JP2018205838A - Information processing apparatus, management system, control method, and program - Google Patents

Abstract

To solve the problem in terms of operation in which a function of a client which should not be stopped essentially is caused to be stopped.SOLUTION: An information processing apparatus decrypts data obtained by encrypting client identification information for uniquely identifying client agent software in accordance with a predetermined technique and transmits a request including the decrypted data as the client identification information to a management server. When receiving a predetermined error response, the information processing apparatus determines whether or not to transmit a second request based on a result of comparing the decrypted data included in the transmitted request with data obtained by decrypting the encrypted data managed at a storage part by data managing means in accordance with the predetermined technique.SELECTED DRAWING: Figure 5

Description

  The present invention relates to an information processing apparatus, a management system, a control method, and a program related to a communication control mechanism between a client and a server.

  In general, in communication between an information processing apparatus operating as a client and a server, request data is verified by the server in response to a request from the client, and a response result is returned according to the result. The client performs necessary processing according to the response from the server. For example, if the HTTP status code returned from the server is “200”, it is assumed that the client determines that the request is correct and continues the subsequent processing. If the HTTP status code is “4xx”, it is assumed that the client determines that the request data is not correct, interrupts the processing, executes the re-request, and possibly stops the client function in the information processing apparatus. Is done. In addition, there is an HTTP status code of “5xx” indicating a server error, and the processing is switched according to each response result.

  In the system disclosed in Patent Document 1, the proxy server transmits data received from the client to the server. Also, a correspondence table between client-specific requests and response status codes is managed, and a determination is made as to whether or not to make a re-request according to the response result (status code) from the server.

JP 2001-249841 A

  In the mechanism described in Patent Document 1, since subsequent client processing is determined based only on the status code, it is not possible to flexibly cope with it.

  For example, when an error response indicating that an information processing apparatus operating as a client is not registered in the management server is returned as a response from the management server, the function as the client is stopped. However, although the client is actually registered in the management server, the data provided as identification information for identifying the client in the request data is incorrect data, so the client verification performed in the management server fails. There is a case. As the cause, a case where the process of decrypting the encrypted data managed as the client identification information in the information processing apparatus fails is assumed.

  In this case, the function of the client that should not be stopped is stopped, and there is a problem in operation.

  In order to solve the above problems, the present invention provides a storage unit for managing data obtained by encrypting client identification information for uniquely identifying client agent software, and the encrypted data managed by the storage unit. Data management means for decrypting the received data by a predetermined method, transmission means for transmitting a request including the decrypted data as the client identification information to the management server, and reception means for receiving a response to the transmitted request. In the information processing apparatus, when the receiving unit receives a predetermined error response, the decrypted data included in the transmitted request and the encrypted data managed by the storage unit are managed by the storage unit Based on the result of comparing the data obtained by decoding the data with the predetermined method And determining means for determining whether or not to transmit the second request, and when the determining means determines that the determining means is to transmit the second request, the data managing means is the predetermined method. And transmitting the second request including the data obtained by decrypting as client identification information to the management server.

  According to the present invention, the client device can retransmit the request to the management server in order to prevent the client function that should not be stopped from being stopped.

The figure which shows an example of the whole system which concerns on embodiment of this invention The figure which shows an example of an internal structure of the client apparatus 102 and the management server 103 The figure which shows an example of a function structure of the client apparatus 102 The figure which shows an example of a function structure of the management server 103 6 is a flowchart illustrating an example of operation processing of the client apparatus 102 according to the first embodiment. The flowchart which shows an example of the operation | movement process of the management server 103 in Example 1. FIG. 10 is a flowchart illustrating an example of operation processing of the client apparatus 102 according to the second embodiment. Flowchart illustrating an example of operation processing of the management server 103 according to the second embodiment. 10 is a flowchart illustrating an example of operation processing of the client apparatus 102 according to the third embodiment. Figure showing an example of a warning screen

  The best mode for carrying out the present invention will be described below with reference to the drawings.

Example 1
<System configuration>
FIG. 1 is a diagram illustrating an example of an entire system according to an embodiment of the present invention. The system of this embodiment is a management system for managing devices. The management system includes a client device that collects data from one or more devices, and a management server that manages data collected by the client device. The management server may be composed of a plurality of real machines or virtual machines. Here, the virtual machine is a logical computer that divides a server into logical units without being constrained by a physical configuration by using a virtualization technology, and each of which operates with an independent operating system.

  In FIG. 1, the management server 103 is connected to the client apparatus 102 via the WAN 104, and centrally manages data of the client apparatus 102 and the device 101. The client apparatus 102 monitors the device 101 via the LAN 105 and acquires various data from the device 101. The device 101 may be a medium such as an LBP, MFP (multifunction peripheral), or PC, and is monitored by the client apparatus 102. Here, the management server 103 is connected to the client apparatus 102 via the WAN 104, but may be connected via the LAN 105. The device 101 is connected to the client apparatus 102 via the LAN 105, but may be directly connected to the management server 103 via the LAN 105 or the WAN 104.

<Internal configuration of client device and management server>
FIG. 2 is a diagram illustrating an example of a hardware configuration of an information processing apparatus (for example, a general-purpose computer) that operates as the client apparatus 102 and the management server 103.

  The client device 102 and the management server 103 include a communication I / F unit 201, a storage device 202, a CPU 203, a memory 204, and an output I / F unit 205.

  The communication I / F unit 201 is a network interface for communicating with an external system or apparatus. The storage device 202 stores an OS (Operating System), various programs, and various data. Furthermore, the storage device 202 of the client device 102 stores client agent software for realizing processing including features of the present invention, which will be described with reference to flowcharts described later, and management data. s et al., the storage device 202 of the client device 102 also stores data collected from external systems and devices. Further, the storage device 202 of the management server 103 collects from device management software, management data, an external system, an apparatus, etc. for realizing processing including the features of the present invention, which will be described with reference to flowcharts described later. The stored data is stored. The CPU 203 loads a program from the storage device 202 to the memory 204 and executes it. Further, the CPU 203 comprehensively controls each unit such as 201, 202, 204, and 205 connected to a system bus (not shown). The output I / F unit 205 connects an output device such as a display and outputs an execution result of a program or the like.

<Functional configuration of client device>
FIG. 3 is a diagram illustrating an example of a functional configuration that is a subject of processing realized by executing the client agent software by the CPU 203 of the client apparatus 102.

  The acquisition unit 301 acquires data from the device 101. The data to be acquired is device information, status information, counter information, log information, and the like of the device 101, for example. The data management unit 302 manages data acquired from the device 101 and information about the client apparatus by storing them in the storage unit. Here, the storage unit is the storage device 202 of the client device 102 or an external storage device (not shown) of the client device 102. The data management unit 302 also performs data encryption and decryption processes as necessary.

  The request data generation unit 303 acquires data from the data management unit 302 and generates request data to be transmitted to the management server 103. In this embodiment, it is assumed that the request data includes at least information (such as an IP address) for identifying the client device 102 and client identification information for uniquely identifying the client agent software. The client identification information is encrypted and managed in the storage device 202. When the client identification information is added to the request data, first, the data management unit 302 decrypts the encrypted data managed as the client identification information in the storage device 202 by a predetermined method. Thereafter, the request data generation unit 303 gives the decrypted data to the request data as client identification information. The transmission unit 304 transmits request data (also simply referred to as a request) to the management server 103.

  The receiving unit 305 receives a response from the management server 103. The response determination unit 306 determines whether the response received from the management server 103 is normal, and determines what kind of error it is if it is an error response. A status code is assumed as information used for the determination.

  The retry determination unit 307 determines whether to make a re-request when the response result is a client unregistered error. Here, the client unregistered error is an error indicating that the management server 103 does not manage the decrypted data included in the request data transmitted by the transmission unit 304 as client identification information. More specifically, the retry determination unit 307 compares the decrypted data included in the transmitted request data as client identification information with the data obtained by decryption again, and performs a re-request. Determine whether or not. The stop unit 308 stops the function of the client agent software. The screen display unit 309 will be described in Example 3 described later.

<Functional configuration of the management server>
FIG. 4 is a diagram illustrating an example of a functional configuration that is a subject of processing realized by executing device management software by the CPU 203 of the management server 103.

  The receiving unit 401 receives a request from the client device 102. The data management unit 402 holds and manages data included in a request from the client device 102. In addition, the data management unit 402 manages information (IP address or the like) for identifying the client device 102 in association with client identification information for uniquely identifying the client agent software. The data determination unit 403 determines whether or not the request from the client device 102 is normal, and if it is an error, determines what kind of error it is. The transmission unit 404 returns a response to the client device 102.

<Operation Processing of Client Device in First Embodiment>
FIG. 5 is a flowchart illustrating an example of operation processing of the client apparatus 102 according to the present exemplary embodiment. This process is a process realized by executing the client agent software on the client apparatus 102.

  In step S501, the transmission unit 304 determines whether it is a request transmission timing. If the request transmission timing is reached, the process proceeds to step S502.

  In step S <b> 502, the request data generation unit 303 acquires data from the data management unit 302 and generates request data to be transmitted to the management server 103. The request data generation unit 303 generates the request data so as to include the decrypted data as client identification information for uniquely identifying the client agent software.

  Here, the decrypted data included in the request is data obtained by decrypting the encrypted data managed as the client identification information in the storage device 202 by a predetermined method. This request is identification information on the network of the client apparatus 102, and includes network information such as an IP address and a host name indicating the transmission source of the request. In addition, an individual identifier assigned to hardware configuring the client apparatus 102 may be included in the request data. The network information and the individual identifier can be said to be information for the management server 103 to identify the information processing apparatus (client apparatus 102) that executes the client agent software.

  In step S <b> 503, the transmission unit 304 transmits a request to the management server 103.

  In step S <b> 504, the reception unit 305 receives a response from the management server 103.

  In step S <b> 505, the response determination unit 306 determines the response result received from the management server 103. If it is determined that the response is a client unregistered response, it is determined that the decrypted data given to the request may be incorrect, and the process proceeds to S506. In the case of any other result, the process is finished. Although the processing is ended here, it goes without saying that some processing may be performed, and the processing may be divided according to the response content. Note that the response determination unit 306 may determine only whether the response is a predetermined error response without determining whether the response is a client unregistered response.

  In S506, the data management unit 302 decrypts the data again using the same technique as that performed in S502, and the retry determination unit 307 acquires the decrypted data from the data management unit 302 as client identification information. To do.

  In step S <b> 507, the retry determination unit 307 determines whether the data added as client identification information to the request transmitted to the management server 103 matches the decrypted data acquired in step S <b> 506. That is, the retry determination unit 307 determines whether there is a possibility that the decoding process has failed. If it is determined that they match, that is, if it is determined that there is no possibility that the decoding process has failed, the process proceeds to S508. On the other hand, if it is determined that they do not match, that is, it is determined that there is a possibility that the decoding process has failed, and the process returns to S502 to make a re-request. In step S508, the stop unit 308 stops the client function. In addition, the process in S506 and S507 may be performed not only once but multiple times.

  Conventionally, the function of the client apparatus 102 is stopped when it is determined in S505 that the response is an unregistered client response. Therefore, the decrypted data added to the request data may be incorrect data even though the client device is actually registered in the management server. Then, there is a possibility that the function of the client apparatus 102 that should not be stopped should be stopped. Possible causes include a case where the process of decrypting data managed as encrypted as client identification information fails, or a case where incorrect data is assigned when request data is generated at the client.

  By the processing of this flowchart, the client device can retransmit the request to the management server in order to prevent the client device that should not be stopped from operating.

<Operation Process of Management Server in Embodiment 1>
FIG. 6 is a flowchart illustrating an example of operation processing of the management server 103 in this embodiment. This process is a process realized by executing device management software on the management server 103.

  In step S <b> 601, the reception unit 401 receives a request from the client device 102.

  In step S <b> 602, the data determination unit 403 determines whether the request received in step S <b> 601 has been transmitted from an unregistered client device 102. Here, the unregistered client device 102 indicates a client device whose client identification information is not registered in the management server 103. If it is determined that the request is from the unregistered client apparatus 102, the process proceeds to S603. On the other hand, if it is determined that the request is not a request from the unregistered client apparatus 102 but a request from the registered client apparatus 102, the process proceeds to S604. The determination method here is whether or not the decrypted data included in the request is included in the client information managed by the data management unit 402.

  In step S <b> 603, the transmission unit 404 returns an error response indicating that the client is not registered to the client apparatus 102.

  In step S <b> 604, the transmission unit 404 returns a response other than the client unregistered response to the client device 102. It may be a normal response or some other error response. In the description in this figure, the data determination unit 403 determines whether the received request is transmitted from a client that does not exist, but the determination condition is not limited to this.

  As described above, if the client performs the subsequent processing only with the response result from the server, there is a possibility that the operation of the client apparatus that should not be stopped should be stopped. Based on the response result, the client device performs decryption processing again, generates request data, and transmits a re-request to the management server, thereby preventing unnecessary operation stop of the client.

(Example 2)
In the first embodiment, in order to prevent unnecessary client operation stop, data verification is performed on the client side in accordance with the response result from the server, and it is determined whether or not to make a re-request. However, the determination of the re-request is not limited to the client and may be performed on the server side. Here, a mechanism for performing re-request determination on the server side will be described.

<System configuration>
Since it is the same as that of Example 1, description is abbreviate | omitted.

<Internal configuration of monitoring device and management server>
Since it is the same as that of Example 1, description is abbreviate | omitted.

<Functional configuration of client device>
Since it is the same as that of Example 1, description is abbreviate | omitted.

<Functional configuration of the management server>
Since it is the same as that of Example 1, description is abbreviate | omitted.

<Operation Process of Client Device in Second Embodiment>
FIG. 7 is a flowchart illustrating an example of operation processing of the client apparatus 102 according to the present exemplary embodiment.

  Since the processing flow from S501 to S504 is the same as that in the first embodiment, the description thereof is omitted here.

  In step S <b> 701, the response determination unit 306 determines whether the response result received from the management server 103 requests a re-request. If it is determined that a re-request is requested, the process proceeds to S702. On the other hand, if it is determined that a re-request is not requested, the process proceeds to S703.

  In step S <b> 702, the request data generation unit 303 acquires data from the data management unit 302 and generates request data to be transmitted to the management server 103. The request data includes decrypted data. Also, information indicating that it is a re-request is added to the request data.

  In step S <b> 703, the response determination unit 306 determines whether the response result received from the management server 103 is a client unregistered error. If it is determined that the client is not registered error, the process proceeds to S704. On the other hand, if it is determined that there is no client unregistered error, the process ends. Although the processing is ended here, it goes without saying that some processing may be performed, and the processing may be divided according to the response content.

  In step S704, the stop unit 308 stops the operation of the client.

<Operation Process of Management Server in Embodiment 2>
FIG. 8 is a flowchart showing an example of operation processing of the management server 103 in the present embodiment.

  Since the processing flow of S601 to S602 and S604 is the same as that of the first embodiment, description thereof is omitted here.

  In step S <b> 801, the data determination unit 403 determines whether the received request data includes information indicating a re-request. If it is determined that the request is a re-request, the process proceeds to S802. On the other hand, if it is determined that the request is not a re-request, the process proceeds to S803.

  In step S <b> 802, the transmission unit 404 returns a client unregistered response to the client device 102.

  In step S <b> 803, the transmission unit 404 returns a re-request response to the client device 102.

  As described above, it is possible to determine whether or not a re-request from the client is necessary on the server side.

Example 3
In the explanation so far, as a cause of returning a client unregistered response, a problem occurs when decrypted data is added to the request, and a problem occurs when decrypted data managed by encryption Etc. If these problems actually occur, there may be a problem with the device on which the client is running. Here, a mechanism for warning the user on the client device will be described.

<System configuration>
Since it is the same as that of Example 1, description is abbreviate | omitted.

<Internal configuration of client device>
Since it is the same as that of Example 1, description is abbreviate | omitted.

<Functional configuration of client device>
FIG. 3 is a diagram illustrating an example of a functional configuration of the client apparatus 102. Here, a part having a difference from the first embodiment will be described.

  In addition to the functions described in the first embodiment, the retry determination unit 307 manages count information that has been re-requested so far when a re-request is made.

  The screen display unit 309 outputs an appropriate screen in response to a request when a held website is accessed.

<Operation Processing of Client Device in Embodiment 3>
FIG. 9 is a flowchart illustrating an example of operation processing of the client apparatus 102 according to the present exemplary embodiment.

  Since the processing flow of S501 to S508 is the same as that of the first embodiment, the description thereof is omitted here.

  In step S <b> 901, the retry determination unit 307 initializes the number of re-requests x with 0 and defines threshold information y for warning as 3.

  In step S902, the retry determination unit 307 increments the number of re-requests by one.

  In S903, the retry determination unit 307 compares the number of times of re-request transmission so far with the predetermined number of times related to the warning condition, and determines that the number of times of re-request transmission exceeds the predetermined number of times S904. Proceed with the process. On the other hand, if it is determined that the number of re-requests transmitted does not exceed the predetermined number, the process returns to S502 and processing is performed.

  In step S904, the screen display unit 309 displays a warning that there is a problem with the PC operating as the client device.

<Example of warning screen>
FIG. 10 shows an example of a warning screen.

  Of course, the wording and display method of the warning content is not limited to this.

  As shown above, when the number of re-requests exceeds the default value, the operating environment of the client device is determined to be unstable, and a warning to that effect is displayed. Can be promoted.

(Other examples)
The present invention includes an apparatus or system configured by appropriately combining the above-described embodiments and a method thereof.

  Here, the present invention is an apparatus or system that is a main body that executes one or more software (programs) that realizes the functions of the above-described embodiments. Further, a method for realizing the above-described embodiment executed by the apparatus or system is also one aspect of the present invention. The program is supplied to the system or apparatus via a network or various storage media, and the program is read and executed by one or more computers (CPU, MPU, etc.) of the system or apparatus. That is, as one aspect of the present invention, the program itself or various storage media readable by a computer storing the program are included. The present invention can also be realized by a circuit (for example, ASIC) that realizes the functions of the above-described embodiments.

102 client device,
103 Management server

In order to solve the above problems, the present invention provides a storage unit for managing data obtained by encrypting client identification information for uniquely identifying client agent software, and the encrypted data managed by the storage unit. and a data management means for decoding at a predetermined technique, and transmitting means for transmitting the decoded data to the management server a request containing as the client identification information, a receiving means for receiving a response to a request that the transmission In the information processing apparatus, when the receiving unit receives a predetermined error response, the decrypted data included in the transmitted request and the encrypted data managed by the storage unit are managed by the storage unit Based on the result of comparing the data obtained by decoding the data by the predetermined method, And determining means for determining whether or not to transmit the second request. When the determining means determines that the second request is to be transmitted, the data managing means decrypts the data using the predetermined method. The second request including the data obtained as the client identification information is transmitted to the management server.

Claims (14)

A storage unit for managing data obtained by encrypting client identification information for uniquely identifying client agent software;
Data management means for decrypting the encrypted data managed in the storage unit by a predetermined method;
Transmitting means for transmitting a request including the decrypted data as the client identification information to the management server;
Receiving means for receiving a response to the transmitted request, and an information processing apparatus comprising:
When the reception unit receives a predetermined error response, the decrypted data included in the transmitted request and the encrypted data managed by the data management unit in the storage unit are transmitted using the predetermined method. A determination unit for determining whether to transmit the second request based on a result of comparison with the data obtained by decryption;
When the determination means determines that the second request is to be transmitted, the transmission means includes the data obtained by the data management means decoded by the predetermined method as the client identification information. An information processing apparatus that transmits a request to the management server.   In the management server, identification information for identifying the information processing apparatus and client identification information for uniquely identifying client agent software executed in the information processing apparatus are managed in association with each other. The information processing apparatus according to claim 1. The determination means includes
When the decrypted data included in the transmitted request does not match the data obtained by decrypting the encrypted data managed by the data management unit in the storage unit by the predetermined method , Determine to send the second request,
When the decrypted data included in the transmitted request matches the data obtained by decrypting the encrypted data managed by the data management unit in the storage unit by the predetermined method The information processing apparatus according to claim 1, wherein the information processing apparatus determines that the second request is not transmitted. And further comprising stop means for stopping the function of the client agent software,
The information processing apparatus according to claim 1, wherein the stopping unit stops the function of the client agent software when the determination unit determines not to retransmit the request.   The predetermined error response is a response indicating that the decrypted data included in the transmitted request is not managed by the management server. The information processing apparatus described in 1.   When the response indicating that the receiving unit requests the second request is received from the management server, the determination by the determining unit is not performed, and the transmitting unit decrypts the data managing unit using the predetermined method. The information processing apparatus according to claim 1, wherein the second request including the data obtained as a result of the client identification information is transmitted to the management server. Further comprising warning means for warning the user about the operating environment of the information processing apparatus;
7. The warning unit according to claim 1, wherein when the number of times the second request is transmitted by the transmission unit exceeds a predetermined number, a warning regarding an operating environment of the information processing apparatus is given to the user. The information processing apparatus according to any one of the above. A storage unit for managing data obtained by encrypting client identification information for uniquely identifying client agent software;
Data management means for decrypting the encrypted data managed in the storage unit by a predetermined method;
Transmitting means for transmitting a request including the decrypted data as the client identification information to the management server;
Receiving means for receiving a response to the transmitted request, an information processing apparatus,
Second receiving means for receiving a request from the information processing apparatus;
A management server comprising: a second transmission unit that transmits a response to the request received by the second reception unit;
The second transmission unit is configured to send a request received by the second reception unit when the decrypted data included in the request from the information processing apparatus as the client identification information is not managed by the management server. Send a predetermined error response to
The information processing apparatus includes:
When the receiving unit receives the predetermined error response, the predetermined method uses the decrypted data included in the transmitted request and the encrypted data managed by the data management unit in the storage unit. And a determination means for determining whether or not to transmit the second request based on the result of comparison with the data obtained by decoding in step
When the determination means determines that the second request is to be transmitted, the transmission means includes the data obtained by the data management means decoded by the predetermined method as the client identification information. A management system that transmits a request to the management server. The second transmission means includes
When the decrypted data included as the client identification information in the request from the information processing apparatus is not managed by the management server, and the request from the information processing apparatus is the second request, A predetermined error response is transmitted in response to the request received by the second receiving means;
When the decrypted data included as the client identification information in the request from the information processing apparatus is not managed by the management server, and the request from the information processing apparatus is not the second request, 9. The management system according to claim 8, wherein a response indicating that the second receiving unit requests the second request is transmitted in response to the received request. The determination means includes
The decrypted data included as the client identification information in the transmitted request, and data obtained by decrypting the encrypted data managed by the data management unit in the storage unit by the predetermined method, If they do not match, determine to send the second request,
The decrypted data included as the client identification information in the transmitted request, and data obtained by decrypting the encrypted data managed by the data management unit in the storage unit by the predetermined method, The management system according to claim 8, wherein when the two match, the second request is determined not to be transmitted.   11. The predetermined error response is a response indicating that the decrypted data included as the client identification information in the transmitted request is not managed by the management server. The management system according to any one of the above. A data management step of decrypting the encrypted data managed by a storage unit that manages data obtained by encrypting client identification information for uniquely identifying client agent software by a predetermined method;
A transmission step of transmitting a request including the decrypted data as the client identification information to the management server;
A reception step of receiving a response to the transmitted request, and a method for controlling the information processing apparatus,
When a predetermined error response is received in the receiving step, the predetermined method is performed again in the data management step by using the decrypted data included in the transmitted request and the encrypted data managed by the storage unit. A determination step of determining whether or not to transmit the second request based on the result of comparison with the data obtained by decryption in step
In the transmission step, when it is determined that the second request is transmitted in the determination step, the second data including the data obtained by decoding by the predetermined method in the data management step as the client identification information The request is transmitted to the management server. A control method of a management system including an information processing device and a management server, wherein the information processing device is managed by a storage unit that manages data obtained by encrypting client identification information for uniquely identifying client agent software A data management step of decrypting the encrypted data by a predetermined method;
The information processing apparatus transmits a request including the decrypted data as the client identification information to the management server;
A second receiving step in which the management server receives a request from the information processing apparatus;
A second transmission step in which the management server transmits a response to the request received in the second reception step;
The information processing apparatus has a receiving step of receiving a response to the transmitted request,
In the second transmission step, when the decrypted data included in the request from the information processing device as the client identification information is not managed by the management server, the request received in the second reception step A predetermined error response is sent to
When the information processing apparatus receives the predetermined error response in the receiving step, the data management includes the decrypted data included in the transmitted request and the encrypted data managed in the storage unit. A determination step of determining whether or not to transmit the second request based on a result of comparison with the data obtained by decoding in the predetermined method in the step;
In the transmission step, when it is determined that the second request is transmitted in the determination step, the second data including the data obtained by decoding by the predetermined technique in the data management step is included as the client identification information. A control method, wherein a request is transmitted to the management server.   A program for causing a computer to function as the means according to claim 12.

Images