the communication control means in response to the communication request information. A program for communication control, which is executed by a computer. A communication control program for controlling communication between a first image processing apparatus and a second image processing apparatus whose communication is controlled by a communication control means,
Determining whether communication is possible based on a verification result of communication request information transmitted to request communication from the communication control means;
Transmitting the communication response information for permitting communication to the communication control means when it is determined to permit the communication;
A communication control program causing a computer to execute a step of relaying communication between the communication control unit and the first image processing apparatus in response to transmission of the communication response information. A communication method in which a first image processing device whose communication is controlled by a first communication control device and a second image processing device whose communication is controlled by a second communication control device communicate via a communication network Because
The first communication control device is
Obtaining application information for applying for permission of communication between the first image processing apparatus and the second image processing apparatus from the first image processing apparatus;
Based on the verification result of the application information, determine whether communication to the second communication control device is possible,
When determining that the communication is permitted, the communication request information for requesting communication with the second image processing apparatus is transmitted to the second communication control apparatus,
The second communication control device is
Based on the verification result of the communication request information, determine whether communication between the first communication control device and the second image processing device is possible,
When it is determined that the communication is permitted, communication response information indicating that the communication is permitted is transmitted to the first communication control device,
In response to the transmission of the communication response information, the communication between the first communication control device and the second image processing device is relayed,
The first communication control device relays communication between the first image processing device and the second communication control device when the communication response information is received from the second communication control device. Communication method. An image processing apparatus comprising the communication control apparatus according to claim 10.

Images