JP2018085123A - Registration server program, information equipment, information equipment program, and network system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a registration server program, information equipment, an information equipment program, and a network system, which can quickly and easily start communication between an administrative server and controlled equipment.SOLUTION: A registration server is connected to a first network. A CPU of the registration server receives user ID for identifying the user (S11:YES). The CPU receives an IP address of information equipment connected to a second network from a communication terminal connected to the second network (S21:YES). The CPU transmits the received user ID to an administrative server connected to the first network (S23). The CPU receives a PIN code transmitted from the administrative server depending on the transmitted user ID, from the administrative server (S25). The CPU creates an URL including at least the IP address and the PIN code (S27). The CPU transmits the created URL to the communication terminal (S29).SELECTED DRAWING: Figure 4

Description

  The present invention relates to a registration server program, an information device, an information device program, and a network system in a network system in which a management server and an information device communicate based on authentication information based on communication control by a registration server.

  There is known a network system in which a management server and an information device communicate with each other based on authentication information. Patent Document 1 discloses a network system including a management server, controlled devices, and a service server. First, the user requests the management server to issue a password via the service server by using the mobile phone. The management server issues a password in response to the request and notifies the mobile phone via the service server. Next, the user registers the notified password in the controlled device by using the mobile phone. The controlled device starts communication with the management server by using the registered password.

JP 2007-316678 A

  In the above network system, when a user attempts to start communication between the management server and the controlled device, the user first requests the management server to issue a password using the mobile phone, and then the controlled device has a password. Must be registered. In this way, the procedure performed by the user to start communication between the management server and the controlled device becomes complicated. Therefore, there is a problem that the user cannot start communication between the management server and the controlled device quickly and easily.

  An object of the present invention is to provide a registration server program, an information device, an information device program, and a network system capable of quickly and easily starting communication between a management server and a controlled device.

  The registration server program according to the first aspect of the present invention is a program executable by a computer that controls the registration server connected to the first network, and receives user identification information for identifying the user from the computer. A second receiving unit for receiving, from a communication terminal connected to the second network, device identification information for identifying, on the second network, an information device connected to a second network different from the first network; A receiving means; a first sending means for sending the user identification information received by the first receiving means to a management server connected to the first network; and the sent by the first sending means. Third receiving means for receiving authentication information transmitted from the management server according to user identification information from the management server First generation means for generating registration information that is capable of registering the authentication information in the information device and includes at least the device identification information and the authentication information; and the first generation means The registration information generated by the above function is made to function as a second transmission means for transmitting to the communication terminal.

According to the first aspect, the registration information generated by the registration server has a format in which authentication information can be registered in the information device. The communication terminal can register the authentication information with the information device based on the registration information received from the registration server. The information device in which the authentication information is registered is in a state where communication with the management server can be started. As described above, the registration server can start communication between the management server and the information device by transmitting the generated registration information to the communication terminal. In this case, since the procedure performed by the user to start communication between the management server and the information device can be simplified, the user can quickly and easily start communication between the management server and the information device. it can.

  In the first aspect, the registration information may include at least the device identification information and the authentication information, and may be a Uniform Resource Locator (URL) in a format in which the information device can receive the authentication information. In this case, the communication terminal can easily transmit the authentication information to the information device by causing the user to select registration information (URL). Therefore, the communication terminal can easily register the authentication information with the information device based on the registration information.

In the first aspect, the second receiving means includes HyperText Transfer including the device identification information.
A Protocol (HTTP) request may be received from the communication terminal, and the second transmission unit may transmit an HTTP response including the registration information in response to the HTTP request transmitted from the communication terminal. In this case, the registration server can receive device identification information from the communication terminal based on HTTP. Further, the registration server can transmit registration information to the communication terminal based on HTTP. Therefore, the registration server can execute communication with the communication terminal based on the standardized protocol.

  In the first aspect, the first transmission unit further transmits, to the management server, number information indicating the number of the information devices identified by the device identification information received by the second reception unit. The first generation unit may generate registration information for a number indicated by the number information transmitted by the first transmission unit. In this case, the registration server can notify the management server of the number of information devices that request to enable communication with the management server using the number information. The registration server can receive authentication information for the requested number of information devices to communicate with the management server from the management server.

  In the first aspect, the computer is further a program that can be executed by the communication terminal, and transmits a first plug-in that can acquire the device identification information from the information device to the communication terminal. The second receiving means functions as the transmitting means, and the communication terminal executes the first plug-in transmitted by the third transmitting means so that the communication terminal acquires the device identification information acquired by the communication terminal. You may receive from a terminal. In this case, the communication terminal can acquire the device identification information from the information device by executing the first plug-in. The registration server can facilitate the procedure for the communication terminal to acquire the device identification information from the information device by transmitting the first plug-in to the communication terminal.

  In the first aspect, the first generation means is a program that can be executed by the communication terminal, and a second plug-in that is capable of transmitting the authentication information received by the third reception means to the information device. You may instruct | indicate for making a communication terminal perform. In this case, the communication terminal can transmit the authentication information to the information device by executing the second plug-in. The registration server can facilitate the procedure in which the information device registers the authentication information by causing the communication terminal to execute the second plug-in.

An information device according to a second aspect of the present invention is an information device connected to a second network, and is connected to a first network different from the second network from a communication terminal connected to the second network. A fourth receiving means for receiving authentication information required when communicating with the management server; a first storage means for storing the authentication information received by the fourth receiving means in a first storage; and the authentication information. A transmission request for transmitting to the management server, and information transmitted from the management server in response to the connection request transmitted by the fourth transmission means, the management server And a second storage means for storing the permission information received by the fifth reception means in a second storage unit. .

  According to the second aspect, the information device stores the authentication information received from the communication terminal in the first storage unit, and receives permission information from the management server by performing predetermined communication with the management server based on the authentication information. it can. The information device stores the permission information received from the communication terminal in the second storage unit, and can communicate with the management server based on the permission information. Therefore, for example, when the information device communicates with the management server, communication with high security is possible with the management server by using the permission information.

  In the second aspect, whether the related information that is related to the management server and stored in the second storage unit can be displayed on a display unit of a communication terminal connected to the second network. Switching means for switching, wherein the switching means prohibits the display of the related information on the display unit before the authentication information is received by the fourth receiving means, and the authentication information is received. In this case, display of the related information on the display unit may be permitted. As a result, the information device can notify the user that communication with the management server is possible.

  In the second aspect, the fourth receiving means may receive the authentication information by communication based on HTTP. As a result, the information device can execute communication with the communication terminal based on the standardized protocol.

  In the second aspect, the fourth receiving means may receive the authentication information by communication based on Simple Network Management Protocol (SNMP). As a result, the information device can execute communication with the communication terminal based on the standardized protocol.

  In the second aspect, sixth request means for requesting device identification information for identifying the information device connected to the first network from the communication terminal, and the request data by the sixth reception means. May be provided with a fifth transmission means for transmitting the device identification information to the communication terminal. Accordingly, the information device can transmit device identification information to the communication terminal in response to a request from the communication terminal.

  In the second aspect, the fifth transmission means may transmit the device identification information to the communication terminal by communication based on SNMP. As a result, the information device can execute communication with the communication terminal based on the standardized protocol.

  An information device program according to a third aspect of the present invention is a program executable by a computer that controls an information device connected to a second network, the computer being a communication terminal connected to the second network. A fourth receiving means for receiving authentication information required when communicating with a management server connected to a first network different from the second network; and the authentication information received by the fourth receiving means In response to the connection request transmitted by the fourth transmission means, a fourth transmission means for transmitting a connection request including the authentication information to the management server, a first storage means stored in one storage unit A fifth receiving means for receiving permission information permitting communication with the management server, which is information transmitted from the management server; The authorization information received me, to function as a second storage means for storing in the second storage unit.

  According to the third aspect, the information device stores the authentication information received from the communication terminal in the first storage unit, and receives permission information from the management server by performing predetermined communication with the management server based on the authentication information. it can. The information device stores the permission information received from the communication terminal in the second storage unit, and can communicate with the management server based on the permission information. Therefore, for example, when the information device communicates with the management server, communication with high security is possible with the management server by using the permission information.

  A network system according to a fourth aspect of the present invention is a network system including a registration server and a management server connected to a first network, and an information device connected to a second network, wherein the registration server includes: A first receiving means for receiving user identification information for identifying a user; and a second receiving means for receiving first device identification information for identifying the information device on the second network from a communication terminal connected to the second network. In response to the user identification information transmitted by the reception means, the first transmission means for transmitting the user identification information received by the first reception means to the management server, and the user identification information transmitted by the first transmission means Third authentication means for receiving authentication information transmitted from the management server from the management server, and registering the authentication information in the information device The first generation means for generating registration information including at least the first device identification information and the authentication information, and the registration information generated by the first generation means, A second transmitting means for transmitting to the communication terminal, wherein the information device receives a fourth receiving means for receiving the authentication information from the communication terminal, and the authentication information received by the fourth receiving means. First connection means for storing in the first storage unit of the information device, a connection request including the authentication information and second device identification information for identifying the information device is transmitted to the management server. And a fifth receiver for receiving permission information that is transmitted from the management server in response to the connection request transmitted by the fourth transmission unit and that permits communication with the management server. And second storage means for storing the permission information received by the fifth receiving means in a second storage unit of the information device, wherein the management server receives the user identification information from the registration server. And when the user identification information is received by the seventh reception means, the second generation means for generating the authentication information corresponding to the user identification information, and the second generation means The fifth transmitting means for transmitting the authentication information to the registration server, the user identification information received by the seventh receiving means, and the authentication information generated by the second generating means are associated with each other. The third storage means stored in the storage unit of the management server, the eighth receiving means for receiving the connection request transmitted from the information device, and the seventh receiving means. A determination unit that determines whether the authentication information included in the received connection request is stored in the storage unit of the management server; and when the determination unit determines that the authentication information is stored, Third generation means for generating permission information, sixth transmission means for transmitting the permission information generated by the third generation means to the information device, and a storage unit of the management server by the third storage means The user identification information and the authentication information stored in association with the second device identification information included in the connection request received by the eighth receiving unit, and the third generation unit And fourth storage means for further storing the permission information in association with each other.

According to the fourth aspect, the registration information generated by the registration server has a format capable of registering authentication information in the information device. The communication terminal can register the authentication information with the information device based on the registration information received from the registration server. The information device in which the authentication information is registered is in a state where communication with the management server can be started. As described above, the registration server can start communication between the management server and the information device by transmitting the generated registration information to the communication terminal. Therefore, since the procedure performed by the user to start communication between the management server and the information device can be simplified, the user can quickly and easily start communication between the management server and the information device. . Also, the information device can receive permission information from the management server by performing predetermined communication with the management server based on the authentication information received from the communication terminal. The information device can start communication with the management server using the permission information. In addition, the management server can generate authentication information for authenticating the information device and notify the information device of the authentication information via the registration server and the communication terminal.

It is a figure which shows the outline | summary of the network system 1, and the electrical structure of the registration server 11, the management server 12, and the information equipment 13. It is a figure which shows a communication sequence. It is a figure which shows the apparatus registration screen 141. FIG. It is a flowchart of a registration server process. It is a flowchart of information equipment processing. It is a flowchart of a management server process. It is a figure which shows the communication sequence in a 1st modification. It is a flowchart of the registration server process in a 1st modification. It is a flowchart of the information equipment process in a 1st modification. It is a figure which shows the communication sequence in a 2nd modification. It is a flowchart of the registration server process in a 2nd modification.

Embodiments of the present invention will be described with reference to the drawings. The network system 1 will be described with reference to FIG. The network system 1 includes a registration server 11, a management server 12, a plurality of information devices 13, and a communication terminal 14. The registration server 11 and the management server 12 are connected to the first network 2 and can communicate via the first network 2. The plurality of information devices 13 and the communication terminal 14 can connect to the second network 3 and communicate via the second network 3. The second network 3 is connected to the first network 2. The registration server 11 and the management server 12 can communicate with the plurality of information devices 13 and the communication terminals 14 via the first network 2 and the second network 3. An example of the first network 2 is a wide area network (WAN). An example of the second network 3 is a Local Area Network (LAN). The second network 3 is not limited to a wired network, and may be a wireless (Bluetooth (registered trademark), Wi-Fi, etc.) network.

  The registration server 11 and the management server 12 are Web servers. The information device 13 includes a copier 13A, a printer device 13B, and a scanner device 13C. The communication terminal 14 is a general purpose computer. The registration server 11 and the management server 12 are not limited to Web servers, and may be general-purpose PCs or servers having a function as Web servers. The information device 13 is not limited to the copier 13A, the printer device 13B, and the scanner device 13C, but may be a facsimile device, or a multi-function device in which functions such as a printer, a copy, a facsimile, and a scanner are housed in one casing. It may be. The communication terminal 14 is not limited to a general-purpose computer, and may be a mobile terminal (PDA, smartphone, tablet computer, etc.).

The electrical configuration of the registration server 11 will be described. The registration server 11 includes a CPU 111 that controls the registration server 11. The CPU 111 is electrically connected to the ROM 112, RAM 113, hard disk drive (HDD) 114, communication interface (I / F) 115, and drive device 116. The ROM 112 stores a boot program, a basic input / output system (BIOS), and the like. The RAM 113 stores timers, counters, and temporary data.

The HDD 114 stores the registration server processing in the CPU 111 (see FIG. 4, FIG. 8, FIG. 11).
Are stored, and an operating system (OS). The HDD 114 stores a user ID and a password. Hereinafter, the fact that the user ID and password are stored in the HDD 114 of the registration server 11 is referred to as “the user ID and password are registered in the registration server 11”. The communication I / F 115 is an interface element for connecting the registration server 11 to the first network 2. The CPU 111 transmits and receives data to and from other devices such as the management server 12 and the communication terminal 14 via the communication I / F 115. The drive device 116 can read information stored in the storage medium 117. The CPU 111 can read out the program stored in the storage medium 117 by the drive device 116 and store it in the HDD 114.

  Note that a general-purpose processor may be used as the CPU 111. The registration server process is not limited to the example executed by the CPU 111, and may be executed by another electronic component (for example, ASIC). Also, the registration server process may be distributed by a plurality of electronic devices (that is, a plurality of CPUs). For example, a part of the registration server process may be executed by a server connected to the first network 2. For example, the program may be downloaded from a predetermined server connected to the first network 2 and stored in the HDD 114.

  The electrical configuration of the management server 12 will be described. The management server 12 includes a CPU 121 that controls the management server 12. The CPU 121 is electrically connected to the ROM 122, RAM 123, HDD 124, communication I / F 125, and drive device 126. The ROM 122 stores a boot program, BIOS, and the like. The RAM 123 stores timers, counters, and temporary data.

  The HDD 124 stores a program for causing the CPU 121 to execute management server processing (see FIG. 6, which will be described later), and an OS. The HDD 124 stores a user ID and a password. Hereinafter, the fact that the user ID and password are stored in the HDD 124 is referred to as “the user ID and password are registered in the management server 12”. The communication I / F 125 is an interface element for connecting the management server 12 to the first network 2. The CPU 121 transmits / receives data to / from other devices such as the registration server 11 and the plurality of information devices 13 via the communication I / F 125. The drive device 126 can read information stored in the storage medium 127. The CPU 121 can read out the program stored in the storage medium 127 by the drive device 126 and store it in the HDD 124.

  Note that a general-purpose processor may be used as the CPU 121. The management server process is not limited to the example executed by the CPU 121, and may be executed by another electronic component (for example, ASIC). The management server process may be distributed by a plurality of electronic devices (that is, a plurality of CPUs). For example, a part of the management server process may be executed by a server connected to the first network 2. For example, the program may be downloaded from a predetermined server connected to the first network 2 and stored in the HDD 124.

The electrical configuration of the information device 13 will be described. The information device 13 includes a CPU 131 that controls the information device 13. The CPU 131 is electrically connected to the ROM 132, RAM 133, flash memory 134, input unit 135, display unit 136, image processing unit 137, communication I / F 138, and drive device 139. The ROM 132 stores a boot program, OS, and BIOS. The RAM 133 stores a timer, a counter, and temporary data. The RAM 133 stores a personal identification number (PIN) code (described later). The flash memory 134 stores a program for causing the CPU 131 to execute information device processing (see FIGS. 5 and 9, which will be described later). The flash memory 134
Stores a program (Embedded Web Server (EWS) program) for causing the information device 13 to function as a Web server. The flash memory 134 has a token (
Is stored. The flash memory 134 stores display screen data that can be displayed on the display unit of the communication terminal 14 in response to a request from the communication terminal 14.

The input unit 135 is a touch panel and a push button. The display unit 136 is a liquid crystal panel. The image processing unit 137 is a mechanism that controls image formation. For example, when the information device 13 is a copier 13A, the image processing unit 137 includes an image reading mechanism and a printing mechanism. For example, when the information device 13 is the printer device 13B, the image processing unit 137 includes a printing mechanism. For example, when the information device 13 is the scanner device 13C, the image processing unit 137 includes an image reading mechanism. The communication I / F 138 is an interface element for connecting the information device 13 to the second network 3. When the information device 13 is wired to the second network 3, a wired communication circuit (such as a LAN card) is an example of the communication I / F 138. When the information device 13 is wirelessly connected to the second network 3, as an example of the communication I / F 138, a wireless communication circuit (Bluetooth
And RF modules such as Wi-Fi). The CPU 131 transmits and receives data to and from other devices such as the management server 12 and the communication terminal 14 via the communication I / F 138. The drive device 139 can read information stored in the storage medium 140. The CPU 131 can read out the program stored in the storage medium 140 by the drive device 139 and store it in the flash memory 134.

  Note that a general-purpose processor may be used as the CPU 131. The information device processing is not limited to the example executed by the CPU 131, and may be executed by another electronic component (for example, ASIC). Further, the information device processing may be distributed by a plurality of electronic devices (that is, a plurality of CPUs). For example, a part of information device processing may be executed by a server connected to the second network 3. For example, the program may be downloaded from a server connected to the second network 3 and stored in the flash memory 134. The PIN code may be stored in the flash memory 134 instead of the RAM 133. That is, the PIN code and the token may be stored in different storage areas of the same storage device (flash memory 134).

  The management server 12 receives information stored in the information device 13 from the information device 13. The information stored in the information device 13 is information indicating the number of printed print media or the consumption level of consumables when the information device 13 is a copier 13A or a printer device 13B. The degree of consumables is information indicating the value of a sensor that detects the remaining amount of ink or toner, for example. When the information device 13 is the scanner device 13C, the information device 13 indicates information indicating the number of rotations of a roller for conveying a document and the number of conveyed documents. Hereinafter, these pieces of information are collectively referred to as device state information. The network system 1 is a system in which the management server 12 can receive device status information from the information device 13 and provide it to the user. Note that the device status information is not limited to the device status described above.

The management server 12 creates a PIN code for authenticating the information device 13 in response to a request from the registration server 11. When the management server 12 receives data including a PIN code from the information device 13, the management server 12 authenticates the information device 13 with the PIN code. When the created PIN code matches the received PIN code, the management server 12 determines that the authentication has succeeded and creates a token. The token is information that allows the information device 13 to communicate with the management server 12. The management server 12 transmits a token to the information device 13. When the information device 13 communicates with the management server 12, the information device 13 needs to add a token to data to be transmitted to the management server 12 (for example, data indicating device state information). Therefore, in order for the information device 13 to receive a token from the management server 12 and to communicate with the management server 12 using the token, the information device 13 obtains a PIN code for authenticating the information device 13 from the management server 12. There is a need to.

  A communication procedure until the information device 13 acquires a PIN code from the management server 12 and starts communication with the management server 12 using a token will be described with reference to FIG. First, the user 14A performs a login operation on the communication terminal 14 (S201). The login operation is performed, for example, via a login screen displayed on a browser executed by the communication terminal 14. The login operation is an operation for inputting identification information (hereinafter referred to as a user ID) for identifying the user 14A and a password on the login screen. The communication terminal 14 transmits the input user ID and password to the registration server 11 via the first network 2 and the second network 3. The registration server 11 receives the user ID and password (S203). An example of the user ID is the mail address of the user 14A.

Specifically, it is as follows. The communication terminal 14 transmits a HyperText Transfer Protocol (HTTP) request to the registration server 11 and receives an HTTP response capable of displaying a login screen from the registration server 11. The HTTP response that can display the login screen is an HTTP response including data indicating the login screen described in a markup language such as HyperText Markup Language (HTML). The communication terminal 14 displays a login screen on the browser (S202). When a login operation is performed via the login screen (S201), the communication terminal 14 transmits an HTTP request including the input user ID and password to the registration server 11. The registration server 11 receives the HTTP request (S203).

  When the user ID and password included in the received HTTP request are registered, the registration server 11 displays a registration screen (hereinafter referred to as a device registration screen) for registering the information device 13 on the display of the communication terminal 14. It is displayed (S205). Specifically, the registration server 11 transmits an HTTP response capable of displaying a device registration screen to the communication terminal 14 in response to the received HTTP request. The communication terminal 14 receives the HTTP response. The communication terminal 14 displays a device registration screen on the browser based on the received HTTP response.

  FIG. 3 shows an example of a device registration screen (device registration screen 141) displayed on the browser executed by the communication terminal 14. The device registration screen 141 includes a plurality of input units 141A. An IP address of the information device 13 can be input to the input unit 141A. In FIG. 3, the URL 141B is associated with each of the plurality of input units 141A, but the URL 141B is not displayed at this time. Details of the URL 141B and the timing at which the URL 141B is displayed will be described later.

  As shown in FIG. 2, the user 14A inputs the IP address of the information device 13 for which management status information is desired to be managed by the management server 12 to the input unit 141A of the device registration screen 141 (S207). The input IP address is address information that can identify the information device 13 in the second network 3, such as a local IP. The communication terminal 14 transmits the input IP address to the registration server 11. When an IP address is input to each of the plurality of input units 141A, the communication terminal 14 transmits the input plurality of IP addresses to the registration server 11. The registration server 11 receives the IP address (S209). Specifically, the communication terminal 14 transmits an HTTP request including the input IP address to the registration server 11. The registration server 11 receives the HTTP request.

In the above description, the user 14 </ b> A may input the domain name of the information device 13 to the communication terminal 14 as address information that can identify the information device 13 in the second network 3 instead of the IP address. The communication terminal 14 may specify the IP address from the input domain name by making an inquiry to the DNS server connected to the second network 3. The communication terminal 14 may transmit the IP address specified based on the domain name to the registration server 11. Alternatively, the communication terminal 14 may transmit the domain name of the information device 13 to the registration server 11. In this case, in S215 described later, a URL including the domain name is displayed on the browser. When a URL including a domain name is selected in S217, which will be described later, the communication terminal 14 makes an inquiry to a DNS server connected to the second network 3 to inquire the information device 13 having the IP address specified based on the domain name. Connect to.

  When receiving the HTTP request, the registration server 11 requests the management server 12 to create a PIN code. The PIN code for requesting creation is authentication information for causing the management server 12 to authenticate the information device 13 in association with the user ID included in the HTTP request received by the registration server 11. Specifically, the registration server 11 transmits to the management server 12 number information indicating the user ID received in S203 and the number of IP addresses received in S209. The management server 12 receives the user ID and number information (S211). The management server 12 creates PIN codes that can authenticate the number of information devices 13 indicated by the number information (S212). The management server 12 creates one PIN code regardless of the number indicated by the number information. The management server 12 transmits the created PIN code to the registration server 11. The registration server 11 receives the PIN code (S213).

The registration server 11 generates a URL including the received PIN code and the IP address received in S209. Specifically, it is as follows. The registration server 11 uses the IP address received in S209 (for example, 192.168.0.1, 192.168.0.2, 192.168.0.3, 192.168.0.4, see FIG. 3) as the host name (after http: //, see FIG. 3). ) In the URL. Also, the registration server 11 includes the PIN code (12345, see FIG. 3) received in S213 in the URL as a query (after the? Pin =, see FIG. 3). When the registration server 11 receives a plurality of IP addresses in S209, the registration server 11 generates URLs corresponding to the plurality of IP addresses for the number of IP addresses.

  The registration server 11 creates device registration screen data including the generated URL. For example, as shown in FIG. 3, a device registration screen 141 in which the generated URL 141B is associated with the input unit 141A in which the corresponding IP address is input is created. In response to the HTTP request received in S209, the registration server 11 transmits to the communication terminal 14 an HTTP response that can display the created device registration screen. The communication terminal 14 receives the HTTP response. Based on the received HTTP response, the communication terminal 14 displays a device registration screen including the URL on the browser (S215).

  The user 14A inputs an operation for selecting a URL included in the device registration screen displayed on the browser to the communication terminal 14 (S217). As described above, the URL included in the device registration screen includes the input IP address as the host name and the PIN code created by the management server 12 as the query. Therefore, when the URL is selected, the communication terminal 14 transmits an HTTP request including the PIN code to the information device 13 identified by the IP address. The information device 13 receives the HTTP request (S219). The information device 13 executes communication of S221, S223, and S225, which will be described later, based on HTTP by executing the EWS program stored in the HDD 134.

The information device 13 specifies the PIN code included in the received HTTP request and stores it in the RAM 133. The information device 13 transmits data requesting creation of a token necessary for communication with the management server 12 (hereinafter referred to as connection request data) to the management server 12 as an HTTP request. The connection request data includes the PIN stored in the RAM 133.
Code is included. The management server 12 receives the connection request data (S221). The management server 12 authenticates the information device 13 with the PIN code included in the received connection request data. The management server 12 creates a token (S222).

  The management server 12 transmits the created token as an HTTP response to the HTTP request in S221 to the information device 13 that has transmitted the connection request data. The information device 13 receives the token and stores it in the flash memory 134 (S223). The information device 13 communicates with the management server 12 by adding the token stored in the flash memory 134 to the data to be transmitted to the management server 12 (S225). For example, the management server 12 can receive the device status information from the information device 13 by adding a token to the data indicating the device status information and transmitting the token to the management server 12. As described above, the management server 12 and the information device 13 perform communication using a token, whereby the management server 12 can prevent spoofed access from the information device 13.

  In the above description, the communication terminal 14 may transmit predetermined format data including the PIN code to the information device 13 instead of the HTTP request including the PIN code. The information device 13 may receive the predetermined format data including the PIN code from the communication terminal 14 and specify the PIN code.

  A process executed by each CPU of the registration server 11, the management server 12, and the information device 13 based on the communication sequence of FIG. 2 will be described with reference to FIGS. A registration server process executed by the CPU 111 of the registration server 11 will be described with reference to FIG. When an operation to turn on the power of the registration server 11 is performed, the CPU 111 starts a registration server process by reading and executing a program stored in the HDD 114. For example, the processing shown in FIG. 4 is performed by the function of the registration server 11 as a Web server, which is achieved by the CPU 111 that executes the program. The CPU 111 determines whether an HTTP request requesting display of a login screen has been received from the communication terminal 14 (S7). CPU111 returns a process to S7, when an HTTP request is not received (S7: NO). When the CPU 111 receives an HTTP request (S7: YES), the CPU 111 transmits an HTTP response capable of displaying a login screen to the communication terminal 14 (S9). The communication terminal 14 receives the HTTP response and displays a login screen on the browser (S202, see FIG. 2).

The CPU 111 determines whether an HTTP request including the user ID and password has been received from the communication terminal 14 (S11). If the CPU 111 does not receive an HTTP request (S11: NO), the process returns to S11. When the communication terminal 14 receives an operation for inputting a user ID and a password via the login screen, the communication terminal 14 transmits an HTTP request including the input user ID and password. When the CPU 111 receives an HTTP request (S11: YES), the CPU 111 identifies a user ID and a password included in the HTTP request. The CPU 111 determines whether the specified user ID is stored in the HDD 114 by comparing the combination of the user ID and password stored in the HDD 114 with the specified combination of the user ID and password. If the specified user ID is not stored in the HDD 114, the CPU 111 determines that the specified user ID and password are not registered in the registration server 11 (S13: YES). The CPU 111 transmits an HTTP response capable of displaying a display screen for inquiring whether or not to register the specified user ID and password in the registration server 11 to the communication terminal 14. When the CPU 111 receives notification data for registration from the communication terminal 14 according to the transmitted HTTP response, the CPU 111 stores the specified user ID and password in association with each other in the HDD 114 (S15). The CPU 111 transmits registration request data including the specified user ID and password to the management server 12 in order to register the specified user ID and password in the management server 12 (S17). The CPU 111 advances the process to S19.

  Further, even when the specified user ID is stored in the HDD 114 (S13: NO), the CPU 111 determines that the specified password is different from the password associated with the user ID stored in the HDD 114 (S14: NO). ) Return the process to S9 in order to allow the user to input the correct password. When the identified password matches the password associated with the user ID stored in the HDD 114 (S14: YES), the CPU 111 determines that the identified user ID and password are registered in the registration server 11. . The CPU 111 advances the process to S19.

  In response to the HTTP request, the CPU 111 transmits an HTTP response capable of displaying a device registration screen that does not include a URL to the information device 13 (S19). The communication terminal 14 receives the HTTP response and causes the browser to display a device registration screen that does not include a URL (S205, see FIG. 2). The CPU 111 determines whether an HTTP request including an IP address has been received from the communication terminal 14 (S21). CPU111 returns a process to S21, when an HTTP request is not received (S21: NO). When receiving an operation for inputting an IP address via the device registration screen, the communication terminal 14 transmits an HTTP request including the input IP address. When the CPU 111 receives an HTTP request (S21: YES), the CPU 111 specifies an IP address included in the HTTP request. The CPU 111 stores the specified IP address in the RAM 113. The CPU 111 transmits the user ID included in the HTTP request received in S11 and number information indicating the number of IP addresses included in the HTTP request received in S21 to the management server 12 (S23). The CPU 111 receives the PIN code returned from the management server 12 according to the transmitted user ID and number information (S25).

  The CPU 111 generates a URL including the IP address included in the HTTP request received in S21 as a host name and including the PIN code received in S25 as a query (S27). If the HTTP request received in S21 includes a plurality of IP addresses, the CPU 111 generates a plurality of URLs corresponding to each of the plurality of IP addresses. The CPU 111 transmits an HTTP response capable of displaying a device registration screen including the generated URL to the communication terminal 14 (S29). The communication terminal 14 receives the HTTP response and displays a device registration screen including the URL on the browser (S215, see FIG. 2). The CPU 111 returns the process to S7.

  Information device processing executed by the CPU 131 of the information device 13 will be described with reference to FIG. When the operation of turning on the power of the information device 13 is performed, the CPU 131 starts the information device processing by reading and executing the program stored in the flash memory 134. In addition, the CPU 111 reads and executes the EWS program stored in the flash memory 134, and executes the communication process based on HTTP by causing the information device 13 to function as a Web server. As described above, the flash memory 134 stores display screen data to be displayed on the display unit of the communication terminal 14. Specifically, the flash memory 134 is notified of (1) data of a display screen that receives an input with respect to a setting parameter of the information device 13 and (2) that the information device 13 is in a state where it cannot communicate with the management server 12. Display screen data and (3) display screen data for notifying that the information device 13 is communicable with the management server 12 are stored. At present, when the CPU 131 receives a display request (HTTP request) from the communication terminal 14, the CPU 131 transmits a response (HTTP response) including only the data (1) to the communication terminal 14. Therefore, a display screen based on the data (1) is displayed on the display unit of the communication terminal 14, and a display screen based on the data (2) and (3) is not displayed.

  The CPU 131 determines whether an HTTP request including a PIN code has been received from the communication terminal 14 (S41). CPU131 returns a process to S41, when an HTTP request is not received (S41: NO). When receiving the HTTP request (S41: YES), the CPU 131 identifies the PIN code included in the received HTTP request and stores it in the RAM 133 (S43). When the CPU 131 receives a display request from the communication terminal 14, the CPU 131 switches the display screen data (3) for notifying that communication with the management server 12 is possible to a state where it can be transmitted to the communication terminal 14 ( S45). Thereafter, when receiving a display request from the communication terminal 14, the CPU 131 displays, for example, the display screen data (3) on which the characters “connected to the management server” are displayed together with the data of (1) above. 14 to send.

  The CPU 131 transmits connection request data including the PIN code and the device ID stored in the RAM 133 to the management server 12 (S47). The device ID is identification information for identifying the information device 13. The device ID is information unique to the information device 13 such as a MAC address or a serial number of the information device 13. The CPU 131 receives a token returned from the management server 12 according to the connection request data (S49). The CPU 131 stores the received token in the flash memory 134 (S51). The CPU 131 communicates with the management server 12 by adding the token stored in the flash memory 134 to the data and transmitting it to the management server 12 (S53). The CPU 131 returns the process to S41.

  The management server process executed by the CPU 121 of the management server 12 will be described with reference to FIG. When an operation to turn on the power of the management server 12 is performed, the CPU 121 starts the management server process by reading and executing the program stored in the HDD 124. For example, the processing illustrated in FIG. 6 is performed by the function of the management server 12 as a Web server, which is achieved by the CPU 121 that executes the program. The CPU 121 determines whether registration request data including a user ID and a password has been received from the registration server 11 (S61). When the registration request data including the user ID and password is received from the registration server 11 (S61: YES), the CPU 121 determines whether the user ID and password included in the received registration request data are stored in the HDD 124 (S65). . When the user ID and password included in the received registration request data are stored in the HDD 124, the CPU 121 determines that the received user ID and password are already registered in the management server 12 (S65: NO). The CPU 121 returns the process to S61.

  If the received user ID and password are not stored in the HDD 124, the CPU 111 determines that the received user ID and password are not registered in the management server 12 (S65: YES). The CPU 121 stores the received user ID and password in association with each other in the HDD 124 (S67). The CPU 121 returns the process to S61. In addition, even when the received user ID is stored in the HDD 124, the CPU 121 determines that the received user ID is different from the password associated with the user ID stored in the HDD 124. (S65: NO), it is determined that the received password is incorrect. In this case, the CPU 121 returns the process to S61.

When the CPU 121 does not receive the user ID and password from the registration server 11 (S61: NO), the CPU 121 determines whether the user ID and the number information are received from the registration server 11 (S69). When the CPU 121 receives the user ID and the number information from the registration server 11 (S69: YES), the CPU 121 determines whether the received user ID is stored in the HDD 124 (S71). If the received user ID is stored in the HDD 124 (S71: YES), the CPU 121 creates PIN codes that can authenticate the number of information devices 13 indicated by the received number information (S73). The CPU 121 transmits the created PIN code to the registration server 11 (S75). The CPU 121 associates the created PIN code with the received user ID and number information and stores them in the HDD 124 (S77). The CPU 121 returns the process to S61.

  If the CPU 121 does not receive the user ID and number information from the registration server 11 (S69: NO), the CPU 121 determines whether connection request data has been received from the information device 13 (S79). CPU121 returns a process to S61, when connection request data is not received (S79: NO). When the CPU 121 receives the connection request data (S79: YES), the PIN code included in the connection request data is stored in the HDD 124, and the number indicated by the number information associated with the PIN code is 1. It is determined whether this is the case (S81). The CPU 121 determines that the PIN code included in the connection request data is not stored in the HDD 124 or the number indicated by the number information stored in the HDD 124 in association with the PIN code included in the connection request data is 0. (S81: NO), the process is returned to S61. Accordingly, the CPU 121 can limit the number of information devices 13 that start communication using the created PIN code to the number indicated by the number information.

  When the PIN code included in the connection request data is stored in the HDD 124 and the number indicated by the associated number information is 1 or more (S81: YES), the CPU 121 determines from the number indicated by the number information. Subtract 1 to update the number information. The CPU 121 creates a token (S83). The CPU 121 transmits the created token to the information device 13 (S85). The CPU 121 transmits the token transmitted in S85 to the PIN code included in the connection request data among the PIN codes stored in S77, and the user ID stored in the HDD 124 in association with the PIN code, and S79. The device ID included in the connection request data received in step S3 is further stored in association with the HDD 124 (S87). Thereafter, the CPU 121 can specify a token for communicating with the information device 13 for each device ID. The CPU 121 communicates with the information device 13 by receiving the data with the token added from the information device 13 (S89). The CPU 121 returns the process to S61.

  As described above, the URL generated by the CPU 111 of the registration server 11 in S27 has a format in which the communication terminal 14 can transmit a PIN code to the information device 13 when the user of the communication terminal 14 performs a selection operation. The communication terminal 14 displays a device registration screen including a URL on the browser based on the HTTP response received from the registration server 11, and transmits a PIN code to the information device 13 at the timing when the user performs a URL selection operation. it can. The information device 13 that has received the PIN code can start communication with the management server 12 by receiving a token from the management server 12 using the PIN code. As described above, the CPU 111 of the registration server 11 displays the device registration screen including the generated URL on the communication terminal 14 so that the communication between the management server 12 and the information device 13 can be easily performed only by the user selecting the URL. Can be started. In this case, the user does not need to directly set a PIN code in the information device 13. Therefore, it is possible to simplify the procedure performed by the user in order to start communication between the management server 12 and the information device 13. The user can quickly and easily start communication between the management server 12 and the information device 13.

  The URL generated by the registration server 11 in S27 includes the IP address of the information device 13 as a host name and includes a PIN code as a query. When the URL of the device registration screen displayed on the browser is selected, the communication terminal 14 can transmit a PIN code to the information device 13 by an HTTP request. Therefore, the registration server 11 can easily transmit the PIN code from the communication terminal 14 to the information device 13 by displaying the device registration screen including the generated URL on the communication terminal 14.

The CPU 111 of the registration server 11 can specify the IP address of the information device 13 by receiving an HTTP request including the IP address from the communication terminal 14 (S21: YES). In response to the HTTP request, the CPU 111 transmits an HTTP response including the PIN code to the communication terminal 14 (S29). Since the registration server 11 can execute communication with the communication terminal 14 based on a standardized protocol (HTTP) in this way, the management server 12 and the information device can be used by using the well-known communication terminal 14 capable of executing HTTP. 13 can be started.

  The CPU 111 of the registration server 11 transmits the user ID and the number information to the management server 12 in S23. The management server 12 can specify the number of information devices 13 that can be authenticated by the created PIN code based on the number information. Accordingly, the registration server 11 can receive from the management server 12 PIN codes for the information devices 13 corresponding to the number of IP addresses received in S 21 to communicate with the management server 12. The registration server 11 can maintain the security of the network system 1 by preventing more information devices 13 than the number indicated by the number information from communicating with the management server 12.

  The CPU 131 of the information device 13 can receive a token from the management server 12 by performing predetermined communication (S221, S223, see FIG. 2) with the management server 12 based on the PIN code received from the communication terminal 14. The information device 13 stores the received token in the flash memory 134 and uses this token to perform highly secure communication with the management server 12.

  The CPU 131 of the information device 13 displays a screen for notifying that communication with the management server 12 is possible on the display unit of the communication terminal 14. As a result, the information device 13 can notify the user that communication with the management server 12 is possible.

  The CPU 131 of the information device 13 receives the HTTP request and specifies the PIN code included in the received HTTP request (S41). Since the information device 13 can execute communication with the communication terminal 14 based on a standardized protocol (HTTP), the PIN code can be specified by highly reliable communication.

  A first modification of the present invention will be described with reference to FIGS. A communication procedure in the first modification will be described with reference to FIG. The communication procedure in the first modified example is the first plug-in in which the registration server 11 is installed in the communication terminal 14 instead of causing the registration server 11 to display a device registration screen that does not include the URL on the communication terminal 14 in S205 of FIG. Is different from the above embodiment in that The first plug-in causes the communication terminal 14 to execute processing for the communication terminal 14 to receive the IP address from the information device 13 and transmit it to the management server 12.

Specifically, it is as follows. When the registration server 11 receives an HTTP request including the user ID and password from the communication terminal 14 in S203, the registration server 11 instructs the communication terminal 14 to execute the first plug-in installed in the communication terminal 14 (hereinafter referred to as the first data). 1 execution instruction data) is transmitted to the communication terminal 14 (S301). The first execution instruction data is a code for instructing execution of the first plug-in included in a markup language such as HTML, for example. The communication terminal 14 receives the first execution instruction data and executes the first plug-in. By executing the first plug-in, the communication terminal 14 receives IP addresses from all of the plurality of information devices 13 connected to the second network 3 based on Simple Network Management Protocol (SNMP). More specifically, the communication terminal 14 broadcasts a request command (GetRequest) requesting transmission of an IP address to all of the plurality of information devices 13 connected to the second network 3 (S303). Each of the plurality of information devices 13 transmits a response command (GetResponse) including each IP address to the communication terminal 14. The communication terminal 14 receives the response command transmitted from each of the plurality of information devices 13 (S305). The communication terminal 14 specifies the IP address included in the received response command. The communication terminal 14 transmits an HTTP request including the specified IP address to the registration server 11. The registration server 11 receives the HTTP request (S209) and identifies the IP address. Other communication is the same as the communication sequence of FIG.

  The registration server process executed by the CPU 111 of the registration server 11 will be described with reference to FIG. Description of the same part as the registration server process of FIG. 4 is omitted or simplified. After confirming whether the user of the communication terminal 14 that transmitted the user ID and password is registered in the registration server 11 (S13, S14, S15, S17), the CPU 111 sends the first execution instruction data to the communication terminal 14. Transmit (S101). The CPU 111 includes, in the first execution instruction data, acquisition destination information necessary when the communication terminal 14 in which the first plug-in is not installed acquires the first plug-in. When the communication terminal 14 in which the first plug-in is not installed receives the first execution instruction data, the communication terminal 14 transmits the first plug-in request data specifying the acquisition destination information included in the first execution instruction data, It transmits to the registration server 11. When the CPU 111 receives the first plug-in request data from the communication terminal 14 (S103: YES), the CPU 111 transmits the first plug-in to the communication terminal 14 (S105). The communication terminal 14 installs the received first plug-in in the HDD of the communication terminal 14. CPU111 advances a process to S21. The communication terminal 14 executes the installed first plug-in and receives an IP address from the information device 13 (see S303, S305, FIG. 7).

  On the other hand, the communication terminal 14 in which the first plug-in is installed executes the first plug-in by receiving the first execution instruction data, and receives an IP address from the information device 13 (see S303, S305, FIG. 7). ). In this case, the CPU 111 does not receive the first plug-in request data from the communication terminal 14 (S103: NO). CPU111 advances a process to S21.

  The CPU 111 determines whether an HTTP request including an IP address has been received from the communication terminal 14 (S21). When the CPU 111 receives the HTTP request (S21: YES), the CPU 111 specifies the IP address included in the HTTP request as the IP address of the information device 13. The processing of S23 to S29 is the same as the registration server processing of FIG.

  In the above description, the communication terminal 14 may individually communicate with each of the plurality of information devices 13 connected to the second network 3 by executing the first plug-in, and acquire each IP address. . Alternatively, the communication terminal 14 may acquire an IP address of each of the plurality of information devices 13 by executing a first plug-in to inquire a server (not shown) connected to the second network 3.

  With reference to FIG. 9, information device processing executed by the CPU 131 of the information device 13 will be described. The description of the same part as the information device processing in FIG. 5 is omitted or simplified. The CPU 131 determines whether a request command for requesting transmission of an IP address has been received from the communication terminal 14 by communication based on SNMP (S111). CPU131 returns a process to S111, when a request command is not received (S111: NO). When the CPU 131 receives the request command (S111: YES), the CPU 131 transmits a response command including the IP address to the communication terminal 14 that has transmitted the request command (S113). When the CPU 131 receives an HTTP request including a PIN code from the communication terminal 14 (S41: YES), the CPU 131 identifies the PIN code included in the received HTTP request and stores it in the RAM 133 (S43). The CPU 131 executes processing (S45 to S53) for starting communication with the management server 12. The processing of S45 to S53 is the same as the information device processing of FIG.

  Since the management server process executed by the CPU 121 of the management server 12 in the first modification is the same as the management server process (see FIG. 6) of the above embodiment, the description thereof is omitted.

  As described above, when receiving the first execution instruction data from the registration server 11, the communication terminal 14 receives the IP address from the information device 13 by executing the first plug-in according to the instruction. The registration server 11 can cause the communication terminal 14 to execute the first plug-in by installing the first plug-in in the communication terminal 14. In this case, the user does not need to perform an operation for inputting the IP address on the input unit of the device registration screen on the communication terminal 14. Therefore, the registration server 11 can facilitate the procedure for receiving the IP address from the information device 13.

  When receiving a request command based on SNMP (S111: YES), the CPU 131 of the information device 13 sends an IP address to the communication terminal 14 by returning a response command based on SNMP (S113). Since the information device 13 can execute communication with the communication terminal 14 based on the standardized protocol (SNMP), the information device 13 can transmit the IP address by highly reliable communication.

  A second modified example of the present invention will be described with reference to FIGS. A communication procedure in the second modification will be described with reference to FIG. The communication procedure in the second modification is that the registration server 11 executes the second plug-in installed in the communication terminal 14 instead of displaying the device registration screen including the URL on the communication terminal 14 in S215 of FIG. This is different from the first modification. The second plug-in causes the communication terminal 14 to execute processing for the communication terminal 14 to transmit an HTTP request including the PIN code to the information device 13.

  Specifically, it is as follows. When the registration server 11 receives the PIN code from the management server 12 in S213, the registration server 11 transmits second execution instruction data for causing the communication terminal 14 to execute the second plug-in to the communication terminal 14 (S309). The second plug-in can cause the communication terminal 14 to execute the process of transmitting the PIN code received in S213 to the information device 13 having the IP address received in S209. The second execution instruction data includes the IP address received in S209, the PIN code received in S213, and the acquisition destination information necessary when the communication terminal 14 in which the second plug-in is not installed acquires the second plug-in. including. The communication terminal 14 receives the second execution instruction data, and installs the second plug-in when the second plug-in is not installed.

  The communication terminal 14 executes the second plug-in. By executing the second plug-in, the communication terminal 14 receives the command including the PIN code received by the registration server 11 in S213 by communication based on SNMP, and the information device having the IP address received by the registration server 11 in S209 13 to send. When the registration server 11 receives a plurality of IP addresses in S209, the communication terminal 14 transmits a command including the PIN code to each of the plurality of information devices 13 having each of the plurality of IP addresses. The information device 13 receives the command (S219). The information device 13 stores the PIN code included in the command in the RAM 132. The information device 13 performs communication with the management server 12 to start communication with the management server 12 (S221, S223, S225).

In the above description, the communication terminal 14 may transmit the HTTP request including the PIN code to the information device 13 by executing the second plug-in. The information device 13 may receive the HTTP request and store the PIN code included in the HTTP request in the RAM 132. In any case, the information device 13 can execute communication with the communication terminal 14 based on a standardized protocol (SNMP or HTTP), and therefore can receive the PIN code by highly reliable communication.

  A registration server process executed by the CPU 111 of the registration server 11 will be described with reference to FIG. Description of the same part as the registration server process of FIG. 8 is omitted or simplified. When the CPU 111 receives an HTTP request including an IP address from the communication terminal 14 (S21: YES), the CPU 111 transmits the user ID and the number information to the management server 12 (S23), and receives the PIN code (S25). The CPU 111 includes an IP address received in S21, a PIN code received in S25, and acquisition destination information necessary when the communication terminal 14 in which the second plug-in is not installed acquires the second plug-in. 2 Execution instruction data is generated (S106). The CPU 111 transmits second execution instruction data to the communication terminal 14 (S107).

  When the communication terminal 14 in which the second plug-in is not installed receives the second execution instruction data, the communication terminal 14 transmits the second plug-in request data specifying the acquisition destination information included in the second execution instruction data, It transmits to the registration server 11. When the CPU 111 receives the second plug-in request data from the communication terminal 14 (S109: YES), the CPU 111 transmits the second plug-in to the communication terminal 14 (S111). The communication terminal 14 installs the received second plug-in in the HDD of the communication terminal 14. The CPU 111 returns the process to S7. The communication terminal 14 transmits a command including the PIN code to the information device 13 by executing the installed second plug-in (S219, see FIG. 10). Thus, the information device 13 can acquire a token by performing predetermined communication with the management server 12 and can communicate with the management server 12.

  On the other hand, the communication terminal 14 installed with the second plug-in executes the second plug-in by receiving the second execution instruction data, and transmits a command including the PIN code to the information device 13 by communication based on SNMP. (S219, see FIG. 10). In this case, the CPU 111 does not receive the second plug-in request data from the communication terminal 14 (S109: NO). The CPU 111 returns the process to S7.

  Since the management server process executed by the CPU 121 of the management server 12 in the second modification is the same as the management server process (see FIG. 6) of the above embodiment, the description thereof is omitted. In addition, since the information device processing executed by the CPU 131 of the information device 13 in the second modification is the same as the information device processing (see FIG. 9) of the first modification, description thereof will be omitted.

  As described above, when the communication terminal 14 receives the execution instruction data from the registration server 11, the communication terminal 14 transmits the PIN code to the information device 13 by executing the second plug-in according to the instruction. The registration server 11 can cause the communication terminal 14 to execute the second plug-in by generating the second execution instruction data for executing the second plug-in and installing the second execution instruction data in the communication terminal 14. In this case, the user does not need to perform an operation on the communication terminal 14 to select a URL included in the device registration screen. Therefore, the registration server 11 can facilitate the procedure in which the communication terminal 14 transmits the PIN code to the information device 13.

The user ID corresponds to “user identification information” of the present invention. The IP address corresponds to “device identification information” and “first device identification information” of the present invention. The device ID corresponds to “second device identification information” of the present invention. The PIN code corresponds to “authentication information” of the present invention. The token corresponds to “permission information” of the present invention. The URL generated in S27 or the execution instruction data generated in S106 corresponds to “registration information” of the present invention. The CPU 111 that performs the process of S11 corresponds to the “first receiving means” of the present invention. The CPU 111 that performs the process of S21 corresponds to the “second receiving means” of the present invention. The CPU 111 that performs the process of S23 corresponds to the “first transmission unit” of the present invention. The CPU 111 that performs the process of S25 corresponds to the “third receiving means” of the present invention. S27,
The CPU 111 that performs the process of S106 corresponds to the “first generation unit” of the present invention. The CPU 111 that performs the processes of S29 and S107 corresponds to the “second transmission unit” of the present invention. The CPU 111 that performs the process of S105 corresponds to the “third transmission unit” of the present invention. The CPU 131 that performs the process of S41 corresponds to the “fourth receiving means” of the present invention. The RAM 133 that stores the PIN code corresponds to the “first storage unit” of the present invention. The CPU 131 that performs the process of S43 corresponds to the “first storage unit” of the present invention. The CPU 131 that performs the process of S47 corresponds to the “fourth transmission unit” of the present invention. The CPU 131 that performs the process of S49 corresponds to the “fifth receiving unit” of the present invention. The flash memory 134 that stores the token corresponds to the “second storage unit” of the present invention. The CPU 131 that performs the process of S51 corresponds to the “second storage unit” of the present invention. The CPU 131 that performs the process of S45 corresponds to the “switching unit” of the present invention. The display image that notifies that the management server 12 and the information device 13 are in a communicable state corresponds to “related information” of the present invention. The CPU 131 that performs the process of S111 corresponds to the “sixth receiving means” of the present invention. The CPU 131 that performs the process of S113 corresponds to the “fifth transmission unit” of the present invention. The CPU 121 that performs the process of S69 corresponds to the “seventh receiving means” of the present invention. The CPU 121 that performs the process of S73 corresponds to the “second generation unit” of the present invention. The CPU 121 that performs the process of S75 corresponds to the “fifth transmission unit” of the present invention. The CPU 121 that performs the process of S77 corresponds to the “third storage unit” of the present invention. The CPU 121 that performs the process of S79 corresponds to the “eighth receiving means” of the present invention. The CPU 121 that performs the process of S81 corresponds to the “determination unit” of the present invention. The CPU 121 that performs the process of S83 corresponds to the “third generation unit” of the present invention. The CPU 121 that performs the process of S85 corresponds to the “sixth transmission unit” of the present invention. The CPU 121 that performs the process of S87 corresponds to the “fourth storage unit” of the present invention.

  The present invention is not limited to the above embodiment, and various modifications can be made. The user ID received by the CPU 111 of the registration server 11 in S11 may be transmitted from other than the communication terminal 14. For example, a customer information database server that manages a user ID of a user who uses the network system 1 may be connected to the first network 2. The user ID may be transmitted from the customer information database server. The CPU 111 of the registration server 11 may receive a user ID from the customer information database server.

  The registration server 11 may transmit only the user ID to the management server 12 in S23 and may not transmit the number information to the management server 12. The management server 12 may create a PIN code that can authenticate an arbitrary number of information devices 13 in S73.

  The first plug-in and the second plug-in may be included in a common plug-in. The communication terminal 14 may execute both the process when the first plug-in is executed and the process when the second plug-in is executed by executing the common plug-in.

  The information device 13 may display information indicating the state of the information device 13 on the display unit 136 of the information device 13 instead of displaying the information on the display unit of the communication terminal 14. Alternatively, the information device 13 may simultaneously display information indicating the state of the information device 13 on the display unit of the communication terminal 14 and the display unit 136 of the information device 13.

When the information device 13 receives the display request from the communication terminal 14, (1) the management server 12 and the information device 13 can communicate with each other together with display screen data that receives an input for the setting parameter of the information device 13. Any one of the display screen data (2) and (3) for notifying whether or not there is may be transmitted to the communication terminal 14 as necessary. That is, when the information device 13 receives a display request from the communication terminal 14 in a state where the PIN code is not stored in the RAM 132, the information device 13 is in a state where the information device 13 cannot communicate with the management server 12. For example, the data (2) on the display screen showing the characters “not connected to the management server” may be transmitted to the communication terminal 14 together with the data (1) on the display screen. On the other hand, when receiving a display request from the communication terminal 14 with the PIN code received from the management server 12 and stored in the RAM 132, the information device 13 notifies that the communication with the management server 12 is possible. The display screen data (3) may be transmitted to the communication terminal 14 together with the display screen data (1). The display content displayed on the display unit of the communication terminal 14 by the information device 13 is not limited to the display screen based on the data (1) and (2). For example, the domain name of the management server 12 may be displayed on a display screen that notifies that communication with the management server 12 is possible.

  The management server 12 may create an encryption key instead of the PIN code. The management server 12 may transmit the encryption key to the information device 13 via the registration server 11 and the communication terminal 14. The management server 12 may authenticate the information device 13 using an encryption key.

  The information device 13 may transmit the connection request data to the management server 12 including the user ID. The user ID may be input to the information device 13 in advance by a user who manages the information device 13. When receiving the connection request data, the management server 12 may determine whether the user ID and the PIN code included in the connection request data are stored in the HDD 124 in association with each other. The management server 12 may create a token only when the user ID and PIN code included in the connection request data are stored in the HDD 124 in association with each other.

DESCRIPTION OF SYMBOLS 1 Network system 2 1st network 3 2nd network 11 Registration server 12 Management server 13 Information apparatus 13A Copy machine 13B Printer apparatus 13C Scanner apparatus 14 Communication terminal 111, 121, 131 CPU
RAM 133
Flash memory 134

Claims (14)

A computer executable program that controls a registration server connected to the first network,
The computer,
First receiving means for receiving user identification information for identifying a user;
Second receiving means for receiving, from a communication terminal connected to the second network, device identification information for identifying, on the second network, an information device connected to a second network different from the first network;
First transmission means for transmitting the user identification information received by the first reception means to a management server connected to the first network;
Third receiving means for receiving authentication information transmitted from the management server in response to the user identification information transmitted by the first transmitting means from the management server;
Information in a format capable of registering the authentication information in the information device, the first generating means for generating registration information including at least the device identification information and the authentication information;
A registration server program for causing the registration information generated by the first generation means to function as second transmission means for transmitting to the communication terminal.   The registration information includes at least the device identification information and the authentication information, and is a Uniform Resource Locator (URL) in a format in which the information device can receive the authentication information. Registration server program. The second receiving means includes a HyperText Transfer Protocol (HTT) including the device identification information.
P) receiving a request from the communication terminal;
The registration server program according to claim 2, wherein the second transmission unit transmits an HTTP response including the registration information in response to an HTTP request transmitted from the communication terminal. The first transmission unit further transmits, to the management server, number information indicating the number of the information devices identified by the device identification information received by the second reception unit,
4. The registration server according to claim 1, wherein the first generation unit generates registration information for a number indicated by the number information transmitted by the first transmission unit. 5. Program. Said computer further
A program executable by the communication terminal, wherein the first plug-in capable of acquiring the device identification information from the information device is caused to function as third transmission means for transmitting to the communication terminal;
The second receiving means includes
The apparatus identification information acquired by the communication terminal when the communication terminal executes the first plug-in transmitted by the third transmission unit is received from the communication terminal. 5. The registration server program according to any one of 4 above. The first generation means includes
A program that can be executed by the communication terminal, and that generates an instruction for causing the communication terminal to execute a second plug-in that can transmit the authentication information received by the third receiving unit to the information device. The registration server program according to claim 5. An information device connected to the second network,
A fourth receiving means for receiving authentication information required when communicating with a management server connected to a first network different from the second network from a communication terminal connected to the second network;
First storage means for storing the authentication information received by the fourth receiving means in a first storage unit;
A fourth transmission means for transmitting a connection request including the authentication information to the management server;
Fifth receiving means for receiving permission information which is transmitted from the management server in response to the connection request transmitted by the fourth transmitting means and permits communication with the management server;
An information device comprising: a second storage unit that stores the permission information received by the fifth reception unit in a second storage unit. Switching means for switching whether to display information related to the management server and stored in the second storage unit on a display unit of a communication terminal connected to the second network. ,
The switching means is
In a state before the authentication information is received by the fourth receiving unit, display of the related information on the display unit is prohibited, and when the authentication information is received, the related information is displayed on the display unit. 8. The information device according to claim 7, wherein display is permitted.   The information device according to claim 7 or 8, wherein the fourth receiving unit receives the authentication information by communication based on HTTP.   The information device according to claim 7 or 8, wherein the fourth receiving unit receives the authentication information by communication based on Simple Network Management Protocol (SNMP). Sixth reception means for receiving request data for requesting device identification information for identifying the information device connected to the first network from the communication terminal;
11. The apparatus according to claim 7, further comprising a fifth transmission unit configured to transmit the device identification information to the communication terminal when the request data is received by the sixth reception unit. Information equipment described in the section.   The information device according to claim 11, wherein the fifth transmission unit transmits the device identification information to the communication terminal by communication based on SNMP. A program that can be executed by a computer that controls an information device connected to the second network,
The computer,
A fourth receiving means for receiving authentication information required when communicating with a management server connected to a first network different from the second network from a communication terminal connected to the second network;
First storage means for storing the authentication information received by the fourth receiving means in a first storage unit;
A fourth transmission means for transmitting a connection request including the authentication information to the management server;
Fifth receiving means for receiving permission information which is transmitted from the management server in response to the connection request transmitted by the fourth transmitting means and permits communication with the management server;
A program of an information device for causing the permission information received by the fifth receiving means to function as second storage means for storing in the second storage unit. A network system including a registration server and a management server connected to a first network, and an information device connected to a second network,
The registration server
First receiving means for receiving user identification information for identifying a user;
Second receiving means for receiving, from a communication terminal connected to the second network, first device identification information for identifying the information device on the second network;
First transmission means for transmitting the user identification information received by the first reception means to the management server;
Third receiving means for receiving authentication information transmitted from the management server in response to the user identification information transmitted by the first transmitting means from the management server;
Information in a format capable of registering the authentication information in the information device, the first generating means for generating registration information including at least the first device identification information and the authentication information;
Second registration means for transmitting the registration information generated by the first generation means to the communication terminal;
The information device is
A fourth receiving means for receiving the authentication information from the communication terminal;
First storage means for storing the authentication information received by the fourth receiving means in a first storage unit of the information device;
A fourth transmission means for transmitting a connection request including the authentication information and second device identification information for identifying the information device to the management server;
Fifth receiving means for receiving permission information which is transmitted from the management server in response to the connection request transmitted by the fourth transmitting means and permits communication with the management server;
A second storage unit that stores the permission information received by the fifth reception unit in a second storage unit of the information device;
The management server
Seventh receiving means for receiving the user identification information from the registration server;
A second generation unit configured to generate the authentication information corresponding to the user identification information when the user identification information is received by the seventh reception unit;
Fifth transmission means for transmitting the authentication information generated by the second generation means to the registration server;
Third storage means for associating the user identification information received by the seventh reception means with the authentication information generated by the second generation means, and storing it in the storage unit of the management server;
An eighth receiving means for receiving the connection request transmitted from the information device;
Determining means for determining whether the authentication information included in the connection request received by the seventh receiving means is stored in a storage unit of the management server;
A third generation unit configured to generate the permission information when the determination unit determines that the authentication information is stored;
Sixth transmission means for transmitting the permission information generated by the third generation means to the information device;
The second device identification information included in the connection request received by the eighth reception unit in the user identification information and the authentication information stored in association with the storage unit of the management server by the third storage unit And a fourth storage means for further storing the permission information generated by the third generation means in association with each other.

Images